324 Commits

This Branch

This Branch

All Branches

• proxy_getaddrinfo(): debug: print hints->ai_flags
  rofl0r · 2021-02-05 01:50:39 +00:00
  918855deed
• debug.h: print pid in all debug output
  rofl0r · 2021-02-05 01:45:19 +00:00
  181cc0f414
• test_getaddrinfo: also print port information
  rofl0r · 2021-02-05 01:38:17 +00:00
  3721f7e144
• fix compiler parentheses warning in dnat code
  rofl0r · 2021-01-08 17:45:35 +00:00
  6c029fdf47
• proxychains.conf: fix localnet documentation

  localnet with hostnames/DNS is not compatible with remote dns - if remote dns
  is activated we get an ip from the remote dns resolver in the connect() call,
  so we don't know whether the destination would match any localnet - except
  from the ANY localnet 0.0.0.0 - in which case we would need to do a real DNS
  lookup with the remote DNS ip involving both the rdns resolver to get the
  original hostname back and then call the native DNS resolver function - for
  which there is only getaddrinfo() when we don't want to support the 5
  different gethostbyname_r() variants in existence, or using getaddrinfo(),
  which in turn requires memory allocation/free() - in other words a huge mess.
  we also can't easily check in the resolver whether an ANY-destination localnet
  is enabled and the port matches, because the resolver might only resolve the
  hostname at this stage, but not the destination port.
  
  addressing #358

  rofl0r · 2021-01-08 17:36:05 +00:00
  596f0028cb
• configure: check first whether C compiler works

  closes #353

  rofl0r · 2020-12-18 12:33:49 +00:00
  fa9644dc27
• support 'raw' proxy type (#348)
  Alexandre Viau · 2020-12-12 08:25:36 +00:00
  159ab94635
• configure: fix typo in fail()
  rofl0r · 2020-10-29 12:06:00 +00:00
  583343a2ef
• configure: add missing function fail()
  rofl0r · 2020-10-29 11:58:22 +00:00
  0069fcd53e
• proxy_gethostbyname_old(): fix omission of namebuffer population
  rofl0r · 2020-10-28 11:12:36 +00:00
  13680e775d
• proxy_gethostbyname_old(): fix returned address type
  rofl0r · 2020-10-28 11:12:36 +00:00
  55dce2c040
• proxy_gethostbyname_old(): likewise.
  rofl0r · 2020-10-28 11:12:36 +00:00
  82c766461c
• proxy_gethostbyname(): fix failure to omit DNS lookup for ipv4 addrs

  gethostbyname() is specified to transform simple numeric ipv4 addresses
  into their binary form. since proxy_gethostbyname() was used as a
  backend for all resolver functions, somehow we assumed the check for
  an ipv4 was done from another site, however this didn't hold true when
  the caller used gethostbyname() directly.
  
  fixes #347

  rofl0r · 2020-10-28 11:12:17 +00:00
  59e8d1710a
• move isnumericipv4() to common.c
  rofl0r · 2020-10-28 10:39:27 +00:00
  452830283c
• tunnel_to: shrink huge buffer size

  the buffer buff was only used for the initial handshake packets,
  which in all supported protocols are usual less than a 100 bytes,
  with user/pass and dns name at maximum we'd require 768 bytes,
  which still leaves us a formidable 256 bytes for the rest of
  the packet.
  this fixes a segfault with microsocks which on musl uses tiny
  thread stack sizes of 8KB.

  rofl0r · 2020-10-26 03:03:08 +00:00
  486f8200ad
• shrink huge gethostbyname buffer

  careful analysis has shown that the buffer is only ever used for
  at most a single hostname, so 256 bytes are sufficient.
  the huge 8KB buffer caused stack overflow when used with microsocks,
  which defaults to tiny thread stacks of 8KB with musl libc.

  rofl0r · 2020-10-26 02:53:29 +00:00
  c99d97983e
• experimental new feature: proxy_dns_daemon

  since many users complain about issues with modern, ultracomplex
  clusterfuck software such as chromium, nodejs, etc, i've reconsidered
  one of my original ideas how to implement remote dns lookup support.
  instead of having a background thread serving requests via a pipe,
  the user manually starts a background daemon process before running
  proxychains, and the two processes then communicate via UDP.
  this requires much less hacks (like hooking of close() to prevent
  pipes from getting closed) and doesn't need to call any async-signal
  unsafe code like malloc(). this means it should be much more compatible
  than the previous method, however it's not as practical and slightly
  slower.
  
