Prensip fondamantal nan proxy transparan lè l sèvi avèk 3proxy ak iptables/netfilter oswa ki jan yo "mete tout bagay nan yon proxy"

Nan atik sa a mwen ta renmen revele posiblite yo nan proxy transparan, ki pèmèt ou redireksyon tout oswa yon pati nan trafik la atravè serveurs proxy ekstèn absoliman inapèsi pa kliyan.

Lè mwen te kòmanse rezoud pwoblèm sa a, mwen te fè fas ak lefèt ke aplikasyon li te gen yon pwoblèm enpòtan - pwotokòl la HTTPS. Nan bon ansyen tan yo, pa te gen okenn pwoblèm espesyal ak transparan HTTP proxy, men ak HTTPS proxy, navigatè rapòte entèferans ak pwotokòl la e se la kote kontantman an fini.

Nan enstriksyon yo komen pou sèvè prokurasyon Squid, yo menm sijere jenere sètifika pwòp ou a ak enstale li sou kliyan, ki se yon istwa san sans konplè omwen, irasyonèl ak sanble yon atak MITM. Mwen konnen ke Squid ka deja fè yon bagay ki sanble, men atik sa a se sou yon metòd pwouve ak travay lè l sèvi avèk 3proxy soti nan 3APA3A la respekte.

Apre sa, nou pral gade an detay nan pwosesis la nan bati 3proxy soti nan sous, konfigirasyon li yo, proxy konplè ak selektif lè l sèvi avèk NAT, distribisyon chanèl nan plizyè sèvè proxy ekstèn, osi byen ke itilizasyon yon routeur ak wout estatik. Nou itilize Debian 9 x64 kòm eksplwatasyon an. Kòmanse!

Enstale 3proxy ak kouri yon sèvè proxy regilye

1. Enstale ifconfig (ki soti nan pake net-zouti)
apt-get install net-tools
2. Enstale Midnight Commander
apt-get install mc
3. Nou kounye a gen 2 interfaces:
enp0s3 - ekstèn, gade sou entènèt la
enp0s8 - entèn, dwe gade nan rezo lokal la
Sou lòt distribisyon ki baze sou Debian, koòdone yo anjeneral rele eth0 ak eth1.
ifconfig -a

Interfacesenp0s3: drapo=4163 mtu 1500
inet 192.168.23.11 netmask 255.255.255.0 emisyon 192.168.23.255
inet6 fe80::a00:27ff:fec2:bae4 prefixlen 64 scopeid 0x20 etè 08:00:27:c2:ba:e4 txqueuelen 1000 (Ethernet)
Pake RX 6412 bytes 8676619 (8.2 MiB)
Erè RX 0 tonbe 0 depase 0 ankadreman 0
Pake TX 1726 bytes 289128 (282.3 KiB)
Erè TX 0 tonbe 0 depase 0 konpayi asirans 0 kolizyon 0

enp0s8: drapo=4098 mtu 1500
etè 08:00:27:79:a7:e3 txqueuelen 1000 (Ethernet)
Pake RX 0 byte 0 (0.0 B)
Erè RX 0 tonbe 0 depase 0 ankadreman 0
Pake TX 0 byte 0 (0.0 B)
Erè TX 0 tonbe 0 depase 0 konpayi asirans 0 kolizyon 0

lo: drapo=73 mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10 loop txqueuelen 1 (Loopback)
Pake RX 0 byte 0 (0.0 B)
Erè RX 0 tonbe 0 depase 0 ankadreman 0
Pake TX 0 byte 0 (0.0 B)
Erè TX 0 tonbe 0 depase 0 konpayi asirans 0 kolizyon 0

Koòdone enp0s8 la pa itilize kounye a, nou pral pèmèt li lè nou vle sèvi ak konfigirasyon Proxy NAT oswa NAT. Lè sa a, li ta lojik bay li yon IP estatik.

