rejetto forum
February 12, 2012, 01:12:43 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: This forum is free, you do NOT need to register to post. But you may.
PROBLEMS? QUESTIONS? CLICK HERE!
Fill the survey!
 
   Home   Help Search Login Register  
Pages: 1 [2]
  Print  
Author Topic: [Solved] [Usefull] STunnel log displayed in HFS  (Read 7206 times)
0 Members and 1 Guest are viewing this topic.
Dragon_Hunter
Experienced poster
***
Offline Offline

Sweden Sweden

Posts: 49



View Profile Email
« Reply #15 on: February 12, 2009, 05:01:35 PM »

should the openssl map be in to stunnel map?

i can't find "openssl.exe" the only one i found is  "install.com"
Logged
SilentPliz
Operator
Insane poster
*****
Offline Offline

France France

Posts: 1023


....... chut ! shh!


View Profile WWW
« Reply #16 on: February 12, 2009, 06:08:51 PM »

Everything is explained in the links I have provided earlier.

Take the time to read.  Wink

I could not tell you better than what has already been written.

http://www.rejetto.com/wiki/index.php/HFS:_Secure_your_server

If the approach of OpenSSL seems too difficult:

ALTERNATIVE SOLUTION FOR GENERATE AN SSL CERTIFICATE:

A simpler solution is to generate a certificate SSL with a program like Fillezilla server:
 
http://sourceforge.net/project/showfiles.php?group_id=21558&package_id=21737

Generate it in a file named:

stunnel.pem


* 1.png (7.56 KB, 219x160 - viewed 283 times.)

* 2.png (114.48 KB, 601x417 - viewed 325 times.)

* 3.png (26.89 KB, 397x440 - viewed 315 times.)
« Last Edit: June 23, 2009, 10:17:48 AM by SilentPliz » Logged
raffdich
Occasional poster
*
Offline Offline

Germany Germany

Posts: 10


View Profile
« Reply #17 on: May 11, 2009, 03:48:03 PM »

thank you for this great event script  Smiley

i have a request Wink

is it now possible to obtain ip address of user when using stunnel?

the log will display
11.05.2009 22:14:29 192.168.xxx.3:4196{Stunnel} 2009.05.11 22:14:27 LOG5[2748:3680]: https accepted connection from xxx.xxx.38.8:50205
2009.05.11 22:14:27 LOG5[2748:3680]: https accepted connection from xxx.xxx.38.8:50205
2009.05.11 22:14:27 LOG5[2748:3680]: https connected remote server from 192.168.xxx.3:4196

is it possible to search / cut in the log file for [2748:3680] (i think this is like an ID or time stamp) to get the local ip:port and wan ip:port and match them to assign the wan ip to the %user% ?

it is an idea... don't pinch me Wink
thanks for reply!
« Last Edit: May 13, 2009, 10:57:43 AM by SilentPliz » Logged
SilentPliz
Operator
Insane poster
*****
Offline Offline

France France

Posts: 1023


....... chut ! shh!


View Profile WWW
« Reply #18 on: May 13, 2009, 10:49:12 AM »

Today I received a mail from rejetto:

"hi boss.
about this http://www.rejetto.com/forum/index.php?topic=6651.0
now we have global variables, we can improve it.

this for the log line
{.cut|{.^#stunnel.last.}||{.load|stunnel.log.}.}{.set|#stunnel.last|{.filesize|stunnel.log.}.}

and this to start from the last point.
[+start]
{.set|#stunnel.last|{.filesize|stunnel.log.}.}


i will soon introduce a way to partially load a file, so to avoid reloading it as whole every time.
maybe in #239. when it's available you can use this version
{.load|stunnel.log|from={.^#stunnel.last.}.}{.set|#stunnel.last|{.filesize|stunnel.log.}.}"

****************************************************************************************************
This solution work perfectly, I shall therefore update the topic.
For those using an older beta, use the "old" code. [link]


[UPDATE] STunnel log displayed in HFS (Tested with v2.3 build #242):

1)

- Paste the following sections in a file hfs.events that you will put in the folder of hfs.exe:


Script edited 01-18-2010

[connected]
{.set|#log|{.load|stunnel.log|from={.^#stunnel.last.}.}.}
{.set|#stunnel.last|{.filesize|stunnel.log.}.}
{.if|{.^#log.}|{:
{.add to log|.
Stunnel log :
{.^#log.}|Clblue.}
:}.}

[+start]
{.set|#stunnel.last|{.filesize|stunnel.log.}.}


2)

- In file stunnel.conf of the folder of stunnel.exe, specify the path of HFS where the file stunnel.log will be created.
(Debug = 6 gives a correct result)

; Some debugging stuff useful for troubleshooting
debug = 6
output = C:\path\of\hfs folder\stunnel.log


3)

- Enjoy HFS and Stunnel !  Smiley

----------------------------------------------------------------------------
Independently, you can add to the section [https] of stunnel.conf, the internal IP of your PC:

[https]
accept  = 0.0.0.0:443
connect = 127.0.0.1:44300

local =
192.168.1.6 *
TIMEOUTclose = 0

* IP example

Then you add in HFS:

Menu > Limits > Bans

\127.0.0.1;192.168.1.6

Then in Adress2name:

Name       IP Mask
Local        127.0.0.1
Stunnel
  192.168.1.6

This will differentiate in the log of HFS, the local connections (http), and the distant connections from Stunnel (https).
« Last Edit: March 04, 2010, 08:26:23 PM by SilentPliz » Logged
AvvA
Tireless poster
****
Offline Offline

France France

Posts: 135


View Profile
« Reply #19 on: June 12, 2009, 05:12:06 PM »

Well done !
Now, that's perfect !

Also, perhaps you could explain the ban rule, or at least what is representing 192.168.1.3, and the fact that in this case, only localhost and 192.168.1.3 could access the HFS site directly (via http).
« Last Edit: June 14, 2009, 06:59:29 AM by AvvA » Logged
Mark14
Guest


Email
« Reply #20 on: June 14, 2009, 12:56:30 AM »

This is an english forum.  Can somebody (silentplz, avva) translate the last 3 posts to english?  Thanks.
« Last Edit: June 15, 2009, 06:29:51 AM by Mars » Logged
rejetto forum
« Reply #20 on: June 14, 2009, 12:56:30 AM »

Do you like this software? Consider even $2
 Logged
SilentPliz
Operator
Insane poster
*****
Offline Offline

France France

Posts: 1023


....... chut ! shh!


View Profile WWW
« Reply #21 on: June 14, 2009, 01:46:58 AM »

   
Sorry dear Guest!

The Operator has censored himself, I deleted the posts in french language.

These were comments about my topic, which were easier to clarify in our common language.

The translation is therefore unnecessary.
« Last Edit: June 14, 2009, 06:07:54 AM by SilentPliz » Logged
michou
Guest


Email
« Reply #22 on: June 15, 2009, 06:50:27 AM »

Quote
This is an english forum.  Can somebody (silentplz, avva) translate the last 3 posts to english?  Thanks.

Me, I like it, that allows to familiarize us with the other languages.

In other, it is not a forum specially dedicated to the English language, I believe to remember that rejetto practise Italian marvelously (the Italian women also moreover Cheesy).

Mark14? Huh? Mmmmmmh! I indeed have the impression to recognize the voice of maverick behind this pseudo, I make a mistake or you are unmasked?

MAveRicK14

 Cheesy Cheesy
« Last Edit: June 15, 2009, 12:05:03 PM by SilentPliz » Logged
Pages: 1 [2]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines Valid XHTML 1.0! Valid CSS!


Google visited last this page February 05, 2012, 12:48:12 AM