Hidden service, Apache and Whonix wiki related questions.

[Patrick]

@HulaHoop

@Patrick Can socat be used here for all WS software, where users can just bind to localhost and expect it to route packets to the GW?

@Temple

When I make a dummy post on said forum it shows the whonix internal 10.152.152.10 i.p instead of 127.0.0.1, is this common practice for a forum running a server behind a Whonix workstation or have I configured something innocently?

It’s not catastrophic, but also not great since this points to Whonix.

Socat could help indeed. Bind the server to 127.0.0.1 only. Then try using socat to redirect from Whonix-Workstation localhost to Whonix-Gateway. Try the following. Untested.

GATEWAY_IP=10.152.152.10
socat TCP-LISTEN:80,fork TCP:$GATEWAY_IP:80

socat port redirection will become more convenient in Whonix 14.

• https://phabricator.whonix.org/T464
• anon-ws-disable-stacked-tor/etc/anon-ws-disable-stacked-tor.d/30_anon-dist.conf at master · Whonix/anon-ws-disable-stacked-tor · GitHub

Then you can add your socat line simply to /etc/anon-ws-disable-stacked-tor.d configuration folder.