Re: [squid-users] ident authentication and follow_x_forwarded_for

tis 2010-05-11 klockan 16:35 -0500 skrev Ben Miller:

> Client --> Proxy:8080 (Dansguardian) --> 127.0.0.1:3128 (Squid running
> on Proxy) --> Edge firewall

You can't do ident lookups in a proxy chain. This have to be done by the
first proxy in the chain. This because to perform the ident lookup the
original IP address and port numbers need to be known, but X-F-F header
only records the IP address..

I'd suggest you use

client -> Squid(auth) -> DG(filter) -> Squid(cache) -> Firewall.

Regards
Henrik
Received on Wed May 12 2010 - 20:31:10 MDT