Debian Configuration :: Redirecting Traffic Through SOCKS Proxy?
Aug 11, 2010
I would like to redirect traffic coming from a machine A through a SOCKS proxy (setted on machine B)Machine B run "ssh -D 4242". So that create a SOCKS proxy on machine B.Machine A would like to connect on the internet, but the only way is to use machine B SOCKS proxy. The problem is machine A don't know how to use SOCKS Proxy. (Actually, i can just set ip, netmask and gateway on machine A).So, I would like to set up something on machine B that will redirect all traffic coming from machine A throught the SOCKS proxy.
View 1 Replies
ADVERTISEMENT
Jun 25, 2010
I'm using Ubuntu 10.04, and starting a SOCKS proxy with 'ssh -D', and setting Ubuntu to use it with "System -> Preferences -> Network Proxy". Firefox uses the proxy, and the proxy's IP appears when I visit a site like [URL]. is Firefox resolving DNS requests through this proxy? Is my web-browsing truly secure? (That is, until I exit the other end of the proxy.
I know it's insecure after that.) (And I've verified the keys, I'm not being man-in-the-middled) (And--screw it. You know what I mean. Is it resolving DNS requests through the proxy?)I don't know how I would go about verifying such a thing for myself.Using additional hardware such as another debugging proxy is not an option. If Firefox isn't resolving my DNS requests through the SOCKS proxy, how do I go about fixing it?
View 3 Replies
View Related
Mar 25, 2010
I am new to iptables. We have two Squid proxy servers running in "non-transparent mode" (172.16.0.1 and 172.16.0.2). Currently users have to configure the proxy server they want to use by configuring them in their browsers. Recently I saw an example for redirecting web traffic to a single transparent proxy server.
-A PREROUTING -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 3128
Can anyone modify this rule to accommodate my current setup of two proxy servers running in non-transparent mode. i.e Redirect web traffic to the 172.16.0.1-172.16.0.2 ip range.
View 2 Replies
View Related
Feb 27, 2010
I've been doing some security testing in a lab environment that does not have direct internet access. It's actually a little complicated: From home to connect to my lab machine, I
1. SSH to machineA.
2. SSH from machineA to machineB
where machineB is my actual lab machine. neither machineA or machineB allow anything other than SSH, and machineB is only accessible from machineA. However, I really need to run yum on machineB. I have managed to get internet access via Firefox on machineB by creating a series of SOCKS proxy via SSH.
1. machineB: ssh -L 12345:localhost:12345 user@machineA
2. machineA: ssh -D 12345 user@machineC
3. machineB: configure firefox to use socks proxy, localhost, 12345
where machineC has internet without limits placed. This is the only way I have managed to get internet working. I tried using ssh -L all the way from machineB->machineA->machineC but it didn't work (even when setting Firefox to use http proxy). I tried using ssh -D all the way, but again that doesn't work either.
I do have access via Firefox using socks proxy. However, yum update fails to retrieve mirror list, and from what I have found I don't believe yum supports socks proxy directly. Instead, it uses http_proxy / ftp_proxy. how to get yum to go out over the SOCKS proxy I created (same one using in Firefox)? It seems like since Firefox can access the internet and everything without issues, i should be able to get yum to tunnel through the same connection to access everything.... I tried
[URL]
View 1 Replies
View Related
Jan 16, 2011
I got it set up in the NetworkManager applet (imported the client.ovpn), but when I connect it sends ALL my traffic through the VPN. I would prefer all accesses to the internet go over my normal default gateway, rather then all the way through to the VPN's default gateway.When I connect through the command line:
Code:
openvpn --config client.ovpn
I don't have this problem, and accesses to the internet still go over my default gateway on
[code]...
View 1 Replies
View Related
Jul 6, 2010
I have socks proxy running on port 1080. I want other people on LAN to use this proxy. How can I do that?
One way is that the client can run this command and then use proxy 127.0.0.1:1080 on his computer:
ssh -L 1080:127.0.0.1:1080 myusername@myipaddress
But, I dont want to use ssh because that requires me to give my password to others.
View 2 Replies
View Related
Jan 18, 2010
How can I install SOCKS proxy?
View 2 Replies
View Related
May 8, 2010
Just a general question.
Can Tor be configured as a socks proxy? Would it change the IP even if the user was loading a java applet?
View 1 Replies
View Related
Feb 24, 2010
I have been ssh tunneling, which works great.I can browse the internet by simply tunneling my traffic through my SSH server.the following command: ssh -ND 9999 username at myserver.i cant postlinks.is all I have type, and I can connect to a SOCKS proxy server on localhost:9999.My problem is that I have an application that only supports HTTP proxies.Is there any way I can get it tunneling over the socks proxy?
View 4 Replies
View Related
May 8, 2009
I want to generate my own socks 5 proxy not for lan but for my use on internet I want to access that proxy from any pc and any connection. Like proxy supplied by atomintersoft.com or xroxy.com i want to create my own 300 socks 5 proxy. I can have dedicated server if required to do so.
1)tell me steps to create my own socks5 proxy.What are general system requirement.
2)Which Distro will be best for this purpose.I am new here and dont have idea about linux but can grasp everything faster than u!
View 1 Replies
View Related
Feb 17, 2010
what is the command to sftp from one linux host to another linux host through a SOCKS v5 that requires authentication? I have tried:
Code:
# sftp -o "ProxyCommand netcat -X socks_proxy_host:1080 %h %p" external-server
I know this does not have auth in it but I was going to come to that later
output
Code:
Connecting to external-server...
netcat: invalid option -- 'X'
[code].....
View 7 Replies
View Related
Jul 22, 2010
I have an internet connection through socks4 proxy form a server nearby to my laptop(fedora 12) i need to update and install sofwares. How to configure yum to use the socks proxy?
View 2 Replies
View Related
Jun 28, 2011
Is there an easy way, preferably by using the linux terminal, to check if a socks 5 proxy works?
View 1 Replies
View Related
Feb 27, 2011
I have my desktop set up as a SOCKS proxy, and not only me uses it, some friends do too.What I would like to know is how to check every now and again what they are using it for... for example the agreement we have is that they only use it to watch BBC iplayer and 4OD etc while they are abroad. What I dont want is them to pointlessly use it for other browsing.I trust my friends wont, but is there also a way of checking they arent using my connection to download illegal torrents?I guess best case scenrio would be to be able to whitelist only a few sites per user request. Is this possible?
View 1 Replies
View Related
May 4, 2010
I'd like to use ssh as a proxy/socks server and redirect all connections through this proxy.
It would look like : ssh -D 123 -N host
iptables ...
I've never used iptables before and I did not manage to find any useful for this particular case solutions on the internet.
So, what's the good way to do that ?
View 1 Replies
View Related
Apr 22, 2010
I have a problem with dynamic socks:
My VPS having this output of /sbin/ifconfig:
Code:
eth0 Link encap:Ethernet HWaddr 00:19:B9:B6:D2:3D
inet addr:x.y.114.13 Bcast:x.y.114.255 Mask:255.255.255.0
inet6 addr: abcd::xyz:fghj:ffgh:d23d/64 Scope:Link
[code]....
How can i use [x.y.101.1-3] address as proxy with putty?
View 1 Replies
View Related
Oct 7, 2010
An application that supports SOCKS 5 protocol can forward its network connection over ssh and dynamically forward to any host name that you specify isn't it ? that means firebox web browser can use SOCKS 5 protocol can be used by pass proxy settings isn't it ? so how can a sys admin remotely detect if a particular user is bypassing proxy settings using SOCKS 5 protocol ?
View 1 Replies
View Related
Jan 20, 2011
How can I use a torrent client in a network where bittorrent or any thing like this is blocked. I am aware of a combination of socks proxy with torrent client but not exactly sure if this is the thing I need.
View 2 Replies
View Related
Feb 6, 2011
I've opened an SSH Tunnel/SOCKS proxy on my Ubuntu server, which I've tested is working exactly as I had intended. However I'd like to access it from my Windows PC which is on the same home network.
Edit : I should say that I got it working on the server only by
Code:
ssh -D 55555 user@host
However if I tried it with a port, e.g.
Code:
ssh -D 192.168.1.101:55555 user@host
then it doesn't work, not even on the server itself. 192.168.1.101 is the static assigned DNS of my server on the home network.
