mirror of
https://github.com/darkk/redsocks.git
synced 2025-08-30 21:55:31 +00:00
82 lines
2.0 KiB
Plaintext
82 lines
2.0 KiB
Plaintext
base {
|
|
// debug: connection progress & client list on SIGUSR1
|
|
log_debug = on;
|
|
|
|
// info: start and end of client session
|
|
log_info = on;
|
|
|
|
/* possible `log' values are:
|
|
* stderr
|
|
* file:/path/to/file
|
|
* syslog:FACILITY facility is any of "daemon", "local0"..."local7"
|
|
*/
|
|
log = stderr;
|
|
|
|
// detach from console
|
|
daemon = off;
|
|
|
|
/* Change uid, gid and root directory, these options require root
|
|
* privilegies on startup.
|
|
* Note, your chroot may requre /etc/localtime if you write log to syslog.
|
|
* Log is opened before chroot & uid changing.
|
|
*/
|
|
// user = nobody;
|
|
// group = nobody;
|
|
// chroot = "/var/chroot";
|
|
|
|
/* possible `redirector' values are:
|
|
* iptables - for Linux
|
|
* ipf - for FreeBSD
|
|
* pw - for OpenBSD
|
|
* generic - some generic redirector that MAY work
|
|
*/
|
|
redirector = iptables;
|
|
}
|
|
|
|
redsocks {
|
|
/* `local_ip' defaults to 127.0.0.1 for security reasons,
|
|
* use 0.0.0.0 if you want to listen on every interface.
|
|
* `local_*' are used as port to redirect to.
|
|
*/
|
|
local_ip = 127.0.0.1;
|
|
local_port = 12345;
|
|
|
|
// `ip' and `port' are IP and tcp-port of proxy-server
|
|
ip = 127.0.0.1;
|
|
port = 1080;
|
|
|
|
|
|
// known types: socks4, socks5, http-connect, http-relay
|
|
type = socks5;
|
|
|
|
// login = "foobar";
|
|
// password = "baz";
|
|
}
|
|
|
|
redudp {
|
|
// `local_ip' should not be 0.0.0.0 as it's also used for outgoing
|
|
// packets that are sent as replies - and it should be fixed
|
|
// if we want NAT to work properly.
|
|
local_ip = 127.0.0.1;
|
|
local_port = 10053;
|
|
|
|
// `ip' and `port' of socks5 proxy server.
|
|
ip = 10.0.0.1;
|
|
port = 1080;
|
|
login = username;
|
|
password = pazzw0rd;
|
|
|
|
// kernel does not give us this information, so we have to duplicate it
|
|
// in both iptables rules and configuration file. By the way, you can
|
|
// set `local_ip' to 127.45.67.89 if you need more than 65535 ports to
|
|
// forward ;-)
|
|
// This limitation may be relaxed in future versions using contrack-tools.
|
|
dest_ip = 8.8.8.8;
|
|
dest_port = 53;
|
|
|
|
udp_timeout = 30;
|
|
udp_timeout_stream = 180;
|
|
}
|
|
|
|
// you can add more `redsocks' and `redudp' sections if you need.
|