No external src ip in log files (my router ip appears instead)
- by bongo_fury
I recently retired my workhorse WRT54G router/AP in favor of a Linksys EA2700. Since then, all inbound traffic (bound to an Ubuntu 10.02 box running LAMP)logged to Syslog, Apache's error and access logs, etc. (all behind said router) is getting logged with a src ip of 192.168.1.1, that of the router's internal ip. For example, here is an old entry from apache's access.log:
74.82.68.20 - - [22/Feb/2011:10:14:34 -0600] "GET /assets/css/style.css HTTP/1.1" 304 154
"http://example.com/view.php?event_id=1"
"BlackBerry8520/5.0.0.822 Profile/MIDP-2.1 Configuration/CLDC-1.1
VendorID/100"
And here is one since switching the router:
192.168.1.1 - - [05/Oct/2012:21:29:25 -0500] "GET /somedir/print.css HTTP/1.1" 200 650 "http://example.com/somedir/" "Mozilla/5.0
(Windows NT 6.1; WOW64; rv:15.0) Gecko/20100101 Firefox/15.0.1"**
That first field is the problem. Each and every entry in every log shows an "external" IP of 192.168.1.1, which isn't very helpful. Any ideas?
Much thanks from a n00b!
