Re: [Pound Mailing List] apache/modsecurity in front of load balancer
Matt Park <[email protected]> Wed, 24 Jan 2018 16:54:06 -0500
| Newsgroups | gmane.comp.web.pound.general |
|---|---|
| Message-ID | <[email protected]> |
--001a1144a3d2d47a3105638cb302 Content-Type: text/plain; charset="UTF-8" Aren't you supposed to use mod_headers or similar to add x-forwarded-for from the apache side? Pound should pick it up right? On Jan 24, 2018 3:39 PM, "Brad Allison" <[email protected]> wrote: > Anyone know? > > On Fri, Dec 15, 2017 at 11:39 AM, Brad Allison <[email protected]> > wrote: > >> I have apache/modsecurity running locally on the same server as my pound >> server. It takes the connections and runs the WAF rules, then hands them >> to pound. >> >> Problem is, pound is logging all connections as 127.0.0.1 because they >> are coming locally from apache. >> >> Since pound used syslog to log, how do I add X-ForwardFor to the log >> format for pound so I can see the actual IP of the source of the request in >> the pound logs. >> >> -b >> > > --001a1144a3d2d47a3105638cb302 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"auto">Aren't you supposed to use mod_headers or similar to = add x-forwarded-for from the apache side?<div dir=3D"auto"><br></div><div d= ir=3D"auto">Pound should pick it up right?</div></div><div class=3D"gmail_e= xtra"><br><div class=3D"gmail_quote">On Jan 24, 2018 3:39 PM, "Brad Al= lison" <<a href=3D"mailto:[email protected]">brad.allison@gmai= l.com</a>> wrote:<br type=3D"attribution"><blockquote class=3D"gmail_quo= te" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"= ><div dir=3D"ltr">Anyone know?</div><div class=3D"gmail_extra"><br><div cla= ss=3D"gmail_quote">On Fri, Dec 15, 2017 at 11:39 AM, Brad Allison <span dir= =3D"ltr"><<a href=3D"mailto:[email protected]" target=3D"_blank">br= [email protected]</a>></span> wrote:<br><blockquote class=3D"gmail_qu= ote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex= "><div class=3D"m_-3422529342619999156HOEnZb"><div class=3D"m_-342252934261= 9999156h5"><div dir=3D"ltr">I have apache/modsecurity running locally on th= e same server as my pound server.=C2=A0 It takes the connections and runs t= he WAF rules, then hands them to pound.<div><br></div><div>Problem is, poun= d is logging all connections as 127.0.0.1 because they are coming locally f= rom apache.<br><br>Since pound used syslog to log, how do I add X-ForwardFo= r to the log format for pound so I can see the actual IP of the source of t= he request in the pound logs.</div><div><br></div><div>-b</div></div> </div></div></blockquote></div><br></div> </blockquote></div></div> --001a1144a3d2d47a3105638cb302-- -- To unsubscribe send an email with subject unsubscribe to [email protected] Please contact [email protected] for questions.