IO-Socket-Socks-0.62/0000755000175000017500000000000011722612361012715 5ustar olegolegIO-Socket-Socks-0.62/MANIFEST0000644000175000017500000000064711722612361014055 0ustar olegolegChanges examples/bind.pl examples/chain.pl examples/client4.pl examples/client5.pl examples/server4.pl examples/server5.pl examples/udp.pl lib/IO/Socket/Socks.pm LICENSE.LGPL Makefile.PL MANIFEST This list of files MANIFEST.SKIP README t/1_load.t t/2_new.t t/3_conect.t t/4_accept4.t t/5_accept5.t t/6_accept_nb4.t t/7_accept_nb5.t t/subs.pm META.yml Module meta-data (added by MakeMaker) IO-Socket-Socks-0.62/MANIFEST.SKIP0000644000175000017500000000005111600545646014615 0ustar olegolegMakefile$ TODO blib tests .swp$ CVS .git IO-Socket-Socks-0.62/lib/0000755000175000017500000000000011722612361013463 5ustar olegolegIO-Socket-Socks-0.62/lib/IO/0000755000175000017500000000000011722612361013772 5ustar olegolegIO-Socket-Socks-0.62/lib/IO/Socket/0000755000175000017500000000000011722612361015222 5ustar olegolegIO-Socket-Socks-0.62/lib/IO/Socket/Socks.pm0000644000175000017500000022766011722612206016655 0ustar olegoleg############################################################################## # # This library is free software; you can redistribute it and/or # modify it under the terms of the GNU Library General Public # License as published by the Free Software Foundation; either # version 2 of the License, or (at your option) any later version. # # This library is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # Library General Public License for more details. # # You should have received a copy of the GNU Library General Public # License along with this library; if not, write to the # Free Software Foundation, Inc., 59 Temple Place - Suite 330, # Boston, MA 02111-1307, USA. # # Copyright (C) 2003 Ryan Eatmon # Copyright (C) 2010-2012 Oleg G # ############################################################################## package IO::Socket::Socks; use strict; use IO::Socket; use IO::Select; use Errno qw(EWOULDBLOCK EAGAIN ENOTCONN ETIMEDOUT); use Carp; use vars qw( @ISA @EXPORT @EXPORT_OK %EXPORT_TAGS $VERSION $SOCKS_ERROR $SOCKS5_RESOLVE $SOCKS4_RESOLVE $SOCKS_DEBUG %CODES ); require Exporter; use constant { SOCKS_WANT_READ => 20, SOCKS_WANT_WRITE => 21, ESOCKSPROTO => exists &Errno::EPROTO ? &Errno::EPROTO : 7000, }; @ISA = qw(Exporter IO::Socket::INET); @EXPORT = qw( $SOCKS_ERROR SOCKS_WANT_READ SOCKS_WANT_WRITE ESOCKSPROTO ); @EXPORT_OK = qw( SOCKS5_VER SOCKS4_VER ADDR_IPV4 ADDR_DOMAINNAME ADDR_IPV6 CMD_CONNECT CMD_BIND CMD_UDPASSOC AUTHMECH_ANON AUTHMECH_USERPASS AUTHMECH_INVALID AUTHREPLY_SUCCESS AUTHREPLY_FAILURE ISS_UNKNOWN_ADDRESS ISS_BAD_VERSION REPLY_SUCCESS REPLY_GENERAL_FAILURE REPLY_CONN_NOT_ALLOWED REPLY_NETWORK_UNREACHABLE REPLY_HOST_UNREACHABLE REPLY_CONN_REFUSED REPLY_TTL_EXPIRED REPLY_CMD_NOT_SUPPORTED REPLY_ADDR_NOT_SUPPORTED REQUEST_GRANTED REQUEST_FAILED REQUEST_REJECTED_IDENTD REQUEST_REJECTED_USERID ); %EXPORT_TAGS = (constants => ['SOCKS_WANT_READ', 'SOCKS_WANT_WRITE', @EXPORT_OK]); $SOCKS_ERROR = new IO::Socket::Socks::Error; $VERSION = '0.62'; $SOCKS5_RESOLVE = 1; $SOCKS4_RESOLVE = 0; $SOCKS_DEBUG = $ENV{SOCKS_DEBUG}; use constant { SOCKS5_VER => 5, SOCKS4_VER => 4, ADDR_IPV4 => 1, ADDR_DOMAINNAME => 3, ADDR_IPV6 => 4, CMD_CONNECT => 1, CMD_BIND => 2, CMD_UDPASSOC => 3, AUTHMECH_ANON => 0, #AUTHMECH_GSSAPI => 1, AUTHMECH_USERPASS => 2, AUTHMECH_INVALID => 255, AUTHREPLY_SUCCESS => 0, AUTHREPLY_FAILURE => 10, # to not intersect with other socks5 constants ISS_UNKNOWN_ADDRESS => 500, ISS_BAD_VERSION => 501, }; $CODES{AUTHMECH}->[AUTHMECH_INVALID] = "No valid auth mechanisms"; $CODES{AUTHREPLY}->[AUTHREPLY_FAILURE] = "Failed to authenticate"; # socks5 use constant { REPLY_SUCCESS => 0, REPLY_GENERAL_FAILURE => 1, REPLY_CONN_NOT_ALLOWED => 2, REPLY_NETWORK_UNREACHABLE => 3, REPLY_HOST_UNREACHABLE => 4, REPLY_CONN_REFUSED => 5, REPLY_TTL_EXPIRED => 6, REPLY_CMD_NOT_SUPPORTED => 7, REPLY_ADDR_NOT_SUPPORTED => 8, }; $CODES{REPLY}->{&REPLY_SUCCESS} = "Success"; $CODES{REPLY}->{&REPLY_GENERAL_FAILURE} = "General failure"; $CODES{REPLY}->{&REPLY_CONN_NOT_ALLOWED} = "Not allowed"; $CODES{REPLY}->{&REPLY_NETWORK_UNREACHABLE} = "Network unreachable"; $CODES{REPLY}->{&REPLY_HOST_UNREACHABLE} = "Host unreachable"; $CODES{REPLY}->{&REPLY_CONN_REFUSED} = "Connection refused"; $CODES{REPLY}->{&REPLY_TTL_EXPIRED} = "TTL expired"; $CODES{REPLY}->{&REPLY_CMD_NOT_SUPPORTED} = "Command not