# Sample Configuration File # # Each line is one of: # # DENY [*=userlist] dst_addr dst_mask [op dst_port] # DIRECT [*=userlist] dst_addr dst_mask [op dst_port] DIRECT 192.168.0.0 255.255.255.0 # BALANCE # SOCKD [@=serverlist] [*=userlist] dst_addr dst_mask [op dst_port] # SOCKD4 [@=serverlist] [*=userlist] dst_addr dst_mask [op dst_port] # SOCKD5 [@=serverlist] [*=userlist] dst_addr dst_mask [op dst_port] SOCKD5 @=192.168.0.1 0.0.0.0 0.0.0.0 # GSS encryption_type # BIND-MODULE module_name # PROXY-NAME @=serverlist PROXY-NAME @=192.168.0.1 # # Where: # userlist is a comma separated list of users (optional) # dst_addr is a dotted quad IP address # dst_mask is a dotted quad IP address # op is one of EQ NEQ LT GT LE GE # dst_port is the number or name of a destination port # serverlist is a comma separated list containing the name or IP addresses # of SOCKS servers (use IP addresses for speed). Each address # or name may be optionally followed by an explicit port number # as follows: # IPaddress:portNumber or name:portNumber # Note that the default port number is 1080. # module_name is the name of an exacutable file (eg. FTP) # encryption_type is: # 0 - Authentication Only # 1 - Integrity # 2 - Confidentiality (Full Encryption) # Note GSS is only available with the GSSAPI.DLL and KRB5.DLL from MIT # # On connect each line is processed in order and the first line that matches # is used. If no line matches the address is assumed to be Direct. # # Matching is done by taking the destination address and ANDing it with the # dst_mask. The result is then compared to the dst_addr. If they match, then # if the userlist exists the current username is compared against this list. # Also if the [op dst_port] exists, the destination port is compared to # dst_port and if the "op" is true, the line is used. # # DENY means to disallow the connect attemp. # DIRECT means to attempt the connection as normal. # SOCKD means to go the specified SOCKD 4 server. # SOCKD4 means to go the specified SOCKD 4 server. # SOCKD5 means to go the specified SOCKD 5 server. # # If @=serverlist is not present the SOCKD server specified by the registry # value: # LOCAL_MACHINE\SOFTWARE\HummingBird\SOCKS_SERVER # is used. Note that the IP address or name of the server may be optionally # followed by an explicit port number as follows: # IPaddress:portNumber or name:portNumber # Note that the default port number is 1080. # PROXY-NAME is used to facilitate DNS lookup of names. If an attempt is # made to connect to a host and the name of the host fails local translation, # then the SOCKS V5 connection attempt is made via the name, through the # specified serverlist. Since the IP address is not known, this command has # its own list of SOCKS V5 servers. # # Installation is best performed by the accompanying INSTALL.BAT file. # # To manually install under Windows 95 WITHOUT the Winsock2 API added: # # Restart Windows 95 in DOS mode. Rename the file \Windows\System\WSOCK32.DLL # to WSOCK32O.DLL and copy the new WSOCK32.DLL into \Windows\System. Place # this file (socks.cnf) in the \Windows\System directory. Restart Windows 95. # # To manually install under Windows NT 3.51: # # Rename the file \Winnt\System32\WSOCK32.DLL to WSOCK32O.DLL and copy the # new WSOCK32.DLL into the \Winnt\System32 directory. Place this file # (socks.cnf) in the \Winnt\System32 directory. It is now installed. # #SOCKD4 @=192.75.152.8 130.113.68.1 255.255.255.255 BIND-MODULE ftp