User login through proxy only logs proxy IP address, not X-Forwarded-For
When a user logs into the GUI through a proxy, only the proxy IP address is logged. If the HTTP request headers include X-Forwarded-For then both should be logged, and ideally both should be included when logging where changes were made.
#3 Updated by Azamat Khakimyanov 9 months ago
- File client_behind_proxy_webGUI.png client_behind_proxy_webGUI.png added
- Status changed from Feedback to Resolved
On current 2.4.4-DEV (20180825) I'm able to see "X-Forwarded-For" option when remote client behind proxy connects to webGUI (screenshot attached) and in System log I see
Aug 26 14:46:18 php-fpm 1172 /index.php: Successful login for user 'admin' from: 192.168.122.128 [192.168.1.100] (Local Database)
On 2.4.3_p1 I only see proxy IP-address.