View 1 Replies
View Related
Jun 21, 2010
How can I use socks proxy which is on a remote machine?
Machine A: Running a socks5 proxy on port 1080..
Machine B: Wants to use socks proxy of Machine A..
How can I do that? I have access to both the machines..
View 2 Replies
View Related
Oct 28, 2009
At the moment I have a proxy and all the users have to configure it in the browser to access internet. I want to make the users able to browse even without configuring the proxy in the browser. but eventually it should be received in the proxy rather than giving an error to the user. I heard with transparent proxy I can redirect all the traffic from a particular network, to a particular host( ie my existing proxy).
I tried this using firewall rules. But then the existing proxy doesn't understand the protocol of the requests. I heard that it should be in the kind of proxy protocol.
View 1 Replies
View Related
Aug 5, 2010
I downloaded freeSSHd [URL] on my Windows XP SP3 PC and configured the firewall to allow port 22. My grander scheme is to use this Windows PC as a SOCKS proxy server, that I can connect to at school to circumvent internet filtering and keep my data private. Does anyone know of a way that I could somehow get every internet-connected-program/service (chats, email, browsers, etc) to use this encrypted connection without having to configure every program individually? I think this link is on to something, but I'm not certain what he's getting at [URL].
View 1 Replies
View Related
Jun 16, 2011
I use ssh to port forward my browser(firefox) using SOCKS to a "server"(ubuntu desktop with ssh ) I have in the UK, to watch iplayer etc wen traveling... I forward port 1024 (default port for SOCKS? **mite b untrue..). the "server" is running ubuntu 11.04.
could i set up a transparent proxy(squid) on the "server" in the hope tht it speeds up the connection etc... my thot was get squid to listen on port 1024, or set up the ssh port forwarding to the squid port... would tht work? is the a better/different way to do it? the issue is tht sometimes the ssh connection can b slow at times
View 1 Replies
View Related
Sep 1, 2011
I am making a content filter for a school. I have a computer with Ubuntu Server and the SOCKS proxy, a DD-WRT router, and a switch. how I could forward all requests through the SOCKS proxy before sending it to the Internet.
View 1 Replies
View Related
Aug 7, 2011
I've got my netbook set up so that I can run a SOCKS proxy via my desktop machine. This works fine at home, but I'm wondering what happens at an internet cafe with public wifi.
Specifically, the connection needs initially to be set up with an ordinary direct internet connection so that I can log in to the cafe's router. I'm concerned that when I then set the network proxy to SOCKS host, the router will cease to recognise me and will disconnect me. This particular detail doesn't seem to have been covered in any instructions that I've seen (maybe I haven't looked hard enough).
View 5 Replies
View Related
Mar 30, 2010
I have an interesting situation. I'd like to use bittorrent for legitimate purposes (mainly linux distro based) but the powers that be have blocked access to bittorrent at my university. I have an ubuntu VPS that I use for odds and ends and was thinking that I could setup a SOCKS5 server on it. That way, I can input the SOCKS5 info directly into the proxy section of my local bittorrent application (Transmission 1.92 running on snow leopard) and be good to go. The problem, however, is that I cannot find a way to get a SOCKS server up and running on my VPS. I've heard that ssh can be used as a simple SOCKS server, but I've also heard that i may need to install a more complete SOCKS server such as dante. Does anyone have any thoughts on this?
View 1 Replies
View Related
Apr 8, 2010
I've been doing some security testing in a lab environment that does not have direct internet access. From home to connect to my lab machine, I
1. SSH to machineA.
2. SSH from machineA to machineB
where machineB is my actual lab machine. neither machineA or machineB allow anything other than SSH, and machineB is only accessible from machineA. However, I really need to run yum on machineB.I have managed to get internet access via Firefox on machineB by creating a series of SOCKS proxy via SSH.