4. Ann kòmanse enstale 3proxy

4.1 Enstale pakè debaz pou konpile 3proxy soti nan sous

root@debian9:~# apt-get install build-essential libevent-dev libssl-dev -y

4.2. Ann kreye yon katab pou telechaje achiv la ak sous yo

root@debian9:~# mkdir -p /opt/proxy

4.3. Ann ale nan katab sa a

root@debian9:~# cd /opt/proxy

4.4. Koulye a, ann telechaje dènye pake 3proxy la. Nan moman sa a nan ekri a, dènye vèsyon an ki estab se 0.8.12 (18/04/2018) Telechaje li sou sit entènèt ofisyèl 3proxy la.

root@debian9:/opt/proxy# wget https://github.com/z3APA3A/3proxy/archive/0.8.12.tar.gz

4.5. Ann depake achiv telechaje a

root@debian9:/opt/proxy# tar zxvf 0.8.12.tar.gz

4.6. Ale nan anyè ki pa pake a pou konstwi pwogram nan

root@debian9:/opt/proxy# cd 3proxy-0.8.12

4.7. Apre sa, nou bezwen ajoute yon liy nan dosye header la pou sèvè nou an konplètman anonim (li vrèman travay, tout bagay tcheke, IP kliyan yo kache)

root@debian9:/opt/proxy/3proxy-0.8.12# nano +29 src/proxy.h

Ajoute yon liy

#define ANONYMOUS 1

Peze Ctrl + x ak Antre pou sove chanjman yo.

4.8. Ann kòmanse rasanble pwogram nan

root@debian9:/opt/proxy/3proxy-0.8.12# make -f Makefile.Linux

Makelogmake[2]: Kite anyè '/opt/proxy/3proxy-0.8.12/src/plugins/TransparentPlugin'
make[1]: Kite anyè '/opt/proxy/3proxy-0.8.12/src'

Pa gen erè, ann kontinye.

4.9. Enstale pwogram nan sou sistèm lan

root@debian9:/opt/proxy/3proxy-0.8.12# make -f Makefile.Linux install

4.10. Ale nan anyè rasin lan epi tcheke kote pwogram nan te enstale

root@debian9:/opt/proxy/3proxy-0.8.12# cd ~/
root@debian9:~# whereis 3proxy

3proxy: /usr/local/bin/3proxy /usr/local/etc/3proxy

4.11. Ann kreye yon katab pou fichye konfigirasyon ak mòso bwa nan anyè lakay itilizatè a

root@debian9:~# mkdir -p /home/joke/proxy/logs

4.12. Ale nan anyè a kote konfigirasyon an ta dwe

root@debian9:~# cd /home/joke/proxy/

4.13. Kreye yon dosye vid epi kopye konfigirasyon an la

root@debian9:/home/joke/proxy# cat > 3proxy.conf

3proxy.confsaten
pidfile /home/joke/proxy/3proxy.pid
nserver 8.8.8.8
nscache 65536
itilizatè tèsteur:CL:1234
timeout 1 5 30 60 180 1800 16 60
konekte /home/joke/proxy/logs/3proxy.log D
logformat "- +_L%t.%. %N.%p %E %U %C:%c %R:%r %O %I %h %T"
Thorne 3
auth fò
kole
pèmèt tèsteur
chosèt -p3128
prokurasyon -p8080

Pou sove, peze Ctrl + Z

4.14. Ann kreye yon dosye pid pou pa gen okenn erè pandan demaraj.

root@debian9:/home/joke/proxy# cat > 3proxy.pid

Pou sove, peze Ctrl + Z

4.15. Ann lanse sèvè prokurasyon an!

root@debian9:/home/joke/proxy# 3proxy /home/joke/proxy/3proxy.conf

4.16. Ann wè si sèvè a ap koute sou pò yo

root@debian9:~/home/joke/proxy# netstat -nlp

netstat boutèy demi litKoneksyon Entènèt aktif (sèvè sèlman)
Proto Recv-Q Voye-Q Adrès lokal Adrès etranje Eta PID/Non pwogram
tcp 0 0 0.0.0.0:8080 0.0.0.0:* KOUTE 504/3proxy
tcp 0 0 0.0.0.0:22 0.0.0.0:* KOUTE 338/sshd
tcp 0 0 0.0.0.0:3128 0.0.0.0:* KOUTE 504/3proxy
tcp6 0 0 :::22 :::* KOUTE 338/sshd
udp 0 0 0.0.0.0:68 0.0.0.0:* 352/dhclient

Kòm li te ekri nan konfigirasyon an, proxy entènèt nou an koute pò 8080, Socks5 proxy koute pò 3128.

4.17. Pou autostart sèvis prokurasyon an apre yon rdemare, ou bezwen ajoute li nan cron.

root@debian9:/home/joke/proxy# crontab -e

Ajoute yon liy

@reboot /usr/local/bin/3proxy /home/joke/proxy/3proxy.conf

Nou peze Antre, depi cron ta dwe wè karaktè nan fen liy, epi sove fichye a.

