From 0f8bfcdc21ed6f0ce5f1c497559193c8578082d0 Mon Sep 17 00:00:00 2001 From: Rob Church Date: Sun, 16 Sep 2007 12:42:52 +0000 Subject: [PATCH] Further clarify $wgSquidServers/$wgSquidServersNoPurge documentation - state that both are "trusted" with regards to X-Forwarded-For, etc. --- includes/DefaultSettings.php | 20 ++++++++++++-------- 1 file changed, 12 insertions(+), 8 deletions(-) diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php index 2609d43837..60b193a62f 100644 --- a/includes/DefaultSettings.php +++ b/includes/DefaultSettings.php @@ -1334,15 +1334,19 @@ $wgInternalServer = $wgServer; $wgSquidMaxage = 18000; /** - * A list of proxy servers (ips if possible) to purge on changes don't specify - * ports here (80 is default). When mediawiki is running behind a proxy, its - * address should be listed in $wgSquidServers otherwise mediawiki won't rely - * on the X-FORWARDED-FOR header to determine the user IP address and - * all users will appear to come from the proxy IP address. Don't use domain - * names here, only IP adresses. - */ -# $wgSquidServers = array('127.0.0.1'); + * List of proxy servers to purge on changes; default port is 80. Use IP addresses. + * + * When MediaWiki is running behind a proxy, it will trust X-Forwarded-For + * headers sent/modified from these proxies when obtaining the remote IP address + * + * For a list of trusted servers which *aren't* purged, see $wgSquidServersNoPurge. + */ $wgSquidServers = array(); + +/** + * As above, except these servers aren't purged on page changes; use to set a + * list of trusted proxies, etc. + */ $wgSquidServersNoPurge = array(); /** Maximum number of titles to purge in any one client operation */ -- 2.20.1