Проблемы с установкой Dante proxy

CewrioR · Сообщение **CewrioR** » 24.01.2013 19:10

Debian

apt-get install dante-server
Установился. Конфиг /etc/danted.conf :

logoutput: syslog /var/log/danted.log

internal: ppp0 port = 1188
external: ppp0
method: none
client pass {
from: 0.0.0.0/0 port 1-65535 to: 0.0.0.0/0
log: connect disconnect iooperation
}

pass {
from: 0.0.0.0/0 to: 0.0.0.0/0
command: connect udpassociate
log: connect disconnect iooperation
}

Запускаю /etc/init.d/danted start
Starting Dante SOCKS daemon: danted.

В логе /var/log/danted.log :

Jan 24 18:55:48 (1359039348) danted[1606]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 24 18:55:48 (1359039348) danted[1606]: fixsettings(): setting the libwrap uid to 0 is not recommended
Jan 24 18:55:48 (1359039348) danted[1607]: 0"A: terminating on signal 1607
Jan 24 18:55:48 (1359039348) danted[1606]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 24 18:55:48 (1359039348) danted[1606]: fixsettings(): setting the libwrap uid to 0 is not recommended
Jan 24 18:55:48 (1359039348) danted[1606]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 24 18:55:48 (1359039348) danted[1606]: fixsettings(): setting the libwrap uid to 0 is not recommended
Jan 24 18:55:48 (1359039348) danted[1606]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 24 18:55:48 (1359039348) danted[1606]: fixsettings(): setting the libwrap uid to 0 is not recommended
Jan 24 18:55:48 (1359039348) danted[1606]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 24 18:55:48 (1359039348) danted[1606]: fixsettings(): setting the libwrap uid to 0 is not recommended
Jan 24 18:55:48 (1359039348) danted[1606]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 24 18:55:48 (1359039348) danted[1606]: fixsettings(): setting the libwrap uid to 0 is not recommended
Jan 24 18:55:48 (1359039348) danted[1606]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 24 18:55:48 (1359039348) danted[1606]: fixsettings(): setting the libwrap uid to 0 is not recommended
Jan 24 18:55:48 (1359039348) danted[1606]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 24 18:55:48 (1359039348) danted[1606]: fixsettings(): setting the libwrap uid to 0 is not recommended

ps axu | grep danted ничего не выдает.

lastpriot · Сообщение **lastpriot** » 24.01.2013 19:44

запустите вручную sockd -d 1 -f /etc/danted.conf и покажите вывод

CewrioR · Сообщение **CewrioR** » 24.01.2013 20:16

root@debian:~# sockd -d 1 -f /etc/danted.conf
-bash: sockd: команда не найдена

root@debian:~# danted -d 1 -f /etc/danted.conf
Jan 24 20:15:48 (1359044148) danted[1736]: serverinit(): unknown argument 1
Jan 24 20:15:48 (1359044148) danted[1736]: sockdexit()
Jan 24 20:15:48 (1359044148) danted[1736]: sockdexit(): terminating

lastpriot · Сообщение **lastpriot** » 24.01.2013 20:33

у вас версия dante 1.1.19

запустите вручную danted -d -f /etc/danted.conf, и дайте вывод /var/log/danted.log

CewrioR · Сообщение **CewrioR** » 25.01.2013 05:30

root@debian:~# danted -d -f /etc/danted.conf
Ошибка сегментирования

/var/log/danted.log :
Jan 25 05:30:05 (1359077405) danted[1600]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 25 05:30:05 (1359077405) danted[1600]: fixsettings(): setting the libwrap uid to 0 is not recommended
Jan 25 05:30:05 (1359077405) danted[1600]: (null): old: 0, new: 17179869185

CewrioR · Сообщение **CewrioR** » 25.01.2013 07:44

Установил Ubuntu сервер 12.04 LTS, итог тот же самый:

qwer@ubuntu:~$ sudo danted -d -f /etc/danted.conf
/var/log/danted.log :
Jan 24 19:41:43 (1359085303) danted[1509]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 24 19:41:43 (1359085303) danted[1509]: fixsettings(): setting the libwrap uid to 0 is not recommended
Jan 24 19:41:43 (1359085303) danted[1509]: (null): old: 17179869188, new: 1

qwer@ubuntu:~$ sudo /etc/init.d/danted start
Starting Dante SOCKS daemon: danted.
/var/log/danted.log :
Jan 24 19:30:12 (1359084612) danted[1487]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 24 19:30:12 (1359084612) danted[1487]: fixsettings(): setting the libwrap uid to 0 is not recommended
Jan 24 19:30:12 (1359084612) danted[1488]: x�B: terminating on signal 0
Jan 24 19:30:12 (1359084612) danted[1487]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 24 19:30:12 (1359084612) danted[1487]: fixsettings(): setting the libwrap uid to 0 is not recommended
Jan 24 19:30:12 (1359084612) danted[1493]: created new (null)child
Jan 24 19:30:12 (1359084612) danted[1487]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 24 19:30:12 (1359084612) danted[1487]: fixsettings(): setting the libwrap uid to 0 is not recommended
Jan 24 19:30:12 (1359084612) danted[1491]: created new (null)child
Jan 24 19:30:12 (1359084612) danted[1487]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 24 19:30:12 (1359084612) danted[1487]: fixsettings(): setting the libwrap uid to 0 is not recommended
Jan 24 19:30:12 (1359084612) danted[1492]: created new (null)child
Jan 24 19:30:12 (1359084612) danted[1487]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 24 19:30:12 (1359084612) danted[1487]: fixsettings(): setting the libwrap uid to 0 is not recommended
Jan 24 19:30:12 (1359084612) danted[1494]: created new (null)child
Jan 24 19:30:12 (1359084612) danted[1487]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 24 19:30:12 (1359084612) danted[1487]: fixsettings(): setting the libwrap uid to 0 is not recommended
Jan 24 19:30:12 (1359084612) danted[1490]: created new (null)child
Jan 24 19:30:12 (1359084612) danted[1487]: fixsettings(): setting the unprivileged uid to 0 is not recommended
Jan 24 19:30:12 (1359084612) danted[1487]: fixsettings(): setting the libwrap uid to 0 is not recommended
Jan 24 19:30:12 (1359084612) danted[1489]: created new (null)child

ps axu | grep danted ничего не выдал

Encore · Сообщение **Encore** » 25.01.2013 10:47

Может попробовать собрать самому версию посвежее?

Dante 1.1.x releases
NOTE: This version is no longer supported.
2006-01-20: Dante 1.1.19

CewrioR писал(а): ↑
25.01.2013 07:44
Установил Ubuntu сервер 12.04 LTS, итог тот же самый

Тоже segmentation fault?
Покажите вывод strace danted ... может там что интересное проскочит

lastpriot · Сообщение **lastpriot** » 25.01.2013 13:12

погуглив, заметил что segfault только на платформе amd64

CewrioR · Сообщение **CewrioR** » 25.01.2013 14:56

Encore писал(а): ↑
25.01.2013 10:47
Может попробовать собрать самому версию посвежее?

Dante 1.1.x releases
NOTE: This version is no longer supported.
2006-01-20: Dante 1.1.19

CewrioR писал(а): ↑
25.01.2013 07:44
Установил Ubuntu сервер 12.04 LTS, итог тот же самый

Тоже segmentation fault?
Покажите вывод strace danted ... может там что интересное проскочит

Код: Выделить всё

qwer@ubuntu:~$ strace danted
execve("/usr/sbin/danted", ["danted"], [/* 18 vars */]) = 0
brk(0)                                  = 0x18e7000
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f644c173000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=15917, ...}) = 0
mmap(NULL, 15917, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f644c16f000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libwrap.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20,\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=36432, ...}) = 0
mmap(NULL, 2133888, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f644bd4a000
mprotect(0x7f644bd52000, 2093056, PROT_NONE) = 0
mmap(0x7f644bf51000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7f644bf51000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\"\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=55744, ...}) = 0
mmap(NULL, 2150840, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f644bb3c000
mprotect(0x7f644bb48000, 2097152, PROT_NONE) = 0
mmap(0x7f644bd48000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xc000) = 0x7f644bd48000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libcrypt.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\n\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=43288, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f644c16e000
mmap(NULL, 2327040, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f644b903000
mprotect(0x7f644b90c000, 2097152, PROT_NONE) = 0
mmap(0x7f644bb0c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7f644bb0c000
mmap(0x7f644bb0e000, 184832, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f644bb0e000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libdl.so.2", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=14768, ...}) = 0
mmap(NULL, 2109704, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f644b6ff000
mprotect(0x7f644b701000, 2097152, PROT_NONE) = 0
mmap(0x7f644b901000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f644b901000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\30\2\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=1811128, ...}) = 0
mmap(NULL, 3925208, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f644b340000
mprotect(0x7f644b4f5000, 2093056, PROT_NONE) = 0
mmap(0x7f644b6f4000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1b4000) = 0x7f644b6f4000
mmap(0x7f644b6fa000, 17624, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f644b6fa000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libnsl.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`@\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=97248, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f644c16d000
mmap(NULL, 2202328, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f644b126000
mprotect(0x7f644b13d000, 2093056, PROT_NONE) = 0
mmap(0x7f644b33c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x16000) = 0x7f644b33c000
mmap(0x7f644b33e000, 6872, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f644b33e000
close(3)                                = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f644c16c000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f644c16b000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f644c16a000
arch_prctl(ARCH_SET_FS, 0x7f644c16b700) = 0
mprotect(0x7f644b6f4000, 16384, PROT_READ) = 0
mprotect(0x7f644b33c000, 4096, PROT_READ) = 0
mprotect(0x7f644b901000, 4096, PROT_READ) = 0
mprotect(0x7f644bb0c000, 4096, PROT_READ) = 0
mprotect(0x7f644bd48000, 4096, PROT_READ) = 0
mprotect(0x7f644bf51000, 4096, PROT_READ) = 0
mprotect(0x630000, 4096, PROT_READ)     = 0
mprotect(0x7f644c175000, 4096, PROT_READ) = 0
munmap(0x7f644c16f000, 15917)           = 0
geteuid()                               = 1000
brk(0)                                  = 0x18e7000
brk(0x1908000)                          = 0x1908000
rt_sigprocmask(SIG_BLOCK, [HUP TERM], [], 8) = 0
open("/etc/danted.conf", O_RDONLY)      = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=7941, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f644c172000
read(3, "logoutput: syslog /var/log/dante"..., 8192) = 7941
read(3, "", 4096)                       = 0
getpid()                                = 1675
open("/tmp/./sockslockXXXXmdHgy7", O_RDWR|O_CREAT|O_EXCL, 0600) = 4
unlink("/tmp/./sockslockXXXXmdHgy7")    = 0
fcntl(4, F_GETFD)                       = 0
fcntl(4, F_SETFD, FD_CLOEXEC)           = 0
open("/var/log/danted.log", O_WRONLY|O_CREAT|O_APPEND, 0666) = -1 EACCES (Permission denied)
open("/etc/localtime", O_RDONLY|O_CLOEXEC) = 5
fstat(5, {st_mode=S_IFREG|0644, st_size=2819, ...}) = 0
fstat(5, {st_mode=S_IFREG|0644, st_size=2819, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f644c171000
read(5, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\0"..., 4096) = 2819
lseek(5, -1802, SEEK_CUR)               = 1017
read(5, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\5\0\0\0\5\0\0\0\0"..., 4096) = 1802
close(5)                                = 0
munmap(0x7f644c171000, 4096)            = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2819, ...}) = 0
--- SIGSEGV (Segmentation fault) @ 0 (0) ---
+++ killed by SIGSEGV +++
Segmentation fault

lastpriot писал(а): ↑
25.01.2013 13:12
погуглив, заметил что segfault только на платформе amd64

У меня VMware на Intel

26.01.2013 06:26

CewrioR писал(а): ↑
25.01.2013 14:56
У меня VMware на Intel

amd64 - это не то же самое, что amd.

CewrioR · Сообщение **CewrioR** » 27.01.2013 15:34

Encore писал(а): ↑
25.01.2013 10:47
Может попробовать собрать самому версию посвежее?

Собрал таки 1.3.2. Прокси работает, но кое что не ясно:
1) При запуске терминал "подвисает" - невозможно выполнять команды. Отвисает после ctrl+c но прокси конечно останавливается. Как вылечить?
2) Ругается в логе:
Jan 26 06:44:29 (1359168269.309147) sockd[6993]: warning: checkconfig(): setting the unprivileged uid to 0 is not recommended for security reasons

Содержание конфига:

logoutput: syslog /var/log/danted.log
internal: ppp0 port = 1080
external: ppp0
method: none
#user.privileged: qwer
client pass {
from: 0.0.0.0/0 port 1-65535 to: 0.0.0.0/0
log: connect disconnect iooperation
}
pass {
from: 0.0.0.0/0 to: 0.0.0.0/0
command: connect udpassociate
log: connect disconnect iooperation
}

Подсказывали что не нравится ему работа из под рута - снятие комментария с "user.privileged: qwer" приводит к тому что ругается он пуще прежнего:
Jan 26 07:08:40 (1359169720.644450) sockd[1603]: warning: checkconfig(): setting the unprivileged uid to 0 is not recommended for security reasons
Jan 26 07:08:40 (1359169720.645002) sockd[1603]: warning: open(/var/run/sockd.pid): Permission denied (errno = 13)

lastpriot · Сообщение **lastpriot** » 27.01.2013 19:37

1) нужно запускать с ключом -D (daemon mode, background)
2) понижение привилегий червез опцию user.unprivileged, а не user.privileged

p.s. читайте маны!

runior · Сообщение **runior** » 18.10.2024 09:56

Появилась необходимость. Установил, настроил, работает.
Но только без iptables.

:INPUT DROP [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]

-A INPUT -p icmp -m icmp --icmp-type 0 -j DROP

-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 1080 -j ACCEPT

Где подкоутить?

unixforum.org

Проблемы с установкой Dante proxy

Проблемы с установкой Dante proxy

Re: Проблемы с установкой Dante proxy

Re: Проблемы с установкой Dante proxy

Re: Проблемы с установкой Dante proxy

Re: Проблемы с установкой Dante proxy

Re: Проблемы с установкой Dante proxy

Re: Проблемы с установкой Dante proxy

Re: Проблемы с установкой Dante proxy

Re: Проблемы с установкой Dante proxy

Re: Проблемы с установкой Dante proxy

Re: Проблемы с установкой Dante proxy

Re: Проблемы с установкой Dante proxy

Re: Проблемы с установкой Dante proxy