Why do the web server logs show all connections as coming from 127.0.0.1?

If you looked at your web server logs after upgrading to OS X Server 5, you might have noticed that all connections seem to come from your localhost at 127.0.0.1 instead of the actual IP of the connecting user.

This is due to how OS X Server 5 implements virtual websites. Instead of exposing the sites directly, they are funnelled through a proxy (whether this is a good or a bad choice depends on your point of view).

To see the actual IPs of incoming connections to your web sites, either look at ‘/private/var/log/apache2/service_proxy_access.log’ or set up custom logging using ‘%a’ (don’t use ‘%h’ as it will resolve to the localhost).

0 replies

Leave a Reply

Want to join the discussion?
Feel free to contribute!

Leave a Reply

Your email address will not be published. Required fields are marked *