Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [socks]

SOCKS is an Internet protocol that allows both TCP and UDP communications via a proxy server.

0
votes
1answer
52 views

access unexposed services on remote machine

I have services running (in docker containers) on a remote server for which I have ssh access. These services are admin apis that I'd prefer not to expose to the world(I don't really fancy setting up ...
0
votes
0answers
52 views

Empty reply when CURLing through proxy

I'm using ssh to create a proxy connection to an EC2 instance: ssh -v -D 8123 ubuntu@some.ip.address But when I test it using curl, I get: http_proxy="http://localhost:8123" curl example.com curl: (...
0
votes
0answers
34 views

Use secondary IP as outgoing IP on SOCKS5 traffic that uses this IP

I have a server that runs OpenVPN on it's primary IP. There is also a second IP I connect to using SSH as a SOCKS5 setup like this: ssh -C2qTnN -D 1337 me@<secondary-ip> I go to whatismyip....
1
vote
0answers
151 views

SSH Tunnel - channel 3: open failed: administratively prohibited: open failed

ssh -D 9090 user@host when I try to request web pages through socks5 (127.0.0.1:9090) I get: channel 3: open failed: administratively prohibited: open failed server sshd_config: #MaxStartups 10:30:...
0
votes
0answers
15 views

How to set Socks5(Dante) just for one user?

I installed Dante on my Server(Debian), like below : wget http://www.inet.no/dante/files/dante-1.4.2.tar.gz tar -xvf dante-1.4.2.tar.gz cd dante-1.4.2/ mkdir /opt/dante ./configure --prefix=/opt/...
0
votes
0answers
73 views

Run Oracle Java Web Start Client (javaws) by SOCKS Proxy

In OpenJDK, you could set like this cat ~/.config/icedtea-web/deployment.properties: deployment.proxy.socks.port=10443 deployment.proxy.same=true deployment.proxy.socks.host=localhost deployment....
0
votes
0answers
100 views

Dante Socks Multiple instances

I have correctly installed Dante on Ubuntu server as a proxy, and it works, but I must have e multiple instances of it (each of them has to works in different port). I have tried it in this way: ...
0
votes
0answers
62 views

Virtual Network Adapter that forwards request to a SOCKS proxy

Being forced to use a proxy is a nightmare. You have to configure almost every software for the proxy, if the software supports it. It would be great if we could configure our network adapter to use a ...
0
votes
1answer
277 views

dante not starting during server reboot

I installed dante (v1.4.2) using apt-get install dante-server on ubuntu 18.04 and have following configuration: /etc/danted.conf logoutput: /var/log/sockd.log internal: eno1 port = 1080 external: ...
0
votes
0answers
130 views

Shadowsocks-manager, unable to connect to webgui plugin

On Github Shadowsocks-manager, unable to connect to webgui plugin... Shadowsocks run on a VPS with dedicated IP address Error: [2018-06-11 08:49:24.498] [INFO] system - Load plugin db: flowSaver/...
0
votes
1answer
114 views

how to forbid connecting to localhost for ssh socks5 proxy

when I start ssh socks5 proxy like that ssh user@localhost -D 0.0.0.0:1080 it allows to anyone to connect to localhost like curl --socks5 server.com localhost:12345 which can be a security issue for ...
2
votes
1answer
229 views

How to use ansible openstack modules with a ssh socks proxy

OpenSSH allows to act as an encrypted tunnel with a socks proxy. This can be used for openstack modules in ansible. However the ansible documentation doesn't mention how to use any other proxy than ...
0
votes
1answer
190 views

Dante Socks5 allow access from ip range

My danted.conf: logoutput: syslog /var/log/danted.log user.privileged: root user.unprivileged: nobody # The listening network interface or address. internal: ens3 port=1080 # The proxying network ...
0
votes
0answers
88 views

network ports are filtered strangely?

I have some Ubuntu servers deployed in VULTR Global Cloud and I have about 300 network ports each server. However, every server will be filtered in China suddenly (I can ping from China). I use nmap ...
0
votes
0answers
26 views

How can I route a secure socket connection to different destination servers via a proxy?

My task is to address different servers via secure socket connections at the destination. But the problem is that you can not specify different target servers over normal socket connections. Also, ...
-1
votes
1answer
680 views

how to tunnel SOCKS proxy?

