Reputation
605
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
7 16
Newest
 Yearling
Impact
~41k people reached

Apr
5
answered 2 drives, slow software RAID1 (md)
Apr
3
answered What is the best package repository for Debian?
Apr
3
comment Is it possible to make a web browser proxy tunnel with Netcat/Socat?
I've implemented a patch to allow socat understand SO_ORIGINAL_DST (set by iptables in REDIRECT target), so you may specify "REDIRECT" instead of destination address or port in proxies. I use patched socat myself, but it is quick and dirty and probably not for serious production. May be in the next version this feature will be available out-of-the-box. socat 'tcp-l:1234,reuseaddr,fork' 'socks5:REDIRECT:REDIRECT|tcp:127.0.0.1:1080' It also works with HTTP CONNECT proxy. <a href="github.com/vi/socksredirect">link</a>;
Mar
26
awarded  Commentator
Mar
26
comment Redirect local service to custom proxy
1. There is no INPUT in "-t nat" you should use PREROUTING if you really want redirection of input things. 2. There is no "-m owner" for any of incoming packets, that is in INPUT or PREROUTING. 3. "My program connects to a fixed port" redirect just this program with "-m owner" in OUTPUT. BTW there is nothing about "the incoming traffic" in question. "-t nat" things work once when a connection is establishing. Connection tracking handles the rest keeping for already established connections.
Mar
26
comment Display \n characters as newlines when using tail?
tail -f file | sed 's/\\n/\n/g'
Mar
26
answered (200 ok) ACCEPTED - Is this a hacking attempt?
Mar
24
revised Getting a TTY in a Connectback Shell
Better socat command
Mar
24
revised Getting a TTY in a Connectback Shell
added 90 characters in body
Mar
24
answered Getting a TTY in a Connectback Shell
Mar
24
comment Redirect local service to custom proxy
"! --gid-owner" is for OUTPUT, because of you don't know yet what application will receive the packet in INPUT chain. You should probably do "--gid-onwer <application group>" (without negation) only for your application to make everything else not to be redirected.
Mar
20
revised Anyone else being hit by traffic on TCP port 11370
grammar fix
Mar
20
revised Anyone else being hit by traffic on TCP port 11370
socat -v
Mar
20
comment Anyone else being hit by traffic on TCP port 11370
@ErikA Is the actual data that is transmitted by TCP seen in the that packets? I see things like "GET / HTTP/1.1" in the third packet (first is SYN, second is ACK). If connection is rejected or filtered, I can't see what actual data would have been transmitted if the connection were established.
Mar
20
revised Anyone else being hit by traffic on TCP port 11370
added 111 characters in body; added 69 characters in body
Mar
20
comment Anyone else being hit by traffic on TCP port 11370
Probably it will be TCP SYNs. I thought he wants to know what service is trying to be accessed. How tcpdump can show the data if connection fails? No connection => no data. The way without allowing actual connection may be setting up iptables to REDIRECT to some controlled port or DNAT to some other IP which will anonyse the data.
Mar
20
answered Anyone else being hit by traffic on TCP port 11370
Mar
20
answered Redirect local service to custom proxy
Mar
20
answered What are the steps to setup git-http-backend w/ Apache on Windows?
Mar
20
revised How can I expand my current setup?
minor fix