supported"; $CODES{REPLY}->{&REPLY_ADDR_NOT_SUPPORTED} = "Address not supported"; # socks4 use constant { REQUEST_GRANTED => 90, REQUEST_FAILED => 91, REQUEST_REJECTED_IDENTD => 92, REQUEST_REJECTED_USERID => 93, }; $CODES{REPLY}->{&REQUEST_GRANTED} = "request granted"; $CODES{REPLY}->{&REQUEST_FAILED} = "request rejected or failed"; $CODES{REPLY}->{&REQUEST_REJECTED_IDENTD} = "request rejected becasue SOCKS server cannot connect to identd on the client"; $CODES{REPLY}->{&REQUEST_REJECTED_USERID} = "request rejected because the client program and identd report different user-ids"; # queue use constant { Q_SUB => 0, Q_ARGS => 1, Q_BUF => 2, Q_READS => 3, Q_SENDS => 4, Q_DEBUGS => 5, }; #------------------------------------------------------------------------------ # sub new is handled by IO::Socket::INET #------------------------------------------------------------------------------ sub new_from_fd { my ($class, $sock, %arg) = @_; bless $sock, $class; my $blocking = $sock->blocking; $sock->autoflush(1); ${*$sock}{'io_socket_timeout'} = delete $arg{Timeout}; scalar(%arg) or return $sock; if ($sock = $sock->configure(\%arg) and !$blocking) { $sock->blocking(0); } return $sock; } *new_from_socket = \&new_from_fd; ############################################################################### # # configure - read in the config hash and populate the object. # ############################################################################### sub configure { my $self = shift; my $args = shift; $self->_configure($args) or return; ${*$self}->{SOCKS}->{ProxyAddr} = (exists($args->{ProxyAddr}) ? delete($args->{ProxyAddr}) : undef ); ${*$self}->{SOCKS}->{ProxyPort} = (exists($args->{ProxyPort}) ? delete($args->{ProxyPort}) : undef ); ${*$self}->{SOCKS}->{COMMAND} = []; if (exists($args->{Listen})) { $args->{LocalAddr} = ${*$self}->{SOCKS}->{ProxyAddr}; $args->{LocalPort} = ${*$self}->{SOCKS}->{ProxyPort}; $args->{Reuse} = 1; ${*$self}->{SOCKS}->{Listen} = 1; } elsif(${*$self}->{SOCKS}->{ProxyAddr} && ${*$self}->{SOCKS}->{ProxyPort}) { $args->{PeerAddr} = ${*$self}->{SOCKS}->{ProxyAddr}; $args->{PeerPort} = ${*$self}->{SOCKS}->{ProxyPort}; } unless(defined ${*$self}->{SOCKS}->{TCP}) { $args->{Proto} = "tcp"; $args->{Type} = SOCK_STREAM; } elsif(! defined $args->{Proto}) { $args->{Proto} = "udp"; $args->{Type} = SOCK_DGRAM; } $self->SUPER::configure($args); } ############################################################################### # # _configure - reusable configure operations # ############################################################################### sub _configure { my $self = shift; my $args = shift; ${*$self}->{SOCKS}->{Version} = (exists($args->{SocksVersion}) ? ($args->{SocksVersion} == 4 || $args->{SocksVersion} == 5 ? delete($args->{SocksVersion}) : croak("Unsupported socks version specified. Should be 4 or 5") ) : 5 ); ${*$self}->{SOCKS}->{AuthType} = (exists($args->{AuthType}) ? delete($args->{AuthType}) : "none" ); ${*$self}->{SOCKS}->{RequireAuth} = (exists($args->{RequireAuth}) ? delete($args->{RequireAuth}) : 0 ); ${*$self}->{SOCKS}->{UserAuth} = (exists($args->{UserAuth}) ? delete($args->{UserAuth}) : undef ); ${*$self}->{SOCKS}->{Username} = (exists($args->{Username}) ? delete($args->{Username}) : ((${*$self}->{SOCKS}->{AuthType} eq "none") ? undef : croak("If you set AuthType to userpass, then you must provide a username.") ) ); ${*$self}->{SOCKS}->{Password} = (exists($args->{Password}) ? delete($args->{Password}) : ((${*$self}->{SOCKS}->{AuthType} eq "none") ? undef : croak("If you set AuthType to userpass, then you must provide a password.") ) ); ${*$self}->{SOCKS}->{Debug} = (exists($args->{SocksDebug}) ? delete($args->{SocksDebug}) : $SOCKS_DEBUG ); ${*$self}->{SOCKS}->{Resolve} = (exists($args->{SocksResolve}) ? delete($args->{SocksResolve}) : undef ); ${*$self}->{SOCKS}->{AuthMethods} = [0,0,0]; ${*$self}->{SOCKS}->{AuthMethods}->[AUTHMECH_ANON] = 1 unless ${*$self}->{SOCKS}->{RequireAuth}; #${*$self}->{SOCKS}->{AuthMethods}->[AUTHMECH_GSSAPI] = 1 # if (${*$self}->{SOCKS}->{AuthType} eq "gssapi"); ${*$self}->{SOCKS}->{AuthMethods}->[AUTHMECH_USERPASS] = 1 if ((!exists($args->{Listen}) && (${*$self}->{SOCKS}->{AuthType} eq "userpass")) || (exists($args->{Listen}) && defined(${*$self}->{SOCKS}->{UserAuth}))); if(exists($args->{BindAddr}) && exists($args->{BindPort})) { ${*$self}->{SOCKS}->{CmdAddr} = delete($args->{BindAddr}); ${*$self}->{SOCKS}->{CmdPort} = delete($args->{BindPort}); ${*$self}->{SOCKS}->{Bind} = 