xray-core and freebsd 14 listen 443 and 80 tcp listen error

[githubrn]

Hello friends! I am using freebsd 14 as a VPS.

root@vps-xray:/usr/local/etc/xray-core # uname -a
FreeBSD vps-xray 14.0-RELEASE FreeBSD 14.0-RELEASE #0 releng/14.0-n265380-f9716eee8ab4: Fri Nov 10 05:57:23 UTC 2023 
[email protected]:/usr/obj/usr/src/amd64.amd64/sys/GENERIC amd64

root@vps-xray:/usr/local/etc/xray-core # xray --version
Xray 1.8.4 (Xray, Penetrates Everything.) Custom (go1.20.8 freebsd/amd64)
A unified platform for anti-censorship.

TCP/UDP 443 and 80 are not busy on the host:

root@vps-xray:/usr/local/etc/xray-core # netstat -an | egrep 'Proto|LISTEN'
Proto Recv-Q Send-Q Local Address          Foreign Address        (state)
tcp4       0      0 *.22                   *.*                    LISTEN
tcp6       0      0 *.22                   *.*                    LISTEN
root@vps-xray:/usr/local/etc/xray-core #

my inbound configuration works fine!

{
 "inbounds": [
    {
      "port": 12345, // The port on which the server is listening
      "protocol": "vmess",
      "settings": {
        "clients": [
          {
            "id": "..."
          }
        ]
      }
    }
]
}

It shows, (tcp46 12345 is open/LISTEN!):

root@vps-xray:/usr/local/etc/xray-core # /usr/local/etc/rc.d/xray start
Starting xray.
root@vps-xray:/usr/local/etc/xray-core # Xray 1.8.4 (Xray, Penetrates Everything.) Custom (go1.20.8 freebsd/amd64)
A unified platform for anti-censorship.
2024/01/23 13:44:12 Using confdir from arg: /usr/local/etc/xray-core
2024/01/23 13:44:12 [Info] infra/conf/serial: Reading config: /usr/local/etc/xray-core/00_log.json
2024/01/23 13:44:12 [Info] infra/conf/serial: Reading config: /usr/local/etc/xray-core/01_api.json
2024/01/23 13:44:12 [Info] infra/conf/serial: Reading config: /usr/local/etc/xray-core/02_dns.json
2024/01/23 13:44:12 [Info] infra/conf/serial: Reading config: /usr/local/etc/xray-core/03_routing.json
2024/01/23 13:44:12 [Info] infra/conf/serial: Reading config: /usr/local/etc/xray-core/04_policy.json
2024/01/23 13:44:12 [Info] infra/conf/serial: Reading config: /usr/local/etc/xray-core/05_inbounds.json
2024/01/23 13:44:12 [Info] infra/conf/serial: Reading config: /usr/local/etc/xray-core/06_outbounds.json
2024/01/23 13:44:12 [Info] infra/conf/serial: Reading config: /usr/local/etc/xray-core/07_transport.json
2024/01/23 13:44:12 [Info] infra/conf/serial: Reading config: /usr/local/etc/xray-core/08_stats.json
2024/01/23 13:44:12 [Info] infra/conf/serial: Reading config: /usr/local/etc/xray-core/09_reverse.json

root@vps-xray:/usr/local/etc/xray-core # netstat -an | egrep 'Proto|LISTEN'
Proto Recv-Q Send-Q Local Address          Foreign Address        (state)
tcp46      0      0 *.12345                *.*                    LISTEN
tcp4       0      0 *.22                   *.*                    LISTEN
tcp6       0      0 *.22                   *.*                    LISTEN
root@vps-xray:/usr/local/etc/xray-core #

In the documentation, all the examples use port 443/80 (1, 2, 3 ... etc). For the test, I fixed my port to 443 (the result is the same for 80):

{
 "inbounds": [
    {
      "port": 443, // The port on which the server is listening
      "protocol": "vmess",
      "settings": {
        "clients": [
          {
            "id": "..."
          }
        ]
      }
    }
]
}

root@vps-xray:/usr/local/etc/xray-core # /usr/local/etc/rc.d/xray restart
Stopping xray.
Starting xray.
root@vps-xray:/usr/local/etc/xray-core # Xray 1.8.4 (Xray, Penetrates Everything.) Custom (go1.20.8 freebsd/amd64)
A unified platform for anti-censorship.
2024/01/23 13:46:11 Using confdir from arg: /usr/local/etc/xray-core
Failed to start: app/proxyman/inbound: failed to listen TCP on 443 > transport/internet: failed to listen on address: 0.0.0.0:443 
> transport/internet/tcp: failed to listen TCP on 0.0.0.0:443 > listen tcp 0.0.0.0:443: bind: permission denied

root@vps-xray:/usr/local/etc/xray-core # netstat -an | egrep 'Proto|LISTEN'
Proto Recv-Q Send-Q Local Address          Foreign Address        (state)
tcp4       0      0 *.22                   *.*                    LISTEN
tcp6       0      0 *.22                   *.*                    LISTEN
root@vps-xray:/usr/local/etc/xray-core #

any other port except 443 and 80 is working fine. What is my mistake?

[githubrn]

answer:

https://docs.freebsd.org/ru/books/handbook/mac/

[diredocks]

For those who are still confused:

echo "security.mac.portacl.rules=uid:$(id -u v2ray):tcp:443" >> /etc/sysctl.conf
echo "net.inet.ip.portrange.reservedhigh=0" >> /etc/sysctl.conf