Ta dwe gen yon mesaj sou enstale yon nouvo crontab.

crontab: enstale nouvo crontab

4.18. Ann rdemare sistèm lan epi eseye konekte atravè navigatè a ak proxy la. Pou tcheke, nou itilize navigatè Firefox (pou yon prokurasyon entènèt) ak Add-on FoxyProxy pou chosèt5 ak otantifikasyon.

root@debian9:/home/joke/proxy# reboot

4.19. Apre tcheke operasyon an nan prokurasyon an apre yon rdemare, ou ka wè mòso bwa yo. Sa a konplete konfigirasyon sèvè prokurasyon an.

3 proxy journal1542573996.018 PROXY.8080 00000 tèsteur 192.168.23.10:50915 217.12.15.54:443 1193 6939 0 CONNECT_ads.yahoo.com:443_HTTP
1542574289.634 SOCK5.3128 00000 tèsteur 192.168.23.10:51193 54.192.13.69:443 0 0 0 CONNECT_normandy.cdn.mozilla.net:443

Mete kanpe ak kouri konfigirasyon Transparent Proxy NAT

Nan konfigirasyon sa a, tout aparèy ki sou rezo entèn yo pral opere transparans sou entènèt la atravè yon sèvè prokurasyon aleka. Absoliman tout koneksyon TCP yo pral redireksyon sou youn oswa plis (vrèman elaji lajè kanal la, egzanp konfigirasyon nimewo 2!) serveurs prokurasyon. Sèvis DNS la pral sèvi ak kapasite 3proxy (dnspr). UDP pa pral "ale" deyò, paske nou poko itilize mekanis avanse (enfim pa default nan nwayo Linux la).

1. Li lè pou pèmèt entèfas enp0s8 a

root@debian9:~# nano /etc/network/interfaces

/etc/network/interfaces dosye# Fichye sa a dekri entèfas rezo ki disponib sou sistèm ou a
# ak ki jan yo aktive yo. Pou plis enfòmasyon, gade interfaces(5).

sous /etc/network/interfaces.d/*

# Koòdone rezo loopback la
oto lo
iface lo inet loopback

# Koòdone rezo prensipal la
pèmèt-hotplug enp0s3
iface enp0s3 inet dhcp

# Koòdone rezo segondè
pèmèt-hotplug enp0s8
iface enp0s8 inet static
adrès 192.168.201.254
netmask 255.255.255.0

Isit la nou bay koòdone enp0s8 a yon adrès estatik 192.168.201.254 ak yon mask 255.255.255.0
Sove konfigirasyon Ctrl + X epi rdemare

root@debian9:~# reboot

2. Tcheke interfaces yo

root@debian9:~# ifconfig

ifconfig boutèy demi litenp0s3: drapo=4163 mtu 1500
inet 192.168.23.11 netmask 255.255.255.0 emisyon 192.168.23.255
inet6 fe80::a00:27ff:fec2:bae4 prefixlen 64 scopeid 0x20 etè 08:00:27:c2:ba:e4 txqueuelen 1000 (Ethernet)
Pake RX 61 bytes 7873 (7.6 KiB)
Erè RX 0 tonbe 0 depase 0 ankadreman 0
Pake TX 65 bytes 10917 (10.6 KiB)
Erè TX 0 tonbe 0 depase 0 konpayi asirans 0 kolizyon 0

enp0s8: drapo=4163 mtu 1500
inet 192.168.201.254 netmask 255.255.255.0 emisyon 192.168.201.255
inet6 fe80::a00:27ff:fe79:a7e3 prefixlen 64 scopeid 0x20 etè 08:00:27:79:a7:e3 txqueuelen 1000 (Ethernet)
Pake RX 0 byte 0 (0.0 B)
Erè RX 0 tonbe 0 depase 0 ankadreman 0
Pake TX 8 byte 648 (648.0 B)
Erè TX 0 tonbe 0 depase 0 konpayi asirans 0 kolizyon 0

lo: drapo=73 mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10 loop txqueuelen 1 (Loopback)
Pake RX 0 byte 0 (0.0 B)
Erè RX 0 tonbe 0 depase 0 ankadreman 0
Pake TX 0 byte 0 (0.0 B)
Erè TX 0 tonbe 0 depase 0 konpayi asirans 0 kolizyon 0

3. Tout bagay te travay deyò, kounye a ou bezwen configured 3proxy pou transparan proxy.

root@debian9:~# cd /home/joke/proxy/
root@debian9:/home/joke/proxy# cat > 3proxytransp.conf

