SwagDevOps · January 30, 2025 16:59 · Jan 30, 2025 · Jan 30, 2025 · Jan 30, 2025 · Jan 30, 2025
diff --git a/danted.conf b/danted.conf
@@ -4,7 +4,7 @@
 # Server logging
 logoutput: /var/log/sockd.log
 errorlog:  /var/log/sockd.log
-debug: 1
+debug: 0
 # Define the internal and external network interfaces
 internal: 0.0.0.0 port = 1080
 external: eth0

diff --git a/danted.conf b/danted.conf
@@ -1,3 +1,4 @@
+# vim: set filetype=apache : 
 # file: /etc/danted.conf
 
 # Server logging

diff --git a/danted.override.conf b/danted.override.conf
@@ -1,3 +1,4 @@
+# vim: set filetype=ini : 
 # file: /etc/systemd/system/danted.service.d/override.conf
 [Service]
 ReadWritePaths=/var/log/sockd.log
diff --git a/logrotate-sockd.conf b/logrotate-sockd.conf
@@ -1,4 +1,4 @@
-# vim: set filetype=nginx : 
+# vim: set filetype=apache : 
 # custom logrotate
 #
 # file: /etc/logrotate.d/sockd 

diff --git a/logrotate-sockd.conf b/logrotate-sockd.conf
@@ -1,4 +1,4 @@
-# vim: set filetype=apache : 
+# vim: set filetype=nginx : 
 # custom logrotate
 #
 # file: /etc/logrotate.d/sockd 

diff --git a/logrotate-sockd.conf b/logrotate-sockd.conf
@@ -1,4 +1,4 @@
-# vim: set filetype=conf : 
+# vim: set filetype=apache : 
 # custom logrotate
 #
 # file: /etc/logrotate.d/sockd 

diff --git a/logrotate-sockd.conf b/logrotate-sockd.conf
@@ -1,4 +1,4 @@
-# vim: set filetype=config : 
+# vim: set filetype=conf : 
 # custom logrotate
 #
 # file: /etc/logrotate.d/sockd 

diff --git a/logrotate-sockd.conf b/logrotate-sockd.conf
@@ -1,4 +1,4 @@
-# vim: set filetype=gitconfig : 
+# vim: set filetype=config : 
 # custom logrotate
 #
 # file: /etc/logrotate.d/sockd 

diff --git a/logrotate-sockd>conf → logrotate-sockd.conf b/logrotate-sockd>conf → logrotate-sockd.conf
@@ -1,3 +1,4 @@
+# vim: set filetype=gitconfig : 
 # custom logrotate
 #
 # file: /etc/logrotate.d/sockd 

diff --git a/README.md → dante-proxy-socks-setup.md b/README.md → dante-proxy-socks-setup.md
diff --git a/README.md b/README.md
@@ -0,0 +1,28 @@
+## Service
+
+```.sh
+systemctl edit danted.service
+systemctl daemon-reload
+service danted restart
+```
+
+## Logging
+
+```.sh
+touch /var/log/sockd.log
+chown root:proxy !$
+chmod 0664 !$
+```
+
+## User
+
+```.sh
+useradd --system -M -U -s /usr/bin/false -d /dev/null -- proxy-user
+passwd !$
+```
+
+## Test
+
+```sh
+curl --socks5 proxy-user:[email protected]:1080 https://example.com
+```
diff --git a/danted.conf b/danted.conf
@@ -0,0 +1,27 @@
+# file: /etc/danted.conf
+
+# Server logging
+logoutput: /var/log/sockd.log
+errorlog:  /var/log/sockd.log
+debug: 1
+# Define the internal and external network interfaces
+internal: 0.0.0.0 port = 1080
+external: eth0
+# when doing something that can require privilege (use userid of):
+user.privileged: root # proxy
+# when running as usual (use userid of):
+user.unprivileged: nobody
+# when compiled with libwrap support (use userid of):
+user.libwrap: nobody
+# Define the method of authentication
+socksmethod: username # none
+# Define access
+socks pass {
+        from: 0.0.0.0/0 to: 0.0.0.0/0
+        log: error connect disconnect
+}
+
+client pass {
+        from: 0.0.0.0/0 to: 0.0.0.0/0
+        log: connect disconnect
+}
diff --git a/danted.override.conf b/danted.override.conf
@@ -0,0 +1,3 @@
+# file: /etc/systemd/system/danted.service.d/override.conf
+[Service]
+ReadWritePaths=/var/log/sockd.log
diff --git a/logrotate-sockd>conf b/logrotate-sockd>conf
@@ -0,0 +1,14 @@
+# custom logrotate
+#
+# file: /etc/logrotate.d/sockd 
+/var/log/sockd.log {
+    missingok
+    create 0664 root proxy
+    notifempty
+    compress
+    delaycompress
+    rotate 7
+    postrotate
+        /usr/sbin/service danted force-reload 2> /dev/null || true
+    endscript
+}
No results found