[squid-users] Squid log : source from x_forwarded_for field

Dear community,

I am trying To configure dansguardian with squid3.
I am running debian squeeze.

Everything is working but I am trying to have the real IP source in
the squid's access.log file.

I configured forwardedfor = on in dansguardian.conf,

When I check The access.log file, i only see 127.0.0.1 as source of the request.

I did a network packet capture. And I found the field X-forwarded-for was like :

http.x_forwarded_for == "192.168.200.1, 127.0.0.1"

In squid.conf I used the following log configuration :

logformat combined %>a %>a %>A %>p %la %lp %ui %un
[%{%d/%b/%Y:%H:%M:%S +0000}tl] "%rm %ru HTTP/%rv" %>Hs %<st
"%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh
access_log /var/log/squid3/access.log combin

But %>a is still return 127.0.0.1.

So is there a way to change the behaviour in order to show the real IP address ?

Or is there a way to hide source 127.0.0.1 ?

Any help appreciated.

Regards,

Hugo
Received on Fri Aug 12 2011 - 12:47:34 MDT