  it's recommended that the proxychains4-daemon runs on localhost, and
  if you use proxychains-ng a lot you might want to set ip up as a service
  that starts on boot. a single proxychains4-daemon should theoretically
  be able to serve many parallel proxychains4 instances, but this has not
  yet been tested so far. it's also possible to run the daemon on other
  computers, even over internet, but currently there is no error-checking/
  timeout code at all; that means the UDP connection needs to be very
  stable.
  
  the library code used for the daemon sources are from my projects
  libulz[0] and htab[1], and the server code is loosely based on
  microsocks[2]. their licenses are all compatible with the GPL.
  if not otherwise mentioned, they're released for this purpose under
  the standard proxychains-ng license (see COPYING).
  
  [0]: https://github.com/rofl0r/libulz
  [1]: https://github.com/rofl0r/htab
  [2]: https://github.com/rofl0r/microsocks

  rofl0r · 2020-09-23 22:14:39 +01:00
  7fe8139496
• get rid of ip_type.c
  rofl0r · 2020-09-23 17:00:16 +01:00
  1e00b9ac1e
• get_chain_data: fix strstr() config parsing

  using strstr() is a very error-prone way for config parsing.
  
  for example if "proxy_dns" is being tested for the line "proxy_dns_old",
  it would return true.
  
  we fix this by removing leading and trailing whitespace from the line
  to parse and use strcmp/strncmp() instead.
  
  the if(1) has been inserted so we can keep the same indentation level
  and not spam the commit with whitespace changes.

  rofl0r · 2020-09-21 11:31:52 +01:00
  1221c5e93a
• proxy_dns_old: use pipe2 if available, else O_CLOEXEC

  make the old code a little less lame

  rofl0r · 2020-09-21 10:46:38 +01:00
  e6c4764660
• add support for "proxy_dns_old" to use old 3.1 DNS lookup method

  some lamer on IRC by the name of annoner/R3M0RS3/penis was complaining
  that 3.1 is a lot better than proxychains-ng, because it happens to
  work with the browser he's interested in.
  since this wasn't the first time this is requested, let's give this
  those lamers what they want: lame code!

  rofl0r · 2020-09-20 22:11:17 +01:00
  2ab631918d
• make sure allocator thread is only used if proxy_dns is requested
  rofl0r · 2020-09-20 18:21:40 +01:00
  3e791fd797
• initialize allocator thread from get_chain_data if needed

  since we caved in to demands that it should be possible to allow
  hostnames in the proxy list section, we now got to deal with the
  fallout. the code was calling at_get... assuming that the allocator
  thread is always used.

  rofl0r · 2020-09-20 18:18:31 +01:00
  3a5050bec2
• only start allocator thread if proxy_dns is requested

  this should fix problems with programs that do whacky
  non-async-signal-safe stuff.

  rofl0r · 2020-09-20 18:17:51 +01:00
  3dfda493d8
• allocator_thread: rework message sending structures

  simplify code by adding a new at_msg struct that contains both
  the message header and the message body.
  this allow e.g. atomic writes of the whole message instead of doing
  it in 2 steps. unfortunately reads still have to be done in at least
  2 steps, since there are no atomicity guarantees[0].
  additionally the message header shrunk from 8 to 4 bytes.
  
  [0]: https://stackoverflow.com/questions/14661708/under-what-conditions-are-pipe-reads-atomic

  rofl0r · 2020-09-20 18:17:51 +01:00
  ed8f8444ab
• get_chain_data: print debug info
  rofl0r · 2020-09-20 17:02:21 +01:00
  12e5da1b90
• debug: fix DUMP_PROXY_CHAIN() hack
  rofl0r · 2020-09-20 17:00:10 +01:00
  121c582d9c
• fix build on FreeBSD due to usage of Dl_info
  rofl0r · 2020-09-05 14:36:05 +01:00
  acf2f4725d
• Add Haiku support (#340)
  Ethan F · 2020-08-17 09:31:04 +01:00
  0ee5db605b
• dnat: add rule precedence logic
  tom gilon · 2020-07-08 19:35:18 +03:00
  bf2ef2ce38
• Add option to change tcp destination port and ip before sending to proxy server
  tom gilon · 2020-05-06 01:07:57 +03:00
  de31961349
• get own_dir by using dladdr() instead of argv[0]
  Solar Flare · 2019-11-27 00:32:08 +08:00
  b8fa2a7405
• fix a buffer overflow bug
  Solar Flare · 2019-11-12 10:40:33 +08:00
  0a8663c845
• add libc gethostbyname test
  rofl0r · 2019-09-07 15:23:02 +01:00
  86408cd806
• test_gethostent: improve compileability
  rofl0r · 2019-09-07 15:22:41 +01:00
  ea187938e1
• getaddrinfo: fix behaviour when node is null and !passive

  according to the spec, if these 2 conditions hold, the name shall
  resolve to localhost.
  
