Open dpeterson309 opened 1 month ago
First: You write about sslh config, but you are showing as first file your firewall configuration. For an easy setup of sslh not a single firewall rule is needed. Next: You sslh configuration in the next file contains more comments, than configuration. If you wish, that people are looking to it, please remove all unneeded lines. Makes life easier.
As I see no routing configuration in your docu?
I don't think this is a SSLH issue necessarily. I think I have my firewall configured wrong. However, I can't seem to figure out what I have wrong. I am trying to get sslh-ev working with transparent proxy to my web and ssh server. This is all bare-bones on my debian router. My sslh config looks like this
I've omitted the variables, but $LAN is my lan interface, $WAN is the wan interface (modem is a dumb pass-through), and my podman networks are subnets. SSH, NGINX, and SSLH are all running bare-metal, not in pods. My SSLH config looks like this
where XXX.XXX.XXX.XXX is the IP of my WAN interface. When I try to access my server from the WAN interface with
I get an initial connection and then curl hangs. I get a bunch of repeated lines in the sslh logs
If i use the interface 10.80.82.1:4443 directly from curl, I am able to connect to the web server. This is what makes me believe it is a firewall issue as sslh seems to be taking the connection and trying to forward it. The webserver seems to be running properly. I have been looking at this for several weeks and cannot seem to find my error. Any ideas what is wrong? If I get rid of transparent proxying it does work. However, that makes it hard to log for my web server