Hot answers tagged

20 votes
Accepted

How can I make docker-compose pull images using a socks5 proxy?

Looks like this feature has been recently added to docker, particularly in version 1.11.0. Though there isn't enough documentation about its usage, setting the ALL_PROXY environment variable should ...
nikhilweee's user avatar
14 votes
Accepted

How to enable SOCKS5 for Squid proxy?

Have a look at this page. It talks about squid socks support and how you can build it to support SOCKS connections. The status is "testing". So, you may need to think about using it for production. ...
Khaled's user avatar
  • 36.8k
6 votes

How can I make docker-compose pull images using a socks5 proxy?

Method 1 Error: docker-compose up Pulling web (jitsi/web:stable-6433)... ERROR: toomanyrequests: You have reached your pull rate limit. You may increase the limit by authenticating and upgrading: ...
Shakiba Moshiri's user avatar
6 votes
Accepted

SSH to Remote host via another host

Your thought of using a dynamic port forward for this will never work. Think through it logically - you need to open a local port that forwards from your local machine, through hostA, to port 22 on ...
EEAA's user avatar
  • 110k
5 votes
Accepted

Mikrotik limit Socks server access from LAN

Open WinBox . Go to IP > Socks > Access . The Socks Access window is similar to filter rule window. Default action in Socks Access is accept. This means that if no rule get matched, socks server ...
Cierra Clark's user avatar
5 votes

Why do my servers (Digital Ocean) attack other servers with a default setup?

You're setting up your SSH SOCKS proxy by SSH'ing to the local machine, and telling it to listen on the unspecified address (0.0.0.0), which translates to ALL IP addresses. If you're not configuring ...
fukawi2's user avatar
  • 5,436
5 votes

/etc/tor/torsocks.conf not working

Tor does not actually make any attempt to verify the authentication information that a SOCKS client provides to it. It can be used entirely unauthenticated, and it has no configuration to force ...
Michael Hampton's user avatar
4 votes

Dante sockd can't forward traffic through multiple virtual IPs

The following worked for me with Dante 1.4.2 on CentOS 6.x 64bit, although I don't use authentication because I access Dante via SSH tunnels (my server's IPs are 1.1.1.1, 2.2.2.2 and 3.3.3.3): ...
E-71's user avatar
  • 41
3 votes
Accepted

How to use ansible openstack modules with a ssh socks proxy

socks proxy First configure OpenSSH socks tunnel: Add in ~/.ssh/config something like: # Physical host Host Dell-em1 User myuser HostName 192.168.x.x ForwardAgent yes Host undercloud-0 ...
Mircea Vutcovici's user avatar
3 votes

SSH Tunnel: channel 3: open failed: administratively prohibited

The config file you need to edit is called sshd_config you wrote ssh_config. What you have listed looks like the contents of the ssh client default configuration, not the config for the ssh server (/...
Chris Hill's user avatar
3 votes

dante not starting during server reboot

I had the same issue and came across your question. I fixed it by adding a systemd dependency of network-online.target to the danted.service, based on reading this https://www.freedesktop.org/wiki/...
30698's user avatar
  • 31
3 votes

Dante server not starting on Raspberry

edit the file sudo vim /lib/systemd/system/danted.service find the line ReadOnlyDirectories=/bin /etc /lib /lib64 /sbin /usr /var and change /lib64 to -/lib64 ReadOnlyDirectories=/bin /etc /lib -/...
Anton Wolkov's user avatar
2 votes

query Redshift over multiple SSH hops

It seems as if you may not understand the SSH forwarding syntax. Please don't take this personally, but this is a prime example of why copy/paste software development and systems administration is so ...
EEAA's user avatar
  • 110k
2 votes
Accepted

Setup an ssh account that can only be used for a socks5 proxy

As Jakuje mentioned, you can use options to forbid forwarding. Restricting Outbound Traffic by Owner Also I want the proxy to not proxy connections to anything in the server's internal network. ...
Aaron's user avatar
  • 2,859
2 votes

Setup an ssh account that can only be used for a socks5 proxy

You can forbid local forwarding in sshd_config, for example: Match User your_user AllowTcpForwarding no PermitOpen none It should not affect Dynamic forwarding/SOCKS proxy. Also I want the ...
Jakuje's user avatar
  • 10k
2 votes

Dante (SOCKS server) not working

this is bacuse of wrong config for your version of dante-server. here is correct config for Dante v1.4.2 #logoutput: /var/log/socks.log internal: eth0 port = 1080 external: eth0 method: username ...
James M's user avatar
  • 210
2 votes

How can I disable encryption on openssh?

