[stunnel-users] No DNS lookup?

Wed Jan 21 09:52:34 CET 2015

Thanks Ludolf and Dmitry for replying. 
@Ludolf, I know what an IP adress is. It's just that it's not allowed by the host to connect on their IP. 
@Dmitry, I tried putting the SNI settings in the config file, but it didn't resolve our problem. 
This is whats in our stunnel log file: 
2015.01.21 09:30:00 LOG5[4684]: Service [ SERVICENAME ] accepted connection from 'INTERNAL-IP:PORT'2015.01.21 09:30:00 LOG5[4684]: s_connect: connected 'EXTERNAL-IP:PORT'2015.01.21 09:30:00 LOG5[4684]: Service [ SERVICENAME  ] connected remote server from 'INTERNAL-IP:PORT'2015.01.21 09:30:00 LOG5[4684]: Connection closed: 251 byte(s) sent to SSL, 188 byte(s) sent to socket
The response from the host is: "403 Forbidden</h1> Request forbidden by administrative rules."
Their support states it's because we are connecting to 'EXTERNAL-IP:PORT' and not 'SOMETHING.HOST.COM' .
Thanks again,
Colin

> From: gromovd at gmail.com
> Date: Tue, 20 Jan 2015 20:50:37 -0500
> CC: stunnel-users at stunnel.org
> Subject: Re: [stunnel-users] No DNS lookup?
> 
> Hi
> 
> On Tue, Jan 20, 2015 at 3:45 PM, Ludolf Holzheid
> <lholzheid at bihl-wiedemann.de> wrote:
> >
> > > The support on the host we are
> > > trying to reach states to following:
> > >
> > > It really sounds like the stunnel is not connecting to "something.host.com"
> > > but perhaps to the IP address behind it?
> >
> 
> This sounds like they need SNI to be passed properly.
> Try adding SNI = something.host.com in your client section.
> 
> Dmitry
> 
> -- 
> //DG LOC(NJ)
> //*
> _______________________________________________
> stunnel-users mailing list
> stunnel-users at stunnel.org
> https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20150121/ca24b138/attachment.html>