Lost ip with port-share

faureaxe

Hello,

I am configuring an openvpn server on a debian server hosting several services (among which an apache2 web server).

In order to bypass restrictions on some networks, I setup openvpn so that it uses https port (443) and added port-share option to forward real https packets to apache2.

So I have something like :

port 443
[...]
port-share 127.0.0.1 4443
[...]

and my apache2 server is listening on port 4443.

Everything works fine but every https connection my apache server gets seems to be from 127.0.0.1. Information about real IP is lost.

My problem is that some services (such as phpmyadmin) usually uses

Require local

(in apache conf) as a security in order to prevent unauthorized connexion. With every https packets being flagged as local, this doesn't work anymore.

So here is my question, is it possible to use port sharing (or something similar) without loosing ip related data ?

Thank you !

PS. Sorry for my English, I am not a native speaker.

Traffic

Consider a second IP address:
Multiple IP addresses on One Interface

maikcat

--port-share host port [dir]
When run in TCP server mode, share the OpenVPN port with another application, such as an HTTPS server. If OpenVPN senses a connection to its port which is using a non-OpenVPN protocol, it will proxy the connection to the server at host:port.

You should find a different approach to your problem i am afraid...

Michael.