Squid configuration directive tproxy_uses_indirect_client

Available in: 3.3   3.2   3.HEAD  

History:

Changes in 3.2 tproxy_uses_indirect_client

Controls whether the indirect client address found in the X-Forwarded-For header is used for spoofing instead of the directly connected client address. Requires both --enable-follow-x-forwarded-for and --enable-linux-netfilter

Configuration Details:

Option Name:tproxy_uses_indirect_client
Replaces:
Requires:--enable-follow-x-forwarded-for and --enable-linux-netfilter
Default Value:tproxy_uses_indirect_client off
Suggested Config: 


	Controls whether the indirect client address
	(see follow_x_forwarded_for) is used instead of the
	direct client address when spoofing the outgoing client.

	This has no effect on requests arriving in non-tproxy
	mode ports.

	SECURITY WARNING: Usage of this option is dangerous
	and should not be used trivially. Correct configuration
	of follow_x_forewarded_for with a limited set of trusted
	sources is required to prevent abuse of your proxy.
 

Back

Search

 

Introduction

Documentation

Support

Miscellaneous

Web Site Translations

Mirrors