Source IP in Status WEBpage

2022-06-08 Thread Henning Svane
Hi In PFsense implementation of HAProxy it is possible to see who, with there IP number, are sending traffic through the loadbalancer. How can I do the same. I have look at there autogenerated configuration, but cannot get the same to work under HAproxy under Ubunutu. I am using HAProxy

SV: SV: Traffic from HAproxy get error 401 and 500

2022-06-03 Thread Henning Svane
Hi Baptiste Fantastic it works.:-) All the strange Exchange errors solved with 3 lines deleted:-) Thanks Regards Henning Fra: Baptiste Sendt: 3. juni 2022 08:43 Til: Henning Svane Cc: Christopher Faulet ; haproxy@formilux.org Emne: Re: SV: Traffic from HAproxy get error 401 and 500 Hi

SV: Traffic from HAproxy get error 401 and 500

2022-06-01 Thread Henning Svane
debug.txt which are the output from haproxy -d whenI try to open Outlook. There are some errors but I do not what they mean. Regards Henning Fra: Baptiste Sendt: 1. juni 2022 07:57 Til: Henning Svane Cc: haproxy@formilux.org Emne: Re: Traffic from HAproxy get error 401 and 500 On Mon, May

Traffic from HAproxy get error 401 and 500

2022-05-30 Thread Henning Svane
Hi I have a strange problem. I have a HAProxy with 2 NICs NIC 1 VLAN 110 HAProxy have IP 10.40.152.10/28 NIC 2 VLAN 120 HAProxy have IP 10.40.252.10/28 is also the VLAN for Exchange server IP 10.40.252.11/28 I have a outlook client in VLAN 100 10.40.2.1/24 I have 2 cases for testing: Case 1:

VS: HAproxy reset TLS connection (Solved)

2022-05-02 Thread Henning Svane
Hi Solved! I found out what was the problem. Exchange server 2019 do not use HTTP/2 only 1.1. And I specified alpn h2 this was the problem not a certificate error. But as the error do not says what is wrong it can be difficult to find out. The way I found out was by using this program as a

HAproxy reset TLS connection

2022-05-02 Thread Henning Svane
Hi I am still trying to get TLS to work, but with so far no luck. Haproxy: fc00:::##61::11 Server: fc00:::##22::11 (Exchange server) When I run my mini HAProxy test script, HAproxy close the connection with Encryption Alert or as it shows in the log file:

PEM Certificates for HAproxy

2022-04-29 Thread Henning Svane
Hi I have tried to build a PEM Certificate, but with no luck. What should it include and in which order? The PEM file from the Exchange Server include Attributes blocks, should these been removed from the Private PEM file? Here are all the certificates I have Also from DigiCert which

write to log file

2022-04-12 Thread Henning Svane
Hi My configuration do not do what I thought it should do, so I would like to debug it. Old school with "print" commands of acl's, but I cannot find a method to do that. Is it possible and if so what is the command. Regards Henning

SV: Incompatible with 'frontend http-request header rule'

2022-03-03 Thread Henning Svane
dt: 2. marts 2022 09:06 Til: haproxy@formilux.org Emne: Re: Incompatible with 'frontend http-request header rule' Le 3/1/22 à 22:00, Henning Svane a écrit : > http-request track-sc0 src table table_login_limiter if { url_beg > /login } { status 401 } > > http-request tarpit deny_st

Incompatible with 'frontend http-request header rule'

2022-03-01 Thread Henning Svane
Hi I am trying to make a configuration that counts missed login attempts and block after 10 attempts in 60 sec. The following example are accepted, but with a warning. It looks like the configuration will not work as keyword 'status' is incompatible with 'frontend http-request header rule' I

SV: SV: Troubles with AND in acl

2022-01-06 Thread Henning Svane
of unnecessary test. Also will a http-request tarpit if { var(txn.xmail_eas ) -m bool } Work like a return so it exit from the frontend? Regards Henning -Oprindelig meddelelse- Fra: Tim Düsterhus Sendt: 2. januar 2022 17:04 Til: Henning Svane ; Aleksandar Lazic ; haproxy@formilux.org Emne: Re

SV: Troubles with AND in acl

2022-01-02 Thread Henning Svane
ags= none : mode=TCPside=FE|BE mux=PASS flags=NO_UPG Available services : prometheus-exporter Available filters : [SPOE] spoe [CACHE] cache [FCGI] fcgi-app [COMP] compression [TRACE] trace Regards Henning -Oprindelig meddel

Troubles with AND in acl

2022-01-01 Thread Henning Svane
Hi I have used it for some time in PFsense, but know made a Linux installation and now the configuration give me some troubles. What have I done wrong here below? As I cannot see what I should have done different, but sudo haproxy -c -f /etc/haproxy/haproxy01.cfg gives the following errors