| @@ -0,0 +1,91 @@ | |||
| base { | |||
| // debug: connection progress & client list on SIGUSR1 | |||
| log_debug = off; | |||
| // info: start and end of client session | |||
| log_info = on; | |||
| /* possible `log' values are: | |||
| * stderr | |||
| * "file:/path/to/file" | |||
| * syslog:FACILITY facility is any of "daemon", "local0"..."local7" | |||
| */ | |||
| log = "syslog:daemon"; | |||
| // detach from console | |||
| daemon = on; | |||
| /* Change uid, gid and root directory, these options require root | |||
| * privilegies on startup. | |||
| * Note, your chroot may requre /etc/localtime if you write log to syslog. | |||
| * Log is opened before chroot & uid changing. | |||
| */ | |||
| user = redsocks; | |||
| group = redsocks; | |||
| // chroot = "/var/chroot"; | |||
| /* possible `redirector' values are: | |||
| * iptables - for Linux | |||
| * ipf - for FreeBSD | |||
| * pf - for OpenBSD | |||
| * generic - some generic redirector that MAY work | |||
| */ | |||
| redirector = iptables; | |||
| } | |||
| redsocks { | |||
| /* `local_ip' defaults to 127.0.0.1 for security reasons, | |||
| * use 0.0.0.0 if you want to listen on every interface. | |||
| * `local_*' are used as port to redirect to. | |||
| */ | |||
| local_ip = 127.0.0.1; | |||
| local_port = 9040; | |||
| // `ip' and `port' are IP and tcp-port of proxy-server | |||
| // You can also use hostname instead of IP, only one (random) | |||
| // address of multihomed host will be used. | |||
| ip = 127.0.0.1; | |||
| port = 9050; | |||
| // known types: socks4, socks5, http-connect, http-relay | |||
| type = socks5; | |||
| // login = "foobar"; | |||
| // password = "baz"; | |||
| } | |||
| //redudp { | |||
| // // `local_ip' should not be 0.0.0.0 as it's also used for outgoing | |||
| // // packets that are sent as replies - and it should be fixed | |||
| // // if we want NAT to work properly. | |||
| // local_ip = 127.0.0.1; | |||
| // local_port = 10053; | |||
| // | |||
| // // `ip' and `port' of socks5 proxy server. | |||
| // ip = 192.0.2.1; | |||
| // port = 1080; | |||
| // login = username; | |||
| // password = pazzw0rd; | |||
| // | |||
| // // kernel does not give us this information, so we have to duplicate it | |||
| // // in both iptables rules and configuration file. By the way, you can | |||
| // // set `local_ip' to 127.45.67.89 if you need more than 65535 ports to | |||
| // // forward ;-) | |||
| // // This limitation may be relaxed in future versions using contrack-tools. | |||
| // dest_ip = 192.0.2.2; | |||
| // dest_port = 53; | |||
| // | |||
| // udp_timeout = 30; | |||
| // udp_timeout_stream = 180; | |||
| //} | |||
| //dnstc { | |||
| // // fake and really dumb DNS server that returns "truncated answer" to | |||
| // // every query via UDP, RFC-compliant resolver should repeat same query | |||
| // // via TCP in this case. | |||
| // local_ip = 127.0.0.1; | |||
| // local_port = 5300; | |||
| //} | |||
| // you can add more `redsocks' and `redudp' sections if you need. | |||