infobyte / faraday

Open Source Vulnerability Management Platform
https://www.faradaysec.com
GNU General Public License v3.0
4.78k stars 885 forks source link

The client can't connect to faraday sever #398

Closed tXambe closed 4 years ago

tXambe commented 4 years ago

Hello,

I has installed faraday-server downloaded the packet .deb and was installed with dpkg, the interface is up and I can login without problem ( http://localhost:5985) but with http://192.168.200.1:5985 don't work, unable to connect. I have install nginx but I think I'm missing some configuration, ¿Anyone can help me?

Thanks and a greeting

dnadares commented 4 years ago

Hi tXambe,

Could you please check the bind_address param in your server.ini configuration. By default faraday-server listens on localhost only. To make it listen on all interfaces you should change it with bind_address = 0.0.0.0

Regards,

Diego

tXambe commented 4 years ago

Hello,

Thanks for your response, and it's already working, I only have configure faraday-server to access from internet, yesterday I've been setting up in my home rooter at NAT but don't work, I'll keep researching how to do it.

EricHorvat commented 4 years ago

Hi tXambe,

We recommend to set faraday-server behind a reverse proxy. We can suggest NGINX as one of them.

Regards,

Eric

tXambe commented 4 years ago

Hello,

I follow the manual of nginx but I don't understand what file I have what modify so that when I write the url https://myfaraday.com go to the panel login of faraday server

Thanks very much and a greeting

EricHorvat commented 4 years ago

Hi tXambe,

First make sure you already set up Nginx and that you are able to see the default page when you go to localhost:80 on your browser.

Once you have that, modify /etc/nginx/nginx.conf and create /etc/nginx/sites-available/faraday. Note that you have to modify this latter file to include your own server name (for example, localhost or myfaraday). These are the files referenced in our wiki. The last step is to soft-link /etc/nginx/sites-available/faraday to /etc/nginx/sites-enabled/faraday, by e.g. ln -s /etc/nginx/sites-available/faraday/etc/sites-enabled/ ).

After that, restart nginx (systemctl restart nginx) and veryfy that if you go to 'localhost' on your browser, you see the login page. Once that works, it's a matter of how you access the machine from the LAN or the internet. I strongly recommend to first test on your LAN and make sure you understand how name resolving works before exposing it to the internet.

Regards,

Eric

tXambe commented 4 years ago

that you have to modify this latter file to include your o

Hello,

My current situation:

If I write http://localhost --> nginx Bad request The plain HTTP request was sent to HTTPS port If I write http://localhost:5985 --> login panel If I write https://localhost --> login panel If I write https://172.16.100.23 --> login panel If I write https://myfaraday --> unable to connect

My nginx.conf --> https://pastebin.com/index/DDpqjcxc

Thanks very much

EricHorvat commented 4 years ago

Hi tXambe,

Great, you achived to run it with SSL. In the other hand name resolution is DNS and OS task, I recommend this link to start investigating name resolution.

Let us know of any other issue.

Issue closed

tXambe commented 4 years ago

Hi tXambe,

Great, you achived to run it with SSL. In the other hand name resolution is DNS and OS task, I recommend this link to start investigating name resolution.

Let us know of any other issue.

Issue closed

Hello, But if I don't understand one thing, in my router I have port mirroring of my public IP at my private IP ( faraday-server) with port 5985 , so when write https://83.175.200.98 don't work if I write https://83.175.200.98:5985 don't work, ¿so i should use a service like freedns, dydns?

Thanks very much

llazzaro commented 4 years ago

@tXambe I think you need to do port forwarding with your router, since it seems faraday run in an internal IP 172.16.100.23 .

tXambe commented 4 years ago

Hello,

It has finally worked, the problem , my ISP, I had to request that my public ip be fixed. Now access for my public ip:port and name http://faraday:5895

Thanks very much