<html><head></head><body><div class="yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div>Thank you for your answers,</div><div><br></div><div dir="ltr" data-setdir="false">Matthew, I use Openbsd</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">Nanaya, I tried your solution and it worked. I had to readapt a bit my configuration (removed <span>xforwardedLog</span>) so that my access_log is formated without duplicate IPs.</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">Regards<br></div><div id="yahoo_quoted_6853808587" class="yahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
Le jeudi 30 juin 2022 à 17:17:01 UTC+2, nanaya <me@nanaya.pro> a écrit :
</div>
<div><br></div>
<div><br></div>
<div><div dir="ltr">Hello,<br clear="none"><br clear="none">You need to set the reverse proxy ip in the www server:<br clear="none"><br clear="none"><a shape="rect" href="https://nginx.org/r/set_real_ip_from" target="_blank">https://nginx.org/r/set_real_ip_from</a><br clear="none"><br clear="none">Also note this will replace $remote_addr with the value from X-Real-IP header (the original value is in $realip_remote_addr).<br clear="none"><div class="yqt5909362207" id="yqtfd32222"><br clear="none">On Thu, Jun 30, 2022, at 21:56, Mik J via nginx wrote:<br clear="none">> Hello,<br clear="none">><br clear="none">> My configuration on my www server (192.168.1.10) on the vhost looks like that<br clear="none">> server {<br clear="none">> ...<br clear="none">> access_log /var/log/nginx/mylogs.mydomain.org.access.log xforwardedLog;<br clear="none">> error_log /var/log/nginx/ mylogs.mydomain.org.error.log;<br clear="none">><br clear="none">> and in nginx.conf<br clear="none">> http {<br clear="none">> ...<br clear="none">> log_format xforwardedLog '$remote_addr forwarded for $http_x_real_ip <br clear="none">> - $remote_user [$time_local] ' '"$request" $status $body_bytes_sent ' <br clear="none">> '"$http_referer" "$http_user_agent"';<br clear="none">><br clear="none">> On my www server 192.168.1.10 I can see the access logs<br clear="none">> 192.168.1.20 forwarded for 54.38.10x.x - - [30/Jun/2022:13:44:38 +0200] <br clear="none">> "GET / HTTP/1.0" 200 7112 "<a shape="rect" href="http://app.mydomain.org" target="_blank">http://app.mydomain.org</a>" "Mozilla/1.22 <br clear="none">> (compatible; MSIE 5.01; PalmOS 3.0) EudoraWeb 2.1"<br clear="none">> And it works correctly for me because I can see the IP of the user on <br clear="none">> the Internet<br clear="none">><br clear="none">> But on the error.log I don't see the IP of the user on the Internet<br clear="none">> 2022/06/28 16:12:27 [error] 45747#0: *11 access forbidden by rule, <br clear="none">> client: 192.168.1.20, server: app.mydomain.org, request: "GET <br clear="none">> /.git/config HTTP/1.0", host: " <MY PUBLIC IP>", referrer: <br clear="none">> "<a shape="rect" href="http://app.mydomain.org" target="_blank">http://app.mydomain.org</a>"<br clear="none">> So here as you can see in the logs my client 192.168.1.20 is the <br clear="none">> reverse proxy and not the client on the Internet<br clear="none">><br clear="none">> So in access logs<br clear="none">> <a shape="rect" href="http://nginx.org/en/docs/http/ngx_http_log_module.html" target="_blank">http://nginx.org/en/docs/http/ngx_http_log_module.html</a><br clear="none">> I can get the IP of the Internet use<br clear="none">><br clear="none">> How can I get the IP of the Internet user when it generates an error log ?<br clear="none">><br clear="none">_______________________________________________<br clear="none">nginx mailing list -- <a shape="rect" ymailto="mailto:nginx@nginx.org" href="mailto:nginx@nginx.org">nginx@nginx.org</a><br clear="none">To unsubscribe send an email to <a shape="rect" ymailto="mailto:nginx-leave@nginx.org" href="mailto:nginx-leave@nginx.org">nginx-leave@nginx.org</a><br clear="none"></div></div></div>
</div>
</div></div></body></html>