SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-06-11 01:41:55 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

Peer's port 80 and 443 blocked #1488

New Issue
Open
opened 2025-11-20 05:31:34 -05:00 by saavagebueno · 9 comments
saavagebueno commented 2025-11-20 05:31:34 -05:00
Owner
Copy Link

Originally created by @pinionless on GitHub (Dec 10, 2024).

Originally assigned to: @nazarewk on GitHub.

This issue is closed, but was not fixed.
https://github.com/netbirdio/netbird/issues/2701
The ports are still blocked.

I route this network 192.168.1.0/24 via netbird.

I can not access 80 and 443 on the machine with netbird installed on 192.168.1.10
But I can access 80 and 443 on other machines inside this network.

Downgraded to 0.29.4 for now.

Originally created by @pinionless on GitHub (Dec 10, 2024). Originally assigned to: @nazarewk on GitHub. This issue is closed, but was not fixed. https://github.com/netbirdio/netbird/issues/2701 **The ports are still blocked.** I route this network 192.168.1.0/24 via netbird. I can not access 80 and 443 on the machine with netbird installed on 192.168.1.10 But I can access 80 and 443 on other machines inside this network. Downgraded to 0.29.4 for now.
saavagebueno added the triage-needed label 2025-11-20 05:31:34 -05:00
saavagebueno commented 2025-11-20 05:31:34 -05:00
Author
Owner
Copy Link

@nimdasx commented on GitHub (Jan 16, 2025):

Confirmed: This issue persists in version 0.35.2, any docker external port can't accessible

@nimdasx commented on GitHub (Jan 16, 2025): Confirmed: This issue persists in version 0.35.2, any docker external port can't accessible
saavagebueno commented 2025-11-20 05:31:34 -05:00
Author
Owner
Copy Link

@lixmal commented on GitHub (Jan 17, 2025):

Hey folks,

Can you try the binary (on the bottom) from this PR: https://github.com/netbirdio/netbird/actions/runs/12832923467, to see if it fixes the issue for you?

@lixmal commented on GitHub (Jan 17, 2025): Hey folks, Can you try the binary (on the bottom) from this PR: https://github.com/netbirdio/netbird/actions/runs/12832923467, to see if it fixes the issue for you?
saavagebueno commented 2025-11-20 05:31:34 -05:00
Author
Owner
Copy Link

@nimdasx commented on GitHub (Jan 20, 2025):

Hi, I've tested version 0.36.2-SNAPSHOT-b0c8124a and 0.36.5. Docker container ports are still blocked.

@nimdasx commented on GitHub (Jan 20, 2025): Hi, I've tested version 0.36.2-SNAPSHOT-b0c8124a and 0.36.5. Docker container ports are still blocked.
saavagebueno commented 2025-11-20 05:31:34 -05:00
Author
Owner
Copy Link

@nimdasx commented on GitHub (Feb 24, 2025):

The problem still exists in version 0.37.1

@nimdasx commented on GitHub (Feb 24, 2025): The problem still exists in version 0.37.1
saavagebueno commented 2025-11-20 05:31:34 -05:00
Author
Owner
Copy Link

@artivis commented on GitHub (Mar 14, 2025):

This seems to still be a problem 0.38.0

@artivis commented on GitHub (Mar 14, 2025): This seems to still be a problem 0.38.0
saavagebueno commented 2025-11-20 05:31:35 -05:00
Author
Owner
Copy Link

@nazarewk commented on GitHub (Mar 17, 2025):

Could you give us more details on the issue?

  1. What operating system are you running on client and the forwarder?
  2. Do you have IP forwarding enabled? see https://docs.netbird.io/how-to/troubleshooting-client#can-a-routing-peer-peer-b-forward-traffic-to-srv-c
  3. Did you try different client machines?
  4. Are you sure your operating system's firewall is not interfering with packet forwarding?
  5. Do you have a bidirectional ACL policy? see https://docs.netbird.io/how-to/configuring-routes-with-access-control#behavior-changes-in-version-0-30-0
  6. Is it possible to replicate the issue on a fresh setup? Can you share the steps?
@nazarewk commented on GitHub (Mar 17, 2025): Could you give us more details on the issue? 1. What operating system are you running on client and the forwarder? 2. Do you have IP forwarding enabled? see https://docs.netbird.io/how-to/troubleshooting-client#can-a-routing-peer-peer-b-forward-traffic-to-srv-c 2. Did you try different client machines? 3. Are you sure your operating system's firewall is not interfering with packet forwarding? 4. Do you have a bidirectional ACL policy? see https://docs.netbird.io/how-to/configuring-routes-with-access-control#behavior-changes-in-version-0-30-0 5. Is it possible to replicate the issue on a fresh setup? Can you share the steps?
saavagebueno commented 2025-11-20 05:31:35 -05:00
Author
Owner
Copy Link

@artivis commented on GitHub (Apr 2, 2025):

Sorry for the late reply,

  1. Ubuntu (22.04/24.04)
    2/3/4. yes
  2. There was the default all to all . I did try to add a network route and associated ACL but not luck.
  3. Nop I can't share that specific setup at the moment. But it is somewhat similar to those described in other issues: a containerized reverse proxy listen to port 80 and forwards to different service in a k8s subnet.

It is definitely related to the changes introduced in 0.30.x, and setting up a network route + acl doesn't fix it.
Similarly to others, I reverted to 0.29.x which works just fine.

@artivis commented on GitHub (Apr 2, 2025): Sorry for the late reply, 1. Ubuntu (22.04/24.04) 2/3/4. yes 5. There was the default all to all . I did try to add a network route and associated ACL but not luck. 6. Nop I can't share that specific setup at the moment. But it is somewhat similar to those described in other issues: a containerized reverse proxy listen to port 80 and forwards to different service in a k8s subnet. It is definitely related to the changes introduced in 0.30.x, and setting up a network route + acl doesn't fix it. Similarly to others, I reverted to 0.29.x which works just fine.
saavagebueno commented 2025-11-20 05:31:35 -05:00
Author
Owner
Copy Link

@nazarewk commented on GitHub (Apr 2, 2025):

Could you try setting the same up with a Network Resource instead of the Network Route?

@nazarewk commented on GitHub (Apr 2, 2025): Could you try setting the same up with a Network Resource instead of the Network Route?
saavagebueno commented 2025-11-20 05:31:35 -05:00
Author
Owner
Copy Link

@nimdasx commented on GitHub (Apr 23, 2025):

tested in version 0.41.3 its worked! thanks

@nimdasx commented on GitHub (Apr 23, 2025): tested in version 0.41.3 its worked! thanks
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label triage-needed
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#1488
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?