Problem ip limitation when usuing tunnel server from iran to eu server

[eri1374]

Welcome

• Yes, I'm using the latest major release. Only such installations are supported.
• Yes, I'm using the supported system. Only such systems are supported.
• Yes, I've searched similar issues on GitHub and didn't find any.
• Yes, I've included all information below (version, config, log, etc).

Description of the problem,screencshot would be good

Hello mr
Thnaks for yor project
But I have problem with ip limitation when usuing tunnel server from iran to eu server
Please add this to panel if you can
Tnx

Version of x-ui

$ x-ui version
# 1.6.4

x-ui log or xray log

# 1.6.4

[NidukaAkalanka]

Hi there @eri1374 !
What did you mean by a tunnel server? Is it like.. You setup x ui on server B and connect server A to B. Then giving clients the access to server A?
In that case, Ip limitations, of course, would not worl as every clients getting the same ip which, is the ip of server A.
You have to setup any ip limitation technique on the server A, which you might be referring as a tunnel server.
If it isn't what you mean, please comment down. Will look forward to help you out

[eri1374]

Exactly
Because I am in Iran, it is not possible to connect directly to server A (for example: in Germany), so it is necessary to use an internal server in iran as a tunnel using iptable.
At this time, all users show the same IP on server A and the IP limit does not work
Do you have a solution for this problem?

[NidukaAkalanka]

Ip limitation for a direct client connection (without any tunnel server) is working properly. As this is not originally meant to be used with a tunnel server, I'm not sure if I'll be able to help it. But.. Maybe.. If this is going to be a highly demanding feature, will look forward into it.
For now, all I could say is that, any Ip limitation technique got to be applied on the tunnel server

[eri1374]

All iranian want this option
Please work on that
Tnx🙏

[NidukaAkalanka]

Could you please explain the tunnel server a bit more? Like.. What is the technique you use to make client connections? Is it http proxy with ngnix or squid? How do you connect v2ray to the tunnel server? By installing a linux v2ray client, is it?

[eri1374]

for example i create an inbound in server A vmess/ws without tls(v2ray linux clinet). after that using iptable forwording on server B. now in necoray or v2rayN change ip address to server B ip address.
I use your project on my linux server A
in server B linux just iptable forwarding

[sarahtuska]

Yeah us to. We also using a bypass vps to connect to main vps to use v2ray . Also we use iptable to forward traffics to main server to bypass the filter in my country .
If there was a way to pass the original ip from bypass vps into main vps and then extract the original ip .i dont know if there is a way but can you look into it .

Code on bypass vps

sysctl net.ipv4.ip_forward=1
iptables -t nat -A PREROUTING -p tcp --dport 22 -j DNAT --to-destination Vps_Bapass_IP
iptables -t nat -A PREROUTING -j DNAT --to-destination VPS_Main_IP
iptables -t nat -A POSTROUTING -j MASQUERADE

Vps_Bapass_IP = means ip the first vps to bypass blocking internet
VPS_Main_IP = the main Vps ip that we already installed x-ui on it .

[sarahtuska]

after some digging :

IP Restriction Per Inbound is not good for countries like Iran or chine or Russia ( cause, when We use another local server to forward traffics to this server and bypass the restriction when they limited internet connectivity ) but device connection per inbound is gonna be the key here . would be nice if they can implemented in for the future release .