Dear all,

we observed the following issue using Pound 2.6 with one https listener using a http backend. When the backend responds with a redirect (to itself), the https protocol is not rewritten. The reason lies in the fact that the dns entry of the virtual host points to an ipv6 and ipv4 address. Apparently the program chooses the ipv6 address (as it appears first), because of the lines 767-769 in svc.c .

     for(ap = chain; ap != NULL; ap = ap->ai_next)
            if(ap->ai_socktype == SOCK_STREAM)
                break;

The rewriting mechanism does not work correctly, because the listener and the backend run with ipv4. It would be great if pound supports this case: dns with ipv6, although pound does not run with ipv6.

Furthermore it would be great if the listener could be dual stack, but the backend only ipv4, with rewriting working correctly.

Best regards,

Christopher Bartz

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to