pmg reverse_proxy

[rickygm]

Hi , I am trying to put a reverse proxy with nginx in front of my pmg, I have it working halfway, if I already want to see the quarantine of a user it sticks, I cannot do searches , he stays searching .

upstream backend5 {

server 192.168.11.11:8006; ## pmg
keepalive 2;


}

location / {

proxy_http_version 1.1;

proxy_set_header Upgrade $http_upgrade;

proxy_set_header Connection "upgrade";

proxy_set_header Host $http_host;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;

proxy_set_header X-Forward-Proto http;

proxy_set_header X-Nginx-Proxy true;

proxy_buffering off;

client_max_body_size 0;

proxy_connect_timeout 3600s;

proxy_read_timeout 3600s;

proxy_send_timeout 3600s;

send_timeout 3600s;

proxy_pass https://backend5;


}


location ~ /proxmoxlib.js$|/favicon.ico$|/pve2/|/fontawesome/|/framework7/|/pwt/css/ {

proxy_pass https://backend5;


}


location /quarantine {

proxy_pass https://backend5;


}


location /api2 {

location ~ /api2/(extjs|json|htmlmail)/(access/ticket$|version$) {

proxy_pass https://backend5;


}


location ~ /api2/(extjs|json|htmlmail)/nodes/.+/subscription$ {


proxy_pass https://backend5;


}

location ~ /api2/(extjs|json|htmlmail)/quarantine {


proxy_pass https://backend5;

}


location ~* ^/pve2/(?<file>.*)$ {

gzip_static on;

root /usr/share/pve-manager;

try_files /$file backend5;

}
return 403;


}


}

any advice idea?

 

[aaron]

Do you have an adblocker running? Those usually recognize the tracking center falsely as advertisement.

 

[Stoiko Ivanov]

You can also compare with the proxy config which works and limits access to the quarantine interface only - https://pmg.proxmox.com/wiki/index....Mail_Gateway#Quarantine_Web_Interface_via_443

maybe you find a discrepancy

 

[rickygm]

Do you have an adblocker running? Those usually recognize the tracking center falsely as advertisement.

Hi , I don't have it, I think the problem is the reverse proxy configuration, in the logs I see that it makes a call to / api2

look the logs:

 [07/Jun/2020:17:24:28 -0600] "POST /api2/json/access/ticket HTTP/2.0" 200 502 "https://mspam.domain.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36"
 [07/Jun/2020:17:32:57 -0600] "GET /api2/extjs/version?_dc=1591572795449 HTTP/2.0" 200 76 "https://maspam.domain.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36"