Basics of transparent proxying uchishandisa 3proxy uye iptables/netfilter kana maitiro e "kuisa zvese kuburikidza ne proxy"

Muchinyorwa chino ndinoda kuburitsa mikana yekujeka proxying, iyo inokutendera iwe kutungamira zvese kana chikamu chetraffic kuburikidza nekunze proxy maseva zvachose asingaonekwe nevatengi.

Pandakatanga kugadzirisa dambudziko iri, ndakatarisana nenyaya yekuti kuita kwayo kwaive nedambudziko rimwechete rakakosha - iyo HTTPS protocol. Mumazuva akanaka ekare, pakanga pasina matambudziko akakosha neakajeka HTTP proxying, asi neHTTPS proxying, mabhurawuza anoshuma kukanganiswa neprotocol uye ndiko kunopera mufaro.

Mune mirairo yakajairwa yeSquid proxy server, vanotokurudzira kugadzira chako chitupa nekuchiisa kune vatengi, izvo zvisina musoro zvachose, zvisina musoro uye zvinoita sekunge MITM kurwisa. Ndinoziva kuti Squid inogona kutoita chimwe chinhu chakafanana, asi chinyorwa ichi chiri pamusoro penzira yakaratidza uye inoshanda uchishandisa 3proxy kubva kune inoremekedzwa 3APA3A.

Tevere, isu tichatarisa zvakadzama maitiro ekuvaka 3proxy kubva kunobva, kumisikidzwa kwayo, yakazara uye yakasarudzika proxying uchishandisa NAT, chiteshi kugovera kune akati wandei ekunze maseva eproxy, pamwe nekushandiswa kwerouter uye static nzira. Isu tinoshandisa Debian 9 x64 seOS. Tanga!

Kuisa 3proxy uye kushandisa yenguva dzose proxy server

1. Isa ifconfig (kubva kune net-zvishandiso package)
apt-get install net-tools
2. Isa Midnight Commander
apt-get install mc
3. Iye zvino tine 2 interfaces:
enp0s3 - yekunze, inotarisa paInternet
enp0s8 - yemukati, inofanirwa kutarisa mune yemuno network
Pane kumwe kugoverwa kweDebian-based iyo mainterfaces inowanzonzi eth0 uye eth1.
ifconfig -a

Interfacesenp0s3: mireza=4163 munhu 1500
inet 192.168.23.11 netmask 255.255.255.0 broadcast 192.168.23.255
inet6 fe80::a00:27ff:fec2:bae4 prefixlen 64 sikopeid 0x20 ether 08:00:27:c2:ba:e4 txqueuelen 1000 (Ethernet)
RX mapaketi 6412 bytes 8676619 (8.2 MiB)
RX zvikanganiso 0 yakadonha 0 overruns 0 furemu 0
TX mapaketi 1726 bytes 289128 (282.3KiB)
TX kukanganisa 0 yakadonha 0 overruns 0 mutakuri 0 kudhumhana 0

enp0s8: mireza=4098 munhu 1500
ether 08:00:27:79:a7:e3 txqueuelen 1000 (Ethernet)
RX mapaketi 0 bytes 0 (0.0 B)
RX zvikanganiso 0 yakadonha 0 overruns 0 furemu 0
TX mapaketi 0 bytes 0 (0.0 B)
TX kukanganisa 0 yakadonha 0 overruns 0 mutakuri 0 kudhumhana 0

tarisa: mireza=73 munhu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10 loop txqueuelen 1 (Local Loopback)
RX mapaketi 0 bytes 0 (0.0 B)
RX zvikanganiso 0 yakadonha 0 overruns 0 furemu 0
TX mapaketi 0 bytes 0 (0.0 B)
TX kukanganisa 0 yakadonha 0 overruns 0 mutakuri 0 kudhumhana 0

Iyo enp0s8 interface haisati yashandiswa parizvino, tinoigonesa kana toda kushandisa Proxy NAT kana NAT kumisikidza. Ipapo ndipo pazvingave zvine musoro kugovera iyo static IP.

