Dev/Port Redirection
From Whonix
< Dev
Install lighttpd.
sudo apt-get install lighttpd
It will by default listen on all interfaces. Check if that is true. Change IP to 10.152.152.11 for Non-Qubes-Whonix ™.
UWT_DEV_PASSTHROUGH=1 wget 10.137.6.41
Now make it listen on localhost only.
echo 'server.bind = "127.0.0.1"' | sudo tee -a /etc/lighttpd/lighttpd.conf
sudo service lighttpd restart
Should no longer be reachable. Try if that is true.
UWT_DEV_PASSTHROUGH=1 wget 10.137.6.41
Now try to set up a redirection from 10.137.6.41 to 127.0.0.1.
sudo sysctl -w net.ipv4.conf.all.route_localnet=1 sudo iptables -t nat -I PREROUTING -p tcp --dport 80 -j DNAT --to 127.0.0.1:80 #sudo iptables -t nat -I PREROUTING -p tcp --dport 17600:17650 -j DNAT --to 127.0.0.1:17600-17650 #sudo iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 80 #sudo iptables -t nat -A PREROUTING -p tcp --dport 17600 -j REDIRECT --to-port 17600
See if that works now.
UWT_DEV_PASSTHROUGH=1 wget 10.137.6.41
If not, unload firewall rules and try something else.
No comments for now due to spam. Use Whonix forums instead.
Please contribute by helping to answer Whonix questions.
Follow: Twitter | Facebook | gab.ai | Stay Tuned | Whonix News
This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to Conditions for Contributions to Whonix ™, then Edit! Edits are held for moderation.
Copyright (C) 2012 - 2019 ENCRYPTED SUPPORT LP. Whonix ™ is a trademark. Whonix ™ is a licensee of the Open Invention Network. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Freedom Software license as Whonix ™ itself. (Why?)
Whonix ™ is a derivative of and not affiliated with Debian. Debian is a registered trademark owned by Software in the Public Interest, Inc.
Whonix ™ is produced independently from the Tor® anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else.
By using our website, you acknowledge that you have read, understood and agreed to our Privacy Policy, Cookie Policy, Terms of Service, and E-Sign Consent. Whonix ™ is provided by ENCRYPTED SUPPORT LP. See Imprint.