moparisthebest/sslh
1
0
Fork 0
mirror of https://github.com/moparisthebest/sslh synced 2024-08-13 16:53:51 -04:00
Code Issues Releases Wiki Activity

Correct markdown

Browse Source
This commit is contained in:
Ruben van Staveren 2014-07-22 21:43:03 +02:00
parent 36cf99697b
commit 0d8e2438de
1 changed files with 19 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
README.md
View File

@ -248,35 +248,34 @@ FreeBSD:
Given you have no firewall defined yet, you can use the following configuration Given you have no firewall defined yet, you can use the following configuration
to have ipfw properly redirect traffic back to sslh to have ipfw properly redirect traffic back to sslh
/etc/rc.conf /etc/rc.conf
firewall_enable="YES" firewall_enable="YES"
firewall_type="open" firewall_type="open"
firewall_logif="YES" firewall_logif="YES"
firewall_coscripts="/etc/ipfw/sslh.rules" firewall_coscripts="/etc/ipfw/sslh.rules"
/etc/ipfw/sslh.rules /etc/ipfw/sslh.rules
#! /bin/sh
# ssl #! /bin/sh
ipfw add 20000 fwd 192.0.2.1,443 log tcp from 192.0.2.1 8443 to any out
ipfw add 20010 fwd 2001:db8::1,443 log tcp from 2001:db8::1 8443 to any out
# ssh # ssl
ipfw add 20100 fwd 192.0.2.1,443 log tcp from 192.0.2.1 8022 to any out ipfw add 20000 fwd 192.0.2.1,443 log tcp from 192.0.2.1 8443 to any out
ipfw add 20110 fwd 2001:db8::1,443 log tcp from 2001:db8::1 8022 to any out ipfw add 20010 fwd 2001:db8::1,443 log tcp from 2001:db8::1 8443 to any out
# xmpp
ipfw add 20200 fwd 192.0.2.1,443 log tcp from 192.0.2.1 5222 to any out
ipfw add 20210 fwd 2001:db8::1,443 log tcp from 2001:db8::1 5222 to any out
# openvpn (running on other internal system)
ipfw add 20300 fwd 192.0.2.1,443 log tcp from 198.51.100.7 1194 to any out
ipfw add 20310 fwd 2001:db8::1,443 log tcp from 2001:db8:1::7 1194 to any out
# ssh
ipfw add 20100 fwd 192.0.2.1,443 log tcp from 192.0.2.1 8022 to any out
ipfw add 20110 fwd 2001:db8::1,443 log tcp from 2001:db8::1 8022 to any out
# xmpp
ipfw add 20200 fwd 192.0.2.1,443 log tcp from 192.0.2.1 5222 to any out
ipfw add 20210 fwd 2001:db8::1,443 log tcp from 2001:db8::1 5222 to any out
# openvpn (running on other internal system)
ipfw add 20300 fwd 192.0.2.1,443 log tcp from 198.51.100.7 1194 to any out
ipfw add 20310 fwd 2001:db8::1,443 log tcp from 2001:db8:1::7 1194 to any out
General notes:
This will only work if `sslh` does not use any loopback This will only work if `sslh` does not use any loopback