  closes #292

  rofl0r · 2019-07-21 14:27:55 +01:00
  962373e5c6
• proxy_getaddrinfo: don't use sizeof(struct sockaddr_storage) for addr_len

  this should fix an issue which seems to be mac's bind() only accepting
  sizeof(struct sockaddr_in) for AF_INET.
  
  ref: https://github.com/rofl0r/microsocks/issues/19

  rofl0r · 2019-05-25 02:23:38 +01:00
  de4460fbd1
• proxy_getaddrinfo: implement support for numeric ipv6

  closes #282

  rofl0r · 2019-04-25 14:36:08 +01:00
  5ad7c2a183
• proxy url parser: look for @ from the right side

  fixes usernames with @ in them.
  this is only relevant for support of new url-style proxy addresses.

  rofl0r · 2019-04-21 01:48:38 +01:00
  067885694d
• release 4.14
  rofl0r · 2019-03-16 23:04:10 +00:00
  v4.14 e895fb713a
• allow non-numeric proxy ips under certain circumstances

  conditions that need to be met are:
  1) chaintype strict
  2) proxy_dns on
  3) not the first proxy in the list
  
  if these conditions are met, the dns name can be passed to be
  receiving proxy and be resolved there.
  
  addressing https://github.com/rofl0r/proxychains-ng/issues/246#issuecomment-468222637

  rofl0r · 2019-02-28 14:07:08 +00:00
  b8cdfe842c
• allocator_thread.c: whitespace cleanup
  rofl0r · 2019-02-28 13:32:57 +00:00
  9f17774b99
• get_chain_data(): no need for inline
  rofl0r · 2019-02-28 13:28:10 +00:00
  dbec605e2c
• shrink huge log buffer
  rofl0r · 2019-02-28 13:22:13 +00:00
  5c8f9a2922
• don't try to connect to null-routed ips
  rofl0r · 2019-02-28 13:08:02 +00:00
  50c079d4b4
• allocator_thread.c: set O_CLOEXEC/FD_CLOEXEC for pipes, fix #273.

  In proxychains, we create pipes and use them internally.
  If exec() is called by the program we run, the pipes opened
  previously are never closed, causing a file descriptor leak
  may eventually crash the program.
  
  This commit calls fcntl() to set FD_CLOEXEC flags on pipes.
  AFAIK there's no race condition on pipe creation, but we still
  prefer to call the newer pipe2() with O_CLOEXEC if it's supported
  by the system, due to its advantage of atomic operation, which
  prevents potential race conditions in the future.
  
  Signed-off-by: Tom Li <tomli@tomli.me>

  Tom Li · 2018-12-25 18:03:39 +00:00
  11988579f5
• configure: define HAVE_PIPE2 if we have pipe2() and O_CLOEXEC.

  This commit adds a new run for pipe2() and O_CLOEXEC. If a program
  can be executed, define HAVE_PIPE2.
  
  Signed-off-by: Tom Li <tomli@tomli.me>

  Tom Li · 2018-12-25 18:03:39 +00:00
  db5cd6b699
• configure: force check_compile() to link an executable

  by using -c (which just creates an object file), we don't catch implicit
  function declarations as an error (see discussion of #274).

  rofl0r · 2018-12-25 18:01:26 +00:00
  a6959ee715
• replace getservbyname_r ifdef hacks with configure check

  this should make it work automatically on any new platform without
  having to add yet another ifdef hack.
  should fix issues with android (#265).
  additionally the code for the systems lacking GNU-compatible getservbyname_r()
  is now guarded with a mutex, which prevents possible races, therefore
  resolving the ancient "TODO" item.

  rofl0r · 2018-12-02 13:48:43 +00:00
  49bf4ba772
• debug mode: display whether proxy_dns is on or off
  rofl0r · 2018-12-02 13:46:55 +00:00
  2213afb6f0