Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

اشکال در سرور ایران در حالت multiport #340

Open
mshahr1 opened this issue Apr 30, 2024 · 1 comment
Open

اشکال در سرور ایران در حالت multiport #340

mshahr1 opened this issue Apr 30, 2024 · 1 comment

Comments

@mshahr1
Copy link

mshahr1 commented Apr 30, 2024

سلام. وقتی حالت مولتی پورت روی سرور ایران ست میشه یه پورت رندوم جهت فروارد باقی پورتها به اون پورت به صورت رندوم تعریف میشه...
حالا اگه فاریروال روشن باشه و اون پورت تعریف نشده باشه اتصال سرور خارج برقرار نمیشه...
اول اینکه این پورت روی خود ای پی استاتیک سرور هم قابل دسترسیه و میتونه فقط به صورت لوکال تو اسکریپت تعریف بشه... دوم اینکه فایروال سرور ایران حتما یا باید دیسابل بشه یا هر بار با تایمر کانکشن دوباره پورت رندوم تو فایروال تعریف بشه.

@mshahr1
Copy link
Author

mshahr1 commented Apr 30, 2024

When multiport mode is enabled on the Iran server, a random port is defined to forward the remaining ports to that port randomly.

If the firewall is enabled and this port is not defined, the external server connection will not be established.

Here's a more detailed explanation:

Port Accessibility: The random port selected for forwarding is accessible on the server's static IP address as well. However, it can only be defined locally within a script.

Firewall Implications: Enabling the firewall on the Iran server prevents external connections from reaching the server. To address this, you have two options:

Disable Firewall: Disabling the firewall completely will allow external connections to reach the server, but it also exposes the server to potential security risks.

Dynamic Port Definition: Alternatively, you can dynamically define the random port in the firewall each time a connection is established. This approach provides a balance between security and connectivity.

Recommendation:

For enhanced security, it's recommended to utilize a dynamic port definition approach. This method maintains external access while minimizing security vulnerabilities.

Additional Notes:

The use of a static IP address simplifies port definition and management.

Implementing a script to handle dynamic port definition can automate the process.

Regularly reviewing firewall rules and security configurations is crucial for maintaining a secure server environment.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant