20
votes
Accepted
How can I make docker-compose pull images using a socks5 proxy?
Looks like this feature has been recently added to docker, particularly in version 1.11.0.
Though there isn't enough documentation about its usage, setting the ALL_PROXY environment variable should ...
- 316
13
votes
Accepted
How to enable SOCKS5 for Squid proxy?
Have a look at this page. It talks about squid socks support and how you can build it to support SOCKS connections. The status is "testing". So, you may need to think about using it for production.
...
- 36.2k
6
votes
How can I make docker-compose pull images using a socks5 proxy?
Method 1
Error:
docker-compose up
Pulling web (jitsi/web:stable-6433)...
ERROR: toomanyrequests: You have reached your pull rate limit. You may increase the limit by authenticating and upgrading: ...
- 221
6
votes
How can I disable encryption on openssh?
This thread got me doing my own benchmarks and i found out that Performance varies not just by different cipher/MAC it also makes a difference what data you are sending, which CPU's are involved and ...
- 307
6
votes
Accepted
SSH to Remote host via another host
Your thought of using a dynamic port forward for this will never work. Think through it logically - you need to open a local port that forwards from your local machine, through hostA, to port 22 on ...
- 109k
5
votes
Accepted
Mikrotik limit Socks server access from LAN
Open WinBox . Go to IP > Socks > Access . The Socks Access window is similar to filter rule window. Default action in Socks Access is accept. This means that if no rule get matched, socks server ...
- 68
5
votes
Why do my servers (Digital Ocean) attack other servers with a default setup?
You're setting up your SSH SOCKS proxy by SSH'ing to the local machine, and telling it to listen on the unspecified address (0.0.0.0), which translates to ALL IP addresses.
If you're not configuring ...
- 5,367
5
votes
/etc/tor/torsocks.conf not working
Tor does not actually make any attempt to verify the authentication information that a SOCKS client provides to it. It can be used entirely unauthenticated, and it has no configuration to force ...
- 241k
3
votes
SSH Tunnel: channel 3: open failed: administratively prohibited
The config file you need to edit is called sshd_config you wrote ssh_config. What you have listed looks like the contents of the ssh client default configuration, not the config for the ssh server (/...
- 131
3
votes
How to route traffic through different interfaces based on the port number?
Actually, when you do:
$ ssh -f -N -D 0.0.0.0:8080 root@192.168.3.182
$ curl --socks5 192.168.3.182:8080 ip.appspot.com
The following events occur:
CURL opens a TCP connection from [YOUR-HOST]:[...
- 2,362
3
votes
Dante sockd can't forward traffic through multiple virtual IPs
The following worked for me with Dante 1.4.2 on CentOS 6.x 64bit, although I don't use authentication because I access Dante via SSH tunnels (my server's IPs are 1.1.1.1, 2.2.2.2 and 3.3.3.3):
...
- 31
3
votes
Dante server not starting on Raspberry
edit the file
sudo vim /lib/systemd/system/danted.service
find the line
ReadOnlyDirectories=/bin /etc /lib /lib64 /sbin /usr /var
and change /lib64 to -/lib64
ReadOnlyDirectories=/bin /etc /lib -/...
- 31
2
votes
Dante (SOCKS server) not working
this is bacuse of wrong config for your version of dante-server.
here is correct config for Dante v1.4.2
#logoutput: /var/log/socks.log
internal: eth0 port = 1080
external: eth0
method: username ...
- 210
2
votes
How can I disable encryption on openssh?
This is one client side SSH option I used for SSH connection to low-end devices:
ssh -c none -m hmac-md5-96 -oKexAlgorithms=curve25519-sha256@libssh.org ....
None cipher is natively supported in ...
- 121
2
votes
query Redshift over multiple SSH hops
It seems as if you may not understand the SSH forwarding syntax. Please don't take this personally, but this is a prime example of why copy/paste software development and systems administration is so ...
