Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Gargoyle doesn't ignore ports bound to ipv6 addresses by default. #3

Open
btaub opened this issue Jan 23, 2018 · 0 comments
Open

Gargoyle doesn't ignore ports bound to ipv6 addresses by default. #3

btaub opened this issue Jan 23, 2018 · 0 comments

Comments

@btaub
Copy link
Contributor

btaub commented Jan 23, 2018

It looks like gargoyle misses ipv6 ports when auto-checking for valid ports to ignore. Adding 80 and 443 to .gargoyle_config works fine, but those two ports get missed by default. Note that for recent versions of Apache, the default behavior is to bind using ipv6.

root@ip-172-26-12-206:/opt/gargoyle_pscand# netstat -tulpn |grep LIST
tcp        0      0 127.0.0.1:9050          0.0.0.0:*               LISTEN      1241/tor        
tcp        0      0 127.0.0.1:3306          0.0.0.0:*               LISTEN      5171/mysqld     
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      5355/sshd       
tcp6       0      0 :::443                  :::*                    LISTEN      1272/apache2    
tcp6       0      0 :::80                   :::*                    LISTEN      1272/apache2    
tcp6       0      0 :::22                   :::*                    LISTEN      5355/sshd       

root@ip-172-26-12-206:/opt/gargoyle_pscand# grep ignoring /var/log/syslog
Jan 23 01:27:12 ip-172-26-12-206 gargoyle_pscand: ignoring ephemeral port range: 32768 - 60999
Jan 23 01:27:12 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring ports: 9050,3306,22
Jan 23 01:27:12 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring IP addr's: 0.0.0.0,172.26.0.1,127.0.0.1,172.26.12.206
Jan 23 01:41:04 ip-172-26-12-206 gargoyle_pscand: ignoring ephemeral port range: 32768 - 60999
Jan 23 01:41:04 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring ports: 9050,3306,22
Jan 23 01:41:04 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring IP addr's: 0.0.0.0,172.26.0.1,127.0.0.1,172.26.12.206
Jan 23 01:46:27 ip-172-26-12-206 gargoyle_pscand: ignoring ephemeral port range: 32768 - 60999
Jan 23 01:46:27 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring ports: 9050,3306,22
Jan 23 01:46:27 ip-172-26-12-206 gargoyle_pscand: Gargoyle_pscand - ignoring IP addr's: 0.0.0.0,172.26.0.1,127.0.0.1,172.26.12.206

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant