connect() failed (1: Operation not permitted) while connecting to upstream

andrey at mail.anti-aging-drugs.com andrey at mail.anti-aging-drugs.com
Sun Jul 27 10:03:47 MSD 2008


Здравствуйте, Igor.

Наблюдается та же проблема. Стоит отключить pf - все работает без
проблем. Убрал keep state везде -- не помогло.

Конфиг pf:

pass  in  proto tcp from any to any port 80
pass  in  proto tcp from 127.0.0.1 to port 9000
pass  in  proto tcp from 127.0.0.1 to port 25
pass  in  proto tcp from 127.0.0.1 to port 3306
pass  in  proto icmp from 213.186.114.123 to any
pass in proto {tcp, udp} from ****  to any port 22
pass in proto {tcp, udp} from ****  to any port 22
pass out all
block from <badhosts> to any

Вы писали Friday, May 16, 2008, 3:56:20 PM:

> On Fri, May 16, 2008 at 03:05:33PM +0300, Vladimir Rekshta wrote:

>> используется pf с такими правилами:
>> 
>> pass in quick on $ext_if proto tcp from < > to { }  port  {  } flags S/SA
>> modulate state

> Нужно убрать modulate и keepstate между nginx'ом и бэкендами.





-- 
С уважением,
 Andrey                          mailto:andrey at mail.anti-aging-drugs.com






More information about the nginx-ru mailing list