libsocks5.conf.5

socket5 代理服务代码 socket5 代理服务代码

.TH libsocks5.conf 5 "14 Aug 1998"
.SH NAME
.HP 18
libsocks5.conf - configuration file for the socks5 client library
.SH SYNOPSIS
The socks5 client library usually reads the configuration file in /etc/libsocks5.conf. When you configure and build socks5 with the
.PP
.RS 5
--with-libconffile=\fIfilename\fP
.RE
.PP
option, you can change the directory. Under FreeBSD's UNIX port, the configuration file resides in /usr/local/etc/libsocks5.conf.
.SH DESCRIPTION
libsocks5.conf contains information the socks5 client library uses to determine if it should connect directly or through a SOCKS server, what kind of SOCKS server to use, and the port on the server through which to connect.
.PP
.SH ENTRIES
All lines in the libsocks5.conf file use the syntax:
.PP
.RS 5
\fIproxy cmd dest-host dest-port [userlist [proxylist]]\fP
.RE
.TP 12
.B \fIproxy\fP
Identifies the type of proxy server. Valid values include:
.RS 15
.TP 15
.B socks4
SOCKS4 server
.TP
.B socks5
SOCKSv5 server
.TP
.B noproxy
direct connections
.RE
.PP
.TP 12
.B \fIcmd\fP
Must be a valid \fIcommandpattern\fP. When you specify ping or traceroute as the command, the client ignores \fIdest-host\fP and \fIdest-port\fP, and only attempts connection to the first server in \fIproxylist.\fP If the first server is not available the command fails.
.TP
.B \fIdest-host\fP
Must be a valid \fIhostpattern\fP
.TP
.B \fIdest-port\fP
Must be a valid \fIportpattern\fP
.TP
.B \fIuserlist\fP
Optional, must be a valid \fIuserpattern\fP
.TP
.B \fIproxylist\fP
Optional, must be a valid \fIproxypattern\fP and include the SOCKS server(s) this proxy entry uses. Omitting \fIproxylist\fP, instructs the client to use environment variable settings. When you omit \fIproxylist\fP, the client uses:
.RS 15
.TP 2
.B \fIproxy\fP is socks5
The value of the environment variable SOCKS5_SERVER. When SOCKS5_SERVER is not set, the client uses the SOCKS_SERVER environment variable setting. When SOCKS_SERVER is not set, the client uses SOCKS_DEFAULT_SERVER, a default value compiled in the software.
.TP
.B \fIproxy\fP is socks4
The value of the environment variable SOCKS4_SERVER. When SOCKS4_SERVER is not set, the client uses the SOCKS_SERVER environment variable setting. When SOCKS_SERVER is not set, the client uses SOCKS_DEFAULT_SERVER, a default value compiled in the software.
.RE
.PP
.SH PATTERNS
.SH \fIcommandpattern\fP
Specify commands as a \fIcommandpattern\fP, a comma separated list of letters, with no white space. libsocks5 recognizes these commands:
.RS 5
.TP 15
.B c
connect
.TP
.B b
bind
.TP
.B u
UDP
.TP
.B p
ping
.TP
.B t
traceroute
.TP
.B -
any command
.RE
.PP
.SH \fIhostpattern\fP
Specify host addresses and netmasks as a \fIhostpattern\fP, using this format:
.RS 5
.TP 15
.B hostip/mask
Matches when the host address bitwise anded with the mask equals the hostip anded with the mask. Use hostip/mask to mask the host portion of the address from the network or subnetwork portion.
.TP 15
.B -
all hosts match
.TP
.B n1.
equivalent to n1.0.0.0/255.0.0.0
.TP
.B n1.n2.
equivalent to n1.n2.0.0/255.255.0.0
.TP
.B n1.n2.n3.
equivalent to n1.n2.n3.0/255.255.255.0
.TP
.B .domain.name
hostname must end with the string .domain.name
.TP
.B a.host.name
hostname must match exactly with a.host.name
.PP
.RE
Although libsocks5 also supports older \fIhostpattern\fP syntax, we recommend using the newer method. The newer method is also easier to read. The older \fIhostpattern\fP syntax is:
.RS 5
.TP 15
.B hostip/a
all match, same as "-"
.TP
.B hostip/n
network match. Masks the host and subnet portions of the address, leaving the network portion. The IP address class for hostip determines the mask.
.TP
.B hostip/s
subnet match. Masks the host portion of the address, leaving the subnetwork and network portion. The IP address class for hostip determines the mask.
.TP
.B hostip/h
host match, equivalent to hostip
.PP
.RE
.SH \fIportpattern\fP
Specify ports in a \fIportpattern\fP as a service name, number, or range. Enclose ranges in brackets to indicate the range is inclusive, or parentheses to indicate the range is non-inclusive. Specify the range as two port names or numbers, separated by a comma, with no white space. 
.RS 5
.TP 15
.B tftp
the service port for tftp, usually port 69
.TP
.B 80
port 80
.TP
.B -
all ports
.TP
.B [100,1000]
ports 100 through 1000
.TP
.B (100,1000)
ports 101 through 999
.TP
.B (100,1000]
ports 101 through 1000
.RE
.PP
.SH \fIuserpattern\fP
Specify multiple users in a \fIuserpattern\fP, a comma separated list of individual UNIX usernames with no white space or wildcard patterns. Dash, -, matches all users. 
.PP
.SH \fIproxypattern\fP
Specify SOCKS servers as a \fIproxypattern\fP, a comma separated list of \fIserver entries\fP, with no white space. Specify servers in order of preference. The client attempts to connect to servers in the order in which they are listed in the \fIproxypattern\fP. It only attempts connections to a server when the preceding server is not available. If \fIcmd\fP is the ping or traceroute commands, the client only attempts to connect to the first server in \fIproxypattern\fP.
