73 Commits

Author	SHA1	Message	Date
Vladimir Dubrovin	3d20e1104e	resolver: per service, defaultresolve, fakeresolve or sysresolve ... Each service resolves names the way the last of defaultresolve (the name servers in force, configured or the system's with the hosts file), fakeresolve (127.0.0.2) and sysresolve (the C library) read before it says; the last one in the configuration also applies outside services. defaultresolve is the new command, and the default. The name servers and the hosts file no longer depend on the mode: nserver lines, or the system's, are always in force, so dnspr keeps forwarding; with fakeresolve it does not, as before. fakeresolver moves to common.c, which the standalone services link without resolve.c. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-21 18:45:48 +03:00
Vladimir Dubrovin	9612bbdd22	Unix sockets: no addresses on streams, abstract names, tcppm port 0 ... On Linux a proxy listening on a Unix socket relayed only the first bytes of an answer (result 95): sockmap() read with recvfrom() into the client's address, which for a Unix stream socket Linux fills with an empty AF_UNIX one, and then sent with sendto() to that address, which a connected Unix stream socket refuses. A TCP connection has no use for addresses: sockmap() now sends and receives with NULL ones, and connect-back sends its command with socksend() and reads the answer with sockrecvfrom() without an address, which a NULL sin now allows. An abstract socket name (-iunix:@NAME) was bound with the whole size of struct sockaddr_un, padded with zeros, so a client naming it by its bytes, as most do, reached another name. SASIZE() now gives an abstract address its exact size; getsockname() calls that took SASIZE() of the old contents as the buffer size take the buffer's size instead. tcppm refused port 0 for a unix: target, though the manual gives "tcppm 8080 unix:/var/run/app.sock 0" as the example: the port of a Unix socket target is ignored, so 0 is allowed. A test case covers a proxy on a Unix socket and on an abstract one on Linux, tcppm to a Unix socket, a parent reached through one, and a listening Unix socket across reloads: taken over each time, its file kept, and removed once no service listens on it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-18 12:05:27 +03:00
Vladimir Dubrovin	ca0b5e0c88	Make filtermaxsize, parentretries, delimchar and maxseg per service ... Like the timeouts, each service now keeps the values given before it instead of reading the global ones while its connections run. setopts() takes the service's maxseg. The TLS handshakes wait the service's CONNECT_TO, kept in its SSL configuration, rather than the global one. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-13 15:33:35 +03:00
Vladimir Dubrovin	ea65f3834b	per-service timeouts	2026-10-13 15:12:05 +03:00
Vladimir Dubrovin	cc19bbff6d	Unify Linux namespace operations	2026-10-12 18:18:27 +03:00
Vladimir Dubrovin	c14393cfe4	Fix SOCKS CONNECT and BIND replies reporting the client side address ... Without -Ne, the reply to CONNECT and BIND named the local address of the client's connection to the proxy instead of the socket towards the destination: the branch meant for UDP ASSOCIATE also took these. A BIND client was told the proxy's own port and the peer could never reach the listener. Introduced with -Ne / -Ni (0c8be90). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-12 18:03:45 +03:00
Vladimir Dubrovin	a20f646169	Pre-allocate client/server/tmp/etc buffers with client structure	2026-10-12 17:19:55 +03:00
Vladimir Dubrovin	c827f77137	Support = in socket options, make TCP_NODELAY default	2026-10-11 20:56:49 +03:00
Vladimir Dubrovin	b4f5ffbf8c	Fix missing device binding for few cases	2026-10-10 17:38:44 +03:00
Vladimir Dubrovin	6ca4a2686d	port range support (parent extport / intport)	2026-08-25 14:23:33 +03:00
Vladimir Dubrovin	13a57812e5	Fix: -Ne/-Ni, -4 / -6 handling for udp mapping in socks, mixed family support in udp	2026-08-12 16:25:12 +03:00
Vladimir Dubrovin	bebc3894e2	Support acls for UDP ASSOC, fix udppm via SOCKSv5	2026-08-11 19:02:54 +03:00
Vladimir Dubrovin	4877b39f2c	Fix deadcode / warnings / minor bugs	2026-07-31 18:55:59 +03:00
Vladimir Dubrovin	44c47ee7d9	replace recursion with loop for local redirects, fix wolfSSL build	2026-07-31 15:44:22 +03:00
Vladimir Dubrovin	fd7b25bf06	Use non-blocking sockets for UDP	2026-06-02 13:43:56 +03:00
Vladimir Dubrovin	05c4832c6c	Minor cleanups	2026-05-13 23:21:13 +03:00
Vladimir Dubrovin	381ef993a7	Minor logging improvement / code cleanup	2026-05-12 21:21:59 +03:00
Vladimir Dubrovin	7871279fae	Support namespaces for UDP in socks	2026-05-08 20:21:04 +03:00
Vladimir Dubrovin	b1d21cbdca	Copyright update	2026-05-08 18:07:08 +03:00
Vladimir Dubrovin	88a09bc3ff	Fix socks v5 derivations from standard	2026-05-06 23:02:04 +03:00
Vladimir Dubrovin	830b2d39d1	Use standard malloc functions	2026-05-04 18:50:02 +03:00
Vladimir Dubrovin	4068a6955f	Fix UDP parent for SOCKSv5	2026-05-02 00:00:45 +03:00
Vladimir Dubrovin	acce67a512	Fix NULL address request for UDP ASSOC	2026-05-01 17:26:06 +03:00
Vladimir Dubrovin	314503d8df	SOCKSv5 parent udp support (initial, untested)	2026-05-01 15:13:53 +03:00
Vladimir Dubrovin	f01c8bfee9	Code cleanup	2026-04-27 19:58:34 +03:00
Vladimir Dubrovin	2d6eeff5f3	FIx typos, update documentation	2026-04-12 13:58:42 +03:00
Vladimir Dubrovin	c206349ee2	Support unix sockets for internal and -i ... Example configuration: log auto -iunix:/path/to/3proxy.sock test with curl --unix-socket /path/to/3proxy.sock https://3proxy.ru	2026-04-12 00:30:35 +03:00
Vladimir Dubrovin	0c8be907e9	-Ne / -Ni options added to specify external / internal NAT address	2026-04-10 15:01:43 +03:00
Vladimir Dubrovin	483542b914	Use uint32_t/uint16_t instead of unsigned long / unsigned short where required	2026-04-08 21:13:18 +03:00
Vladimir Dubrovin	09a3ddeeac	SOCKSTRACE fixed	2026-04-08 19:21:25 +03:00
Vladimir Dubrovin	cf6946cc8b	Fix: IPv6 address may be invalid on some plafrorms for SOCKSv5 UDP ASSOCIATE	2024-07-18 12:50:59 +03:00
Vladimir Dubrovin	013d4bc333	tlspr (SNI proxy) implemented ... Options -cN - level of TLS check default - allow non-TLS traffic 1 - require TLS, only check client HELLO packet 2 - require TLS, check both client and server HELLO 3 - require TLS, check server send certificate (not compatible with TLS 1.3) 4 - require mutual TLS, check server send certificate request and client sends certificate (not compatible with TLS 1.3) -P - default port examples: 1. tlspr -p1443 -P443 -c1 (port 1443 may be used to redirect traffic to destination port 143). SNI is used to find destination host 2. allow * * * 80 parent 1000 http 0.0.0.0 0 allow * * * * CONNECT parent 1000 tls 0.0.0.0 0 deny * * some.not.allowed.host allow * socks attempts to take destination hostname from SNI in SOCKS	2024-05-20 13:01:38 +03:00
Vladimir Dubrovin	375e3a74d0	call local socket function	2024-02-18 19:41:45 +03:00
Vladimir Dubrovin	8198db8617	adding state to socket functions	2024-02-17 17:31:25 +03:00
Vladimir Dubrovin	00513a7d28	eliminate redundant code in previous fix	2023-07-12 17:21:46 +03:00
Vladimir Dubrovin	dc7e098e6b	Support request filters for SOCKS, support broken BIND request from some clients	2023-07-12 15:55:50 +03:00
Vladimir Dubrovin	1cf169b7ae	FIX: SSLPlugin with SOCKS	2022-05-19 13:26:52 +03:00
Vladimir Dubrovin	6d77141ecc	Update socks.c	2022-04-25 13:09:55 +03:00
Vladimir Dubrovin	daa2b74354	Merge branch 'master' of https://github.com/3proxy/3proxy	2021-10-21 19:57:06 +03:00
Vladimir Dubrovin	bec6e589fb	extNat implemented incorrectly, removing current support	2021-10-21 19:57:02 +03:00
z3apa3a	e1b4e50242	Copyright update	2021-07-02 11:50:33 +03:00
z3APA3A	eb829b062b	Major code refactoring ... - sockmapping rewritten from stratch to minimilse polling. poll() is now only called if blocking is actually expected, splice pipes are now polled if splice fails, buffers flushing is much more accurate. - logging code moved to separate files - signal masks added to client threads to prevent unneeded interruptions - bandwidth limitation will not delay the thread after client or server shutdown	2020-10-09 15:42:34 +03:00
z3APA3A	ebd7b34159	-N(NAT_address) option added for socks	2020-10-07 11:21:01 +03:00
z3APA3A	1075370594	Don't terminate connection on datagram sending issue in SOCKSv5 UDP ASSOCIATE	2020-08-08 13:56:34 +03:00
z3APA3A	22cf9254c5	rename memory functions in pluginlink	2019-09-03 20:46:47 +03:00
z3APA3A	dc55d2b724	UDP portmap doesn't resolve hostname in UDP packet	2018-03-06 20:01:03 +03:00
z3APA3A	f709255d62	Copyrights cleaned, authradius.c added	2016-12-20 15:47:02 +03:00
z3apa3a	d159c57e1f	Add splice() support on Linux to proxy, socks, ftppt, smtpp, pop3p ... usage example: proxy -s proxy -s2 -s - enable splice() for sockets mapping to avoid data to be copied to user space -s2 - enable splice() and attempt to free user space buffer ASAP	2016-12-19 22:07:34 +03:00
z3APA3A	a44a32c484	Do not fail for zero address on SOCKSv5 BIND/UDPASSOC	2016-03-08 13:28:29 +03:00
z3APA3A	b513584fdb	More distinct error codes for SOCKS	2016-03-08 12:43:07 +03:00