/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */



> I don't use the socks server for IRC.  The security issue is this.  When I
> connect to them, they connect to me to make sure I have a secure proxy
> running.  They do this by sending a socks packet, and seeing if they get
an
> OK reply from the server (which in this case is my masq server).  If they
> get an OK packet, that means they can hide behind my socks server and do
> malicious acts.  I had to set up password authentication in order to make
> my server "secure" according to them.  The thing that strikes me as odd is
> that I had it set up exactly like it said for the multi-homed setup (my
> masq server is multi-homed naturally) on nec's site, and they still said I
> was insecure.  I even tried using the socks server from an outside
> computer, and it wouldn't let me.  Alas, the script on the IRC network
says
> it's insecure.  The same result came when I used Fuzzy's config.

I was failing the DalNet "secure proxy check" till I came up with the
following socks5.conf settings:

interface 192.168.1. - eth0
auth 192.168.1. - -
permit - - 192.168.1. - - - -
deny - - - - - - -

eth0 is the interface to my private network (192.168.1.*) and eth1 is the
interface to my cable modem.

John


_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES 
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to