-
Notifications
You must be signed in to change notification settings - Fork 5
Open
Description
It looks like gargoyle misses ipv6 ports when auto-checking for valid ports to ignore. Adding 80 and 443 to .gargoyle_config works fine, but those two ports get missed by default. Note that for recent versions of Apache, the default behavior is to bind using ipv6.
root@ip-172-26-12-206:/opt/gargoyle_pscand# netstat -tulpn |grep LIST
tcp 0 0 127.0.0.1:9050 0.0.0.0:* LISTEN 1241/tor
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN 5171/mysqld
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 5355/sshd
tcp6 0 0 :::443 :::* LISTEN 1272/apache2
tcp6 0 0 :::80 :::* LISTEN 1272/apache2
tcp6 0 0 :::22 :::* LISTEN 5355/sshd
root@ip-172-26-12-206:/opt/gargoyle_pscand# grep ignoring /var/log/syslog
Jan 23 01:27:12 ip-172-26-12-206 gargoyle_pscand: ignoring ephemeral port range: 32768 - 60999
Jan 23 01:27:12 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring ports: 9050,3306,22
Jan 23 01:27:12 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring IP addr's: 0.0.0.0,172.26.0.1,127.0.0.1,172.26.12.206
Jan 23 01:41:04 ip-172-26-12-206 gargoyle_pscand: ignoring ephemeral port range: 32768 - 60999
Jan 23 01:41:04 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring ports: 9050,3306,22
Jan 23 01:41:04 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring IP addr's: 0.0.0.0,172.26.0.1,127.0.0.1,172.26.12.206
Jan 23 01:46:27 ip-172-26-12-206 gargoyle_pscand: ignoring ephemeral port range: 32768 - 60999
Jan 23 01:46:27 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring ports: 9050,3306,22
Jan 23 01:46:27 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring IP addr's: 0.0.0.0,172.26.0.1,127.0.0.1,172.26.12.206
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels