When you create a TLS/SSL tunnel with stunnel or haproxy/mmproxy the ircd does not know the IP address you connected to. Because of this iauth tries to bind to the wrong IP address.
If a user connects to 45.141.0.18:6697 he will be tunneled to 127.0.0.1:6697. The problem is iauth will bind to 127.0.0.1 to do the ident check which will fail.
I also could not get it working with transparent = both.
Solution:
In P-Line we can make the auth source address definable:
P|127.0.0.1|||6679||T|::ffff:45.141.0.18|
When you create a TLS/SSL tunnel with stunnel or haproxy/mmproxy the ircd does not know the IP address you connected to. Because of this iauth tries to bind to the wrong IP address.
stunnel:
If a user connects to 45.141.0.18:6697 he will be tunneled to 127.0.0.1:6697. The problem is iauth will bind to 127.0.0.1 to do the ident check which will fail.
I also could not get it working with
transparent = both.Solution: In P-Line we can make the auth source address definable:
P|127.0.0.1|||6679||T|::ffff:45.141.0.18|