search for: socks5

Hi, has anybody seen a patch that provides socks version 5 support for the dynamic portforwarding feature? I?ve seen thats implemented in ssh.com?s ssh version, but found nothing about openssh. Only thing i found was a patch to provide socks4a. cu sleepi

My desire is to form a connection from my laptop running ubuntu to a SOCKS5 server listed on the Internet. I have read the Ubuntu man page on OpenSSH client program. The description indicates that I have to connect to given host name (assumed to be an ip address?) with optional username. I want the server receive my Internet traffic in SOCKS5 protocol and respond to my...

> Winton-- > > Excellent! Absolutely wonderful. > > I'm wondering which apps/encapsulators support 4A? This gets me > around > the DNS leakage problem quite nicely. > > Incidentally, we do need SOCKS5 support -- if for no other > reason, the > fact that there's *operating system* level support in OSX for SOCKS5 > redirection. So OpenSSH can become a completely transparent VPN > system in OSX w/ SOCKS5. > > Even without OSX, a decent number of apps only support SOCK...

...-0400, Ault, James R (CRD) wrote: > I was reading the changelog from version 2.9 that was recently released, and I coudln't help noticing > this item: > > from openssh changelog: > > - markus at cvs.openbsd.org 2001/04/17 12:55:04 > [channels.c ssh.c] > undo socks5 and https support since they are not really used and > only bloat ssh. > > > I would like to say that I am one person that does care about ssh with socks5 support, and I would > like to see it stay in openssh. openssh did never include support for client side socks. you can...

Hi, Currently, OpenSSH only accepts the SOCKS5 command "CONNECT": <https://anongit.mindrot.org/openssh.git/tree/channels.c#n1281> The RFC also specifies the commands "BIND" and "UDP ASSOCIATE": <https://tools.ietf.org/html/rfc1928#section-4> As a consequence, in particular, a SOCKS5 server started wit...

Hello list, I wonder why tinc tries to resolve host names before connection even with configured (socks5) proxy which fails behind restrictive firewalls. Is there any "workaround"? Thanks in advance! Regards Uwe -------------- n?chster Teil -------------- Ein Dateianhang mit HTML-Daten wurde abgetrennt... URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20151027/0ec2a4da/attach...

...n 2003 08:23:46 -0000 1.191 +++ channels.c 25 Jun 2003 12:14:19 -0000 @@ -54,7 +54,7 @@ #include "key.h" #include "authfd.h" #include "pathnames.h" - +#include "bufaux.h" /* -- channel core */ @@ -940,6 +940,115 @@ return 1; } +/* try to decode a socks5 header */ +#define SSH_SOCKS5_AUTHDONE 0x1000 +#define SSH_SOCKS5_NOAUTH 0x00 +#define SSH_SOCKS5_IPV4 0x01 +#define SSH_SOCKS5_DOMAIN 0x03 +#define SSH_SOCKS5_IPV6 0x04 +#define SSH_SOCKS5_CONNECT 0x01 +#define SSH_SOCKS5_SUCCESS 0x00 + +static int +channel_decode_socks5(Channel *c, fd_set * rea...

...ve the same result with a separate > process that handled UDP on the client. Even with a separate process handling UDP packets, the "UDP association" must be handled by the SOCKS server over TCP (so the SSH server would still require changes in that case). Anyway, I wanted to start a SOCKS5 server on the computer, a SOCKS5 client on Android, and communicating over adb (thanks to "adb forward" / "adb reverse"). Unfortunately, adb forwarding does not support UDP packets either, so using SOCKS5 for this purpose won't work anyway. Why SOCKS5 requires to transfer U...

Le mardi 17 janvier 2017 ? 9:20 +1100, Darren Tucker a ?crit : > On Tue, Jan 17, 2017 at 1:30 AM, Romain Vimont <rom at rom1v.com> wrote: > [...] > > As a consequence, in particular, a SOCKS5 server started with "ssh -D" > > cannot proxify UDP packets. > > > > Are there deep reasons why OpenSSH does not implement them (security, or > > whatever)? > > ssh -D accepts SOCKS CONNECT requests and maps them to SSH > "direct-tcpip" requests...

