-
Notifications
You must be signed in to change notification settings - Fork 33
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
not quite working for me #2
Comments
Of course, when I disable csf and restart docker service, it works from both domain and 127.0.0.1. |
Hi Eddie, I tried to query a webpage using Could you try to remove the script csfpost.sh and see if it works. Thanks |
No, when I remove csfpost.sh and I restart csf, docker is not accessible at all (both domain and localhost). |
|
I just noticed that when I restart docker service, this line in iptables is different:
goes to:
And first line in POSTROUTING is added:
Smells like a clue. :) |
which version of docker do you use? |
Downgraded little because of docker cloud for which this is latest version ...
|
i see that you are using Weave. Maybe something with that? |
no, I even don't know what's that ... I think docker cloud uses that. Don't this means something like (not)127.0.0.0/8? DOCKER all -- 0.0.0.0/0 !127.0.0.0/8 ADDRTYPE match dst-type LOCAL |
i checked 2 of my servers and they both have that line. And not reporting prob. |
Interesting... and do you have this line in your servers? Chain OUTPUT (policy ACCEPT) |
i have the same as in your first output Chain OUTPUT (policy ACCEPT) |
Then I don't know. |
sure |
:) that was a question - what to send for you to check? I'm not sure. |
:) sorry, didnt catch that. access to the server :D |
:) anything else? |
verbose output of iptables:
output of docker: |
any thoughts? |
the output that you sent was with or without csfpost? |
Hi, did you had time to check this out? Just to remove it from the list... :) |
Hi Eddie, Let's try teamviewer (http://www.teamviewer.com/) so I can see your terminal. |
contact me by email |
Can't find one... I'm ready to accept connection now. :) |
do a git log on the clone of the repo |
Solved, I guess Julien will merge it in the script. |
I still have issues with csf even when I used this script, which helps with restarts of csf in most part.
The main issue for me is that I cannot access containers from localhost (centos) via "127.0.0.1". For example "curl 127.0.0.1:5432" just hangs. Everything works when accessing with domain name:port.
This is major issue for me, because I would like to set the access only to localhost and use subdomain forwarding to localhost so that ports are not directly accessible but only through subdomain which allows using basic auth and similar features.
I'm still not very handy with "ops" part of "devops", so I might be missing something obvious, sorry about that.
Any help solving this would be much appreciated.
Thanks,
Eddie
The text was updated successfully, but these errors were encountered: