1

I have a reverse tunnel on my home server so that I can have access to it from the external world. My home server is behind a firewall.

When I access [mydomain]:8080 it forwards my HTTP request through the established connection, that was initiated by my home computer, to my home computer where it creates a connection (from localhost) to my server on port 80. Everything works, just all apache's logs now say requests came from localhost. I really would like to find out more about who connects to my server.

This is the command I'm running to create the reverse tunnel:

autossh -i mykeyfile -N -f -g -R \*:8080:localhost:80 myuser@mydomain

I've tried checking /var/log/auth.log it didn't have anything relevant though.

  • If the firewall is doing it, I am afraid you will need firewall logs. If Apache is seeing the public IP, you will need to log X-Forwarded-For. techstacks.com/howto/… I personally use a VPN, and if you scan my public IP, you just see the isakmp port. Everything else, including ssh (and nginx, DNS, DHCP, asterisk) only works after the VPN is established. (bonus: it is configured to work with the native VPN clientes of OS/X and iOS) – Rui F Ribeiro Dec 6 '15 at 8:58
0
  • Change your tunnel to listen remotely on localhost:8080 instead of *:80.

  • Install Apache on mydomain and configure a reverse proxy from 80 to localhost:8080 using ProxyPass and ProxyPassReverse directives.

  • Tell apache to add client's address as standard http headers X-Forwarded-For, X-Forwarded-Proto, X-Forwarded-Port using RequestHeader append directive

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.