Hello g00r00!
Thank you for your reply!
On 04 Jan 2023, g00r00 said the following...
g0> fTelnet should be responding to a SENDLOC request which allows Mystic to
g0> get the non-proxied IP address of the user. This is either not working
g0> or Mystic is accidentally not using that IP for web downloads which is
g0> highly possible.
Yes, it seems so. I have enabled the fTelnet SendLocation support (I'm using the
https://embed-v2.ftelnet.ca/ fTelnet Embed Wizard), but still see the proxy IP
instead of the client IP in the .dlreq data file.
A tcpdump with -XX -vvv shows that the real IP (188.149.153.205) appears to be
sent by the fTelnet proxy (if I interpret things correctly):
08:19:23.359427 IP (tos 0x0, ttl 64, id 60413, offset 0, flags [DF], proto TCP
(6), length 106)
glimmer.localdomain.61023 > 81-4-100-99.cloud.ramnode.com.32794: Flags [P.],
cksum 0x7771 (incorrect -> 0x8d1a), seq 119:173, ack 42, win 510, options
[nop,nop,TS val 1317211997 ecr 945308165], length 54
0x0000: 1831 bf65 a99c 94c6 91a0 202b 0800 4500 .1.e.......+..E.
0x0010: 006a ebfd 4000 4006 d77b c0a8 0105 5104 .j..@.@..{....Q.
0x0020: 6463 ee5f 801a ded2 6d09 f420 cc9f 8018 dc._....m.......
0x0030: 01fe 7771 0000 0101 080a 4e83 0f5d 3858 ..wq......N..]8X
0x0040: 4205 0d0a 4465 7465 6374 696e 6720 7465 B...Detecting.te
0x0050: 726d 696e 616c 2065 6d75 6c61 7469 6f6e rminal.emulation
0x0060: 3a20 1b5b 731b 5b32 3535 421b 5b32 3535 :..[s.[255B.[255
0x0070: 431b 5b36 6e1b 5b75 C.[6n.[u
08:19:23.386349 IP (tos 0x0, ttl 58, id 36065, offset 0, flags [DF], proto
TCP (6), length 70) 81-4-100-99.cloud.ramnode.com.32794 >
glimmer.localdomain.61023: Flags [P.], cksum 0x0c2b (correct), seq 42:60, ack
173, win 58, options [nop,nop,TS val 945308236 ecr 1317211997], length 18
0x0000: 94c6 91a0 202b 1831 bf65 a99c 0800 4500 .....+.1.e....E.
0x0010: 0046 8ce1 4000 3a06 3cbc 5104 6463 c0a8 .F..@.:.<.Q.dc..
0x0020: 0105 801a ee5f f420 cc9f ded2 6d3f 8018 ....._......m?..
0x0030: 003a 0c2b 0000 0101 080a 3858 424c 4e83 .:.+......8XBLN.
0x0040: 0f5d 3138 382e 3134 392e 3135 332e 3230 .]188.149.153.20
0x0050: 350a fff0 5...
So maybe Mystic doesn't pick this up, or doesn't use it for web downloads?
The node log shows:
------------------- Node 3 (Mystic v1.12 A48 2023/01/03)
2023.01.05 08:19:23 Connect from 81.4.100.99 (81-4-100-99.cloud.ramnode.com)
2023.01.05 08:19:23 Country: Netherlands
2023.01.05 08:19:23 Set time left 20
(By the way, maybe both the proxy IP and the real IP ought to be logged there
for troubleshooting? Just thinking aloud...)
Thanks again!
Best regards
Björn
--- Mystic BBS v1.12 A48 (Linux/64)
* Origin: Star Collision BBS, Uppsala, Sweden (2:201/137)
|