This is one client side SSH option I used for SSH connection to low-end devices: ssh -c none -m hmac-md5-96 [email protected] .... None cipher is natively supported in ...
V.E.O's user avatar
  • 121
2 votes

Mikrotik limit Socks server access from LAN

If socks server is running on port 1080 and your LAN IP address range is 192.168.10.0/24 use this in Mikrotik terminal: /ip firewall filter add action=drop chain=input dst-port=1080 protocol=tcp src-...
deadhacker1900's user avatar
2 votes
Accepted

how to forbid connecting to localhost for ssh socks5 proxy

The ssh SOCKS implementation doesn't have many features. I'd use a more robust SOCKS proxy. However, you can use iptables to accomplish this. Something like: iptables -A input -i lo -m owner --uid-...
Mark Wagner's user avatar
  • 18.1k
2 votes

Redirect all the http and https traffic throught a SOCKS proxy

You need to run the ssh command on A ssh -N -D 1337 b_username@ip_of_b You can then configure your web-browser or set environment variables to point at this proxy: 127.0.0.1:1337 If you want to use ...
ita's user avatar
  • 121
2 votes
Accepted

Dante SOCKS server with two external interfaces (e.g. Wired Ethernet and Wi-Fi)

For the time being, I went with goproxy, what a gem! Essentially, $ goproxy socks -t tcp -p '0.0.0.0:1080' does the trick without any hassle about binding any particular outgoing interfaces. I got ...
Alexander Shukaev's user avatar
2 votes

How to route browser traffic through an OpenVPN connection on Linux?

You could use iproute2 and uid of the user that run browser or whatever. For example: ip route add table 502 default dev tun0 lp rule add uidrange 1000-1002 table 502
nih's user avatar
  • 46
1 vote

Dante Socks5 allow access from ip range

Sorry to see no one have answered your question yet. What you want to read up on is subnet. If your ISP ip range is 105.55.xxx.xxx and you want to only allow ip range from 105.55.0.0 -> 105.55.255....
JoakimE's user avatar
  • 138
1 vote

Proxy vpn traffic into socks or second vpn

It's been five (5) years - almost to the day - since I posted this question (holy existential dread Batman!). For the sake of anyone coming here from a web search: Use Wireguard I was able to solve ...
cegfault's user avatar
  • 185
1 vote

SSH Tunnel: channel 3: open failed: administratively prohibited

What you list is just the default values, commented out. So you can add, below a Host * something like: AllowTcpForwarding local Note that yes should be the default, so it is strange it does not ...
Patrick Mevzek's user avatar
1 vote

How to use SSH to create SOCKS server on remote side?

I don't know about such an option of ssh, but you can get creative and combine -R and -D in two ssh commands like: ssh -D 4711 localhost& ssh -R 4711:localhost:4711 Of course you can use any ...
TomTomTom's user avatar
  • 611
1 vote

Provide multiple VPN instances via SSH tunnels on proxy host

I'm assuming both private networks provide a publicly accessible OpenVPN server, and push the appropriate routes. Just connect to all OpenVPN servers simultaneously from the proxy server. Run ip ...
Tanmay's user avatar
  • 225
1 vote

Dante 1.4.x sockd not working for localhost

Your SOCKS client is probably sending a request using the SOCKS4A protocol which is an extension to SOCKS4 that allows clients to send destination domain names rather than IP addresses to the proxy ...
Steven Grimm's user avatar
1 vote

How can I make docker-compose pull images using a socks5 proxy?

@nikhilweee's answer above is missing a crucial point. The proxy used for image-pull is taken from the environment of dockerd. There is presently no way to change it without restarting dockerd. I ...
robbat2's user avatar
  • 350
1 vote

Openvpn forward all routing to a socks port

MadHatter's answer is correct, however I suspect this is a case of XY Problem. If you terminate OpenVPN on a machine that is capable of routing and NATing traffic (read: any modern server operating ...
Mike Seth's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible