Sudo pfctl -vnf /etc/pf.anchors/com.papercut Rdr pass on en1 inet proto tcp from any to any port 80 -> 127.0.0.1 port 9191 Rdr pass on en0 inet proto tcp from any to any port 80 -> 127.0.0.1 port 9191 Rdr pass on lo0 inet proto tcp from any to self port 80 -> 127.0.0.1 port 9191 Modify the /etc/pf.anchors/com.papercut file by adding the following lines: Mac OS X 10.10įrom Mac OS X 10.10, you must use the pfctl command to modify the Mac firewall. For Mac OS X 10.10 and later, the support for the IPFW firewall has been removed in favor of PF. The following information works for Mac OS X 10.10. With the release of Mac OS X 10.11 (El Capitan) and the inclusion of System Integrity Protection (SIP) modifications to /System/ are disabled by default and disabling this feature is not recommended. The approach on Mac systems is similar to Linux. When you are done, restart the Application Server. These commands would typically be placed in an rc init script or the iptables startup config script as provided by your distribution. p tcp -dport 443 -j REDIRECT -to-ports 9192 p tcp -dport 80 -j REDIRECT -to-ports 9191 sbin/iptables -t nat -I PREROUTING -src 0/0 -dst \ Consult your distribution’s documentation to see how to persist the iptables rules between system restarts: The following commands provide an example. To enable port 80 and 443, use iptables (or ipchains on old systems) to port-forward 80 to 9191 (HTTP) 9192/9195 (HTTPS). In line with security best practice, PaperCut runs as a non-privileged user. On Linux systems, only privileged programs that run as root can use ports under 1024. Test and ensure the web interface is working, for example, Linux An alternate option is to use kernel level TCP port redirection (for example, iptables). Some systems prevent non-root users from binding to ports lower than 1024. On Linux/Unix systems, the server runs under the privilege of a non-root account. If the client is installed locally on workstations, then change the config file on each workstation.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |