HTTPS port forward



  • Hi all, Im new in pfsense, here is my case

    Im trying to forward port 443 (HTTPS) source from my machine (192.168.137.4) to (192.168.137.4) port 8080 manipulate the uri using python script and then send it to my upstream proxy (23.23.100.20:8080) , the figure just like this

    A : my machine (192.168.137.4)
    B : pfsense (192.168.137.1)
    C : upstream proxy (23.23.100.20:8080)

    A–->facebook.com:443--->pfsense--->A:6000---(manipulate uri)--->C--->pfsense--->WAN

    it's works well for http (port 80) since it just use the http host header to know the real host i want to connect and rewrite the uri (ex. GET http://foobar.com, instead of GET /), but for https there is no header, so how do my script that listen on port 6000 know what host is my machine want to connect?, if i used to read the source address in socket then it will read 192.168.137.1 and if i read it as destination it will read 192.168.137.4, is it possible when port forwarding not changing the source address or the destination address?, or it is possible to change the source address to facebook.com?


Log in to reply