.PP
.SH \fIserver entries\fP
A server entry is a hostname or IP address, optionally followed by a colon and the port number. When you omit the port number, the socks5 client library uses the default port. 
.RS 5
.TP 15
.B host
hostname, default port
.TP
.B host:port
hostname, port
.RE
.SH ENVIRONMENT
These environment variables control the Client library.
.TP 
.B SOCKS5_DEBUG [\fIval\fP]
Turns on debugging and optionally sets the debug level to \fIval\fP. If you omit \fIval\fP, libsocks5 sends only warning messages.
.RS 5
.PP
Valid values for val are 1, 2, and 3. If you specify other values, libsocks5 assumes 3. Valid values and their meanings are:
.RS 3
.HP 14
.B 1 
LOG_NOTICE  Reports non-error conditions that may require special handling
.HP 14
.B 2
LOG_INFO    Reports informational messages
.HP 14
.B 3
LOG_DEBUG   Reports information useful for debugging
.RE
.RE
.TP
.B SOCKS5_ENCRYPT
If possible, the next server should encrypt the link. SOCKS5_ENCRYPT is only useful when the socks5 build includes Kerberos authentication.
.TP 
.B SOCKS5_FAKEALLHOSTS
Specify that the client library should fake all hostname lookups. Faking all hosts causes faster connections when the host lookup is slow. SOCKS5_FAKEALLHOSTS and SOCKS5_LOCALDNSONLY are mutually exclusive. Setting both causes all DNS lookups to fail.
.TP
SOCKS5_LIBCONF \fIfilename\fP
\fIfilename\fP specifies an alternate file name for the libsocks5.conf file. The socks5 client library usually reads the configuration file in /etc/libsocks5.conf. Use this environment variable to change the directory and file name.
.TP
SOCKS5_LOCALDNSONLY
Specify to never fake hostnames. Preventing faking limits unnecessary connections to the server on systems on which the client can resolve the same names that the server resolves. SOCKS5_FAKEALLHOSTS and SOCKS5_LOCALDNSONLY are mutually exclusive. Setting both causes all DNS lookups to fail.
.TP 
.B SOCKS5_LOG_STDERR
Sends debug output to stderr.
.TP 
.B SOCKS5_LOG_SYSLOG
Sends debug output to syslog. When you omit the debug output destination, socks5 sends the output to the system log. To send debug output to stderr and syslog, set SOCKS5_LOG_SYSLOG and SOCKS5_LOG_STDERR.
.TP
.B SOCKS5_NOINTCHK
The next server should proxy the data only, and should not integrity check it. SOCKS5_ NOINTCHK is only useful when the socks5 build includes Kerberos authentication.
.TP
.B SOCKS5_NONETMASKCHECK
Instructs the client to disregard checking the client host's netmask. By default, the client checks the netmask and connects directly to hosts on the same subnet before consulting the configuration file.
.TP 
.B SOCKS5_PASSWD [\fIpassword\fP]
Identify the password for Username/Password authentication.
.TP
.B SOCKS5_PRESERVE_STDERR
Prevent the system from closing stderr or dup2ing it. This is most useful for debugging X Windows processes that send stderr output to a window that fills up too quickly, or constantly pops up.
.TP
.B SOCKS5_SERVER \fI[host:port] [host]\fP
Identify the socks5 server the client uses and sets SOCKSv5 as the default version. See \fIserver entries\fP for additional information on specifying \fIhost\fP and \fIport\fP, and \fIproxylist\fP for additional information on how socks5 searches for the server.
.TP 
.B SOCKS4_SERVER \fI[host] [host:port]\fP
Identify the socks4 server the client uses and sets socks4 as the default version. See \fIserver entries\fP for additional information on specifying \fIhost\fP and \fIport\fP, and \fIproxylist\fP for additional information on how socks5 searches for the server.
.TP 
.B SOCKS_SERVER \fI[host] [host:port]\fP
Identify the default socks server, version 4 or 5, to use when SOCKS5_SERVER or SOCKS4_SERVER is not set and the client requires a specific version. SOCKS_SERVER sets socks5 as the default version. See \fIserver entries\fP for additional information on specifying the \fIhost\fP and \fIport\fP, and \fIproxylist\fP for additional information on how socks5 searches for the server.
.TP 
.B SOCKS5_USER [\fIuser id\fP]
Identify the username for Username/Password authentication.
.SH EXAMPLES
.RS 5
.TP
socks4	-	-	-	-
.RE
Allows socks5 clients to use a socks4 server, and uses the socks4 server identified in the SOCKS4_SERVER environment variable.
.PP
.RS 5
socks5	-  143.101.64.200  telnet  fred  11.22.33.10
.RE
Only allows user fred to telnet to host 143.101.64.200 using the socks5 server running on 11.22.33.10
.PP
.RS 5
noproxy	-   11.22.33.   -   -
.RE
Specifies a direct connection to subnetwork 11.22.33
.PP
.RS 5
socks5	-   -   -   -   srvA:1090,srvB
.RE
Specifies two socks5 servers, srvA on port 1090 and srvB on the default port.
.PP
.RS 5
socks5 	-  131.12.24.16  -  jeff  servA,servB
.RE
User jeff can issue any command to destination host 131.12.24.16 to any destination port using servA. If servA is unavailable, the client attempts to use servB, unless the client issued a ping or traceroute command.
.PP
.SH SEE ALSO
socks5.conf(5) and socks5_clients(1)
.SH AUTHORS
NWSL SOCKS5 Development Team
.br
Send comments to [e-mail]