ERROR clientip is null, you must set 'icap_send_client_ip on' into squid.conf

[JonathanLee]

Hello fellow netgate community,

Can you please help?

ERROR clientip is null, you must set 'icap_send_client_ip on' into squid.conf

Does anyone know how to fix this error?

login-to-view

I have posted a couple times in the proxy categories; however, no one has responded to the questions. I have this turned on in Squid proxy configuration, however it says client is null non stop.

Does anyone have any hints?

https://forum.netgate.com/topic/176340/error-clientip-is-null-you-must-set-icap_send_client_ip-on-into-squid-conf?_=1670725858461

[stephenw10]

Hmm, I've never seen that. But I very rarely enable clamav in squid.
I assume if you disable clamav it stops showing those errors?

Steve

[JonathanLee]

@stephenw10 happy holidays,

Thanks for the reply,
login-to-view

It's the errors listed in i-cap server logs, I don't know if that helps or not. I have been running Clam AV it stops many viruses that my normal antivirus won't even catch. I have not disabled it to check I will test soon.

login-to-view
(image: virus caught last week)

I have also worked with this possible solution. . .

https://forum.netgate.com/topic/129331/adaptation_send_client_ip-vs-icap_send_client_ip/2?_=1670870168091

I have also tested this solution it did not resolve my issue like it did for this post.

login-to-view
(image: send client is set to on in Squid proxy Config)

login-to-view
(image: adapted code for Clam-AV config did not resolve issue)

[stephenw10]

Ah, interesting. Not sure I've ever looked in that log!

Other than showing those errors is it otherwise working as expected?

[JonathanLee]

@stephenw10 Yes other than that error it works, the splash screen works and all, I do not know if that is related to if you have subnets set up on the proxy or something else. The error list is huge for these thousands of entries

[stephenw10]

Hmm, if it's not actually causing a problem (even in clamav) it's possible that's common but nobody reports it as it's not shown. As I said I'm not sure I've ever looked in that log file.
Once 23.01 is released I'll try to dig into it. No spare testing time until then unfortunately.

Steve

[JonathanLee]

@stephenw10 thanks, can't wait to load it on my Netgate 2100 max

[JonathanLee]

@stephenw10

I have noticed that a non loopback is loaded in the config and the ip is commented out for this. I attempted to turn on the ip and the port however it defaults back to commented out and deletes the lines I added in yellow. Orange highlighted is standard

login-to-view