I have a distant server, that is not accessible from the outside world. I would like to turn it into a proxy nonetheless. I was thinking I could use server (that I fully own) to achieve my goal. ...
0
votes
0answers
197 views

ssh socks proxy over multiple host with key and password

I want to connect to a website behind two servers. I know how to access the local Sock-Proxy and i can access another website with only one socks-proxy. Schematic: ssh(key) ssh(pwd) ...
1
vote
0answers
289 views

Proxy vpn traffic into socks or second vpn

I have an Ubuntu 16.04 server that I have running xl2tp and openvpn as a VPN server. However, I want the server itself to be connected to either a SOCKS Proxy or another OpenVPN connection. That is: ...
1
vote
4answers
7k views

SSH Tunnel: channel 3: open failed: administratively prohibited

I have two servers, let's say server A and server B. I wish to use server B as an ssh tunnel so on server A I did this ssh -D 1080 root@ip It connects and as soon as I put in the server B as a ...
1
vote
1answer
74 views

How to use SSH to create SOCKS server on remote side?

I can create a SOCKS proxy on the local side of an SSH connection using -D but is there a way to create a proxy on the remote side? If not, why not? -L and -R do port forwarding on the local and ...
1
vote
0answers
361 views

SOCKS connection through cygwin and proxy fails

I have serverA with a rhel 6 flavor with no connection to internet and serverB with Win Server and Cygwin that connects to internet through a proxy namely I can do something like wget http://google....
3
votes
0answers
203 views

How to make apache2 connect through SOCKS5 server that I am runnning?

I have a website ran on apache2 and a SOCKS proxy server that are both hosted on the same computer. The website can be accessed publicly and my SOCKS5 server is on localhost. How do I make the ...
0
votes
1answer
654 views

How to debug a SSH socks tunnel connection? [closed]

I followed this guide https://www.digitalocean.com/community/tutorials/how-to-route-web-traffic-securely-without-a-vpn-using-a-socks-tunnel on how to set up a VPS connection to Windows. And my tunnel ...
1
vote
1answer
74 views

Network security: No incoming connections vs. reverse tunnel to proxy

A client has a network that is restrictive. They want no incoming connections and they have no VPN. We're installing an admin tool that external admins need to access. One solution is that the admins ...
0
votes
1answer
256 views

Unable to proxy multiple IPs with ssh -D

I have one CentOS VM with 127 public external IP addresses. I am attempting to proxy all of the connections at once with ssh -D as follows: ssh -f -N -D 0.0.0.0:1000 1.1.1.1 ssh -f -N -D 0.0.0.0:1001 ...
1
vote
0answers
2k views

Dante server Pam authentication does not work

So I configured Dante 1.4.2 (compiled it from source on Debian 8.7 which runs on MS Azure) and followed their official configuration guide to run my SOCKS5 server. I created a firewall rule to accept ...
1
vote
1answer
2k views

SSH to Remote host via another host

I am trying to ssh to remote Host B, but network access control governs I am only able to do this via Host A. How would I go about doing that? Have tried creating a tunnel to Host A ssh -f -N -D 2222 ...
2
votes
0answers
265 views

Modify ip addresses in a socks capture pcap

I have a pcap capture of socks traffic. The traffic goes like - client_ip <-> 127.0.0.1:9050 <-> destination_ip Looking at pcap in wireshark, thus, shows: src_ip = 127.0.0.1 dst_ip = ...
0
votes
1answer
372 views

Provide multiple VPN instances via SSH tunnels on proxy host

Problem I need to access multiple different VPN networks simultaneously, mainly for HTTP and sometimes SSH. Further, I am not allowed to use openvpn on my workstation (no legal restriction, rather an ...
0
votes
1answer
110 views

Tunneling git from intranet to remote server

I have a server I need to develop on outside of my intranet. I try to ssh into the server and setup a proxy that will allow me to clone the repository. ssh -D 5555 remote.server Then I set my ~/.ssh/...
6
votes
1answer
14k views

How to enable SOCKS5 for Squid proxy?

Squid'd default is to operate as an HTTP proxy; however, this FAQ https://docstore.mik.ua/squid/FAQ-4.html#ss4.10 says "No changes are necessary to use Squid with socks5. Simply add the usual -Dbind=...
1
vote
0answers
202 views

Websense SSL MITM vs SOCKS

Howdy: My company uses WebSense with MITM SSL intercept and it works, well quite badly. Some tools detect that the certs are forged and complain bitterly or just don't work at all. Honesty is the ...
5
votes
2answers
721 views

Mikrotik limit Socks server access from LAN

I have a Mikrotik RB750 router that Socks server is configured on it. It has a interface in my LAN and another one in WAN with public IP address. I want to limit access to it from LAN. It seems that ...
1
vote
1answer
117 views

