libsocks5.conf.5
资源名称:socks5.zip [点击查看]
上传用户:sddyfurun
上传日期:2007-01-04
资源大小:525k
文件大小:10k
源码类别:
代理服务器
开发平台:
Unix_Linux
- .TH libsocks5.conf 5 "14 Aug 1998"
- .SH NAME
- .HP 18
- libsocks5.conf - configuration file for the socks5 client library
- .SH SYNOPSIS
- The socks5 client library usually reads the configuration file in /etc/libsocks5.conf. When you configure and build socks5 with the
- .PP
- .RS 5
- --with-libconffile=fIfilenamefP
- .RE
- .PP
- option, you can change the directory. Under FreeBSD's UNIX port, the configuration file resides in /usr/local/etc/libsocks5.conf.
- .SH DESCRIPTION
- libsocks5.conf contains information the socks5 client library uses to determine if it should connect directly or through a SOCKS server, what kind of SOCKS server to use, and the port on the server through which to connect.
- .PP
- .SH ENTRIES
- All lines in the libsocks5.conf file use the syntax:
- .PP
- .RS 5
- fIproxy cmd dest-host dest-port [userlist [proxylist]]fP
- .RE
- .TP 12
- .B fIproxyfP
- Identifies the type of proxy server. Valid values include:
- .RS 15
- .TP 15
- .B socks4
- SOCKS4 server
- .TP
- .B socks5
- SOCKSv5 server
- .TP
- .B noproxy
- direct connections
- .RE
- .PP
- .TP 12
- .B fIcmdfP
- Must be a valid fIcommandpatternfP. When you specify ping or traceroute as the command, the client ignores fIdest-hostfP and fIdest-portfP, and only attempts connection to the first server in fIproxylist.fP If the first server is not available the command fails.
- .TP
- .B fIdest-hostfP
- Must be a valid fIhostpatternfP
- .TP
- .B fIdest-portfP
- Must be a valid fIportpatternfP
- .TP
- .B fIuserlistfP
- Optional, must be a valid fIuserpatternfP
- .TP
- .B fIproxylistfP
- Optional, must be a valid fIproxypatternfP and include the SOCKS server(s) this proxy entry uses. Omitting fIproxylistfP, instructs the client to use environment variable settings. When you omit fIproxylistfP, the client uses:
- .RS 15
- .TP 2
- .B fIproxyfP is socks5
- The value of the environment variable SOCKS5_SERVER. When SOCKS5_SERVER is not set, the client uses the SOCKS_SERVER environment variable setting. When SOCKS_SERVER is not set, the client uses SOCKS_DEFAULT_SERVER, a default value compiled in the software.
- .TP
- .B fIproxyfP is socks4
- The value of the environment variable SOCKS4_SERVER. When SOCKS4_SERVER is not set, the client uses the SOCKS_SERVER environment variable setting. When SOCKS_SERVER is not set, the client uses SOCKS_DEFAULT_SERVER, a default value compiled in the software.
- .RE
- .PP
- .SH PATTERNS
- .SH fIcommandpatternfP
- Specify commands as a fIcommandpatternfP, a comma separated list of letters, with no white space. libsocks5 recognizes these commands:
- .RS 5
- .TP 15
- .B c
- connect
- .TP
- .B b
- bind
- .TP
- .B u
- UDP
- .TP
- .B p
- ping
- .TP
- .B t
- traceroute
- .TP
- .B -
- any command
- .RE
- .PP
- .SH fIhostpatternfP
- Specify host addresses and netmasks as a fIhostpatternfP, using this format:
- .RS 5
- .TP 15
- .B hostip/mask
- Matches when the host address bitwise anded with the mask equals the hostip anded with the mask. Use hostip/mask to mask the host portion of the address from the network or subnetwork portion.
- .TP 15
- .B -
- all hosts match
- .TP
- .B n1.
- equivalent to n1.0.0.0/255.0.0.0
- .TP
- .B n1.n2.
