notpeter/dante

Dante SOCKS Proxy - Server and Client for UNIX

dante's Issues

Does Dante support transparent proxy?

Does Dante support a transparent proxy config using nftables tproxy? Thanks.

Need help compiling for Ubuntu 16.04

Hello
The apt repositories are outdated and have 1.1 dante server debs.
I'd like to compile from source and install the software, so far, I have downloaded and extracted the dante 1.4 tar.gz and have done:
./configure
make
make check
sudo make install
And when I tried danted -v I see it's not installed.
So from the INSTALL readme file, I found out it's installed in /usr/local
I tried . /usr/local/bin/socksify but I got this error:
error: parseconfig(): could not open config file /etc/socks.conf
So I copied the file from /usr/local/man/man5/socks.conf to /etc/socks.conf
But it returns error on line 1.

I think I'm doing it all wrong then, please help.
I found no service named danted in systemctl.
Thanks very much.

RADIUS Authentication

hi,
how to use radius auth with dante?

DNS resolution issue

I am trying to build a SOCKS solution for forward proxy. I am using dante SOCKS proxy as I have heard that big companies like google uses it as forward proxy solution.

on the SOCKS server, I am allowing based on FQDN's like google.com port 443

Now the problem is, when the client constructs the packet, it tries to resolve google.com and gets X.X.X.X (when used udp/tcp as resolveprotocol) and sends connect request to SOCKS server. Now when the server receives the packets, it tries to reconstruct the packet to send out to internet, the server again does DNS resolution and if the server gets response as Y.Y.Y.Y, then it doesn't allow client's request as the destination IP in the client's request is different then the server's resolved IP address.

There is a solution in dante client which tells client to put a dummy destination address (when used fake as resolveprotocol) and sends request to server and server processes it properly then. However that is creating a problem with internal domains as after using "fake" dns resolution method, every requests goes through dante server :(

Please let me know

1. If there is any solution through which would help me in maintaining a DNS record expiry DC wide for e.g. google.com resolves to X.X.X.X and I should be able to resolve to this same IP address on 100's of DNS client and in case if the record changes, then it should immediately change/expire on client.

2. A way to whitelist FQDN when used "fake" as resolveprotocol so that not every request will go via SOCKS server

3. Any other proxy/socks solution which should be transparent to applications for forward proxy