Log the values of
the X-Forwarded-For and Via Headers to standard MS IIS
Logfiles
The plug-in allows
to collect the header information to the standard logs.
without the plugin, the log looks
like:
2005-03-15 11:29:56 10.10.10.10 anonymous
W3SVC1 server 11.11.11.11 80 GET /ServerVariables.asp - 200 0 4630 709 0
HTTP/1.1 client.localdomain - - -
where 10.10.10.10 is the IP of the Proxy Server,
the IP 11.11.11.11 is the IP of the server and the client is called
client.localdomain and had IP 22.22.22.22.
The plugin allows to append the value of X-Forwarded-For to the IP
address or replace the IP address like:
Replace ClientIP= off and Append Viaheader= on
2005-03-15 11:29:56 10.10.10.10+(X-Forwarded-For:+22.22.22.22)
anonymous+(Via:+1.1+PROXY1,+1.0+PROXY2) W3SVC1 server 11.11.11.11 80 GET
/ServerVariables.asp - 200 0 4630 709 0 HTTP/1.1
client.localdomain - - -
Replace ClientIP= on and Append Viaheader= on
2005-03-15 11:29:56 22.22.22.22
anonymous+(Via:+1.1+PROXY1,+1.0+PROXY2) W3SVC1 server 11.11.11.11 80 GET
/ServerVariables.asp - 200 0 4630 709 0 HTTP/1.1
client.localdomain - - -
Replace
ClientIP= on and Append Viaheader= off
2005-03-15 11:29:56 22.22.22.22
anonymous W3SVC1 server 11.11.11.11 80 GET /ServerVariables.asp - 200 0
4630 709 0 HTTP/1.1 client.localdomain - - -
Download:
Download Version 1.0.0.19
(currently not available) (Note: Please do not create
external links to this download!)
Installation:
1. copy all files to %windir%\\system32\\inetsrv or create a subdirectory there
2. open
the Internet Information Services Manager and go to the properties of
the Default Web Site
3. clickt on "ISAPI Fi lters" and press the Add button, type a name like IISLogXForwardedFor and
3. clickt on "ISAPI Fi lters" and press the Add button, type a name like IISLogXForwardedFor and
select the
IISLogXForwardedFor.dll file
4. modify the IISLogXForwardedFor.reg file for your own settings and import the file to your registry
5. restart the "IIS Admin" service
This plug-in was tested on Windows NT
4.0, Windows 2000 and Windows XP.
Note: There is no guarantee that the
plug-in runs in all environments, if you not sure what
is
happen, then do not install the
plug-in.
last modified Monday, 6. June 2005 © Saltimbanco/Server/Geeks