Package: dante-server
Version: 1.1.18-2.1
Severity: normal
'UDP associate' (command 0x03) returns external ip address(!) and also does not
listen on that address
in /etc/danted.conf:
internal: eth2 port = 1080
external: eth0
eth2=192.168.64.1, eth0=213.84.46.114
tcpdump: client (192.168.64.100) connects to proxy (192.168.64.1) and
gets bind to external ip address:
here an udp associate with the bind-to-any is sent:
10:38:57.488117 IP 192.168.64.100.38790 > 192.168.64.1.socks: P 7:17(10) ack 3
win 46 <nop,nop,timestamp 465236579 405797153>
0x0000: 4500 003e be1a 4000 4006 7ae9 c0a8 4064 E..>[EMAIL
PROTECTED]@[EMAIL PROTECTED]
0x0010: c0a8 4001 9786 0438 22f3 4c7b 09ff 6fa1 [EMAIL
PROTECTED]".L{..o.
0x0020: 8018 002e cb86 0000 0101 080a 1bba f263 ...............c
0x0030: 182f f921 0503 0001 0000 0000 0000 ./.!..........
reply:
10:38:57.495454 IP 192.168.64.1.socks > 192.168.64.100.38790: P 3:13(10) ack 17
win 46 <nop,nop,timestamp 405797154 465236579>
0x0000: 4500 003e 96c1 4000 4006 a242 c0a8 4001 E..>[EMAIL
PROTECTED]@[EMAIL PROTECTED]
0x0010: c0a8 4064 0438 9786 09ff 6fa1 22f3 4c85 [EMAIL PROTECTED]".L.
0x0020: 8018 002e 01e7 0000 0101 080a 182f f922 ............./."
0x0030: 1bba f263 0500 0001 d554 2e72 b595 ...c.....T.r..
^^^^^^^^^
external ip address!
Also: it then is not listening on that ip address:
mauer:/home/folkert# netstat -nap | grep 46485
mauer:/home/folkert#
-- System Information:
Debian Release: lenny/sid
APT prefers testing
APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.22-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash
Versions of packages dante-server depends on:
ii libc6 2.7-5 GNU C Library: Shared libraries
ii libpam0g 0.99.7.1-5 Pluggable Authentication Modules l
ii libwrap0 7.6.dbs-14 Wietse Venema's TCP wrappers libra
dante-server recommends no packages.
-- no debconf information
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
