Nginx mail proxy hides client’s ip

dovecotemail-servernginxPROXY

I successfully set up nginx imap/pop3 mail proxy with auth_http which has been working fine for months.
Recently came up a request on showing client's IP in mail.log at imap logins.

Since Nginx communicates with Dovecot the IP address in log belongs to Nginx server (which in this case 127.0.0.1 – as they are on the same server).

So far I could not find a solution or workaround for that.
Apparently not even logging is possible in nginx mail block.

The closest hit was a HAProxy support in Dovecot (https://wiki2.dovecot.org/HAProxy) but I am not sure there is similar to Nginx.

Any help is appreciated.

Thanks

Best Answer

Workaround

Not finding suitable solution I rather created a new log file in the proxy script which provided a acceptable solution to the request.

Here is the excerpt:

$fp = fopen('/var/log/mail_logins.log', 'a');
$now = "[" . (new \DateTime())->format('Y-m-d H:i:s') . "]";
fwrite($fp, $now . " HTTP_AUTH_PROTOCOL: " . $_SERVER["HTTP_AUTH_PROTOCOL"] . ", HTTP_AUTH_USER: " . $_SERVER["HTTP_AUTH_USER"] . ", HTTP_CLIENT_IP: " . $_SERVER["HTTP_CLIENT_IP"]. "\n");
fclose($fp);

It might help someone.

Related Solutions

NGINX Reverse Proxy – URL Rewrite

Any redirect to localhost doesn't make sense from a remote system (e.g. client's Web browser). So the rewrite flags permanent (301) or redirect (302) are not usable in your case.

Please try following setup using a transparent rewrite rule:

location  /foo {
  rewrite /foo/(.*) /$1  break;
  proxy_pass         http://localhost:3200;
  proxy_redirect     off;
  proxy_set_header   Host $host;
}

Use curl -i to test your rewrites. A very subtle change to the rule can cause nginx to perform a redirect.

Nginx gives 504 Gateway Time-out once moved to live

You're trying to connect to PHP Fast-CGI on unix:/tmp/php.socket, but you're not running PHP Fast-CGI daemon. PHP-FPM is a separate daemon and nginx will not spawn it automatically.

See PHP documentation on deploying FastCGI Process Manager (FPM) and HOWTO for installing Nginix + PHP-FPM on Ubuntu

If you're using standard install, you're most likely will have a service named php-fpm or php5-fpm, which you should start and add to list of services started automatically.

Best Answer

Related Solutions

NGINX Reverse Proxy – URL Rewrite

Nginx gives 504 Gateway Time-out once moved to live

Related Topic