Subject: Re: SOCKS5
To: Ivan Dolezal <ivan.dolezal@vsb.cz>
From: Giles Lean <giles@nemeton.com.au>
List: netbsd-help
Date: 05/04/2002 09:15:28
Ivan Dolezal <ivan.dolezal@vsb.cz> writes:

> as source packages are unavailable at master sites, I used older source 
> that I had downloaded some time ago... they are actually newer: v1.0r10 
> (the tree contains 1.0.2).

I've been happy with the Dante socks implementation, which built
easily on NetBSD and has "just worked" for me for ftp, cvs, ssh
etc.

Dante is available in pkgsrc as net/dante and it's homepage is
http://www.inet.no/dante/.   It includes a "socksify" script
that I didn't have to modify.

> from the dump it was obvious that it tried to connect via FTP directly 
> to cesnet.cz, ignoring the SOCKS library.

Sounds like a configuration problem.  I've not used the NEC socks
distribution so I don't know how to configure it.  One of the nicer
things about the Dante implementation is the configuration file is
sane:

...
#
# All local networks should be direct: loopback
#
route {
	from: 0.0.0.0/0   to: 127.0.0.0/8  via: direct
	command: connect udpassociate # everything but bind, bind confuses us.
}
...
route {
        # yes, IP address below is edited prior to posting :(
	from: 0.0.0.0/0 to: XXX.XXX.X.XXX/25 via: host.example.com port = 1080
	protocol: tcp udp
	proxyprotocol: socks_v4 socks_v5
	method: none
}
...

Good luck,

Giles