Re: [squid-users] Logging of 'indirect' requests, e.g. involving NAT or VPN

2015-06-26 Thread Henry S. Thompson
Antony Stone writes: > Imagine the following setup: > > Organisation has a bunch of servers (maybe at their office in a > server room, maybe in a data centre, doesn't matter which), some of > which have public IPs, but all of which have private IPs on an > internal subnet (for system management pu

Re: [squid-users] Logging of 'indirect' requests, e.g. involving NAT or VPN

2015-06-26 Thread Antony Stone
On Friday 26 Jun 2015 at 10:42, Henry S. Thompson wrote: > Antony Stone writes: > > > > It's entirely plausible (I'd even say common) for VPN clients to get > > 192.168 addresses; also if there's a NATting router in the path > > and Squid is logging its address, that could easily be 192.168..

Re: [squid-users] Logging of 'indirect' requests, e.g. involving NAT or VPN

2015-06-26 Thread Henry S. Thompson
Antony Stone writes: > On Friday 26 Jun 2015 at 09:51, Henry S. Thompson wrote: > >> > logs will show the IP address that reached squid, ie. the source >> > address of the connection. If that was NATted, squid will never know >> > (and thus is not able to log) the original address before the N

Re: [squid-users] Logging of 'indirect' requests, e.g. involving NAT or VPN

2015-06-26 Thread Antony Stone
On Friday 26 Jun 2015 at 09:51, Henry S. Thompson wrote: > > logs will show the IP address that reached squid, ie. the source > > address of the connection. If that was NATted, squid will never know > > (and thus is not able to log) the original address before the NAT. > > That's what I assum

Re: [squid-users] Logging of 'indirect' requests, e.g. involving NAT or VPN

2015-06-26 Thread Henry S. Thompson
Leonardo Rodrigues writes: > Em 24/06/15 15:28, Henry S. Thompson escreveu: >> I've searched the documentation and mailing list archives w/o success, >> and am not competent to read the source, so asking here: what is >> logged as the 'remotehost' in Squid logs when a request that has been >> enca

Re: [squid-users] Logging of 'indirect' requests, e.g. involving NAT or VPN

2015-06-24 Thread Leonardo Rodrigues
Em 24/06/15 15:28, Henry S. Thompson escreveu: I've searched the documentation and mailing list archives w/o success, and am not competent to read the source, so asking here: what is logged as the 'remotehost' in Squid logs when a request that has been encapsulated, as in from a machine on a loca

[squid-users] Logging of 'indirect' requests, e.g. involving NAT or VPN

2015-06-24 Thread Henry S. Thompson
I've searched the documentation and mailing list archives w/o success, and am not competent to read the source, so asking here: what is logged as the 'remotehost' in Squid logs when a request that has been encapsulated, as in from a machine on a local network behind a router implementing NAT, or fr