fb0a5a294e
follow-xff-patchset (thanks to Michael Ranner for spotting the problem and testing the fix). While at it, wordsmith the comments in the patch. Use the official patch for the NTLM auth helper vulnerability, see <http://www.squid-cache.org/Versions/v2/2.5/bugs/> for details. Build install the SMB basic authentication helpers by default PR: ports/68448 Submitted by: maintainer
65 lines
1.9 KiB
Diff
65 lines
1.9 KiB
Diff
!Simulate the autotools bootstrap of the follow-x-forwarded-for patchset.
|
|
!
|
|
!Beware that all line number informations in configure.log greater
|
|
!than 2972 are offset by at least -29 (correcting all line numbers would have
|
|
!bloated the patch by 92kB!)
|
|
--- include/autoconf.h.in.orig Sat Jan 18 02:46:11 2003
|
|
+++ include/autoconf.h.in Thu Jun 24 13:19:07 2004
|
|
@@ -291,6 +291,12 @@
|
|
#define USE_IDENT 1
|
|
|
|
/*
|
|
+ * Compile in support for following X-Forwarded-For headers?
|
|
+ * Enabled by default.
|
|
+ */
|
|
+#define FOLLOW_X_FORWARDED_FOR 1
|
|
+
|
|
+/*
|
|
* If your system has statvfs(), and if it actually works!
|
|
*/
|
|
#undef HAVE_STATVFS
|
|
--- configure.orig Tue Mar 2 10:18:14 2004
|
|
+++ configure Tue Mar 2 10:18:56 2004
|
|
@@ -222,6 +222,12 @@
|
|
variance within an accelerator setup.
|
|
Typically used together with other code
|
|
that adds custom HTTP headers to the requests."
|
|
+ac_help="$ac_help
|
|
+ --enable-follow-x-forwarded-for
|
|
+ Enable support for following the X-Forwarded-For
|
|
+ HTTP header to try to find the IP address of the
|
|
+ original or indirect client when a request has
|
|
+ been forwarded through other proxies."
|
|
|
|
# Initialize some variables set by options.
|
|
# The variables have the same names as the options, with
|
|
@@ -2966,6 +2972,29 @@
|
|
fi
|
|
|
|
|
|
+follow_xff=1
|
|
+# Check whether --enable-follow-x-forwarded-for or --disable-follow-x-forwarded-for was given.
|
|
+if test "${enable_follow_x_forwarded_for+set}" = set; then
|
|
+ enableval="$enable_follow_x_forwarded_for"
|
|
+ if test "$enableval" = "yes" ; then
|
|
+ echo "follow X-Forwarded-For enabled"
|
|
+ follow_xff=1
|
|
+ fi
|
|
+
|
|
+fi
|
|
+
|
|
+if test $follow_xff = 1; then
|
|
+ cat >> confdefs.h <<\EOF
|
|
+#define FOLLOW_X_FORWARDED_FOR 1
|
|
+EOF
|
|
+
|
|
+else
|
|
+ cat >> confdefs.h <<\EOF
|
|
+#define FOLLOW_X_FORWARDED_FOR 0
|
|
+EOF
|
|
+
|
|
+fi
|
|
+
|
|
# Force some compilers to use ANSI features
|
|
#
|
|
case "$host" in
|