[csw-devel] SF.net SVN: gar:[7943] csw/mgar/pkg/dante/trunk
skayser at users.sourceforge.net
skayser at users.sourceforge.net
Sun Jan 10 15:21:59 CET 2010
Revision: 7943
http://gar.svn.sourceforge.net/gar/?rev=7943&view=rev
Author: skayser
Date: 2010-01-10 14:21:59 +0000 (Sun, 10 Jan 2010)
Log Message:
-----------
dante: tweaked sockd.conf, socksify core dumps
Modified Paths:
--------------
csw/mgar/pkg/dante/trunk/Makefile
csw/mgar/pkg/dante/trunk/files/sockd.conf.CSW
Modified: csw/mgar/pkg/dante/trunk/Makefile
===================================================================
--- csw/mgar/pkg/dante/trunk/Makefile 2010-01-10 13:30:25 UTC (rev 7942)
+++ csw/mgar/pkg/dante/trunk/Makefile 2010-01-10 14:21:59 UTC (rev 7943)
@@ -1,6 +1,10 @@
# Known limitation:
# - The libsocks build doesn't support $SOCKS_CONF. See README.CSW
# and INSTALL with its description of `--without-glibc-secure'.
+#
+# TODO
+# - socksify throws a core dump after the request is finished,
+# to reproduce: /opt/csw/bin/socksify wget -qO http://google.com
GARNAME = dante
GARVERSION = 1.2.0
CATEGORIES = net
Modified: csw/mgar/pkg/dante/trunk/files/sockd.conf.CSW
===================================================================
--- csw/mgar/pkg/dante/trunk/files/sockd.conf.CSW 2010-01-10 13:30:25 UTC (rev 7942)
+++ csw/mgar/pkg/dante/trunk/files/sockd.conf.CSW 2010-01-10 14:21:59 UTC (rev 7943)
@@ -17,8 +17,8 @@
internal: localhost port = 1080
external: pcn0:1
-# Globally enable authentication modules
-method: pam
+# Which authentication methods should be advertised in the SOCKS5 negotiation
+method: pam none
# PAM service name defaults to "sockd". If no PAM configuration for this service
# name can be found, the PAM libs will default to "other".
#pam.servicename: sockd
@@ -57,21 +57,21 @@
# Block connections to localhost, or they will appear to come from the proxy.
block {
from: 0.0.0.0/0 to: localhost
- log: connect
+ log: connect error
}
# Block bind to ports lower than 1023
block {
from: 0.0.0.0/0 to: 0.0.0.0/0 port le 1023
command: bind
- log: connect
+ log: connect error
}
# Allow all other SOCKS requestes, but require them to be authenticated.
# Authentication is a SOCKS5 feature only, thus requires SOCKS5 clients.
pass {
from: 0.0.0.0/0 to: 0.0.0.0/0
- log: connect
+ log: connect error
method: pam
}
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
More information about the devel
mailing list