4. Ngatitange kuisa 3proxy

4.1 Kuisa mapakeji ekutanga ekunyora 3proxy kubva kunzvimbo

root@debian9:~# apt-get install build-essential libevent-dev libssl-dev -y

4.2. Ngatigadzirei folda yekurodha iyo archive ine masosi

root@debian9:~# mkdir -p /opt/proxy

4.3. Handei kune iyi folda

root@debian9:~# cd /opt/proxy

4.4. Zvino ngatitorei ichangoburwa 3proxy package. Panguva yekunyora, yazvino yakagadzikana vhezheni yaive 0.8.12 (18/04/2018) Dhawunirodha kubva kune yepamutemo 3proxy webhusaiti.

root@debian9:/opt/proxy# wget https://github.com/z3APA3A/3proxy/archive/0.8.12.tar.gz

4.5. Ngatiburitsei dura rakadhawunirodha

root@debian9:/opt/proxy# tar zxvf 0.8.12.tar.gz

4.6. Enda kune dhairekitori risina kunyorwa kuti uvake purogiramu

root@debian9:/opt/proxy# cd 3proxy-0.8.12

4.7. Tevere, isu tinofanirwa kuwedzera mutsara kune wemusoro faira kuitira kuti server yedu isazivikanwe zvachose (inoshanda chaizvo, zvese zvinotariswa, mutengi IPs akavanzwa)

root@debian9:/opt/proxy/3proxy-0.8.12# nano +29 src/proxy.h

Wedzera mutsara

#define ANONYMOUS 1

Dzvanya Ctrl+x uye Enter kuchengetedza shanduko.

4.8. Ngatitangei kuunganidza purogiramu

root@debian9:/opt/proxy/3proxy-0.8.12# make -f Makefile.Linux

Makelogita [2]: Kusiya dhairekitori '/ opt/proxy/3proxy-0.8.12/src/plugins/TransparentPlugin'
ita [1]: Kusiya dhairekitori '/opt/proxy/3proxy-0.8.12/src'

Hapana kukanganisa, ngatienderere mberi.

4.9. Isa purogiramu pane system

root@debian9:/opt/proxy/3proxy-0.8.12# make -f Makefile.Linux install

4.10. Enda kumudzi wedhairekitori uye tarisa kuti chirongwa chakaiswa kupi

root@debian9:/opt/proxy/3proxy-0.8.12# cd ~/
root@debian9:~# whereis 3proxy

3proxy: /usr/yemunharaunda/bin/3proxy/usr/local/etc/3proxy

4.11. Ngatigadzire folda yemafaira ekugadzirisa uye matanda mudhairekitori remusha remushandisi

root@debian9:~# mkdir -p /home/joke/proxy/logs

4.12. Enda kune dhairekitori panofanira kunge iri config

root@debian9:~# cd /home/joke/proxy/

4.13. Gadzira faira risina chinhu uye tevedzera config ipapo

root@debian9:/home/joke/proxy# cat > 3proxy.conf

3proxy.confdaemon
pidfile /home/joke/proxy/3proxy.pid
nserver 8.8.8.8
nscache 65536
vashandisi muedzi:CL:1234
nguva dzekufamba 1 5 30 60 180 1800 16 60
log /home/joke/proxy/logs/3proxy.log D
logformat "- +_L%t.%. %N.%p %E %U %C:%c %R:%r %O %I %h %T"
tenderera 3
auth yakasimba
svina
bvumidza tester
masokisi -p3128
mumiririri -p8080

Kuti uchengetedze, tinya Ctrl + Z

4.14. Ngatigadzire pid faira kuitira kuti pasave nekukanganisa panguva yekutanga.

root@debian9:/home/joke/proxy# cat > 3proxy.pid

Kuti uchengetedze, tinya Ctrl + Z

4.15. Ngatitangei proxy server!

root@debian9:/home/joke/proxy# 3proxy /home/joke/proxy/3proxy.conf

4.16. Ngationei kana sevha iri kuteerera pamachiteshi

root@debian9:~/home/joke/proxy# netstat -nlp

netstat logActive Internet yekubatanidza (maseva chete)
Proto Recv-Q Send-Q Local Kero Yekune dzimwe nyika State PID/Program zita
tcp 0 0 0.0.0.0:8080 0.0.0.0:* TEERERA 504/3proxy
tcp 0 0 0.0.0.0:22 0.0.0.0:* TEERERA 338/sshd
tcp 0 0 0.0.0.0:3128 0.0.0.0:* TEERERA 504/3proxy
tcp6 0 0 :::22 :::* Teerera 338/sshd
udp 0 0 0.0.0.0:68 0.0.0.0:* 352/dhclient

Sezvazvakanyorwa mugadziriso, yedu yewebhu proxy inoteerera port 8080, Socks5 proxy inoteerera port 3128.

4.17. Kuti utange auto proxy sevhisi mushure mekutangazve, unofanirwa kuiwedzera kune cron.

root@debian9:/home/joke/proxy# crontab -e

Wedzera mutsara

@reboot /usr/local/bin/3proxy /home/joke/proxy/3proxy.conf

Isu tinodzvanya Enter, sezvo cron inofanirwa kuona kupera kwemutsara mutsara, uye chengetedza iyo faira.

Panofanira kunge paine meseji nezve kuisa crontab nyowani.

crontab: kuisa itsva crontab

4.18. Ngatitangeizve sisitimu uye edza kubatanidza kuburikidza nebrowser kune proxy. Kuti titarise, tinoshandisa Firefox browser (yewebhu proxy) uye FoxyProxy yekuwedzera yemasokisi5 ane huchokwadi.

root@debian9:/home/joke/proxy# reboot

4.19. Mushure mekutarisa kushanda kweiyo proxy mushure mekutangazve, unogona kuona matanda. Izvi zvinopedzisa iyo proxy server setup.

3 proxy log1542573996.018 PROXY.8080 00000 tester 192.168.23.10:50915 217.12.15.54:443 1193 6939 0 CONNECT_ads.yahoo.com:443_HTTP
1542574289.634 SOCK5.3128 00000 tester 192.168.23.10:51193 54.192.13.69:443 0 0 0 443 XNUMX CONNECT_normandy.cdn.mozilla.net:XNUMX

Kumisikidza uye kuita Transparent Proxy NAT kumisikidza

Mukugadzirisa uku, zvese zvishandiso zvemukati network zvichashanda pachena paInternet kuburikidza neremote proxy server. Zvechokwadi zvose zvisungo zveTCP zvichadzoserwa kune imwe kana kupfuura (inonyatso kuwedzera upamhi hwechiteshi, muenzaniso wekugadzirisa Nha. 2!) Proxy servers. Iyo DNS sevhisi ichashandisa 3proxy (dnspr) kugona. UDP haizo "enda" kunze, sezvo isu tisati tashandisa nzira yekumberi (yakaremara nekusarudzika muLinux kernel).

1. Yave nguva yekugonesa iyo enp0s8 interface

root@debian9:~# nano /etc/network/interfaces

/etc/network/interfaces faira# Iri faira rinotsanangura network network inowanikwa pane yako system
# uye mabatiro avangaita. Kuti uwane rumwe ruzivo, ona interfaces(5).

kunobva /etc/network/interfaces.d/*

# Iyo loopback network interface
mota iyo
iface lo inet loopback

# Iyo yekutanga network interface
bvumira-hotplug enp0s3
iface enp0s3 inet dhcp

# Iyo yechipiri network interface
bvumira-hotplug enp0s8
iface enp0s8 inet static
kero 192.168.201.254
netmask 255.255.255.0

Pano takapa iyo enp0s8 interface kero isingachinjiki 192.168.201.254 uye mask 255.255.255.0
Sevha iyo config Ctrl+X uye reboot

root@debian9:~# reboot

2. Kutarisa mainterfaces

root@debian9:~# ifconfig

ifconfig logenp0s3: mireza=4163 munhu 1500
inet 192.168.23.11 netmask 255.255.255.0 broadcast 192.168.23.255
inet6 fe80::a00:27ff:fec2:bae4 prefixlen 64 sikopeid 0x20 ether 08:00:27:c2:ba:e4 txqueuelen 1000 (Ethernet)
RX mapaketi 61 bytes 7873 (7.6KiB)
RX zvikanganiso 0 yakadonha 0 overruns 0 furemu 0
TX mapaketi 65 bytes 10917 (10.6KiB)
TX kukanganisa 0 yakadonha 0 overruns 0 mutakuri 0 kudhumhana 0

enp0s8: mireza=4163 munhu 1500
inet 192.168.201.254 netmask 255.255.255.0 broadcast 192.168.201.255
inet6 fe80::a00:27ff:fe79:a7e3 prefixlen 64 scopeid 0x20 ether 08:00:27:79:a7:e3 txqueuelen 1000 (Ethernet)
RX mapaketi 0 bytes 0 (0.0 B)
RX zvikanganiso 0 yakadonha 0 overruns 0 furemu 0
TX mapaketi 8 bytes 648 (648.0 B)
TX kukanganisa 0 yakadonha 0 overruns 0 mutakuri 0 kudhumhana 0

tarisa: mireza=73 munhu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10 loop txqueuelen 1 (Local Loopback)
RX mapaketi 0 bytes 0 (0.0 B)
RX zvikanganiso 0 yakadonha 0 overruns 0 furemu 0
TX mapaketi 0 bytes 0 (0.0 B)
TX kukanganisa 0 yakadonha 0 overruns 0 mutakuri 0 kudhumhana 0

3. Zvese zvakashanda, ikozvino iwe unofanirwa kugadzirisa 3proxy ye transparent proxying.

root@debian9:~# cd /home/joke/proxy/
root@debian9:/home/joke/proxy# cat > 3proxytransp.conf

Muenzaniso kugadziridzwa kwepachena proxy server Nhadaemon
pidfile /home/joke/proxy/3proxy.pid
nserver 8.8.8.8
nscache 65536
nguva dzekufamba 1 5 30 60 180 1800 16 60
log /home/joke/proxy/logs/3proxy.log D
logformat "- +_L%t.%. %N.%p %E %U %C:%c %R:%r %O %I %h %T"
tenderera 3
svina
auth iponly
dnspr
tendera *
mubereki 1000 socks5 IP_ADDRESS OF EXTERNAL_PROXY 3128 tester 1234
plugin /opt/proxy/3proxy-0.8.12/src/TransparentPlugin.ld.so transparent_plugin
tcppm -i0.0.0.0 888 127.0.0.1 11111

4. Iye zvino tinotangisa 3proxy neiyo itsva config
root@debian9:/home/joke/proxy# /usr/local/bin/3proxy /home/joke/proxy/3proxytransp.conf

5. Wedzera ku crontab zvakare
root@debian9:/home/joke/proxy# crontab -e
@reboot /usr/local/bin/3proxy /home/joke/proxy/3proxytransp.conf

6. Ngationei kuti mumiriri wedu ari kuterera zvino
root@debian9:~# netstat -nlp

netstat logActive Internet yekubatanidza (maseva chete)
Proto Recv-Q Send-Q Local Kero Yekune dzimwe nyika State PID/Program zita
tcp 0 0 0.0.0.0:22 0.0.0.0:* TEERERA 349/sshd
tcp 0 0 0.0.0.0:888 0.0.0.0:* TEERERA 354/3proxy
tcp6 0 0 :::22 :::* Teerera 349/sshd
udp 0 0 0.0.0.0:53 0.0.0.0:* 354/3proxy
udp 0 0 0.0.0.0:68 0.0.0.0:* 367/dhclient

7. Iye zvino mumiririri akagadzirira kubvuma chero TCP kubatana pachiteshi 888, DNS pachiteshi 53, kuitira kuti vagozoendeswa kune kure socks5 proxy uye DNS Google 8.8.8.8. Zvose zvatinofanira kuita kugadzirisa netfilter (iptables) uye mitemo yeDHCP yekupa kero.

8. Isa iyo iptables-inopfuurira uye dhcpd package

root@debian9:~# apt-get install iptables-persistent isc-dhcp-server

9. Rongedza iyo dhcpd yekutanga faira
root@debian9:~# nano /etc/dhcp/dhcpd.conf

dhcpd.conf# dhcpd.conf
#
# Sample yekumisikidza faira yeISC dhcpd
#

# tsananguro yesarudzo yakajairika kune ese anotsigirwa network…
sarudzo domain-zita "example.org";
option domain-name-servers ns1.example.org, ns2.example.org;

default-lease-nguva 600;
max-lease-nguva 7200;

ddns-update-style hapana;

# Kana iyi DHCP server iri yepamutemo DHCP server yenzvimbo
# network, iyo ine mvumo yekurayira haifanirwe kutaurwa.

chiremera;

# Kurongeka kwakasiyana kwakasiyana kwemukati subnet.
subnet 192.168.201.0 netmask 255.255.255.0 {
chiyero 192.168.201.10 192.168.201.250;
sarudzo domain-zita-servers 192.168.201.254;
sarudzo ma routers 192.168.201.254;
sarudzo nhepfenyuro-kero 192.168.201.255;
default-lease-nguva 600;
max-lease-nguva 7200;
}

11. Reboot uye tarisa sevhisi pachiteshi 67
root@debian9:~# reboot
root@debian9:~# netstat -nlp

netstat logActive Internet yekubatanidza (maseva chete)
Proto Recv-Q Send-Q Local Kero Yekune dzimwe nyika State PID/Program zita
tcp 0 0 0.0.0.0:22 0.0.0.0:* TEERERA 389/sshd
tcp 0 0 0.0.0.0:888 0.0.0.0:* TEERERA 310/3proxy
tcp6 0 0 :::22 :::* Teerera 389/sshd
udp 0 0 0.0.0.0:20364 0.0.0.0:* 393/dhcpd
udp 0 0 0.0.0.0:53 0.0.0.0:* 310/3proxy
udp 0 0 0.0.0.0:67 0.0.0.0:* 393/dhcpd
udp 0 0 0.0.0.0:68 0.0.0.0:* 405/dhclient
udp6 0 0 :::31728 :::* 393/dhcpd
mbishi 0 0 0.0.0.0:1 0.0.0.0:* 393/dhcpd

12. Chasara ndechekutungamira zvese zvikumbiro zvetcp kuchiteshi 888 uye chengetedza mutemo muma iptables.

root@debian9:~# iptables -t nat -A PREROUTING -s 192.168.201.0/24 -p tcp -j REDIRECT --to-ports 888

root@debian9:~# iptables-save > /etc/iptables/rules.v4

13. Kuwedzera chiteshi bandwidth, unogona kushandisa akati wandei proxy maseva kamwechete. Zvose zvinofanirwa kuva 1000. Zvitsva zvakabatanidzwa zvinotangwa zvine mukana we 0.2, 0.2, 0.2, 0.2, 0,1, 0,1 kune dzakatsanangurwa proxy server.

Cherechedza: kana tine proxy yewebhu, saka panzvimbo yemasokisi5 tinoda kunyora kubatanidza, kana masokisi4, ipapo masokisi4 (masokisi4 HAATSIGII LOGIN/PASSWORD MVUME!)

Muenzaniso kugadziridzwa kwepachena proxy server Nhadaemon
pidfile /home/joke/proxy/3proxy.pid
nserver 8.8.8.8
nscache 65536
maxconn 500
nguva dzekufamba 1 5 30 60 180 1800 16 60
log /home/joke/proxy/logs/3proxy.log D
logformat "- +_L%t.%. %N.%p %E %U %C:%c %R:%r %O %I %h %T"
tenderera 3
svina
auth iponly
dnspr
tendera *

mubereki 200 socks5 IP_ADDRESS_EXTERNAL_PROXY#1 3128 tester 1234
mubereki 200 socks5 IP_ADDRESS_EXTERNAL_PROXY#2 3128 tester 1234
mubereki 200 socks5 IP_ADDRESS_EXTERNAL_PROXY#3 3128 tester 1234
mubereki 200 socks5 IP_ADDRESS_EXTERNAL_PROXY#4 3128 tester 1234
mubereki 100 socks5 IP_ADDRESS_EXTERNAL_PROXY#5 3128 tester 1234
mubereki 100 socks5 IP_ADDRESS_EXTERNAL_PROXY#6 3128 tester 1234

plugin /opt/proxy/3proxy-0.8.12/src/TransparentPlugin.ld.so transparent_plugin
tcppm -i0.0.0.0 888 127.0.0.1 11111

Kumisikidza uye kumhanya NAT + Transparent Proxy kumisikidza

Mukugadzirisa uku, isu tichashandisa yakajairwa NAT mashandiro nekusarudza kana kuzara kwakajeka proxying yemakero ega kana subnets. Vashandisi venetiweki vemukati vachashanda nemamwe masevhisi / subnets vasingatomboziva kuti vari kushanda kuburikidza neproxy. Ese ma https akabatana anoshanda zvakanaka, hapana zvitupa zvinoda kugadzirwa/kutsiviwa.

Kutanga, ngatisarudze kuti ndeapi ma subnet/ masevhisi atinoda kuita proxy. Ngatifungei kuti mapuroxies ekunze anowanikwa panoshanda sevhisi yakaita sepandora.com. Ikozvino yasara kuona ma subnets / kero.

1. Ping

root@debian9:~# ping pandora.com
PING pandora.com (208.85.40.20) 56(84) bytes of data.

2. Nyora BGP 208.85.40.20 muGoogle

Handei kune saiti bgp.he.net/net/208.85.40.0/24#_netinfo
Zvinogona kuonekwa kuti subnet yandiri kutsvaga ndeye AS40428 Pandora Media, Inc

bgp.he.net/net/208.85.40.0/24#_netinfo

Kuvhura v4 prefixes

bgp.he.net/AS40428#_prefixes

Heano ma subnets anodiwa!

199.116.161.0/24
199.116.162.0/24
199.116.164.0/23
199.116.164.0/24
199.116.165.0/24
208.85.40.0/24
208.85.41.0/24
208.85.42.0/23
208.85.42.0/24
208.85.43.0/24
208.85.44.0/24
208.85.46.0/23
208.85.46.0/24
208.85.47.0/24

3. Kuti uderedze huwandu hwema subnets, unofanirwa kuita aggregation. Enda kunzvimbo ip-calculator.ru/aggregate uye kopira runyorwa rwedu ipapo. Somugumisiro - 6 subnets panzvimbo ye14.

199.116.161.0/24
199.116.162.0/24
199.116.164.0/23
208.85.40.0/22
208.85.44.0/24
208.85.46.0/23

4. Bvisa iptables mitemo

root@debian9:~# iptables -F
root@debian9:~# iptables -X
root@debian9:~# iptables -t nat -F
root@debian9:~# iptables -t nat -X

Gonesa iyo yekumberi uye NAT michina

root@debian9:~# echo 1 > /proc/sys/net/ipv4/ip_forward
root@debian9:~# iptables -A FORWARD -i enp0s3 -o enp0s8 -j ACCEPT
root@debian9:~# iptables -A FORWARD -i enp0s8 -o enp0s3 -j ACCEPT
root@debian9:~# iptables -t nat -A POSTROUTING -o enp0s3 -s 192.168.201.0/24 -j MASQUERADE

Kuti ive nechokwadi chekuti kumberi kunogoneswa zvachose mushure mekutangazve, ngatichinje faira

root@debian9:~# nano /etc/sysctl.conf

Uye uncomment mutsetse

net.ipv4.ip_forward = 1

Ctrl+X kuchengetedza faira

5. Tinoputira pandora.com subnets mune proxy

root@debian9:~# iptables -t nat -A PREROUTING -s 192.168.201.0/24 -d 199.116.161.0/24,199.116.162.0/24,199.116.164.0/23,208.85.40.0/22,208.85.44.0/24,208.85.46.0/23 -p tcp -j REDIRECT --to-ports 888

6. Ngatichengetei mitemo

root@debian9:~# iptables-save > /etc/iptables/rules.v4

Kumisikidza uye kumhanyisa Transparent Proxy kuburikidza nerouter kumisikidza

Mukugadzirisa uku, sevha yeproxy inoonekera inogona kunge iri PC yakasiyana kana muchina chaiwo kuseri kwemba / kambani router. Zvakakwana kunyoresa static nzira pane router kana zvishandiso uye iyo subnet yese ichashandisa proxy pasina kudiwa kwemamwe marongero.

ZVINOKOSHA! Izvo zvinodikanwa kuti gedhi redu rigamuchire static IP kubva kune router, kana kuti rakagadzirirwa kuti rive rakamira pacharo.

1. Gadzirisa kero yakamira yegedhi (enp0s3 adapta)

root@debian9:~# nano /etc/network/interfaces

/etc/network/interfaces faira# Iri faira rinotsanangura network network inowanikwa pane yako system
# uye mabatiro avangaita. Kuti uwane rumwe ruzivo, ona interfaces(5).

kunobva /etc/network/interfaces.d/*

# Iyo loopback network interface
mota iyo
iface lo inet loopback

# Iyo yekutanga network interface
bvumira-hotplug enp0s3
iface enp0s3 inet static
kero 192.168.23.2
netmask 255.255.255.0
gateway 192.168.23.254

# Iyo yechipiri network interface
bvumira-hotplug enp0s8
iface enp0s8 inet static
kero 192.168.201.254
netmask 255.255.255.0

2. Bvumira zvishandiso kubva ku192.168.23.0/24 subnet kushandisa proxying

root@debian9:~# iptables -t nat -A PREROUTING -s 192.168.23.0/24 -d 199.116.161.0/24,199.116.162.0/24,199.116.164.0/23,208.85.40.0/22,208.85.44.0/24,208.85.46.0/23 -p tcp -j REDIRECT --to-ports 888

3. Ngatichengetei mitemo
root@debian9:~# iptables-save > /etc/iptables/rules.v4

4. Ngatinyorei subnets pane router

Router network list199.116.161.0 255.255.255.0 192.168.23.2
199.116.162.0 255.255.255.0 192.168.23.2
199.116.164.0 255.255.254.0 192.168.23.2
208.85.40.0 255.255.252.0 192.168.23.2
208.85.44.0 255.255.255.0 192.168.23.2
208.85.46.0 255.255.254.0 192.168.23.2

Zvishandiso / zviwanikwa zvakashandiswa

1. Webhusaiti yepamutemo ye3proxy chirongwa 3proxy.ru

2. Mirayiridzo yekuisa 3proxy kubva kunobva www.ekzorchik.ru/2015/02/how-to-take-your-socks-proxy

3. 3proxy development bazi paGitHub github.com/z3APA3A/3proxy/issues/274

Source: www.habr.com

Voeg