1; } elsif(exists($args->{UdpAddr}) && exists($args->{UdpPort})) { if(${*$self}->{SOCKS}->{Version} == 4) { croak("Socks v4 doesn't support UDP association"); } ${*$self}->{SOCKS}->{CmdAddr} = delete($args->{UdpAddr}); ${*$self}->{SOCKS}->{CmdPort} = delete($args->{UdpPort}); $args->{LocalAddr} = ${*$self}->{SOCKS}->{CmdAddr}; $args->{LocalPort} = ${*$self}->{SOCKS}->{CmdPort}; ${*$self}->{SOCKS}->{TCP} = __PACKAGE__->new( # TCP backend for UDP socket Timeout => $args->{Timeout}, Proto => 'tcp' ) or return; } elsif(exists($args->{ConnectAddr}) && exists($args->{ConnectPort})) { ${*$self}->{SOCKS}->{CmdAddr} = delete($args->{ConnectAddr}); ${*$self}->{SOCKS}->{CmdPort} = delete($args->{ConnectPort}); } return 1; } ############################################################################### #+----------------------------------------------------------------------------- #| Connect Functions #+----------------------------------------------------------------------------- ############################################################################### ############################################################################### # # connect - On a configure, connect is called to open the connection. When # we do this we have to talk to the SOCKS proxy, log in, and # connect to the remote host. # ############################################################################### sub connect { my $self = shift; croak("Undefined IO::Socket::Socks object passed to connect.") unless defined($self); #-------------------------------------------------------------------------- # Establish a connection #-------------------------------------------------------------------------- my $sock = defined( ${*$self}->{SOCKS}->{TCP} ) ? ${*$self}->{SOCKS}->{TCP}->SUPER::connect(@_) : $self->SUPER::connect(@_); if (!$sock) { $SOCKS_ERROR->set($!, $@ = "Connection to proxy failed: $!"); return; } $self->_connect(); } ############################################################################### # # _connect - reusable connect operations # ############################################################################### sub _connect { my $self = shift; ${*$self}->{SOCKS}->{ready} = 0; ${*$self}->{SOCKS}->{connected} = 0; if(${*$self}->{SOCKS}->{Version} == 4) { ${*$self}->{SOCKS}->{queue} = [ # [sub, [@args], buf, [@reads], sends_cnt] ['_socks4_connect_command', [${*$self}->{SOCKS}->{Bind} ? CMD_BIND : CMD_CONNECT], undef, [], 0], ['_socks4_connect_reply', [], undef, [], 0] ]; } else { ${*$self}->{SOCKS}->{queue} = [ ['_socks5_connect', [], undef, [], 0], ['_socks5_connect_if_auth', [], undef, [], 0], ['_socks5_connect_command', [ ${*$self}->{SOCKS}->{Bind} ? CMD_BIND : ${*$self}->{SOCKS}->{TCP} ? CMD_UDPASSOC : CMD_CONNECT ], undef, [], 0 ], ['_socks5_connect_reply', [], undef, [], 0] ]; } defined( $self->_run_queue() ) or return; return $self; } ############################################################################### # # _run_queue - run tasks from queue, return undef on error, -1 if one of the task # returned not completed because of the possible blocking on network operation # ############################################################################### sub _run_queue { my $self = shift; my $retval; my $sub; while(my $elt = ${*$self}->{SOCKS}->{queue}[0]) { $sub = $elt->[Q_SUB]; $retval = $self->$sub(@{$elt->[Q_ARGS]}); unless (defined $retval) { ${*$self}->{SOCKS}->{queue} = []; ${*$self}->{SOCKS}->{queue_results} = {}; last; } last if ($retval == -1); ${*$self}->{SOCKS}->{queue_results}{$elt->[Q_SUB]} = $retval; shift @{${*$self}->{SOCKS}->{queue}}; } if(defined($retval) && !@{${*$self}->{SOCKS}->{queue}}) { ${*$self}->{SOCKS}->{queue_results} = {}; ${*$self}->{SOCKS}->{ready} = 1; } return $retval; } ############################################################################### # # ready - check is non-blocking socket ready to transfer user data # ############################################################################### sub ready { my $self = shift; $self->_run_queue(); return ${*$self}->{SOCKS}->{ready}; } ############################################################################### # # _socks5_connect - Send the opening handsake, and process the reply. # ############################################################################### sub _socks5_connect { my $self = shift; my $debug = IO::Socket::Socks::Debug->new() if ${*$self}->{SOCKS}->{Debug}; my ($reads, $sends, $debugs) = (0, 0, 0); my $sock = defined( ${*$self}->{SOCKS}->{TCP} ) ? ${*$self}->{SOCKS}->{TCP} : $self; #-------------------------------------------------------------------------- # Send the auth mechanisms #-------------------------------------------------------------------------- # +----+----------+----------+ # |VER | NMETHODS | METHODS | # +----+----------+----------+ # | 1 | 1 | 1 to 255 | # +----+----------+----------+ my $nmethods = 0; my $methods; foreach my $method (0..