issue with nxproxy

[killmasta93]

Hi
I was wondering if someone could shed some light,
Currently i have nxfilter installed on docker, and trying to install nxproxy on a windows machine, and i put the server IP which has the docker 192.168.7.89 and my windows machine another IP, i can ping it and access the webGUI so there is no issue on network
but when i try test im getting this error see picture

Thank you

[support200]

You need to change Login Token to yours. Login Token is a user property. You can see it when you go to an edit page of a user.

[killmasta93]

Hi thanks for the reply, so i created the user with his login token but i keep getting the error
i was checking the logs on the server side and i see this

RHr, Login disabled for remote user! client IP = 192.168.21.45.

[support200]

Did you enable User Autentication on 'System > Setup'? If you already did it, look into /nxfilter/log/nxfilter.log when you do the test. You may need to enable debugging for NxFilter. https://tutorial.nxfilter.org/i-faq.php#enable-debug

[killmasta93]

awsome that did the trick didnt know i had to check mark thank you again

[killmasta93]

Hi @support200
I was wondering if you can shed some light, so currently everything was working with the internal IP, now i need to expose the website, which im trying to do with a revese proxy


but im having an issue, enabled the DEBUG mode on the server to see because on the client im putting the URL to point to nxfilter server


which im seeing these logs nxfilter

| INFO [08-26 18:20:34] - MHMr, Stats, reqCnt = 1, blockCnt = 0, domainCnt = 1, userCnt = 1, tokenNameCnt = 1, cltIpCnt = 1, malwareCnt = 0, fwdErrCnt = 0, domainTestCnt = 0, xUserCnt = 0, xIpCnt = 0, xReqCnt = 0.
nxfilter | INFO [08-26 18:20:34] - MHMr, Cache size = 10|0|0.
nxfilter | DEBUG [08-26 18:20:48] - HxListener.doGet, cltIp = 192.168.7.147, domain = ping.signal.nxfilter.org, token = 4U1TEBFB, uname = Administrador, action = HX.
nxfilter | DEBUG [08-26 18:20:48] - RpCQ, Parsing custom query, HX|ping.signal.nxfilter.org|4U1TEBFB|Administrador |192.168.7.147
nxfilter | DEBUG [08-26 18:20:48] - RR, Custom query parsed.
nxfilter | DEBUG [08-26 18:20:48] - RHr, RH #4, ping.signal.nxfilter.org, rqSize = 0, rDc = 1, rTtl = 0, rType = 1, cltIp = 192.168.7.147.
nxfilter | DEBUG [08-26 18:20:48] - RequestHandler.findRemoteUser, Trying to find a remote user for ping.signal.nxfilter.org.
nxfilter | DEBUG [08-26 18:20:48] - RequestHandler.findRemoteUser, Found a remote user by token, test.
nxfilter | DEBUG [08-26 18:20:48] - LogFacade.addSignal1, 0|ping.signal.nxfilter.org|192.168.7.147|test_admi nistrador|||anon-grp|0|1||
nxfilter | INFO [08-26 18:21:00] - LWf, logAll.logCnt = 1, logAll.signalCnt = 1, logAll.flowCnt = 0, logAll.recvFlow = 0.

i also opened the ports




Thank you

[support200]

What do you mean by URL? You are supposed to use an IP or domain there. Try IP and see if it's working and then domain. If your domain doesn't work thry to ping it on cmd.

[support200]

You also need to open TCP/443.

[killmasta93]

Thank you so much for the reply, whats odd is that it works the blocking,

currently this is what i have

192.168.7.147 192.168.7.89
nginx proxy---------nxfilter using port 8282

the NGINX proxy which has the SSL and is using 443 revese proxy into nxfilter 8282


i also tried IP same issue

very odd because on the logs it shows ping successful

[support200]

I guess your DNS working and blocking working with NxProxy. Then what's not working and why do you need Reverse Proxy here?

If anything not working with NxProxy, it's about domain resolving. NxProxy doesn't block other traffic than UDP/53.

[killmasta93]

Oh gotcha, as i currently using reverse proxy to expose the port 443 but i guess if its working i guess i could leave it alone thank you again

[killmasta93]

hi so it seems i might found the issue just cant seem to solve it currently when i tries to ping it

"GET /hxlistener?action=HX&token=C7AP1HBX&domain=ping.signal.nxfilter.org HTTP/1.1" 301 162 "-" "-"

i tried on nginx to pass though

location /hxlistener {
rewrite ^/hxlistener(.*)$ $1 break;
set $upstream_port 8282;
set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}

   location / {
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        set $upstream_app 192.168.7.89;
        set $upstream_port 8282;
        set $upstream_proto http;
        proxy_pass $upstream_proto://$upstream_app:$upstream_port;

    }

but no luck so far

[support200]

So, it's like when NxProxy outisde your local network and try to access NxFilter inside the network, the HTTPS traffic needs to go through your NGINX reverse proxy? Don't know if it works. Too much complicated. You could run NxFilter on cloud for NxProxy users. Might be easier.