jamesmcm / vopono

Run applications through VPN tunnels with temporary network namespaces
GNU General Public License v3.0
791 stars 45 forks source link

Cannot forward ports when running as root #84

Open jamesmcm opened 3 years ago

jamesmcm commented 3 years ago

Specifically: https://github.com/jamesmcm/basic_tcp_proxy/blob/e3adcff17b46ecd871ff7d6f785de987d4945272/src/lib.rs#L36 fails to bind when a connection is made (even if the connecting process is also running as root).

This seems to be some sort of socket permissions issue.

d4h0 commented 2 years ago

@jamesmcm: Are you sure this issue still exists?

I thought, I'll give fixing this a try, but I can't reproduce any error.

If I execute the following command:

vopono -v exec --custom /tmp/openvpn_test.ovpn --protocol openvpn --postup '/tmp/postup.sh' -k -u root -f 8118 "privoxy --chroot --user privoxy --pidfile /tmp/privoxy.pid /tmp/privoxy.config"

...I neither get an error when executed via my regular user and sudo, nor when I log into root and execute it from there. I always can connect to localhost:8118 and request webpages.

Can you still somehow reproduce this issue? And if so, can you reproduce it via a custom OpenVPN config? I only have OpenVPN VPNs, so that's the only kind I can test.

aujxn commented 1 year ago

I'm running into this issue when running without sudo. Vopono logs that a new connection happens but then times out and the thread crashes. Tried both transmission-gtk and transmission-daemon, both same behavior.