Egzanp konfigirasyon sèvè prokurasyon transparan nimewo 1saten
pidfile /home/joke/proxy/3proxy.pid
nserver 8.8.8.8
nscache 65536
timeout 1 5 30 60 180 1800 16 60
konekte /home/joke/proxy/logs/3proxy.log D
logformat "- +_L%t.%. %N.%p %E %U %C:%c %R:%r %O %I %h %T"
Thorne 3
kole
auth iponly
dnspr
pèmèt *
paran 1000 chosèt5 IP_ADDRESS OF EXTERNAL_PROXY 3128 tèsteur 1234
plugin /opt/proxy/3proxy-0.8.12/src/TransparentPlugin.ld.so transparent_plugin
tcppm -i0.0.0.0 888 127.0.0.1 11111

4. Koulye a, nou lanse 3proxy ak nouvo konfigirasyon an
root@debian9:/home/joke/proxy# /usr/local/bin/3proxy /home/joke/proxy/3proxytransp.conf

5. Ajoute nan crontab ankò
root@debian9:/home/joke/proxy# crontab -e
@reboot /usr/local/bin/3proxy /home/joke/proxy/3proxytransp.conf

6. Ann wè sa proxy nou an ap koute kounye a
root@debian9:~# netstat -nlp

netstat boutèy demi litKoneksyon Entènèt aktif (sèvè sèlman)
Proto Recv-Q Voye-Q Adrès lokal Adrès etranje Eta PID/Non pwogram
tcp 0 0 0.0.0.0:22 0.0.0.0:* KOUTE 349/sshd
tcp 0 0 0.0.0.0:888 0.0.0.0:* KOUTE 354/3proxy
tcp6 0 0 :::22 :::* KOUTE 349/sshd
udp 0 0 0.0.0.0:53 0.0.0.0:* 354/3proxy
udp 0 0 0.0.0.0:68 0.0.0.0:* 367/dhclient

7. Koulye a, prokurasyon an pare pou aksepte nenpòt koneksyon TCP sou pò 888, dns sou pò 53, pou yo ka Lè sa a, redireksyon sou proxy socks5 aleka ak DNS Google 8.8.8.8. Tout sa nou dwe fè se konfigirasyon netfilter (iptables) ak règ DHCP pou bay adrès yo.

8. Enstale pake iptables-persistent ak dhcpd

root@debian9:~# apt-get install iptables-persistent isc-dhcp-server

9. Edit fichye demaraj dhcpd la
root@debian9:~# nano /etc/dhcp/dhcpd.conf

dhcpd.conf# dhcpd.conf
#
# Egzanp fichye konfigirasyon pou ISC dhcpd
#

# definisyon opsyon komen pou tout rezo ki sipòte...
opsyon domèn-non "example.org";
opsyon domain-name-servers ns1.example.org, ns2.example.org;

default-kontra-lwaye-tan 600;
max-kontra-lwaye-tan 7200;

ddns-update-style okenn;

# Si sèvè DHCP sa a se sèvè ofisyèl DHCP pou lokal la
# rezo, direktiv otorite a ta dwe uncommented.

autorité;

# Yon konfigirasyon yon ti kras diferan pou yon subnet entèn.
subre 192.168.201.0 netmask 255.255.255.0 {
ranje 192.168.201.10 192.168.201.250;
opsyon domèn-non-sèvè 192.168.201.254;
opsyon routeurs 192.168.201.254;
opsyon emisyon-adrès 192.168.201.255;
default-kontra-lwaye-tan 600;
max-kontra-lwaye-tan 7200;
}

11. Rdemare epi tcheke sèvis la sou pò 67
root@debian9:~# reboot
root@debian9:~# netstat -nlp

netstat boutèy demi litKoneksyon Entènèt aktif (sèvè sèlman)
Proto Recv-Q Voye-Q Adrès lokal Adrès etranje Eta PID/Non pwogram
tcp 0 0 0.0.0.0:22 0.0.0.0:* KOUTE 389/sshd
tcp 0 0 0.0.0.0:888 0.0.0.0:* KOUTE 310/3proxy
tcp6 0 0 :::22 :::* KOUTE 389/sshd
udp 0 0 0.0.0.0:20364 0.0.0.0:* 393/dhcpd
udp 0 0 0.0.0.0:53 0.0.0.0:* 310/3proxy
udp 0 0 0.0.0.0:67 0.0.0.0:* 393/dhcpd
udp 0 0 0.0.0.0:68 0.0.0.0:* 405/dhclient
udp6 0 0 :::31728 :::* 393/dhcpd
kri 0 0 0.0.0.0:1 0.0.0.0:* 393/dhcpd

12. Tout sa ki rete se redireksyon tout demann tcp nan pò 888 epi sove règ la nan iptables.

root@debian9:~# iptables -t nat -A PREROUTING -s 192.168.201.0/24 -p tcp -j REDIRECT --to-ports 888

root@debian9:~# iptables-save > /etc/iptables/rules.v4

13. Pou elaji Pleasant chanèl la, ou ka itilize plizyè serveurs proxy an menm tan. Total la dwe 1000. Nouvo koneksyon yo etabli ak yon pwobabilite 0.2, 0.2, 0.2, 0.2, 0,1, 0,1 nan serveurs prokurasyon espesifye yo.

Remak: si nou gen yon prokurasyon entènèt, Lè sa a, olye pou yo socks5 nou bezwen ekri konekte, si socks4, Lè sa a, socks4 (socks4 PA SIPÒTE LOGIN / OTORIZASYON MAPAS!)

Egzanp konfigirasyon sèvè prokurasyon transparan nimewo 2saten
pidfile /home/joke/proxy/3proxy.pid
nserver 8.8.8.8
nscache 65536
maxconn 500
timeout 1 5 30 60 180 1800 16 60
konekte /home/joke/proxy/logs/3proxy.log D
logformat "- +_L%t.%. %N.%p %E %U %C:%c %R:%r %O %I %h %T"
Thorne 3
kole
auth iponly
dnspr
pèmèt *

paran 200 chosèt5 IP_ADDRESS_EXTERNAL_PROXY#1 3128 tèsteur 1234
paran 200 chosèt5 IP_ADDRESS_EXTERNAL_PROXY#2 3128 tèsteur 1234
paran 200 chosèt5 IP_ADDRESS_EXTERNAL_PROXY#3 3128 tèsteur 1234
paran 200 chosèt5 IP_ADDRESS_EXTERNAL_PROXY#4 3128 tèsteur 1234
paran 100 chosèt5 IP_ADDRESS_EXTERNAL_PROXY#5 3128 tèsteur 1234
paran 100 chosèt5 IP_ADDRESS_EXTERNAL_PROXY#6 3128 tèsteur 1234

plugin /opt/proxy/3proxy-0.8.12/src/TransparentPlugin.ld.so transparent_plugin
tcppm -i0.0.0.0 888 127.0.0.1 11111

Mete kanpe ak kouri konfigirasyon NAT + Transparent Proxy

Nan konfigirasyon sa a, nou pral sèvi ak mekanis NAT abityèl la ak proxy selektif oswa total transparan nan adrès endividyèl oswa subnet. Itilizatè rezo entèn yo pral travay ak sèten sèvis/sous-rezo san yo pa menm reyalize ke yo ap travay atravè yon proxy. Tout koneksyon https travay byen, pa gen okenn sètifika yo bezwen pwodwi / ranplase.

Premyèman, ann deside ki sous-rezo/sèvis nou vle proxy. Ann sipoze ke proxy ekstèn yo sitiye kote yon sèvis tankou pandora.com opere. Koulye a, li rete detèmine subnets/adrès li yo.

1. Ping

root@debian9:~# ping pandora.com
PING pandora.com (208.85.40.20) 56(84) octets done.

2. Tape BGP 208.85.40.20 nan Google

Ann ale sou sit la bgp.he.net/net/208.85.40.0/24#_netinfo
Li ka wè ke subnet m ap chèche a se AS40428 Pandora Media, Inc

bgp.he.net/net/208.85.40.0/24#_netinfo

Louvri prefiks v4

bgp.he.net/AS40428#_prefixes

Isit la yo se sous-rezo obligatwa yo!

199.116.161.0/24
199.116.162.0/24
199.116.164.0/23
199.116.164.0/24
199.116.165.0/24
208.85.40.0/24
208.85.41.0/24
208.85.42.0/23
208.85.42.0/24
208.85.43.0/24
208.85.44.0/24
208.85.46.0/23
208.85.46.0/24
208.85.47.0/24

3. Pou redwi kantite subnets, ou bezwen fè agrégation. Ale sou sit la ip-calculator.ru/aggregate epi kopye lis nou an la. Kòm yon rezilta - 6 subnets olye de 14.

199.116.161.0/24
199.116.162.0/24
199.116.164.0/23
208.85.40.0/22
208.85.44.0/24
208.85.46.0/23

4. Klè règ iptables yo

root@debian9:~# iptables -F
root@debian9:~# iptables -X
root@debian9:~# iptables -t nat -F
root@debian9:~# iptables -t nat -X

Pèmèt pi devan ak mekanis NAT la

root@debian9:~# echo 1 > /proc/sys/net/ipv4/ip_forward
root@debian9:~# iptables -A FORWARD -i enp0s3 -o enp0s8 -j ACCEPT
root@debian9:~# iptables -A FORWARD -i enp0s8 -o enp0s3 -j ACCEPT
root@debian9:~# iptables -t nat -A POSTROUTING -o enp0s3 -s 192.168.201.0/24 -j MASQUERADE

Pou asire ke Avant la aktive pou tout tan apre yon rdemare, ann chanje dosye a

root@debian9:~# nano /etc/sysctl.conf

Epi dekomantè liy lan

net.ipv4.ip_forward = 1

Ctrl + X pou konsève pou fichye a

5. Nou vlope pandora.com subnets nan yon prokurasyon

root@debian9:~# iptables -t nat -A PREROUTING -s 192.168.201.0/24 -d 199.116.161.0/24,199.116.162.0/24,199.116.164.0/23,208.85.40.0/22,208.85.44.0/24,208.85.46.0/23 -p tcp -j REDIRECT --to-ports 888

6. Ann kenbe règ yo

root@debian9:~# iptables-save > /etc/iptables/rules.v4

Mete kanpe ak kouri transparan proxy a atravè konfigirasyon routeur

Nan konfigirasyon sa a, sèvè transparan prokurasyon an kapab yon PC apa oswa yon machin vityèl dèyè yon routeur lakay/kòporasyon. Li se ase yo anrejistre wout estatik sou routeur la oswa aparèy ak subnet a tout antye pral sèvi ak yon prokurasyon san yo pa bezwen an pou nenpòt ki anviwònman adisyonèl.

ENPÒTAN! Li nesesè ke pòtay nou an resevwa yon IP estatik nan routeur la, oswa se configuré yo dwe estatik tèt li.

1. Konfigure yon adrès pòtay estatik (adaptè enp0s3)

root@debian9:~# nano /etc/network/interfaces

/etc/network/interfaces dosye# Fichye sa a dekri entèfas rezo ki disponib sou sistèm ou a
# ak ki jan yo aktive yo. Pou plis enfòmasyon, gade interfaces(5).

sous /etc/network/interfaces.d/*

# Koòdone rezo loopback la
oto lo
iface lo inet loopback

# Koòdone rezo prensipal la
pèmèt-hotplug enp0s3
iface enp0s3 inet static
adrès 192.168.23.2
netmask 255.255.255.0
pòtay 192.168.23.254

# Koòdone rezo segondè
pèmèt-hotplug enp0s8
iface enp0s8 inet static
adrès 192.168.201.254
netmask 255.255.255.0

2. Pèmèt aparèy ki soti nan subnet 192.168.23.0/24 pou itilize proxy

root@debian9:~# iptables -t nat -A PREROUTING -s 192.168.23.0/24 -d 199.116.161.0/24,199.116.162.0/24,199.116.164.0/23,208.85.40.0/22,208.85.44.0/24,208.85.46.0/23 -p tcp -j REDIRECT --to-ports 888

3. Ann kenbe règ yo
root@debian9:~# iptables-save > /etc/iptables/rules.v4

4. Ann anrejistre subnets sou routeur la

Lis rezo routeur199.116.161.0 255.255.255.0 192.168.23.2
199.116.162.0 255.255.255.0 192.168.23.2
199.116.164.0 255.255.254.0 192.168.23.2
208.85.40.0 255.255.252.0 192.168.23.2
208.85.44.0 255.255.255.0 192.168.23.2
208.85.46.0 255.255.254.0 192.168.23.2

Materyèl/resous yo itilize

1. Sit entènèt ofisyèl pwogram 3proxy la 3proxy.ru

2. Enstriksyon pou enstale 3proxy soti nan sous www.ekzorchik.ru/2015/02/how-to-take-your-socks-proxy

3. 3proxy devlopman branch sou GitHub github.com/z3APA3A/3proxy/issues/274

Sous: www.habr.com

Add nouvo kòmantè