Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Separate real and virtual servers for both HTTP and HTTPS?

I've read the manual and searched the forum but I'm still confused.

I have a web server, email server and an FTP server all on the same box behind Sophos. I have static public IP's and some websites have their own static IP while others share IP's. All websites use both HTTP and HTTPS.

Do I need to set up two (HTTP and HTTPS) virtual and real servers for each public IP address? I'm not understanding the mapping.

On my old router, I just created services for each website and forwarded the needed ports to the corresponding private IP's of each website.


This thread was automatically locked due to age.
Parents
  • Thanks Bob.

    So far, I have one website up and working. I noticed that all entires in the Apache access log are now from IP 192.168.0.1 regardless of the users' public IP. Presumably because of the proxy.

    Is there a way to pass the users' public IP so the Apache logs can once again be used for statistical information?

    --------------------------------------------------------------------
    Sophos UTM 9.714-4 - Home User
    Currently testing VM on i3-9100 @ 3.60 GHz
    16 GB RAM
    Dell Optiplex XE
    Intel Core 2 Duo CPU E8600 @ 3.33GHz
    8GB RAM
    --------------------------------------------------------------------

Reply
  • Thanks Bob.

    So far, I have one website up and working. I noticed that all entires in the Apache access log are now from IP 192.168.0.1 regardless of the users' public IP. Presumably because of the proxy.

    Is there a way to pass the users' public IP so the Apache logs can once again be used for statistical information?

    --------------------------------------------------------------------
    Sophos UTM 9.714-4 - Home User
    Currently testing VM on i3-9100 @ 3.60 GHz
    16 GB RAM
    Dell Optiplex XE
    Intel Core 2 Duo CPU E8600 @ 3.33GHz
    8GB RAM
    --------------------------------------------------------------------

Children
  • Is there a way to pass the users' public IP so the Apache logs can once again be used for statistical information?


    Hi,
    The WAF sets the HTTP_X_FORWARDED_FOR http header; you can log that in Apache with mod_rpaf in Apache 2.2 or mod_realip in Apache 2.4.

    Barry
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?