Menu

#86 auth cause problem

pending
nobody
None
5
2013-02-22
2012-11-04
Mr.Miau
No

I instal latest 3.8.9-7 on Archlinux with these line:
./configure --with-libpath=/usr/lib \\ --with-confpathbase=/etc \\ --with-passwordfile=/etc/ss5/ss5.passwd \\ --with-configfile=/etc/ss5/ss5.conf \\ --with-profilepath=/etc/ss5 \\

it work well, if turn off all auth method.
if I turn on the pam or passwd, connection would be unstable.

launch :
ss5 -s -t -u root -b 0.0.0.0:1080
( it\'s no different without \"-t\" )
there\'s no error or warning message when program launched.

apart of log:

Nov 04 08:05:40 MiauJPSV ss5[10787]: [3070643008] 114.26.153.156 \"\" \"\" ISERROR - - - (-:- -- -:-) (Socks method unknown or bad request)

Nov 04 08:06:36 MiauJPSV ss5[10963]: [3059534656] [ERRO] $ConnectServing$: (Connection refused).
Nov 04 08:06:36 MiauJPSV ss5[10963]: [3059813184] 114.26.153.156 \"\" \"CONNECT\" CONNREFUSED 0 0 - (114.26.153.156:8918 -> 127.0.0.1:27275)

Nov 04 08:06:36 MiauJPSV ss5[10963]: [3059534656] [ERRO] $ConnectServing$: (Network is unreachable).
Nov 04 08:06:36 MiauJPSV ss5[10963]: [3059813184] 114.26.153.156 \"\" \"CONNECT\" ADDNOTSUPPORT 0 0 - (114.26.153.156:8924 -> :0)

Nov 04 08:07:45 MiauJPSV ss5[10963]: [3061570368] 1.34.22.39 \"CONNECT\" STARTED 0 0 0 (1.34.22.39:2518 -> 27.123.206.196:25)
Nov 04 08:07:45 MiauJPSV ss5[10963]: [3061570368] [ERRO] $ReceivingData$: (Connection reset by peer).
Nov 04 08:07:45 MiauJPSV ss5[10963]: [3061570368] 1.34.22.39 \"CONNECT\" TERMINATED 63 -1 0 (1.34.22.39:2518 -> 27.123.206.196:25)

===================

ss5.conf

set SS5_VERBOSE
set SS5_DEBUG
set SS5_PAM_AUTH
set SS5_SRV
set SS5_AUTHCACHEAGE 600
set SS5_AUTHOCACHEAGE 600
auth 0.0.0.0/0 - u
permit u 0.0.0.0/0 - 0.0.0.0/0 - - - - -
===================

iptables

iptables -A INPUT -i ppp+ -j ACCEPT
iptables -A OUTPUT -o ppp+ -j ACCEPT

iptables -A INPUT -p tcp --dport 1723 -j ACCEPT
iptables -A INPUT -p tcp --dport 1701 -j ACCEPT
iptables -A INPUT -p tcp --dport 1080 -j ACCEPT
iptables -A INPUT -p 47 -j ACCEPT
iptables -A OUTPUT -p 47 -j ACCEPT

iptables -F FORWARD
iptables -A FORWARD -j ACCEPT

iptables -A POSTROUTING -t nat -o eth0 -j MASQUERADE
iptables -A POSTROUTING -t nat -o ppp+ -j MASQUERADE
==================
this iptables is for pptp&l2tp.

Discussion

  • Mr.Miau

    Mr.Miau - 2012-11-04
     
  • Mr.Miau

    Mr.Miau - 2012-11-04

    ss5.dmp part02

     
  • Matteo Ricchetti

    • status: open --> pending
     
  • Matteo Ricchetti

    What happen if you stop iptables ?

     

Log in to post a comment.