- equivalent to n1.n2.0.0/255.255.0.0
- .TP
- .B n1.n2.n3.
- equivalent to n1.n2.n3.0/255.255.255.0
- .TP
- .B .domain.name
- hostname must end with the string .domain.name
- .TP
- .B a.host.name
- hostname must match exactly with a.host.name
- .PP
- .RE
- Although libsocks5 also supports older fIhostpatternfP syntax, we recommend using the newer method. The newer method is also easier to read. The older fIhostpatternfP syntax is:
- .RS 5
- .TP 15
- .B hostip/a
- all match, same as "-"
- .TP
- .B hostip/n
- network match. Masks the host and subnet portions of the address, leaving the network portion. The IP address class for hostip determines the mask.
- .TP
- .B hostip/s
- subnet match. Masks the host portion of the address, leaving the subnetwork and network portion. The IP address class for hostip determines the mask.
- .TP
- .B hostip/h
- host match, equivalent to hostip
- .PP
- .RE
- .SH fIportpatternfP
- Specify ports in a fIportpatternfP as a service name, number, or range. Enclose ranges in brackets to indicate the range is inclusive, or parentheses to indicate the range is non-inclusive. Specify the range as two port names or numbers, separated by a comma, with no white space.
- .RS 5
- .TP 15
- .B tftp
- the service port for tftp, usually port 69
- .TP
- .B 80
- port 80
- .TP
- .B -
- all ports
- .TP
- .B [100,1000]
- ports 100 through 1000
- .TP
- .B (100,1000)
- ports 101 through 999
- .TP
- .B (100,1000]
- ports 101 through 1000
- .RE
- .PP
- .SH fIuserpatternfP
- Specify multiple users in a fIuserpatternfP, a comma separated list of individual UNIX usernames with no white space or wildcard patterns. Dash, -, matches all users.
- .PP
- .SH fIproxypatternfP
- Specify SOCKS servers as a fIproxypatternfP, a comma separated list of fIserver entriesfP, with no white space. Specify servers in order of preference. The client attempts to connect to servers in the order in which they are listed in the fIproxypatternfP. It only attempts connections to a server when the preceding server is not available. If fIcmdfP is the ping or traceroute commands, the client only attempts to connect to the first server in fIproxypatternfP.
- .PP
- .SH fIserver entriesfP
- A server entry is a hostname or IP address, optionally followed by a colon and the port number. When you omit the port number, the socks5 client library uses the default port.
- .RS 5
- .TP 15
- .B host
- hostname, default port
- .TP
- .B host:port
- hostname, port
- .RE
- .SH ENVIRONMENT
- These environment variables control the Client library.
- .TP
- .B SOCKS5_DEBUG [fIvalfP]
- Turns on debugging and optionally sets the debug level to fIvalfP. If you omit fIvalfP, libsocks5 sends only warning messages.
- .RS 5
- .PP
- Valid values for val are 1, 2, and 3. If you specify other values, libsocks5 assumes 3. Valid values and their meanings are:
- .RS 3
- .HP 14
- .B 1
- LOG_NOTICE Reports non-error conditions that may require special handling
- .HP 14
- .B 2
- LOG_INFO Reports informational messages
- .HP 14
- .B 3
- LOG_DEBUG Reports information useful for debugging
- .RE
- .RE
- .TP
- .B SOCKS5_ENCRYPT
- If possible, the next server should encrypt the link. SOCKS5_ENCRYPT is only useful when the socks5 build includes Kerberos authentication.
- .TP
- .B SOCKS5_FAKEALLHOSTS
- Specify that the client library should fake all hostname lookups. Faking all hosts causes faster connections when the host lookup is slow. SOCKS5_FAKEALLHOSTS and SOCKS5_LOCALDNSONLY are mutually exclusive. Setting both causes all DNS lookups to fail.
- .TP
- SOCKS5_LIBCONF fIfilenamefP
- fIfilenamefP specifies an alternate file name for the libsocks5.conf file. The socks5 client library usually reads the configuration file in /etc/libsocks5.conf. Use this environment variable to change the directory and file name.
