DanteでSOCKS

まぁ懲りずに色々とやってますね。
ということでSOCKSなるものにチャレンジです。

HP: http://www.inet.no/

1.3.1が出てますね。
1.2.xは2011年12月でサポート終わりだそうです。

インストール

cd /usr/local/src wget ftp://ftp.inet.no/pub/socks/dante-1.3.1.tar.gz tar zxvf dante-1.3.1.tar.gz cd dante-1.3.1 ./configure make make install cp example/sockd.conf /etc/sockd.conf

cd /usr/local/src wget ftp://ftp.inet.no/pub/socks/dante-1.3.1.tar.gz tar zxvf dante-1.3.1.tar.gz cd dante-1.3.1 ./configure make make install cp example/sockd.conf /etc/sockd.conf

設定

/etc/sockd.conf

internal: xxx.xxx.xxx.xxx port = 1080 external: yyy.yyy.yyy.yyy clientmethod: none method: username rfc931 none user.privileged: sockd_root user.notprivileged: sockd user.libwrap: libwrap client pass { from: xxx.xxx.xxx.0/24 port 1-65535 to: 0.0.0.0/0 log: connect data error iooperation } client pass { from: xxx.yyy.zzz.0/24 port 1-65535 to: 0.0.0.0/0 log: connect data error iooperation } client pass { from: 127.0.0.0/8 port 1-65535 to: 0.0.0.0/0 } block { from: 0.0.0.0/0 to: 127.0.0.0/8 log: connect error } pass { from: 0.0.0.0/0 to: 0.0.0.0/0 command: bind log: connect error } pass { from: 0.0.0.0/0 to: 0.0.0.0/0 protocol: tcp udp } route { from: 0.0.0.0/0 to: 0.0.0.0/0 via: direct command: bind }

internal: xxx.xxx.xxx.xxx port = 1080 external: yyy.yyy.yyy.yyy clientmethod: none method: username rfc931 none user.privileged: sockd_root user.notprivileged: sockd user.libwrap: libwrap client pass { from: xxx.xxx.xxx.0/24 port 1-65535 to: 0.0.0.0/0 log: connect data error iooperation } client pass { from: xxx.yyy.zzz.0/24 port 1-65535 to: 0.0.0.0/0 log: connect data error iooperation } client pass { from: 127.0.0.0/8 port 1-65535 to: 0.0.0.0/0 } block { from: 0.0.0.0/0 to: 127.0.0.0/8 log: connect error } pass { from: 0.0.0.0/0 to: 0.0.0.0/0 command: bind log: connect error } pass { from: 0.0.0.0/0 to: 0.0.0.0/0 protocol: tcp udp } route { from: 0.0.0.0/0 to: 0.0.0.0/0 via: direct command: bind }

以下のユーザを追加(シェルやホームディレクトリは適当に)

libwrap sockd sockd_root

起動

sockd -D

相変わらず適当にRPMをここらに置いておきます。