outproxy_config example

outproxy_config/README.md

@@ -0,0 +1,3 @@
+## Outproxy example for 3proxy-eagle
+
+Literally it's configs of `outproxy.acetone.i2p` with access to I2P, TOR, Yggdrasil networks and clearnet.

outproxy_config/first-instanse.cfg

@@ -0,0 +1,40 @@
+# regular 3proxy configuration
+fakeresolve
+flush
+auth iponly
+
+# strict required by 3proxy-eagle log lines
+log
+logformat " type=%N destination=%n to=%O from=%I"
+
+# 3proxy-eagle black list format
+{{vk.com,ok.ru,mail.ru,gosuslugi.ru,127.0.0.1}}
+
+# regular 3proxy configuration again
+
+## i2p sites
+allow * * *.i2p
+parent 1000 http 127.0.0.1 4444
+
+## yggdrasil (127.0.0.1 1085 is second instanse)
+allow * * 200::/7
+parent 1000 socks5+ 127.0.0.1 1085
+## ygg domains resolving by alfis
+allow * * *.ygg
+parent 1000 socks5+ 127.0.0.1 1085
+## meshnames domains resolving by meshnamed
+allow * * *.meshname
+parent 1000 socks5+ 127.0.0.1 1085
+allow * * *.meship
+parent 1000 socks5+ 127.0.0.1 1085
+
+## onion sites
+allow * * *.onion
+parent 1000 socks5+ 127.0.0.1 9050
+
+## clearnet via another proxy or change to tor (9050)
+allow *
+parent 1000 socks5+ 127.0.0.1 1081
+
+socks -olSO_REUSEADDR,SO_REUSEPORT -ocTCP_TIMESTAMPS,TCP_NODELAY -osTCP_NODELAY -46 -i<YOUR_EXTERNAL_IP> -p1080
+proxy -olSO_REUSEADDR,SO_REUSEPORT -ocTCP_TIMESTAMPS,TCP_NODELAY -osTCP_NODELAY -46 -a1 -i<YOUR_EXTERNAL_IP> -p3128

outproxy_config/second-instanse.cfg

@@ -0,0 +1,8 @@
+auth iponly
+# allow only Yggdrasil network subnet by this instanse
+# otherwise all ygg/meshname/meship domains with
+# non-yggdrasil addresses goes bypass any rules
+# and potentially can deanonimaze outproxy machine
+allow * * 200::/7
+deny *
+socks -olSO_REUSEADDR,SO_REUSEPORT -ocTCP_TIMESTAMPS,TCP_NODELAY -osTCP_NODELAY -64 -i127.0.0.1 -p1085

src/main.cpp

@@ -59,6 +59,10 @@ void usage()
                  "* Main 3proxy cfg must contain log to stdout with strict format:\n"
                  "    log\n"
                  "    logformat \" type=%N destination=%n to=%O from=%I\"\n"
+                 "  Also for normal logging by 3proxy main config should contain\n"
+                 "    fakeresolve\n"
+                 "  otherwise 3proxy may be very uninformative.\n"
+                 "  Check \"outproxy_config\" folder as working example.\n"
                  "* 3proxy cfg can contain blocked domains in format:\n"
                  "    {{vk.com,mail.ru,google.com}}\n"
                  "  This domains will be resolved automatically and replaced by:\n"