Dante Server: Difference between revisions

No edit summary
No edit summary
Line 29: Line 29:


I did change one item as it seemed a bit more secure to only accept SOCK requests from my subnet instead of everywhere (0.0.0.0)<blockquote>#generic pass statement - bind/outgoing traffic</blockquote><blockquote>socks pass {  </blockquote><blockquote>       from: 192.168.2.0/24 to: 0.0.0.0/0</blockquote><blockquote>       command: bind connect udpassociate</blockquote><blockquote>       log: error # connect disconnect iooperation</blockquote><blockquote>}</blockquote><blockquote>#generic pass statement for incoming connections/packets</blockquote><blockquote>socks pass {</blockquote><blockquote>       from: 192.168.2.0/24 to: 0.0.0.0/0</blockquote><blockquote>       command: bindreply udpreply</blockquote><blockquote>       log: error # connect disconnect iooperation</blockquote><blockquote>}</blockquote>The following command was very helpful and accurate in checking the configuration file: sockd -V (that's a capital V)
I did change one item as it seemed a bit more secure to only accept SOCK requests from my subnet instead of everywhere (0.0.0.0)<blockquote>#generic pass statement - bind/outgoing traffic</blockquote><blockquote>socks pass {  </blockquote><blockquote>       from: 192.168.2.0/24 to: 0.0.0.0/0</blockquote><blockquote>       command: bind connect udpassociate</blockquote><blockquote>       log: error # connect disconnect iooperation</blockquote><blockquote>}</blockquote><blockquote>#generic pass statement for incoming connections/packets</blockquote><blockquote>socks pass {</blockquote><blockquote>       from: 192.168.2.0/24 to: 0.0.0.0/0</blockquote><blockquote>       command: bindreply udpreply</blockquote><blockquote>       log: error # connect disconnect iooperation</blockquote><blockquote>}</blockquote>The following command was very helpful and accurate in checking the configuration file: sockd -V (that's a capital V)
== My Client Software ==
Everything noted for the client software I use is accurate in the SS5 article, except DNS requests work with Dante, so left that enabled.