Thread: Why no https???
View Single Post
Old 10th August 2022
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 3,989
Default

There is a 301 permanent redirect :
Code:
     42 server  "daemonforums.org" {
     43         listen on egress  port 80
     44         log { style forwarded
     45                access http80_access.log
     46                error  http80_error.log
     47         }
     48         root "/htdocs"
     49         block return 301 "https://daemonforums.org$REQUEST_URI"
     50 }
But guess what was in my pf.conf:
Code:
block in quick on egress inet proto tcp from !  $ME  to port http
I found that out by checklng the httpd error log and only saw redirects from my IP .....

I put that in place to allow me to test the relayd setup TLS proxying , while still allowing direct httpd access to the original daemonforums site.
I just forgot to comment that out
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote