{"action":"created","issue":{"url":"https://api.github.com/repos/darkk/redsocks/issues/39","labels_url":"https://api.github.com/repos/darkk/redsocks/issues/39/labels{/name}","comments_url":"https://api.github.com/repos/darkk/redsocks/issues/39/comments","events_url":"https://api.github.com/repos/darkk/redsocks/issues/39/events","html_url":"https://github.com/darkk/redsocks/issues/39","id":8985343,"number":39,"title":"Using REDSOCKS","user":{"login":"su966","id":2962140,"avatar_url":"https://avatars.githubusercontent.com/u/2962140?v=3","gravatar_id":"","url":"https://api.github.com/users/su966","html_url":"https://github.com/su966","followers_url":"https://api.github.com/users/su966/followers","following_url":"https://api.github.com/users/su966/following{/other_user}","gists_url":"https://api.github.com/users/su966/gists{/gist_id}","starred_url":"https://api.github.com/users/su966/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/su966/subscriptions","organizations_url":"https://api.github.com/users/su966/orgs","repos_url":"https://api.github.com/users/su966/repos","events_url":"https://api.github.com/users/su966/events{/privacy}","received_events_url":"https://api.github.com/users/su966/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":31,"created_at":"2012-12-04T14:23:16Z","updated_at":"2015-08-10T16:21:56Z","closed_at":null,"body":"I have installed REDSOCKS on latest ubuntu server. It has two interfaces\n\nClient (192.168.1.21/24) -->int eth1(192.168.1.1/24) of Ubuntu server --Redsocks --int eth0(172.18.185.14/22) of Ubuntu Server -->ISP Proxy (172.28.21.240:8080) -->Internet\n\nClient does not have the ability to configure proxy server\nRedsocks.conf file\n base{\n          log_debug=on;\n          log_info=on;\n          log= \"syslog:daemon\";\n          daemon=on;\n          redirector=iptables;\n}\nredsocks {\n           local_ip=192.168.1.1;\n           local_port=12345;\n           ip=172.28.21.240;\n           port=8080;\n           type=socks5;\n}\n\nContents of iptables\n*nat\n:PREROUTING ACCEPT[217:36158]\n:INPUT ACCEPT [1147:90444]\n:OUTPUT ACCEPT [0:0]\n:POSTROUTING ACCEPT[0:0]\n:REDSOCKS - [0:0]\n\n-A PREROUTING -i eth1 -p tcp -j REDSOCKS\n-A POSTROUTING -o eth0 -j MASQUERADE\n-A REDSOCKS -d 0.0.0.0/8 -j RETURN\n-A REDSOCKS -d 127.0.0.0/8 -j RETURN\n-A REDSOCKS -d 192.168.0.0/16 RETURN\n-A REDSOCKS -p tcp -j REDIRECT --to-ports 12345\n\n\n*filter\n:INPUT ACCEPT [10732:923988]\n:FORWARD ACCEPT[581:108005]\n:OUTPUT ACCEPT[7693:310754]\n-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT\n-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT\nCOMMIT\n\nWith the above configuration client can not access internet.\n\nPlease give some help.\n\n\n"},"comment":{"url":"https://api.github.com/repos/darkk/redsocks/issues/comments/129516360","html_url":"https://github.com/darkk/redsocks/issues/39#issuecomment-129516360","issue_url":"https://api.github.com/repos/darkk/redsocks/issues/39","id":129516360,"user":{"login":"darkk","id":21046,"avatar_url":"https://avatars.githubusercontent.com/u/21046?v=3","gravatar_id":"","url":"https://api.github.com/users/darkk","html_url":"https://github.com/darkk","followers_url":"https://api.github.com/users/darkk/followers","following_url":"https://api.github.com/users/darkk/following{/other_user}","gists_url":"https://api.github.com/users/darkk/gists{/gist_id}","starred_url":"https://api.github.com/users/darkk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/darkk/subscriptions","organizations_url":"https://api.github.com/users/darkk/orgs","repos_url":"https://api.github.com/users/darkk/repos","events_url":"https://api.github.com/users/darkk/events{/privacy}","received_events_url":"https://api.github.com/users/darkk/received_events","type":"User","site_admin":false},"created_at":"2015-08-10T16:21:56Z","updated_at":"2015-08-10T16:21:56Z","body":"@drvirusz it seems to be configured correctly.\r\n\r\nIf you want to have additional comments, please provide following info:\r\n\r\n1) pcap from `tcpdump -i eth0 'host pro.xy.addr.ess or host desti.nation.addr.ess'`\r\n2) pcap from `tcpdump -i tap_axp1 'host pro.xy.addr.ess or host desti.nation.addr.ess'`\r\n3) pcap from `tcpdump -i tap_axp1 'host pro.xy.addr.ess or host desti.nation.addr.ess'`\r\n4) netfilter rules dump provided by `iptables-save` and `ip6tables-save`\r\n\r\nAll three pcap dumps should be uploaded to https://www.cloudshark.org/ to ease commenting. All three dumps should be captured at the same time while testing if setup works properly.\r\n\r\nYou should also tell how you test if it works – the best method is to run single `curl` request to some URL."}}