Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    HTTPS port forward

    Scheduled Pinned Locked Moved NAT
    1 Posts 1 Posters 911 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B Offline
      bijomaru
      last edited by

      Hi all, Im new in pfsense, here is my case

      Im trying to forward port 443 (HTTPS) source from my machine (192.168.137.4) to (192.168.137.4) port 8080 manipulate the uri using python script and then send it to my upstream proxy (23.23.100.20:8080) , the figure just like this

      A : my machine (192.168.137.4)
      B : pfsense (192.168.137.1)
      C : upstream proxy (23.23.100.20:8080)

      A–->facebook.com:443--->pfsense--->A:6000---(manipulate uri)--->C--->pfsense--->WAN

      it's works well for http (port 80) since it just use the http host header to know the real host i want to connect and rewrite the uri (ex. GET http://foobar.com, instead of GET /), but for https there is no header, so how do my script that listen on port 6000 know what host is my machine want to connect?, if i used to read the source address in socket then it will read 192.168.137.1 and if i read it as destination it will read 192.168.137.4, is it possible when port forwarding not changing the source address or the destination address?, or it is possible to change the source address to facebook.com?

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.