Castaglia/proftpd-mod_proxy

class forward : Storing backend/frontend informations with mod_sql

dgranjon opened this issue · 8 comments

dgranjon commented

Hi,

I 'm looking for a way to get backend/frontend information (like hostname or Ip) and store them in sql database with mod_sql.

I used ProxyRole forward and ProxyForwardMethod proxyuser@host,user , but when in use "SQLLog RETR,STOR" , i havn't variable about final host. (Like %a => Remote Ip address). Also, %f (or %F) is empty when i used mod_proxy and transfer file.

Ddier

Castaglia commented

So you'd like to be able to record both the frontend/client IP/hostname, and the backend/server IP/hostname? Can you provide an example of the config you'd like to use, for logging these values to a SQL database, so I can see what you have in mind? Thanks!

dgranjon commented

Hi Castaglia,

My config for mod_proxy :

 ProxySourceAddress x.x.x.x
 ProxyEngine on
 ProxyTables /var/lib/proftpd/proxy.tables
 ProxyLog /var/log/proftpd/proxy.log
 ProxyTimeoutLinger 10
 ProxyRole forward
 ProxyForwardMethod proxyuser@host,user

<Class forward-proxy>
  From y.y.y;y/32

  ProxyForwardEnabled on
</Class>

Détails about connexion

ftp proftpd_server 
user proxyuser@host => 
pass xxx
user user
pass xxx

I ve tried to log informations about file transfer for traceability (Filename => %f is empty, Size => Ok, proxyuser@host, user) into sql backend (with mod_sql and SQLLog RETR,STOR transfer).
I have host information in proxylog file. (passive backend data connection opened - remote : host_ip:port)

Thanks

Castaglia commented

With this PR, the %F logging variable should now work properly again. Note that %f, for the full path, will probably not work as you expect, since the absolute path of the file being transferred is known on the backend server, but not on the proxy server.

You can also now use the following variables for logging:

  • %{note:mod_proxy.backend-ip} for the IP address of the backend/proxied server
  • %{note:mod_proxy.backend-port} for the port of the backend/proxied server
  • %{note:mod_proxy.backend-url} for a URL to the backend/proxied server
dgranjon commented

Hi Castaglia,

I m going to try it this day. thank you very much for your response

Castaglia commented

Any success/updates?

dgranjon commented

Hi Castaglia,

Yes, I ve tested succesfully. Now i can store backend_ip and backend_port.

thanks very much,
Didier

  • 👍1
gab0rka commented

@Castaglia I'd like to point out that the mod_proxy.html documentation have a typo about the logging notes. It mentions %{note.mod_proxy.backend-ip}, but it should be %{note:mod_proxy.backend-ip}. Took hours for me to figure out why doesn't it work.

Castaglia commented

@gab0rka doh! So sorry about that; thanks for letting me know. The docs should be fixed now.

  • 👍1