$#{${*$self}->{SOCKS}->{AuthMethods}}) { if (${*$self}->{SOCKS}->{AuthMethods}->[$method] == 1) { $methods .= pack('C', $method); $nmethods++; } } my $reply; $reply = $sock->_socks_send(pack('CCa*', SOCKS5_VER, $nmethods, $methods), ++$sends) or return _fail($reply); if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => SOCKS5_VER, nmethods => $nmethods, methods => join('', unpack("C$nmethods", $methods)) ); $debug->show('Client Send: '); } #-------------------------------------------------------------------------- # Read the reply #-------------------------------------------------------------------------- # +----+--------+ # |VER | METHOD | # +----+--------+ # | 1 | 1 | # +----+--------+ $reply = $sock->_socks_read(2, ++$reads) or return _fail($reply); my ($version, $auth_method) = unpack('CC', $reply); if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => $version, method => $auth_method ); $debug->show('Client Recv: '); } if ($auth_method == AUTHMECH_INVALID) { $! = ESOCKSPROTO; $SOCKS_ERROR->set(AUTHMECH_INVALID, $@ = $CODES{AUTHMECH}->[$auth_method]); return; } return $auth_method; } sub _socks5_connect_if_auth { my $self = shift; if(${*$self}->{SOCKS}->{queue_results}{'_socks5_connect'} != AUTHMECH_ANON) { unshift @{${*$self}->{SOCKS}->{queue}}, ['_socks5_connect_auth', [], undef, [], 0]; (${*$self}->{SOCKS}->{queue}[0], ${*$self}->{SOCKS}->{queue}[1]) = (${*$self}->{SOCKS}->{queue}[1], ${*$self}->{SOCKS}->{queue}[0]); } 1; } ############################################################################### # # _socks5_connect_auth - Send and receive a SOCKS5 auth handshake (rfc1929) # ############################################################################### sub _socks5_connect_auth { my $self = shift; my $debug = IO::Socket::Socks::Debug->new() if ${*$self}->{SOCKS}->{Debug}; my ($reads, $sends, $debugs) = (0, 0, 0); my $sock = defined( ${*$self}->{SOCKS}->{TCP} ) ? ${*$self}->{SOCKS}->{TCP} : $self; #-------------------------------------------------------------------------- # Send the auth #-------------------------------------------------------------------------- # +----+------+----------+------+----------+ # |VER | ULEN | UNAME | PLEN | PASSWD | # +----+------+----------+------+----------+ # | 1 | 1 | 1 to 255 | 1 | 1 to 255 | # +----+------+----------+------+----------+ my $uname = ${*$self}->{SOCKS}->{Username}; my $passwd = ${*$self}->{SOCKS}->{Password}; my $ulen = length($uname); my $plen = length($passwd); my $reply; $reply = $sock->_socks_send(pack("CCa${ulen}Ca*", 1, $ulen, $uname, $plen, $passwd), ++$sends) or return _fail($reply); if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => 1, ulen => $ulen, uname => $uname, plen => $plen, passwd => $passwd ); $debug->show('Client Send: '); } #-------------------------------------------------------------------------- # Read the reply #-------------------------------------------------------------------------- # +----+--------+ # |VER | STATUS | # +----+--------+ # | 1 | 1 | # +----+--------+ $reply = $sock->_socks_read(2, ++$reads) or return _fail($reply); my ($ver, $status) = unpack('CC', $reply); if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => $ver, status => $status ); $debug->show('Client Recv: '); } if ($status != AUTHREPLY_SUCCESS) { $! = ESOCKSPROTO; $SOCKS_ERROR->set(AUTHREPLY_FAILURE, $@ = "Authentication failed with SOCKS5 proxy"); return; } return 1; } ############################################################################### # # _socks_connect_command - Process a SOCKS5 command request # ############################################################################### sub _socks5_connect_command { my $self = shift; my $command = shift; my $debug = IO::Socket::Socks::Debug->new() if ${*$self}->{SOCKS}->{Debug}; my ($reads, $sends, $debugs) = (0, 0, 0); my $resolve = defined(${*$self}->{SOCKS}->{Resolve}) ? ${*$self}->{SOCKS}->{Resolve} : $SOCKS5_RESOLVE; my $sock = defined( ${*$self}->{SOCKS}->{TCP} ) ? ${*$self}->{SOCKS}->{TCP} : $self; #-------------------------------------------------------------------------- # Send the command #-------------------------------------------------------------------------- # +----+-----+-------+------+----------+----------+ # |VER | CMD | RSV | ATYP | DST.ADDR | DST.PORT | # +----+-----+-------+------+----------+----------+ # | 1 | 1 | X'00' | 1 | Variable | 2 | # +----+-----+-------+------+----------+----------+ my $atyp = $resolve ? ADDR_DOMAINNAME : ADDR_IPV4; my $dstaddr = $resolve ? ${*$self}->{SOCKS}->{CmdAddr} : inet_aton(${*$self}->{SOCKS}->{CmdAddr}); my $hlen = length($dstaddr) if $resolve; my $dstport = pack('n', ${*$self}->{SOCKS}->{CmdPort}); my $reply; $reply = $sock->_socks_send(pack('C4', SOCKS5_VER, $command, 0, $atyp) . (defined($hlen) ? pack('C', $hlen) : '') . $dstaddr . $dstport, ++$sends) or return _fail($reply); if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => SOCKS5_VER, cmd => $command, rsv => 0, atyp => $atyp ); $debug->add(hlen => $hlen) if defined $hlen; $debug->add( dstaddr => $resolve ? $dstaddr : (length($dstaddr) == 4 ? inet_ntoa($dstaddr) : undef), dstport => ${*$self}->{SOCKS}->{CmdPort} ); $debug->show('Client Send: '); } return 1; } sub _socks5_connect_reply { my $self = shift; my $debug = IO::Socket::Socks::Debug->new() if ${*$self}->{SOCKS}->{Debug}; my ($reads, $sends, $debugs) = (0, 0, 0); my $sock = defined( ${*$self}->{SOCKS}->{TCP} ) ? ${*$self}->{SOCKS}->{TCP} : $self; #-------------------------------------------------------------------------- # Read the reply #-------------------------------------------------------------------------- # +----+-----+-------+------+----------+----------+ # |VER | REP | RSV | ATYP | BND.ADDR | BND.PORT | # +----+-----+-------+------+----------+----------+ # | 1 | 1 | X'00' | 1 | Variable | 2 | # +----+-----+-------+------+----------+----------+ my $reply; $reply = $sock->_socks_read(4, ++$reads) or return _fail($reply); my ($ver, $rep, $rsv, $atyp) = unpack('C4', $reply); if($debug) { $debug->add( ver => $ver, rep => $rep, rsv => $rsv, atyp => $atyp ); } my ($bndaddr, $bndport); if ($atyp == ADDR_DOMAINNAME) { length( $reply = $sock->_socks_read(1, ++$reads) ) or return _fail($reply); my $hlen = unpack('C', $reply); $bndaddr = $sock->_socks_read($hlen, ++$reads) or return _fail($bndaddr); if($debug) { $debug->add( hlen => $hlen, bndaddr => $bndaddr ); } } elsif ($atyp == ADDR_IPV4) { $reply = $sock->_socks_read(4, ++$reads) or return _fail($reply); $bndaddr = length($reply) == 4 ? inet_ntoa($reply) : undef; if($debug) { $debug->add(bndaddr => $bndaddr); } } else { $! = ESOCKSPROTO; $SOCKS_ERROR->set(ISS_UNKNOWN_ADDRESS, $@ = "Unsupported address type returned by socks server: $atyp"); return; } $reply = $sock->_socks_read(2, ++$reads) or return _fail($reply); $bndport = unpack('n', $reply); ${*$self}->{SOCKS}->{DstAddr} = $bndaddr; ${*$self}->{SOCKS}->{DstPort} = $bndport; if($debug && !$self->_debugged(++$debugs)) { $debug->add(bndport => $bndport); $debug->show('Client Recv: '); } if($rep != REPLY_SUCCESS) { $! = ESOCKSPROTO; unless(exists $CODES{REPLY}->{$rep}) { $rep = REPLY_GENERAL_FAILURE; } $SOCKS_ERROR->set($rep, $@ = $CODES{REPLY}->{$rep}); return; } return 1; } ############################################################################### # # _socks4_connect_command - Send the opening handsake, and process the reply. # ############################################################################### sub _socks4_connect_command { # http://ss5.sourceforge.net/socks4.protocol.txt # http://ss5.sourceforge.net/socks4A.protocol.txt my $self = shift; my $command = shift; my $debug = IO::Socket::Socks::Debug->new() if ${*$self}->{SOCKS}->{Debug}; my ($reads, $sends, $debugs) = (0, 0, 0); my $resolve = defined(${*$self}->{SOCKS}->{Resolve}) ? ${*$self}->{SOCKS}->{Resolve} : $SOCKS4_RESOLVE; #-------------------------------------------------------------------------- # Send the command #-------------------------------------------------------------------------- # +-----+-----+----------+---------------+----------+------+ # | VER | CMD | DST.PORT | DST.ADDR | USERID | NULL | # +-----+-----+----------+---------------+----------+------+ # | 1 | 1 | 2 | 4 | variable | 1 | # +-----+-----+----------+---------------+----------+------+ my $dstaddr = $resolve ? inet_aton('0.0.0.1') : inet_aton(${*$self}->{SOCKS}->{CmdAddr}); my $dstport = pack('n', ${*$self}->{SOCKS}->{CmdPort}); my $userid = ${*$self}->{SOCKS}->{Username} || ''; my $dsthost = ''; if($resolve) { # socks4a $dsthost = ${*$self}->{SOCKS}->{CmdAddr} . pack('C', 0); } my $reply; $reply = $self->_socks_send(pack('CC', SOCKS4_VER, $command) . $dstport . $dstaddr . $userid . pack('C', 0) . $dsthost, ++$sends) or return _fail($reply); if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => SOCKS4_VER, cmd => $command, dstport => ${*$self}->{SOCKS}->{CmdPort}, dstaddr => length($dstaddr) == 4 ? inet_ntoa($dstaddr) : undef, userid => $userid, null => 0 ); if($dsthost) { $debug->add( dsthost => ${*$self}->{SOCKS}->{CmdAddr}, null => 0 ); } $debug->show('Client Send: '); } return 1; } sub _socks4_connect_reply { my $self = shift; my $debug = IO::Socket::Socks::Debug->new() if ${*$self}->{SOCKS}->{Debug}; my ($reads, $sends, $debugs) = (0, 0, 0); #-------------------------------------------------------------------------- # Read the reply #-------------------------------------------------------------------------- # +-----+-----+----------+---------------+ # | VER | REP | BND.PORT | BND.ADDR | # +-----+-----+----------+---------------+ # | 1 | 1 | 2 | 4 | # +-----+-----+----------+---------------+ my $reply; $reply = $self->_socks_read(8, ++$reads) or return _fail($reply); my ($ver, $rep, $bndport) = unpack('CCn', $reply); substr($reply, 0, 4) = ''; my $bndaddr = length($reply) == 4 ? inet_ntoa($reply) : undef; ${*$self}->{SOCKS}->{DstAddr} = $bndaddr; ${*$self}->{SOCKS}->{DstPort} = $bndport; if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => $ver, rep => $rep, bndport => $bndport, bndaddr => $bndaddr ); $debug->show('Client Recv: '); } if($rep != REQUEST_GRANTED) { $! = ESOCKSPROTO; unless(exists $CODES{REPLY}->{$rep}) { $rep = REQUEST_FAILED; } $SOCKS_ERROR->set($rep, $@ = $CODES{REPLY}->{$rep}); return; } return 1; } ############################################################################### #+----------------------------------------------------------------------------- #| Accept Functions #+----------------------------------------------------------------------------- ############################################################################### ############################################################################### # # accept - When we are accepting new connections, we need to do the SOCKS # handshaking before we return a usable socket. # ############################################################################### sub accept { my $self = shift; croak("Undefined IO::Socket::Socks object passed to accept.") unless defined($self); if(${*$self}->{SOCKS}->{Listen}) { my $client = $self->SUPER::accept(@_); if(!$client) { if($! == EAGAIN || $! == EWOULDBLOCK) { $SOCKS_ERROR->set(SOCKS_WANT_READ, "Socks want read"); } else { $SOCKS_ERROR->set($!, $@ = "Proxy accept new client failed: $!"); } return; } # inherit some socket parameters ${*$client}->{SOCKS}->{Debug} = ${*$self}->{SOCKS}->{Debug}; ${*$client}->{SOCKS}->{Version} = ${*$self}->{SOCKS}->{Version}; ${*$client}->{SOCKS}->{AuthMethods} = ${*$self}->{SOCKS}->{AuthMethods}; ${*$client}->{SOCKS}->{UserAuth} = ${*$self}->{SOCKS}->{UserAuth}; ${*$client}->{SOCKS}->{Resolve} = ${*$self}->{SOCKS}->{Resolve}; ${*$client}->{SOCKS}->{ready} = 0; $client->blocking($self->blocking); # temporarily if(${*$self}->{SOCKS}->{Version} == 4) { ${*$client}->{SOCKS}->{queue} = [ ['_socks4_accept_command', [], undef, [], 0] ]; } else { ${*$client}->{SOCKS}->{queue} = [ ['_socks5_accept', [], undef, [], 0], ['_socks5_accept_if_auth', [], undef, [], 0], ['_socks5_accept_command', [], undef, [], 0] ]; } defined( $client->_run_queue() ) or return; $client->blocking(1); # new socket should be in blocking mode return $client; } else { ${*$self}->{SOCKS}->{ready} = 0; if({*$self}->{SOCKS}->{Version} == 4) { push @{${*$self}->{SOCKS}->{queue}}, ['_socks4_connect_reply', [], undef, [], 0]; } else { push @{${*$self}->{SOCKS}->{queue}}, ['_socks5_connect_reply', [], undef, [], 0]; } defined( $self->_run_queue() ) or return; return $self; } } ############################################################################### # # _socks5_accept - Wait for an opening handsake, and reply. # ############################################################################### sub _socks5_accept { my $self = shift; my $debug = IO::Socket::Socks::Debug->new() if ${*$self}->{SOCKS}->{Debug}; my ($reads, $sends, $debugs) = (0, 0, 0); #-------------------------------------------------------------------------- # Read the auth mechanisms #-------------------------------------------------------------------------- # +----+----------+----------+ # |VER | NMETHODS | METHODS | # +----+----------+----------+ # | 1 | 1 | 1 to 255 | # +----+----------+----------+ my $request; $request = $self->_socks_read(2, ++$reads) or return _fail($request); my ($ver, $nmethods) = unpack('CC', $request); $request = $self->_socks_read($nmethods, ++$reads) or return _fail($request); my @methods = unpack('C'x$nmethods, $request); if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => $ver, nmethods => $nmethods, methods => join('', @methods) ); $debug->show('Server Recv: '); } if($ver != SOCKS5_VER) { $! = ESOCKSPROTO; $SOCKS_ERROR->set(ISS_BAD_VERSION, $@ = "Socks version should be 5, $ver recieved"); return; } if ($nmethods == 0) { $! = ESOCKSPROTO; $SOCKS_ERROR->set(AUTHMECH_INVALID, $@ = "No auth methods sent"); return; } my $authmech; foreach my $method (@methods) { if (${*$self}->{SOCKS}->{AuthMethods}->[$method] == 1) { $authmech = $method; last; } } if (!defined($authmech)) { $authmech = AUTHMECH_INVALID; } #-------------------------------------------------------------------------- # Send the reply #-------------------------------------------------------------------------- # +----+--------+ # |VER | METHOD | # +----+--------+ # | 1 | 1 | # +----+--------+ $request = $self->_socks_send(pack('CC', SOCKS5_VER, $authmech), ++$sends) or return _fail($request); if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => SOCKS5_VER, method => $authmech ); $debug->show('Server Send: '); } if ($authmech == AUTHMECH_INVALID) { $! = ESOCKSPROTO; $SOCKS_ERROR->set(AUTHMECH_INVALID, $@ = "No available auth methods"); return; } return $authmech; } sub _socks5_accept_if_auth { my $self = shift; if(${*$self}->{SOCKS}->{queue_results}{'_socks5_accept'} == AUTHMECH_USERPASS) { unshift @{${*$self}->{SOCKS}->{queue}}, ['_socks5_accept_auth', [], undef, [], 0]; (${*$self}->{SOCKS}->{queue}[0], ${*$self}->{SOCKS}->{queue}[1]) = (${*$self}->{SOCKS}->{queue}[1], ${*$self}->{SOCKS}->{queue}[0]); } 1; } ############################################################################### # # _socks5_accept_auth - Send and receive a SOCKS5 auth handshake (rfc1929) # ############################################################################### sub _socks5_accept_auth { my $self = shift; my $debug = IO::Socket::Socks::Debug->new() if ${*$self}->{SOCKS}->{Debug}; my ($reads, $sends, $debugs) = (0, 0, 0); #-------------------------------------------------------------------------- # Read the auth #-------------------------------------------------------------------------- # +----+------+----------+------+----------+ # |VER | ULEN | UNAME | PLEN | PASSWD | # +----+------+----------+------+----------+ # | 1 | 1 | 1 to 255 | 1 | 1 to 255 | # +----+------+----------+------+----------+ my $request; $request = $self->_socks_read(2, ++$reads) or return _fail($request); my ($ver, $ulen) = unpack('CC', $request); $request = $self->_socks_read($ulen+1, ++$reads) or return _fail($request); my $uname = substr($request, 0, $ulen); my $plen = unpack('C', substr($request, $ulen)); my $passwd; $passwd = $self->_socks_read($plen, ++$reads) or return _fail($passwd); if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => $ver, ulen => $ulen, uname => $uname, plen => $plen, passwd => $passwd ); $debug->show('Server Recv: '); } my $status = 1; if (defined(${*$self}->{SOCKS}->{UserAuth})) { $status = &{${*$self}->{SOCKS}->{UserAuth}}($uname, $passwd); } #-------------------------------------------------------------------------- # Send the reply #-------------------------------------------------------------------------- # +----+--------+ # |VER | STATUS | # +----+--------+ # | 1 | 1 | # +----+--------+ $status = $status ? AUTHREPLY_SUCCESS : 1; #XXX AUTHREPLY_FAILURE broken $request = $self->_socks_send(pack('CC', 1, $status), ++$sends) or return _fail($request); if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => 1, status => $status ); $debug->show('Server Send: '); } if ($status != AUTHREPLY_SUCCESS) { $! = ESOCKSPROTO; $SOCKS_ERROR->set(AUTHREPLY_FAILURE, $@ = "Authentication failed with SOCKS5 proxy"); return; } return 1; } ############################################################################### # # _socks5_acccept_command - Process a SOCKS5 command request. Since this is # a library and not a server, we cannot process the # command. Let the parent program handle