Skip to content

Gargoyle doesn't ignore ports bound to ipv6 addresses by default. #3

@btaub

Description

@btaub

It looks like gargoyle misses ipv6 ports when auto-checking for valid ports to ignore. Adding 80 and 443 to .gargoyle_config works fine, but those two ports get missed by default. Note that for recent versions of Apache, the default behavior is to bind using ipv6.

root@ip-172-26-12-206:/opt/gargoyle_pscand# netstat -tulpn |grep LIST
tcp        0      0 127.0.0.1:9050          0.0.0.0:*               LISTEN      1241/tor        
tcp        0      0 127.0.0.1:3306          0.0.0.0:*               LISTEN      5171/mysqld     
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      5355/sshd       
tcp6       0      0 :::443                  :::*                    LISTEN      1272/apache2    
tcp6       0      0 :::80                   :::*                    LISTEN      1272/apache2    
tcp6       0      0 :::22                   :::*                    LISTEN      5355/sshd       

root@ip-172-26-12-206:/opt/gargoyle_pscand# grep ignoring /var/log/syslog
Jan 23 01:27:12 ip-172-26-12-206 gargoyle_pscand: ignoring ephemeral port range: 32768 - 60999
Jan 23 01:27:12 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring ports: 9050,3306,22
Jan 23 01:27:12 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring IP addr's: 0.0.0.0,172.26.0.1,127.0.0.1,172.26.12.206
Jan 23 01:41:04 ip-172-26-12-206 gargoyle_pscand: ignoring ephemeral port range: 32768 - 60999
Jan 23 01:41:04 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring ports: 9050,3306,22
Jan 23 01:41:04 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring IP addr's: 0.0.0.0,172.26.0.1,127.0.0.1,172.26.12.206
Jan 23 01:46:27 ip-172-26-12-206 gargoyle_pscand: ignoring ephemeral port range: 32768 - 60999
Jan 23 01:46:27 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring ports: 9050,3306,22
Jan 23 01:46:27 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring IP addr's: 0.0.0.0,172.26.0.1,127.0.0.1,172.26.12.206

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions