soucis avec https ( tcp 443 )
bonjour,
j'ai un problème avec mon serveur pour établir une connexion ssl
j'utilise ces règles iptables :
grep 443 iptables.up.rules
-A INPUT -p tcp --dport 443 -j ACCEPT
grep 443 ip6tables.up.rules
-A INPUT -p tcp --dport 443 -j ACCEPT
la preuve :
curl -I http://localhost:443
curl: (7) Failed to connect to localhost port 443: Connexion refusée
la même commande avec le port 80
curl -I http://localhost:80
HTTP/1.1 200 OK
Date: Tue, 12 Sep 2017 15:19:28 GMT
Server: Apache/2.4.27 (Debian)
Last-Modified: Thu, 17 Aug 2017 06:24:32 GMT
ETag: "2537-556ed10cf57fa"
Accept-Ranges: bytes
Content-Length: 9527
Vary: Accept-Encoding
Content-Type: text/html
sources des règles :
http://formation-debian.via.ecp.fr/fichiers-config/ip6tables.up.rules
http://formation-debian.via.ecp.fr/fichiers-config/iptables.up.rules
je n'y comprend plus rien
si quelqu'un pourrais éclairer ma lanterne
j'ai fait un iptable-apply et rien n'y fait
slt
bernard
# Generated by iptables-save v1.6.1 on Tue Sep 12 17:07:43 2017
*security
:INPUT ACCEPT [27755:14873747]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [26946:27875150]
COMMIT
# Completed on Tue Sep 12 17:07:43 2017
# Generated by iptables-save v1.6.1 on Tue Sep 12 17:07:43 2017
*raw
:PREROUTING ACCEPT [27755:14873747]
:OUTPUT ACCEPT [26946:27875150]
COMMIT
# Completed on Tue Sep 12 17:07:43 2017
# Generated by iptables-save v1.6.1 on Tue Sep 12 17:07:43 2017
*nat
:PREROUTING ACCEPT [47:3618]
:INPUT ACCEPT [47:3618]
:OUTPUT ACCEPT [84:9370]
:POSTROUTING ACCEPT [84:9370]
COMMIT
# Completed on Tue Sep 12 17:07:43 2017
# Generated by iptables-save v1.6.1 on Tue Sep 12 17:07:43 2017
*mangle
:PREROUTING ACCEPT [27755:14873747]
:INPUT ACCEPT [27755:14873747]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [26946:27875150]
:POSTROUTING ACCEPT [26948:27876194]
COMMIT
# Completed on Tue Sep 12 17:07:43 2017
# Generated by iptables-save v1.6.1 on Tue Sep 12 17:07:43 2017
*filter
:INPUT ACCEPT [27755:14873747]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [26946:27875150]
:f2b-sshd - [0:0]
-A INPUT -p tcp -m multiport --dports 22 -j f2b-sshd
-A f2b-sshd -j RETURN
COMMIT
# Completed on Tue Sep 12 17:07:43 2017
Reply to: