From: Amos Jeffries <squid3@treenet.co.nz>
Date: Wed, 20 Jul 2011 03:42:19 +0000 (-0600)
Subject: Fix --disable-follow-x-forwarded-for and correct documentation
X-Git-Tag: SQUID_3_1_15~40
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=61134f6c6e609bce7b52296ddee6650285e60f95;p=thirdparty%2Fsquid.git

Fix --disable-follow-x-forwarded-for and correct documentation

This feature is available by default. But protected by default "deny all"
to restrict security problems.
---

diff --git a/configure.ac b/configure.ac
index c4a87fa51d..d24c092edd 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1634,13 +1634,13 @@ AC_ARG_ENABLE(leakfinder,
 
 follow_xff=1
 AC_ARG_ENABLE(follow-x-forwarded-for,
-  AS_HELP_STRING([--enable-follow-x-forwarded-for],[Enable support for following the X-Forwarded-For
+  AS_HELP_STRING([--disable-follow-x-forwarded-for],[Disable support for following the X-Forwarded-For
                  HTTP header to try to find the IP address of the
                  original or indirect client when a request has
                  been forwarded through other proxies.]),
-[ if test "$enableval" = "yes" ; then
-    AC_MSG_NOTICE([follow X-Forwarded-For enabled])
-    follow_xff=1
+[ if test "$enableval" = "no" ; then
+    AC_MSG_NOTICE([Disabling follow X-Forwarded-For])
+    follow_xff=0
   fi
 ])
 if test $follow_xff = 1; then