Welcome! Log In Create A New Profile

Advanced

Re: nginx reverse proxy и nginx backend не пропускает ip

Evgeniy Berdnikov
August 09, 2017 09:40AM
On Wed, Aug 09, 2017 at 08:54:24AM -0400, igroykt wrote:
> Отдает 403. В логе:
> 1.1.1.1 - - [09/Aug/2017:21:50:07 +0900] "GET /pwned/ HTTP/1.0" 403 564 "-"
> "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
> Gecko) Chrome/59.0.3071.115 Safari/537.36" "1.2.3.4"
> 1.1.1.1 - - [09/Aug/2017:21:50:08 +0900] "GET /favicon.ico HTTP/1.0" 200
> 1150 "https://office.mytona.com/pwned/" "Mozilla/5.0 (Windows NT 10.0;
> Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115
> Safari/537.36" "1.2.3.4"
> где 1.1.1.1 это адрес frontend а 1.2.3.4 адрес backend.
> логформат на backend:
> log_format main '$remote_addr - $remote_user [$time_local] "$request" '
> '$status $body_bytes_sent "$http_referer" '
> '"$http_user_agent"' 'http_x_forwarded_for =
> $http_x_forwarded_for, real_ip_remote_addr = $realip_remote_addr';
> Судя по логу x-forwarded-for проходит в remote_addr сохраняется адрес
> reverse proxy.

Не вижу в логе знаков равенства (=), которые присутствуют в log_format.
Вероятно, применяется другая директива log_format.
--
Eugene Berdnikov
_______________________________________________
nginx-ru mailing list
nginx-ru@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-ru
Subject Author Posted

nginx reverse proxy и nginx backend не пропускает ip

igroykt August 09, 2017 08:54AM

Re: nginx reverse proxy и nginx backend не пропускает ip

Evgeniy Berdnikov August 09, 2017 09:40AM

Re: nginx reverse proxy и nginx backend не пропускает ip

igroykt August 09, 2017 09:57AM

Re: nginx reverse proxy и nginx backend не пропускает ip

igroykt August 11, 2017 02:42AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 305
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready