|
|
@@ -0,0 +1,91 @@ |
|
|
|
base { |
|
|
|
// debug: connection progress & client list on SIGUSR1 |
|
|
|
log_debug = off; |
|
|
|
|
|
|
|
// info: start and end of client session |
|
|
|
log_info = on; |
|
|
|
|
|
|
|
/* possible `log' values are: |
|
|
|
* stderr |
|
|
|
* "file:/path/to/file" |
|
|
|
* syslog:FACILITY facility is any of "daemon", "local0"..."local7" |
|
|
|
*/ |
|
|
|
log = "syslog:daemon"; |
|
|
|
|
|
|
|
// detach from console |
|
|
|
daemon = on; |
|
|
|
|
|
|
|
/* Change uid, gid and root directory, these options require root |
|
|
|
* privilegies on startup. |
|
|
|
* Note, your chroot may requre /etc/localtime if you write log to syslog. |
|
|
|
* Log is opened before chroot & uid changing. |
|
|
|
*/ |
|
|
|
user = redsocks; |
|
|
|
group = redsocks; |
|
|
|
// chroot = "/var/chroot"; |
|
|
|
|
|
|
|
/* possible `redirector' values are: |
|
|
|
* iptables - for Linux |
|
|
|
* ipf - for FreeBSD |
|
|
|
* pf - for OpenBSD |
|
|
|
* generic - some generic redirector that MAY work |
|
|
|
*/ |
|
|
|
redirector = iptables; |
|
|
|
} |
|
|
|
|
|
|
|
redsocks { |
|
|
|
/* `local_ip' defaults to 127.0.0.1 for security reasons, |
|
|
|
* use 0.0.0.0 if you want to listen on every interface. |
|
|
|
* `local_*' are used as port to redirect to. |
|
|
|
*/ |
|
|
|
local_ip = 127.0.0.1; |
|
|
|
local_port = 9040; |
|
|
|
|
|
|
|
// `ip' and `port' are IP and tcp-port of proxy-server |
|
|
|
// You can also use hostname instead of IP, only one (random) |
|
|
|
// address of multihomed host will be used. |
|
|
|
ip = 127.0.0.1; |
|
|
|
port = 9050; |
|
|
|
|
|
|
|
|
|
|
|
// known types: socks4, socks5, http-connect, http-relay |
|
|
|
type = socks5; |
|
|
|
|
|
|
|
// login = "foobar"; |
|
|
|
// password = "baz"; |
|
|
|
} |
|
|
|
|
|
|
|
//redudp { |
|
|
|
// // `local_ip' should not be 0.0.0.0 as it's also used for outgoing |
|
|
|
// // packets that are sent as replies - and it should be fixed |
|
|
|
// // if we want NAT to work properly. |
|
|
|
// local_ip = 127.0.0.1; |
|
|
|
// local_port = 10053; |
|
|
|
// |
|
|
|
// // `ip' and `port' of socks5 proxy server. |
|
|
|
// ip = 192.0.2.1; |
|
|
|
// port = 1080; |
|
|
|
// login = username; |
|
|
|
// password = pazzw0rd; |
|
|
|
// |
|
|
|
// // kernel does not give us this information, so we have to duplicate it |
|
|
|
// // in both iptables rules and configuration file. By the way, you can |
|
|
|
// // set `local_ip' to 127.45.67.89 if you need more than 65535 ports to |
|
|
|
// // forward ;-) |
|
|
|
// // This limitation may be relaxed in future versions using contrack-tools. |
|
|
|
// dest_ip = 192.0.2.2; |
|
|
|
// dest_port = 53; |
|
|
|
// |
|
|
|
// udp_timeout = 30; |
|
|
|
// udp_timeout_stream = 180; |
|
|
|
//} |
|
|
|
|
|
|
|
//dnstc { |
|
|
|
// // fake and really dumb DNS server that returns "truncated answer" to |
|
|
|
// // every query via UDP, RFC-compliant resolver should repeat same query |
|
|
|
// // via TCP in this case. |
|
|
|
// local_ip = 127.0.0.1; |
|
|
|
// local_port = 5300; |
|
|
|
//} |
|
|
|
|
|
|
|
// you can add more `redsocks' and `redudp' sections if you need. |