Only check X-Forwarded-For if we're in squid mode. It's easy to forge an IP address...