- 109k
2
votes
Accepted
Setup an ssh account that can only be used for a socks5 proxy
As Jakuje mentioned, you can use options to forbid forwarding.
Restricting Outbound Traffic by Owner
Also I want the proxy to not proxy connections to anything in the server's internal network.
...
- 2,849
2
votes
Setup an ssh account that can only be used for a socks5 proxy
You can forbid local forwarding in sshd_config, for example:
Match User your_user
AllowTcpForwarding no
PermitOpen none
It should not affect Dynamic forwarding/SOCKS proxy.
Also I want the ...
- 9,465
2
votes
Mikrotik limit Socks server access from LAN
If socks server is running on port 1080 and your LAN IP address range is 192.168.10.0/24 use this in Mikrotik terminal:
/ip firewall filter add action=drop chain=input dst-port=1080 protocol=tcp src-...
2
votes
How to use ansible openstack modules with a ssh socks proxy
socks proxy
First configure OpenSSH socks tunnel:
Add in ~/.ssh/config something like:
# Physical host
Host Dell-em1
User myuser
HostName 192.168.x.x
ForwardAgent yes
Host undercloud-0
...
- 17k
2
votes
Accepted
how to forbid connecting to localhost for ssh socks5 proxy
The ssh SOCKS implementation doesn't have many features. I'd use a more robust SOCKS proxy.
However, you can use iptables to accomplish this. Something like:
iptables -A input -i lo -m owner --uid-...
- 17.9k
2
votes
dante not starting during server reboot
I had the same issue and came across your question. I fixed it by adding a systemd dependency of network-online.target to the danted.service, based on reading this https://www.freedesktop.org/wiki/...
- 21
2
votes
Redirect all the http and https traffic throught a SOCKS proxy
You need to run the ssh command on A
ssh -N -D 1337 b_username@ip_of_b
You can then configure your web-browser or set environment variables to point at this proxy: 127.0.0.1:1337
If you want to use ...
- 121
1
vote
SSH Tunnel: channel 3: open failed: administratively prohibited
What you list is just the default values, commented out.
So you can add, below a Host * something like:
AllowTcpForwarding local
Note that yes should be the default, so it is strange it does not ...
- 9,721
1
vote
How to use SSH to create SOCKS server on remote side?
I don't know about such an option of ssh, but you can get creative and combine -R and -D in two ssh commands like:
ssh -D 4711 localhost&
ssh -R 4711:localhost:4711
Of course you can use any ...
- 611
1
vote
Provide multiple VPN instances via SSH tunnels on proxy host
I'm assuming both private networks provide a publicly accessible OpenVPN server, and push the appropriate routes.
Just connect to all OpenVPN servers simultaneously from the proxy server. Run ip ...
- 225
1
vote
Dante 1.4.x sockd not working for localhost
Your SOCKS client is probably sending a request using the SOCKS4A protocol which is an extension to SOCKS4 that allows clients to send destination domain names rather than IP addresses to the proxy ...
- 121
1
vote
How can I make docker-compose pull images using a socks5 proxy?
@nikhilweee's answer above is missing a crucial point.
The proxy used for image-pull is taken from the environment of dockerd. There is presently no way to change it without restarting dockerd.
I ...
- 320
1
vote
Accepted
Debian Jessie: how to setup a socks5 proxy server?
Is hpsockd sufficient for your needs? Appears all the alternative SOCKS5 servers, like dante, survive only in unstable now, so maybe they developed bugs, exploits, etc.
- 156
1
vote
Accepted
redsocks + socks server on different machine
Looks like if I put the last rule as the first one, everything works correctly. So the solution is to use the following iptables rules:
iptables -t nat -N REDSOCKS
iptables -t nat -A PREROUTING -i ...
- 21
1
vote
Openvpn forward all routing to a socks port
MadHatter's answer is correct, however I suspect this is a case of XY Problem. If you terminate OpenVPN on a machine that is capable of routing and NATing traffic (read: any modern server operating ...
- 11
Only top scored, non community-wiki answers of a minimum length are eligible