ERROR clientip is null, you must set 'icap_send_client_ip on' into squid.conf

JonathanLee

Hello fellow netgate community,

Can you please help?

Does anyone know how to fix this error?

I have posted a couple times in the proxy categories; however, no one has responded to the questions. I have this turned on in Squid proxy configuration, however it says client is null non stop.

Does anyone have any hints?

https://forum.netgate.com/topic/176340/error-clientip-is-null-you-must-set-icap_send_client_ip-on-into-squid-conf?_=1670725858461

stephenw10

Hmm, I've never seen that. But I very rarely enable clamav in squid.
I assume if you disable clamav it stops showing those errors?

Steve

JonathanLee

@stephenw10 happy holidays,

Thanks for the reply,

It's the errors listed in i-cap server logs, I don't know if that helps or not. I have been running Clam AV it stops many viruses that my normal antivirus won't even catch. I have not disabled it to check I will test soon.

(image: virus caught last week)

I have also worked with this possible solution. . .

https://forum.netgate.com/topic/129331/adaptation_send_client_ip-vs-icap_send_client_ip/2?_=1670870168091

I have also tested this solution it did not resolve my issue like it did for this post.

1669955855117-screenshot-2022-12-01-at-8.36.06-pm-resized.png
(image: send client is set to on in Squid proxy Config)

1669851180192-screenshot-2022-11-30-at-3.32.23-pm-resized.png
(image: adapted code for Clam-AV config did not resolve issue)

stephenw10

Ah, interesting. Not sure I've ever looked in that log!

Other than showing those errors is it otherwise working as expected?

JonathanLee

@stephenw10 Yes other than that error it works, the splash screen works and all, I do not know if that is related to if you have subnets set up on the proxy or something else. The error list is huge for these thousands of entries

stephenw10

Hmm, if it's not actually causing a problem (even in clamav) it's possible that's common but nobody reports it as it's not shown. As I said I'm not sure I've ever looked in that log file.
Once 23.01 is released I'll try to dig into it. No spare testing time until then unfortunately.

Steve

JonathanLee

@stephenw10 thanks, can't wait to load it on my Netgate 2100 max

JonathanLee

@stephenw10

I have noticed that a non loopback is loaded in the config and the ip is commented out for this. I attempted to turn on the ip and the port however it defaults back to commented out and deletes the lines I added in yellow. Orange highlighted is standard