PapaTramp/reverse-proxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(haproxy): Autodiscover на :80 и точный fail2ban для Zabbix

Browse Source 
Outlook при настройке ext.kalinamall.ru слал GET /autodiscover/autodiscover.xml на порт 80; старый fe_http_zabbix отвечал 403 всем не-zabbix Host, fail2ban банил клиента на сутки. fe_http проксирует Autodiscover на Exchange :80, 403 только для zabbix вне allowlist, ignoreregex для /autodiscover/.
This commit is contained in:
PTah
2026-06-20 16:58:09 +10:00
parent 900749457f
commit ade8e4cafa
7 changed files with 66 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/security/backend-hosts.md
+1
View File
@@ -16,6 +16,7 @@
| Git (Gitea) | 192.168.160.129 | 443 | be_git |
| SAC | 192.168.160.145 | 443 | be_sac |
| Zabbix | 192.168.160.53 | 80 | be_zabbix |
| Exchange (HTTP Autodiscover) | 192.168.160.42 | 80 | be_exchange_http |
| Synology heap | 192.168.160.185 | 5001 | be_syno_heap |
| Synology exchange | 192.168.160.35 | 5001 | be_syno_exchange |