- .TP
- SOCKS5_LOCALDNSONLY
- Specify to never fake hostnames. Preventing faking limits unnecessary connections to the server on systems on which the client can resolve the same names that the server resolves. SOCKS5_FAKEALLHOSTS and SOCKS5_LOCALDNSONLY are mutually exclusive. Setting both causes all DNS lookups to fail.
- .TP
- .B SOCKS5_LOG_STDERR
- Sends debug output to stderr.
- .TP
- .B SOCKS5_LOG_SYSLOG
- Sends debug output to syslog. When you omit the debug output destination, socks5 sends the output to the system log. To send debug output to stderr and syslog, set SOCKS5_LOG_SYSLOG and SOCKS5_LOG_STDERR.
- .TP
- .B SOCKS5_NOINTCHK
- The next server should proxy the data only, and should not integrity check it. SOCKS5_ NOINTCHK is only useful when the socks5 build includes Kerberos authentication.
- .TP
- .B SOCKS5_NONETMASKCHECK
- Instructs the client to disregard checking the client host's netmask. By default, the client checks the netmask and connects directly to hosts on the same subnet before consulting the configuration file.
- .TP
- .B SOCKS5_PASSWD [fIpasswordfP]
- Identify the password for Username/Password authentication.
- .TP
- .B SOCKS5_PRESERVE_STDERR
- Prevent the system from closing stderr or dup2ing it. This is most useful for debugging X Windows processes that send stderr output to a window that fills up too quickly, or constantly pops up.
- .TP
- .B SOCKS5_SERVER fI[host:port] [host]fP
- Identify the socks5 server the client uses and sets SOCKSv5 as the default version. See fIserver entriesfP for additional information on specifying fIhostfP and fIportfP, and fIproxylistfP for additional information on how socks5 searches for the server.
- .TP
- .B SOCKS4_SERVER fI[host] [host:port]fP
- Identify the socks4 server the client uses and sets socks4 as the default version. See fIserver entriesfP for additional information on specifying fIhostfP and fIportfP, and fIproxylistfP for additional information on how socks5 searches for the server.
- .TP
- .B SOCKS_SERVER fI[host] [host:port]fP
- Identify the default socks server, version 4 or 5, to use when SOCKS5_SERVER or SOCKS4_SERVER is not set and the client requires a specific version. SOCKS_SERVER sets socks5 as the default version. See fIserver entriesfP for additional information on specifying the fIhostfP and fIportfP, and fIproxylistfP for additional information on how socks5 searches for the server.
- .TP
- .B SOCKS5_USER [fIuser idfP]
- Identify the username for Username/Password authentication.
- .SH EXAMPLES
- .RS 5
- .TP
- socks4 - - - -
- .RE
- Allows socks5 clients to use a socks4 server, and uses the socks4 server identified in the SOCKS4_SERVER environment variable.
- .PP
- .RS 5
- socks5 - 143.101.64.200 telnet fred 11.22.33.10
- .RE
- Only allows user fred to telnet to host 143.101.64.200 using the socks5 server running on 11.22.33.10
- .PP
- .RS 5
- noproxy - 11.22.33. - -
- .RE
- Specifies a direct connection to subnetwork 11.22.33
- .PP
- .RS 5
- socks5 - - - - srvA:1090,srvB
- .RE
- Specifies two socks5 servers, srvA on port 1090 and srvB on the default port.
- .PP
- .RS 5
- socks5 - 131.12.24.16 - jeff servA,servB
- .RE
- User jeff can issue any command to destination host 131.12.24.16 to any destination port using servA. If servA is unavailable, the client attempts to use servB, unless the client issued a ping or traceroute command.
- .PP
- .SH SEE ALSO
- socks5.conf(5) and socks5_clients(1)
- .SH AUTHORS
- NWSL SOCKS5 Development Team
- .br
- Send comments to socks5-comments@socks.nec.com