Finding a way to port forward a port-binding application via SOCKS

I'm running a program that binds a specific port on a host computer (running Windows 10) behind a firewall, and I don't have permission to port forward directly through my network. Instead, I'm trying ...
1
vote
2answers
869 views

Dante 1.4.x sockd not working for localhost

I am trying to run a SOCKS server which listens for SOCKS connections on localhost. There will actually be SSH tunnels reaching this server if you are wondering about the purpose. I based the ...
4
votes
0answers
510 views

Dante unable to bind to public ip address

I have a Dante server on a host with multiple public ip addresses but it is unable to bind to the ips of the host. The ips are pingable, I have another service listening on each of them (different ...
1
vote
0answers
89 views

SOCKS Proxy maintain source IP

I am trying to maintain the source IP going through my socks proxy into the DMZ. Since my connection is TCP I can't use the typical XFF header method for reverse proxies. Is there any standard way to ...
5
votes
1answer
1k views

/etc/tor/torsocks.conf not working

I try to activate username and password authentication for my tor installation using the fields SOCKS5Username and SOCKS5Password in the /etc/tor/torsocks.conf file. I have restarted the service after ...
0
votes
1answer
711 views

query Redshift over multiple SSH hops

I'd like to query an AWS Redshift cluster from an IDE running on my laptop (IntelliJ). This cluster is only directly accessible from an EC2 instance in our VPC. That EC2 instance isn't directly ...
0
votes
1answer
422 views

Why do my servers (Digital Ocean) attack other servers with a default setup?

I've been getting complaints on my VPS regarding attacks on different servers such as this message: your Server/Customer with the IP: 1xx.2xx.4x.9x (1xx.2xx.4x.9x) has attacked one of our servers/...
1
vote
0answers
498 views

dante SOCKS5 server handle authentication with external script

I'm currently choosing between using dante or 3proxy for creating a SOCKS5 server. My user login details are stored in a mysql table. Passwords are generated using bcrypt(), so RADIUS won't be an ...
1
vote
0answers
117 views

dante SOCKS5 auth process use custom script

Is there a way I can use my own script for auth process of dante SOCKS server? I store my passwords created with bcrypt(). Free radius isn't able to handle bcrypt() generated passwords I think, so a ...
0
votes
1answer
273 views

which php-fpm sock location should i use?

Im new to server administration so forgive me if the answer is obvious. I noticed that in different tutorials in the web people use different directory/location for the pool sock in php-fpm(On CentOS ...
2
votes
2answers
890 views

Setup an ssh account that can only be used for a socks5 proxy

I have an arch linux machine behind a firewall. I can open a port forwarding for the ssh port. I would like to create a user that can be used only for a socks proxy. ssh -N -D 5000 user@server -p9000 ...
1
vote
1answer
2k views

Cntlm error: too many open files

As the title says i have got some issues with Cntlm. I'm working with the 0.92.3 version and launched from the source code. What i am trying to do is starting Cntlm as a standalone proxy with ...
3
votes
2answers
6k views

How can I make docker-compose pull images using a socks5 proxy?

I'm trying to pull images through a socks5 proxy. I've started the socks5 proxy on port 8888 like this: ssh -NC -D 8888 parham@***.***.** However, when I run docker-compose like this, it is evident ...
2
votes
0answers
227 views

Dante with Kerberos configuration across sites

I have a requirement to host a socks proxy in a central location, using Dante. What I've been asked to do is connect remote clients to it across the internet, they'll pass through a gateway routing ...
1
vote
0answers
248 views

Remote (Ubuntu) server as http gateway to multiple socks5 proxy servers

I have the following setup: Computer L (my Mac OS X machine). Linode R0 running Ubuntu 12.04. Linode R1 running Ubuntu 12.04. Linode R2 running Ubuntu 12.04. R1 and R2 are turned into SOCKS5 proxy ...
0
votes
0answers
799 views

Connection to MS SQL Server instance through SSH SOCKS proxy fails

I use a local ssh socks proxy (localhost:7070) on my Linux Laptop to connect to my company's intranet over my company's Windows+cygwin laptop, which has intranet access: Linux --(ssh -N -D 7070 -p ...
0
votes
1answer
49 views

forwarding connections from firewalled local machine to firewalled remote machine

I need to forward internet traffic from a local machine to a remote machine, routing traffic through an intermediary SSH server on the way. The remote machine is firewalled and running a SOCKS5 proxy ...