• Client IP ins Log durch Nginx Reverse Proxy

    Nginx Reverse Proxy # nano /etc/nginx/conf.d/proxy.conf proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 10m; client_body_buffer_size 128k; client_header_buffer_size 64k; proxy_connect_timeout 90; proxy_send_timeout 90; proxy_read_timeout 90; proxy_buffer_size 16k; proxy_buffers 32 16k; proxy_busy_buffers_size 64k; Nginx Webserver # nano /etc/nignx/conf.d/logging.conf set_real_ip_from xxx.xxx.xxx.xxx; (IP des reverse proxy) real_ip_header X-Forwarded-For; real_ip_recursive on;

    Read more »
  • Squid 3.1 + Delay pools + TunnelStateData

    Bei der Nutzung von Delay pools in Squid 3.1 unter Debian Squeeze z.bsp so … delay_pools 3 #delay pool 0.5M delay_class 2 2 delay_access 2 allow zone_1 delay_access 2 allow zone_2 delay_access 2 deny all delay_parameters 2 16000/65536 -1/-1 #delay pool 5M delay_class 1 2 delay_access 1 allow zone_3 delay_access 1 deny all delay_parameters 1 […]

    Read more »
  • Nginx als Reverse Proxy …

    Nginx als Reverse Proxy einsetzen mit Paketen von dotdeb 1. Sources von dotdeb hinzufügen zu /etc/apt/sources.list deb http://packages.dotdeb.org stable all deb-src http://packages.dotdeb.org stable all 2. Apt-key für dotdeb wget -O – http://www.dotdeb.org/dotdeb.gpg | apt-key add – apt-get update 3. Nginx installieren apt-get install nginx-extras 4. Konfigurieren server { listen 80; server_name DOMAIN.COM; access_log /var/log/nginx/access.log main; […]

    Read more »
  • Proxy Auth gegen Windows AD bzw LDAP

    Proxy Authentifizierung in Squid 3.x gegen Windows AD bzw LDAP # Authentifizierung an Active Directory auth_param basic program /usr/lib/squid3/squid_ldap_auth -R -b „dc=LOCAL,dc=DOMAIN“ -D „USER@DOMAIN.LOCAL“ -w „PASSWORT“ -f „(sAMAccountName=%s)“ -h IP_ADRESSE:3268 auth_param basic children 5 auth_param basic realm „Proxy Authentifizierung. Bitte geben Sie Ihren Benutzername und Ihr Passwort ein!“ auth_param basic credentialsttl 2 hours external_acl_type InetGroup […]

    Read more »

Back to Top