Bonjour,
J’ai plusieurs serveur ipsec et je n’arrive pas au bout a avoir l’ip publique du client cela me pose des souci pour avoir les stats sur les sites héberger sur apache
ipserveur > ipsec 10.10.9.1/24 10.9.141.1/24 < ipsec ipserveur
le pont ipsec marche bien
distant :
auto eth0:10
iface eth0:10 inet static
address 176.*.*.*
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A PREROUTING -d 176.*.*.* -j DNAT --to-destination 10.9.141.101
post-up iptables -t nat -A POSTROUTING -d 10.9.141.101 -j SNAT --to-source 10.10.27.101
home :
auto vmbr0
iface vmbr0 inet static
address 10.9.141.1/24
bridge-ports none
bridge-stp off
bridge-fd 0
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A POSTROUTING -s '10.9.141.0/24' -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '10.9.141.0/24' -j MASQUERADE
Apache/2.4.38 (Debian) Server at 176...* Port 80
[SERVER_SOFTWARE] => Apache/2.4.38 (Debian) [SERVER_NAME] => 176...* [SERVER_ADDR] => 10.9.141.101 [SERVER_PORT] => 80 [REMOTE_ADDR] => 10.10.27.101 [DOCUMENT_ROOT] => /var/www/html [REQUEST_SCHEME] => http [CONTEXT_PREFIX] => [CONTEXT_DOCUMENT_ROOT] => /var/www/html [SERVER_ADMIN] => webmaster@localhost [SCRIPT_FILENAME] => /var/www/html/test.php [REMOTE_PORT] => 60136 [GATEWAY_INTERFACE] => CGI/1.1 [SERVER_PROTOCOL] => HTTP/1.1 [REQUEST_METHOD] => GET [QUERY_STRING] => [REQUEST_URI] => /test.php [SCRIPT_NAME] => /test.php [PHP_SELF] => /test.php [REQUEST_TIME_FLOAT] => 1620211256.7014 [REQUEST_TIME] => 1620211256 ) [GLOBALS] => Array RECURSION [_REQUEST] => Array ( ) [_ENV] => Array ( ) ) L adresse IP de l utilisateur est : 10.10.27.101
Merci de vos lumières