1. machineB: ssh -L 12345:localhost:12345 user@machineA
2. machineA: ssh -D 12345 user@machineC
3. machineB: configure firefox to use socks proxy, localhost, 12345
where machineC has internet without limits placed. This is the only way I have managed to get internet working. I tried using ssh -L all the way from machineB->machineA->machineC but it didn't work (even when setting Firefox to use http proxy). I tried using ssh -D all the way, but again that doesn't work either. I do have access via Firefox using socks proxy. However, yum update fails to retrieve mirror list, and from what I have found I don't believe yum supports socks proxy directly. Instead, it uses http_proxy / ftp_proxy.how to get yum to go out over the SOCKS proxy I created (same one using in Firefox)? It seems like since Firefox can access the internet and everything without issues, i should be able to get yum to tunnel through the same connection to access everything.... I tried
>export http_proxy="http://localhost:12345"
(yum.conf) proxy="http://localhost:12345"
View 8 Replies
View Related
Sep 19, 2010
I have a question regarding Traffic Shaping in Linux, Suppose I have a server on the internet (web, email or ftp) and I want to shape outgoing traffic per IP, say 256k for each destination IP. I've seen examples on the internet on how to shape traffic per IP by adding a queue for each IP, and some examples by using u32 hash if I have e.g. a /24 network, but if I have a server and I want to shape the traffic by destination IP, and of course... since it is a server on the internet I can't manually define any IPs of subnets. An example using the tc command?
View 2 Replies
View Related
Sep 16, 2015
I'm running OpenVPN service on both debian server and client. When start connection between client and server, I expect all the computer traffic (except ARP and DHCP requests) go through created tunnel. However, when I capture packets on wlan0 on client (the only connection going outside host) using Wireshark, I can see DNS requests visible and sometimes incoming TCP traffic as well, but most of the traffic is going through tunnel as expected. I provide both configurations of client and server and client routing table for inspection. I changed server address to avoid server exploitation in the case of some big configuration mistake.
Commands to run OpenVPN services are:
Code: Select allFor client: sudo openvpn --config /etc/openvpn/client.conf &
For server: sudo openvpn --config /etc/openvpn/server.conf &
**Client routing table when VPN is OFF**
Code: Select allKernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.1.1 0.0.0.0 UG 1024 0 0 wlan0
192.168.1.0 * 255.255.255.0 U 0 0 0 wlan0
[code]...
I searched through many forums and documentation and I found, that for all the traffic going via VPN is command: *push "redirect-gateway def1"* neccessary, however, I have leaks despite this command being in place. I already spent over 2 days with this and tried to configure it in many ways, now I have no clue what I'm missing.
View 0 Replies
View Related
Jul 25, 2010
I need to be able to do the following: Physical Router located at 192.168.40.1 On Ubuntu 10.04 Lucid machine:
eth0 with static ip 192.168.40.2
eth1 with static ip 192.168.40.3
eth2 with static ip 192.168.40.4
Associate a virtual address to eth1 with an entirely different network address such as 192.168.50.1 Do the same (virtual address) for eth2 -- e.g. 192.168.60.1 In the application:
register phone number A at 192.168.40.1 (The application will automatically use eth0 for this)
register phone number B at 192.168.50.1
register phone number C at 192.168.60.1
Somehow forward all traffic (including the register request) sent to 192.168.50.1 to 192.168.40.1 as if the register had been made directly to 192.168.40.1. In other words, the app "sends" registration and traffic to 192.168.50.1 but then Ubuntu forwards it to 192.168.40.1 (but the app does not know that). Similarly, forward all traffic sent to 192.168.60.1 to the router at 192.168.40.1.
Do the same for the reverse, forward all traffic that the router sends back to 192.168.40.3 (eth1) to 192.168.50.1 (within the Ubuntu machine) so that the app knows it is for phone B. Similarly forward all traffic that the router sends back to 192.168.40.4 (eth2) to 192.168.60.1 so that the app knows it is for phone C. Thus, the application believes that it is registering at 3 completely separate routers on 3 completely separate networks via 3 separate network interfaces but in fact is really registering all three to the same router (but does not know that). Similarly, the router believes that it is receiving 3 separate registrations because it receives each registration request and traffic from 3 separate interfaces and thus 3 separate mac addresses (i.e., of eth0, eth1, and eth2). Traffic sent to and from the router for each of the 3 phone numbers (via eth0, eth1, and eth2) are not mixed because the translation happens in both directions.
View 10 Replies
View Related