What is the state of the art for socks5 server software? I need to replace a very old proxy system. 'Yum search' and google aren't turning up any clear winners unless '3proxy' is the thing you would run on CentOS7. -- Les Mikesell lesmikesell at gmail.com

...1: Connection to port 8888 forwarding to socks port 0 requested. debug2: fd 9 setting TCP_NODELAY debug2: fd 9 setting O_NONBLOCK debug3: fd 9 is O_NONBLOCK debug1: channel 3: new [dynamic-tcpip] debug2: channel 3: pre_dynamic: have 0 debug2: channel 3: pre_dynamic: have 3 debug2: channel 3: decode socks5 debug2: channel 3: socks5 auth done debug2: channel 3: pre_dynamic: need more debug2: channel 3: pre_dynamic: have 0 debug2: channel 3: pre_dynamic: have 20 debug2: channel 3: decode socks5 debug2: channel 3: socks5 post auth debug2: channel 3: dynamic request: socks5 host www.google.de port 443 co...

On Jan 17, 2017, at 1:37 AM, Darren Tucker <dtucker at zip.com.au> wrote: > On Tue, Jan 17, 2017 at 8:05 PM, Romain Vimont <rom at rom1v.com> wrote: > [..] >> So if I understand correctly, making "ssh -D" create a "full" SOCKS5 >> server, including UDP relay?, would require to add a new SSH request >> type (like "relay-udp")? > > Right. SSH has an extension mechanism: message types with an > @somedomain.com are "vendor extensions" that do not require IETF > standardization so...

Attached is a very small patch that allows the ssh clients to use the socks5 library. It should work with socks4 but is untested. Tested on linux only configure --with-socks configure --with-socks5 Also included is a configure option to disable scp statistics --disable-scp-stats modified files openssh-2.9.9p2/acconfig.h openssh-2.9.9p2/channels.c openssh-2.9.9p2/confi...

...king another question[3]. [1] https://marc.info/?t=147992627400001&r=1&w=2 [2] https://marc.info/?l=openbsd-misc&m=147996293922202&w=2 [3] https://marc.info/?l=openbsd-misc&m=148045752905570&w=2 j. --------------------->%------------------------------- I was using ssh socks5 tunnel (-D9999) today and I saw many: channel 4: open failed: administratively prohibited: open failed messages. It seems non-resolvable hostnames on my gw (ie. end of ssh socks5 tunnel) is passed to client as "prohibited" event. This seems odd and confusing. GW is an older 6.0-curre...

https://bugzilla.mindrot.org/show_bug.cgi?id=2417 Bug ID: 2417 Summary: SOCKS5 should respond with appropriate error reply in error situations Product: Portable OpenSSH Version: 6.8p1 Hardware: All OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: ssh...

El 12/01/2015 a las 03:18 p.m., Les Mikesell escribi?: > What is the state of the art for socks5 server software? I need to > replace a very old proxy system. 'Yum search' and google aren't > turning up any clear winners unless '3proxy' is the thing you would > run on CentOS7. > > Have you look up to http://ss5.sourceforge.net/ ?

On Tue, Oct 27, 2015 at 02:08:36PM +0100, Guus Sliepen wrote: > > I wonder why tinc tries to resolve host names before connection even > > with configured (socks5) proxy which fails behind restrictive firewalls. > > [...] I'll try to change tinc so it will allow connections via SOCKS5 > even if it cannot resolve the hostname itself. I added the ability for tinc to connect through a proxy even if it cannot resolve hostnames itself, for both SOC...

https://bugzilla.mindrot.org/show_bug.cgi?id=2250 Bug ID: 2250 Summary: SOCKS5 should return "NO ACCEPTABLE METHODS" instead of nothing Product: Portable OpenSSH Version: -current Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component:...

...the remote machine can connect to, but all the browser code/plugins >> will be the local ones. > If this is actually something you want to do with regularity, I > suggest using the SSH SOCKS proxy (with the DynamicForward port), and > configure Firefox to use the localhost:port as a SOCKS5 proxy. Then > all traffic in firefox will be routed over the ssh connection. It > won't break SNI and for the most part, everything will work in firefox > as if you were connecting from the remote side of the connection. > > It works with yum and dnf too, where you can use Remo...

...ddresses. This isn't much of a problem if the target host is a public Internet host or otherwise DNS resolvable target ... but frequently SSH tunneling is used to get into a private network, and the DNS which can resolve the hostname is on the wrong side of the tunnel. I don't think that SOCKS5 or anything that complex would be usefully helpful, but there is an addition to SOCKS4 (called SOCKS4A) which does permit host names to be passed in in the SOCKS4 initiation packet. See http://www.socks.nec.com/protocol/socks4a.protocol for details, and here's a brief synopsis. The SOCKS4 ini...