Resource Nginx Reverse Proxy + Mod Security WAF + fail2ban + geoip2 - XtreamUI | Streamcreed [Deleted]

[shitping]

hy mate how to use it i install it on new fresh ubuntu 20 and how to use it now ?

set up the rules you want on the reverse proxy and "set_real_ip_from" on your main server

 

[sbarboff]

install fresh ubuntu 20.04
chmod 755 install_proxy_new.sh
./install_proxy_new.sh


yes on main server need to add on nginx.conf:

set_real_ip_from your_ip_of_proxy_server;
ex:
set_real_ip_from 6.7.8.9;

 

[squallp]

Hello

I installed a proxy but I have a problem mpegts not working, hls is ok.Does anyone have this problem?

 

[goldenmedia]

Hello

I installed a proxy but I have a problem mpegts not working, hls is ok.Does anyone have this problem?

hy guys i have the same problem i dont know what to do maybe some help we paid much credits for it ! thanks

 

[shitping]

hy guys i have the same problem i dont know what to do maybe some help we paid much credits for it ! thanksin

It front of main it works fine, i diden test on a LB

 

[MasterBox]

work on ubuntu 18.04 ?

 

[squallp]

It front of main it works fine, i diden test on a LB

Tnx bro...When streams are on LB it works perfectly

work on ubuntu 18.04 ?

yes

 

[robertchas]

Should this work right after install? Or is there further configuration needed?

As not working after install.

 

[thugthug]

@sbarboff
Sorry, but when you have time, it would be nice to produce a quick install video on machines that already have a default xtream-ui main and loadbalancers.

I think it would help many peoples to clear their doubts, because there is a great fear of installing it in main and everything goes wrong haha.

 

[robertchas]

hy guys i have the same problem i dont know what to do maybe some help we paid much credits for it ! thanks

Im sure this gets installed on a vps, different server that point to main and hides ip as well as blocking ips etc

 

[sbarboff]

tested only for main server no lb.

 

[shitping]

Should this work right after install? Or is there further configuration needed?

As not working after install.

it works after install but you need to set the block rules you whant

 

[shitping]

@sbarboff
Sorry, but when you have time, it would be nice to produce a quick install video on machines that already have a default xtream-ui main and loadbalancers.

I think it would help many peoples to clear their doubts, because there is a great fear of installing it in main and everything goes wrong haha.

proxy is not for install on main, but on a vps in front of main

 

[robertchas]

it works after install but you need to set the block rules you whant

whilst installing it asks for proxy listening port? I put 80 I presume anything othe than that would need a url like url : port


Is everything defaulted as blocked? then

 

[shitping]

whilst installing it asks for proxy listening port? I put 80 I presume anything othe than that would need a url like url : port


Is everything defaulted as blocked? then

Only use the reverse proxy server to proxy and not to anything else

All country is block default, check the conf files all info what to do is in the conf files


- Nginx , Mod Security , Fail2ban , Mariadb for store ip banned ( next version whit webadmin ).
- Block User Agent -> /etc/nginx/useragent.rules
- Block ISP -> /etc/nginx/block_isp.conf
- Block ASN Number -> /etc/nginx/block_asn.conf
- Country Whitelist -> /etc/nginx/country_whitelist.conf ( Default block all country ) ( possibility to block for example US country but exclude some ip/range from US ( https://it.wikipedia.org/wiki/ISO_3166-1_alpha-2 )
- IP Whitelist for exclusion to req_limit zone -> /etc/nginx/ip_whitelist.conf
- SQL Injection prevention
- Ip Whitelist for exclusion to fail2ban -> /etc/fail2ban/jail.local find line :

[DEFAULT]
ignoreip = 127.0.0.1/8 10.0.0.0/8 192.168.0.0/16 172.16.0.0/16 add_ip_or_range_to_exclude_here

 

[robertchas]

Sorry not following you I thought this was to sit before main server so are you saying it needs to point to forward proxy sitting before the main server first

 

[shitping]

Sorry not following you I thought this was to sit before main server so are you saying it needs to point to forward proxy sitting before the main server first

Proxy reverse server (a small vps) that point to your main dedicated server. Proxy server and main server are 2 different servers.

 

[robertchas]

Proxy reverse server (a small vps) that point to your main dedicated server. Proxy server and main server are 2 different servers.

Yes I know this and I have installed it a small VPS and it's not working.

I should be able to connect to the main via the VPS but I can't.

I have configured as per the config files.

Does the proxy IP need to configured in nginx.conf on main server to allow it to access it?.

 

[cesarkrespo]

Yes I know this and I have installed it a small VPS and it's not working.

I should be able to connect to the main via the VPS but I can't.

I have configured as per the config files.

Does the proxy IP need to configured in nginx.conf on main server to allow it to access it?.

/etc/nginx/country_whitelist.conf:

example:

and restart nginx proxy vps

sudo service nginx restart

nginx main:

set_real_ip_from IP_PROXY;

restart services main

http://IP_PROXYORT

DONE

 

[shitping]

Yes I know this and I have installed it a small VPS and it's not working.

I should be able to connect to the main via the VPS but I can't.

I have configured as per the config files.

Does the proxy IP need to configured in nginx.conf on main server to allow it to access it?.

What your log say? is the listen port open on main ?

On main server you have to add "set_real_ip_from" in nginx.config

/home/xtreamcodes/iptv_xtream_codes/nginx/conf/nginx.conf
set_real_ip_from proxy.server.ip.here;