[csw-devel] SF.net SVN: gar:[7943] csw/mgar/pkg/dante/trunk

skayser at users.sourceforge.net skayser at users.sourceforge.net
Sun Jan 10 15:21:59 CET 2010


Revision: 7943
          http://gar.svn.sourceforge.net/gar/?rev=7943&view=rev
Author:   skayser
Date:     2010-01-10 14:21:59 +0000 (Sun, 10 Jan 2010)

Log Message:
-----------
dante: tweaked sockd.conf, socksify core dumps

Modified Paths:
--------------
    csw/mgar/pkg/dante/trunk/Makefile
    csw/mgar/pkg/dante/trunk/files/sockd.conf.CSW

Modified: csw/mgar/pkg/dante/trunk/Makefile
===================================================================
--- csw/mgar/pkg/dante/trunk/Makefile	2010-01-10 13:30:25 UTC (rev 7942)
+++ csw/mgar/pkg/dante/trunk/Makefile	2010-01-10 14:21:59 UTC (rev 7943)
@@ -1,6 +1,10 @@
 # Known limitation:
 # - The libsocks build doesn't support $SOCKS_CONF. See README.CSW
 #   and INSTALL with its description of `--without-glibc-secure'.
+# 
+# TODO
+# - socksify throws a core dump after the request is finished,
+#   to reproduce: /opt/csw/bin/socksify wget -qO http://google.com
 GARNAME = dante
 GARVERSION = 1.2.0
 CATEGORIES = net

Modified: csw/mgar/pkg/dante/trunk/files/sockd.conf.CSW
===================================================================
--- csw/mgar/pkg/dante/trunk/files/sockd.conf.CSW	2010-01-10 13:30:25 UTC (rev 7942)
+++ csw/mgar/pkg/dante/trunk/files/sockd.conf.CSW	2010-01-10 14:21:59 UTC (rev 7943)
@@ -17,8 +17,8 @@
 internal: localhost port = 1080
 external: pcn0:1
 
-# Globally enable authentication modules
-method: pam
+# Which authentication methods should be advertised in the SOCKS5 negotiation
+method: pam none
 # PAM service name defaults to "sockd". If no PAM configuration for this service
 # name can be found, the PAM libs will default to "other".
 #pam.servicename: sockd
@@ -57,21 +57,21 @@
 # Block connections to localhost, or they will appear to come from the proxy.
 block {
         from: 0.0.0.0/0 to: localhost
-        log: connect
+        log: connect error
 }
 
 # Block bind to ports lower than 1023
 block {
         from: 0.0.0.0/0 to: 0.0.0.0/0 port le 1023
         command: bind
-        log: connect
+        log: connect error
 }
 
 # Allow all other SOCKS requestes, but require them to be authenticated.
 # Authentication is a SOCKS5 feature only, thus requires SOCKS5 clients.
 pass {
         from: 0.0.0.0/0 to: 0.0.0.0/0
-        log: connect
+        log: connect error
         method: pam
 }
 


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.



More information about the devel mailing list