Proxied services open a file to download #461

Closed
opened 2025-11-13 12:01:17 -06:00 by GiteaMirror · 9 comments
Owner

Originally created by @wintech147 on GitHub (Jun 29, 2025).

Hello Pangolin fans and team!

Today I was on a different wifi at a family members house, so not a public wifi, and when I went to visit some of my self hosted apps that are behind Pangolin they loaded a blank page with a file to download that was empty. Even my Pangolin dashboard URL did the same thing.

I then switched my phone to cellular instead of wifi and the issue went away and everything worked fine. I have had this happen twice now and not sure what would cause that weird behavior. Any thoughts?

Big fan of Pangolin!
Nick

Originally created by @wintech147 on GitHub (Jun 29, 2025). Hello Pangolin fans and team! Today I was on a different wifi at a family members house, so not a public wifi, and when I went to visit some of my self hosted apps that are behind Pangolin they loaded a blank page with a file to download that was empty. Even my Pangolin dashboard URL did the same thing. I then switched my phone to cellular instead of wifi and the issue went away and everything worked fine. I have had this happen twice now and not sure what would cause that weird behavior. Any thoughts? Big fan of Pangolin! Nick
GiteaMirror added the stale label 2025-11-13 12:01:17 -06:00
Author
Owner

@oschwartz10612 commented on GitHub (Jun 30, 2025):

Hi Nick!

Thanks and strange issue! Do you have crowdsec installed by chance?

@oschwartz10612 commented on GitHub (Jun 30, 2025): Hi Nick! Thanks and strange issue! Do you have crowdsec installed by chance?
Author
Owner

@wintech147 commented on GitHub (Jun 30, 2025):

Hi @oschwartz10612 I know right? Very strange. And yes I do have crowdsec installed and running :) Could it be that blocking the access?

The part that makes this hard to troubleshoot too is it's not all wifi connections. I've only had it happen twice since I deployed Pangolin about a month ago. One being a family members home wifi (with no special configs or homelab like setup just normal ISP provided internet) and one public wifi.

And since you mentioned crowdesc, I just looked at my history and see an IP address I think is my family members, need to confirm, but it was at the same time and based on IP Info is a range owned by their ISP and in the area. But my understanding was that you would get a landing page error not a blank download. Am I wrong there?

@wintech147 commented on GitHub (Jun 30, 2025): Hi @oschwartz10612 I know right? Very strange. And yes I do have crowdsec installed and running :) Could it be that blocking the access? The part that makes this hard to troubleshoot too is it's not all wifi connections. I've only had it happen twice since I deployed Pangolin about a month ago. One being a family members home wifi (with no special configs or homelab like setup just normal ISP provided internet) and one public wifi. And since you mentioned crowdesc, I just looked at my history and see an IP address I think is my family members, need to confirm, but it was at the same time and based on IP Info is a range owned by their ISP and in the area. But my understanding was that you would get a landing page error not a blank download. Am I wrong there?
Author
Owner

@Tuphal commented on GitHub (Jul 1, 2025):

I have the same "issue", when the IP is blocked by crowdsec.
I had no time to digg in the issue to get a proper error page instead of the download

@Tuphal commented on GitHub (Jul 1, 2025): I have the same "issue", when the IP is blocked by crowdsec. I had no time to digg in the issue to get a proper error page instead of the download
Author
Owner

@Tuphal commented on GitHub (Jul 3, 2025):

It seems the issue was not beeing blocked, but beeing forced to use a captcha (in the blocklist setting).
I now configured using captchas in cloudflare/crowdsec/traefik according to this good manual (starting line 288):
https://gist.github.com/oidebrett/b9483edf0d8e9e79c536b7eb816c312f

Works now perfectly

@Tuphal commented on GitHub (Jul 3, 2025): It seems the issue was not beeing blocked, but beeing forced to use a captcha (in the blocklist setting). I now configured using captchas in cloudflare/crowdsec/traefik according to this good manual (starting line 288): [https://gist.github.com/oidebrett/b9483edf0d8e9e79c536b7eb816c312f](https://gist.github.com/oidebrett/b9483edf0d8e9e79c536b7eb816c312f) Works now perfectly
Author
Owner

@wintech147 commented on GitHub (Jul 3, 2025):

@Tuphal thanks for sharing what worked for you! Shouldn't this have been setup by the installer for Pangolin when opting in for Crowdsec? Did you setup crowdsec outside of the installer following that guide or did you just make modifications to what Pangolin setup?

@wintech147 commented on GitHub (Jul 3, 2025): @Tuphal thanks for sharing what worked for you! Shouldn't this have been setup by the installer for Pangolin when opting in for Crowdsec? Did you setup crowdsec outside of the installer following that guide or did you just make modifications to what Pangolin setup?
Author
Owner

@oschwartz10612 commented on GitHub (Jul 3, 2025):

Yeah if you dont have the captcha turned on because you used the installer that might not be it but it is a good thing to check and keep in mind.

I think you can see some instructions about banning and unbanning on this page: https://plugins.traefik.io/plugins/6335346ca4caa9ddeffda116/crowdsec-bouncer-traefik-plugin

Could you try to make sure your IPs are not banned and see if it helps?

@oschwartz10612 commented on GitHub (Jul 3, 2025): Yeah if you dont have the captcha turned on because you used the installer that might not be it but it is a good thing to check and keep in mind. I think you can see some instructions about banning and unbanning on this page: https://plugins.traefik.io/plugins/6335346ca4caa9ddeffda116/crowdsec-bouncer-traefik-plugin Could you try to make sure your IPs are not banned and see if it helps?
Author
Owner

@wintech147 commented on GitHub (Jul 4, 2025):

got it. I'll have to go back to my family members house and see if I can replicate the issue and then make adjustments from there. Or I guess I could add my public IP to the ban list temporarily for testing and see how that looks. I'll try to do that this weekend.

@wintech147 commented on GitHub (Jul 4, 2025): got it. I'll have to go back to my family members house and see if I can replicate the issue and then make adjustments from there. Or I guess I could add my public IP to the ban list temporarily for testing and see how that looks. I'll try to do that this weekend.
Author
Owner

@github-actions[bot] commented on GitHub (Jul 19, 2025):

This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.

@github-actions[bot] commented on GitHub (Jul 19, 2025): This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.
Author
Owner

@wintech147 commented on GitHub (Jul 21, 2025):

Just wanted to add that I solved my issue by manually adding the captcha lines from https://docs.fossorial.io/Community%20Guides/crowdsec and using the captcha html template to my instance and things now work as expected. :)

@wintech147 commented on GitHub (Jul 21, 2025): Just wanted to add that I solved my issue by manually adding the captcha lines from https://docs.fossorial.io/Community%20Guides/crowdsec and using the captcha html template to my instance and things now work as expected. :)
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#461