From 96c22b049492e364af38527c14babcff994bbbed Mon Sep 17 00:00:00 2001
From: acetone <acetone@disroot.org>
Date: Mon, 21 Nov 2022 09:19:12 +0300
Subject: [PATCH] outproxy_config example

---
 outproxy_config/README.md           |  3 +++
 outproxy_config/first-instanse.cfg  | 40 +++++++++++++++++++++++++++++
 outproxy_config/second-instanse.cfg |  8 ++++++
 src/main.cpp                        |  4 +++
 4 files changed, 55 insertions(+)
 create mode 100644 outproxy_config/README.md
 create mode 100644 outproxy_config/first-instanse.cfg
 create mode 100644 outproxy_config/second-instanse.cfg

diff --git a/outproxy_config/README.md b/outproxy_config/README.md
new file mode 100644
index 0000000..4dc95d8
--- /dev/null
+++ b/outproxy_config/README.md
@@ -0,0 +1,3 @@
+## Outproxy example for 3proxy-eagle
+
+Literally it's configs of `outproxy.acetone.i2p` with access to I2P, TOR, Yggdrasil networks and clearnet.
diff --git a/outproxy_config/first-instanse.cfg b/outproxy_config/first-instanse.cfg
new file mode 100644
index 0000000..d7e95e4
--- /dev/null
+++ b/outproxy_config/first-instanse.cfg
@@ -0,0 +1,40 @@
+# regular 3proxy configuration
+fakeresolve
+flush
+auth iponly
+
+# strict required by 3proxy-eagle log lines
+log
+logformat " type=%N destination=%n to=%O from=%I"
+
+# 3proxy-eagle black list format
+{{vk.com,ok.ru,mail.ru,gosuslugi.ru,127.0.0.1}}
+
+# regular 3proxy configuration again
+
+## i2p sites
+allow * * *.i2p
+parent 1000 http 127.0.0.1 4444
+
+## yggdrasil (127.0.0.1 1085 is second instanse)
+allow * * 200::/7
+parent 1000 socks5+ 127.0.0.1 1085
+## ygg domains resolving by alfis
+allow * * *.ygg
+parent 1000 socks5+ 127.0.0.1 1085
+## meshnames domains resolving by meshnamed
+allow * * *.meshname
+parent 1000 socks5+ 127.0.0.1 1085
+allow * * *.meship
+parent 1000 socks5+ 127.0.0.1 1085
+
+## onion sites
+allow * * *.onion
+parent 1000 socks5+ 127.0.0.1 9050
+
+## clearnet via another proxy or change to tor (9050)
+allow *
+parent 1000 socks5+ 127.0.0.1 1081
+
+socks -olSO_REUSEADDR,SO_REUSEPORT -ocTCP_TIMESTAMPS,TCP_NODELAY -osTCP_NODELAY -46 -i<YOUR_EXTERNAL_IP> -p1080
+proxy -olSO_REUSEADDR,SO_REUSEPORT -ocTCP_TIMESTAMPS,TCP_NODELAY -osTCP_NODELAY -46 -a1 -i<YOUR_EXTERNAL_IP> -p3128
diff --git a/outproxy_config/second-instanse.cfg b/outproxy_config/second-instanse.cfg
new file mode 100644
index 0000000..98adf18
--- /dev/null
+++ b/outproxy_config/second-instanse.cfg
@@ -0,0 +1,8 @@
+auth iponly
+# allow only Yggdrasil network subnet by this instanse
+# otherwise all ygg/meshname/meship domains with
+# non-yggdrasil addresses goes bypass any rules
+# and potentially can deanonimaze outproxy machine
+allow * * 200::/7
+deny *
+socks -olSO_REUSEADDR,SO_REUSEPORT -ocTCP_TIMESTAMPS,TCP_NODELAY -osTCP_NODELAY -64 -i127.0.0.1 -p1085
diff --git a/src/main.cpp b/src/main.cpp
index da39d77..10ce990 100644
--- a/src/main.cpp
+++ b/src/main.cpp
@@ -59,6 +59,10 @@ void usage()
                  "* Main 3proxy cfg must contain log to stdout with strict format:\n"
                  "    log\n"
                  "    logformat \" type=%N destination=%n to=%O from=%I\"\n"
+                 "  Also for normal logging by 3proxy main config should contain\n"
+                 "    fakeresolve\n"
+                 "  otherwise 3proxy may be very uninformative.\n"
+                 "  Check \"outproxy_config\" folder as working example.\n"
                  "* 3proxy cfg can contain blocked domains in format:\n"
                  "    {{vk.com,mail.ru,google.com}}\n"
                  "  This domains will be resolved automatically and replaced by:\n"