Home / server / Questions / 102668
Accepted
mr-euro
Asked: 2010-01-15 06:06:57 +0800 CST

Remove X-Forwarded-For header in Squid 3.0

  • 772

Some months ago I was working with Squid 3.0 and managed to get rid of the X-Forwarded-For header completely. Now I am trying to do the same thing but I do not seem to hit the nail.

I have tried forwarded_for off but that does not remove the header, it just inserts unknown in place of the client IP.

I tried header_access X-Forwarded-For deny all but I receive an error about invalid directive. Looking in the function reference it seems that this directive is deprecated in 3.0.

I tried forwarded_for delete but this is only available from 3.1.

Any suggestions?

proxy squid ip http-headers

4 Answers

  1. Here's the full list you need:-

    via off
forwarded_for off
follow_x_forwarded_for deny all
request_header_access X-Forwarded-For deny all
header_access X_Forwarded_For deny all
    • 9
  2. Best Answer

    Fixed with:

    request_header_access X-Forwarded-For deny all
    • 6

  3. For specific domains you can use

    acl NoXForwardedFor dst "/usr/pbi/squid-amd64/etc/squid/NoXForwardedFor.txt"

request_header_access X-Forwarded-For deny NoXForwardedFor

    where NoXForwarded.txt contains domain names.

    • 1

  4. you can set forwarded_for directive to truncate

    forwarded_for truncate

    this will remove all existing X-Forwarded-For entries, and place the client IP as the sole entry

    For more about this directive visit squid : forwarded_for configuration directive

    • 0