Arch Linux

daniele_arch

Member

Registered: 2009-01-26

Posts: 11

Problem with proxy connection

I need to use the program Stunnel to connect to a external proxy,
but I have troubles in doing it. The same configuration I use here work fine in a Debian machine.

To understand what I'm doing, here is my stunnel.conf file

********************************
client = yes
  [squidssl]
  accept=localhost:8095
  connect=proxy-almanet.cib.unibo.it:8080
**************************************

I'm almost sure that my browser is  configured properly (HTTP proxy for localhost on port 8095).

When I try to connect I get an error message. Here is  my daemon.log file

*******************************************
Jan 26 10:44:31 daniele-arch kdm_greet[2459]: Cannot open default user face
Jan 26 10:53:54 daniele-arch stunnel: LOG4[2406:3086879632]: squidssl REFUSED by libwrap from 127.0.0.1:34272
Jan 26 10:53:54 daniele-arch stunnel: LOG5[2406:3086879632]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
Jan 26 10:53:55 daniele-arch stunnel: LOG4[2406:3086879632]: squidssl REFUSED by libwrap from 127.0.0.1:34273
Jan 26 10:53:55 daniele-arch stunnel: LOG5[2406:3086879632]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
Jan 26 10:53:58 daniele-arch stunnel: LOG4[2406:3086879632]: squidssl REFUSED by libwrap from 127.0.0.1:34274
Jan 26 10:53:58 daniele-arch stunnel: LOG5[2406:3086879632]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
Jan 26 10:54:00 daniele-arch stunnel: LOG4[2406:3086879632]: squidssl REFUSED by libwrap from 127.0.0.1:34275
Jan 26 10:54:00 daniele-arch stunnel: LOG5[2406:3086879632]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
Jan 26 10:55:02 daniele-arch stunnel: LOG4[2406:3086879632]: squidssl REFUSED by libwrap from 127.0.0.1:45768
Jan 26 10:55:02 daniele-arch stunnel: LOG5[2406:3086879632]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
*********************************************

Does anybody can help me?
Many thanks,
Daniele

artiom

Member

From: France

Registered: 2008-07-29

Posts: 111

Re: Problem with proxy connection

Are you sure that your proxy accepts SSL on this port?

pp.f.

Member

Registered: 2009-10-15

Posts: 6

Re: Problem with proxy connection

exactly the same problem here, i'm studio.unibo user

it worked on debian etch/lenny/squeeze!

Ho provato dalle impostazioni proxy di firefox e di arora, neither works
Adesso sto cercando come impostare il proxy per tutto il sistema con qualche script che lo attivi/disattivi, ma non so bene cosa cercare.

Inizialmente pensavo che il problema fosse perché non uso gnome né kde, tu usi i DE?

pp.f.

Member

Registered: 2009-10-15

Posts: 6

Re: Problem with proxy connection

troppa fretta:

# cat /var/log/daemon.log
Oct 16 19:37:35 piccolino stunnel: LOG5[8674:3074288400]: stunnel 4.25 on i686-pc-linux-gnu with OpenSSL 0.9.8k 25 Mar 2009
Oct 16 19:37:35 piccolino stunnel: LOG5[8674:3074288400]: Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv6 Auth:LIBWRAP
Oct 16 19:37:35 piccolino stunnel: LOG5[8674:3074288400]: 500 clients allowed

$ nmap -v localhost -p 8095

Starting Nmap 5.00 ( http://nmap.org ) at 2009-10-16 19:38 CEST
NSE: Loaded 0 scripts for scanning.
Initiating Ping Scan at 19:38
Scanning 127.0.0.1 [2 ports]
Completed Ping Scan at 19:38, 0.00s elapsed (1 total hosts)
Initiating Connect Scan at 19:38
Scanning piccolino.internos (127.0.0.1) [1 port]
Discovered open port 8095/tcp on 127.0.0.1
Completed Connect Scan at 19:38, 0.00s elapsed (1 total ports)
Host piccolino.internos (127.0.0.1) is up (0.000045s latency).
Interesting ports on piccolino.internos (127.0.0.1):
PORT     STATE SERVICE
8095/tcp open  unknown

Read data files from: /usr/share/nmap
Nmap done: 1 IP address (1 host up) scanned in 0.05 seconds

Ho provato a connettermi da firefox:

# cat /var/log/daemon.log
Oct 16 19:38:16 piccolino stunnel: LOG3[8676:3077749616]: getpeerbyname: Transport endpoint is not connected (107)
Oct 16 19:38:16 piccolino stunnel: LOG5[8676:3077749616]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
Oct 16 19:39:44 piccolino stunnel: LOG4[8676:3077749616]: squidssl REFUSED by libwrap from 127.0.0.1:47761
Oct 16 19:39:44 piccolino stunnel: LOG5[8676:3077749616]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
Oct 16 19:39:44 piccolino stunnel: LOG4[8676:3077749616]: squidssl REFUSED by libwrap from 127.0.0.1:47762
Oct 16 19:39:44 piccolino stunnel: LOG5[8676:3077749616]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket

il mio utente è nel gruppo stunnel.

Che fare?

Last edited by pp.f. (2009-10-16 17:42:44)

mattimatty

Member

Registered: 2010-05-12

Posts: 1

Re: Problem with proxy connection

/etc/stunnel/stunnel.conf

##### CIB Configurazione proxy sicuro #####
libwrap = no
client = yes
[squidssl]
accept=127.0.0.1:8095
connect=proxy-almanet.cib.unibo.it:443
######################################

Devi specificare libwrap = no (prima riga) perche' di default lui mette si e non so perche' non funziona.

Il tuo utente deve essere nel gruppo stunnnel.

Fai ripartire sunnel con:
/etc/rc.d/stunnel restart

Imposti firefox come spiega in
http://www.biblioteche.unibo.it/portale … 3.jpg/view

L'ho trovato per caso in un forumubuntu, ma funziona!