Here comes the problem: Jitsi's 443/TCP connection is _NO_ http, so sophos WAF can't handle it. harvest.NAT_HARVESTER_PUBLIC_ADDRESS=Īnd comment the existing .STUN_MAPPING_HARVESTER_ADDRESSES.īe aware that Jitsi clients will try to fallback to 443/TCP if 10000/UDP is blocked. The following extra lines need to be added to the file /etc/jitsi/videobridge/sip-communicator.properties: org. Is Jitsi configured to know internal/external address? Read WAF with 80/TCP and 443/TCP should work at least for non restricted clients. You'll have to have a DNAT rule for 10000/UDP from external to your Jitsi server.
2020:10:25-16:34:33 gateway httpd: (70014)End of file found: AH01102: error reading status line from remote server JITSI_Internal_IP:443Ģ020:10:25-16:34:33 gateway httpd: AH00898: Error reading from remote server returned by /Ģ020:10:25-16:34:33 gateway httpd: id="0299" srcip="109.42.3.49" localip="WAN_IP" size="379" user="-" host="109.42.3.49" method="GET" statuscode="502" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipTFT, SkipURLHardening, SkipFormHardening, SkipFormHardeningMissingToken, SkipCookieSigning, SkipThreatsFilter" time="13423" url="/" server="" port="443" query="" referer="-" cookie="-" set-cookie="-" websocket_scheme="-" websocket_protocol="-" websocket_key="-" websocket_version="-" uid="X5WbCTLoppOChxHZZUspMwAAAKs"Ģ020:10:25-16:34:35 gateway httpd: (70014)End of file found: AH01102: error reading status line from remote server JITSI_Internal_IP:443, referer: Ģ020:10:25-16:34:35 gateway httpd: id="0299" srcip="109.42.3.49" localip="WAN_IP" size="0" user="-" host="109.42.3.49" method="GET" statuscode="200" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipTFT, SkipURLHardening, SkipFormHardening, SkipFormHardeningMissingToken, SkipCookieSigning, SkipThreatsFilter" time="12671" url="/favicon.ico" server="" port="80" query="" referer="" cookie="-" set-cookie="-" websocket_scheme="-" websocket_protocol="-" websocket_key="-" websocket_version="-" uid="X5WbCzLoppOChxHZZUspNAAAAKs"Ģ020:10:25-16:34:35 gateway httpd: AH00898: Error reading from remote server returned by /favicon.ico, referer: Ģ020:10:25-16:34:35 gateway httpd: id="0299" srcip="109.42.3.49" localip="WAN_IP" size="401" user="-" host="109.42.3.49" method="GET" statuscode="502" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipTFT, SkipURLHardening, SkipFormHardening, SkipFormHardeningMissingToken, SkipCookieSigning, SkipThreatsFilter" time="12732" url="/favicon.ico" server="" port="443" query="" referer="" cookie="-" set-cookie="-" websocket_scheme="-" websocket_protocol="-" websocket_key="-" websocket_version="-" uid="X5WbCzLoppOChxHZZUspNQAAAJ4"Ģ020:10:25-16:34:37 gateway httpd: id="0299" srcip="109.42.3.49" localip="WAN_IP" size="29" user="-" host="109.42.3.49" method="POST" statuscode="200" reason="-" extra="-" exceptions="-" time="5060770" url="/Microsoft-Server-ActiveSync" server="" port="443" query="?Cmd=Ping&User=frank&DeviceId=SEC1037E3C4CCECF&DeviceType=SamsungDevice" referer="-" cookie="-" set-cookie="-" websocket_scheme="-" websocket_protocol="-" websocket_key="-" websocket_version="-" uid="X5WbCDLoppOChxHZZUspMQAAALw"
0 kommentar(er)
