Re: [Shorewall-users] sslh transparent proxy with Shorewall

[Tom E. <te...@sh...>]

On 06/08/2018 01:52 PM, MBB wrote:
> Hello!
> 
> I'm using Shorewall and sslh for many years together.  https://github.com/yrutschle/sslh#sslh----a-sslssh-multiplexer
> Now I'd like to switch sslh to transparent mode, so that the services behind sslh see the external IP and not only 127.0.0.1. 
> But therefor there are some modifications to the firewall necessary: https://github.com/yrutschle/sslh#transparent-proxy-support and because I'm a novice when it comes to that, I'd need some help to configure Shorewall.
> I didn't find any information about such a setup together with Shorewall on Google, nor is sslh in a Shorewall mailing list mentioned.
> 
> I'd appreciate any help to get this up and running
> Cheers
> Norbert

Unfortunately, the Shorewall rules compiler would need to be modified to
support the recommended rules. I'll make those modifications in
Shorewall 5.2.1.

-Tom
-- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
                      \_______________________________________________