that. # ############################################################################### sub _socks5_accept_command { my $self = shift; my $debug = IO::Socket::Socks::Debug->new() if ${*$self}->{SOCKS}->{Debug}; my ($reads, $sends, $debugs) = (0, 0, 0); @{${*$self}->{SOCKS}->{COMMAND}} = (); #-------------------------------------------------------------------------- # Read the command #-------------------------------------------------------------------------- # +----+-----+-------+------+----------+----------+ # |VER | CMD | RSV | ATYP | DST.ADDR | DST.PORT | # +----+-----+-------+------+----------+----------+ # | 1 | 1 | X'00' | 1 | Variable | 2 | # +----+-----+-------+------+----------+----------+ my $request; $request = $self->_socks_read(4, ++$reads) or return _fail($request); my ($ver, $cmd, $rsv, $atyp) = unpack('CCCC', $request); if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => $ver, cmd => $cmd, rsv => $rsv, atyp => $atyp ); } my $dstaddr; if ($atyp == ADDR_DOMAINNAME) { length( $request = $self->_socks_read(1, ++$reads) ) or return _fail($request); my $hlen = unpack('C', $request); $dstaddr = $self->_socks_read($hlen, ++$reads) or return _fail($dstaddr); if($debug && !$self->_debugged(++$debugs)) { $debug->add(hlen => $hlen); } } elsif ($atyp == ADDR_IPV4) { $request = $self->_socks_read(4, ++$reads) or return _fail($request); $dstaddr = length($request) == 4 ? inet_ntoa($request) : undef; } else { # unknown address type - how many bytes to read? ${*$self}->{SOCKS}->{queue} = [ ['_socks5_accept_command_reply', [REPLY_ADDR_NOT_SUPPORTED, '0.0.0.0', 0], undef, [], 0] ]; $! = ESOCKSPROTO; $SOCKS_ERROR->set(REPLY_ADDR_NOT_SUPPORTED, $@ = $CODES{REPLY}->{REPLY_ADDR_NOT_SUPPORTED}); return 1; } $request = $self->_socks_read(2, ++$reads) or return _fail($request); my $dstport = unpack('n', $request); if($debug && !$self->_debugged(++$debugs)) { $debug->add( dstaddr => $dstaddr, dstport => $dstport ); $debug->show('Server Recv: '); } @{${*$self}->{SOCKS}->{COMMAND}} = ($cmd, $dstaddr, $dstport, $atyp); return 1; } ############################################################################### # # _socks5_acccept_command_reply - Answer a SOCKS5 command request. Since this # is a library and not a server, we cannot # process the command. Let the parent program # handle that. # ############################################################################### sub _socks5_accept_command_reply { my $self = shift; my $reply = shift; my $host = shift; my $port = shift; my $debug = IO::Socket::Socks::Debug->new() if ${*$self}->{SOCKS}->{Debug}; my $resolve = defined(${*$self}->{SOCKS}->{Resolve}) ? ${*$self}->{SOCKS}->{Resolve} : $SOCKS5_RESOLVE; my ($reads, $sends, $debugs) = (0, 0, 0); if (!defined($reply) || !defined($host) || !defined($port)) { croak("You must provide a reply, host, and port on the command reply."); } #-------------------------------------------------------------------------- # Send the reply #-------------------------------------------------------------------------- # +----+-----+-------+------+----------+----------+ # |VER | REP | RSV | ATYP | BND.ADDR | BND.PORT | # +----+-----+-------+------+----------+----------+ # | 1 | 1 | X'00' | 1 | Variable | 2 | # +----+-----+-------+------+----------+----------+ my $atyp = $resolve ? ADDR_IPV4 : ADDR_DOMAINNAME; my $bndaddr = $resolve ? inet_aton($host) : $host; my $hlen = length($bndaddr) unless $resolve; my $rc; $rc = $self->_socks_send(pack('CCCC', SOCKS5_VER, $reply, 0, $atyp) . ($resolve ? '' : pack('C', $hlen)) . $bndaddr . pack('n', $port), ++$sends) or return _fail($rc); if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => SOCKS5_VER, rep => $reply, rsv => 0, atyp => $atyp ); $debug->add(hlen => $hlen) unless $resolve; $debug->add( bndaddr => $resolve ? (length($bndaddr) == 4 ? inet_ntoa($bndaddr) : undef) : $bndaddr, bndport => $port ); $debug->show('Server Send: '); } 1; } ############################################################################### # # _socks4_accept_command - Wait for an opening handsake and process a SOCKS4 # command request. Since this is a library and not # a server, we cannot process the command. Let the # parent program handle that. # ############################################################################### sub _socks4_accept_command { my $self = shift; my $debug = IO::Socket::Socks::Debug->new() if ${*$self}->{SOCKS}->{Debug}; my $resolve = defined(${*$self}->{SOCKS}->{Resolve}) ? ${*$self}->{SOCKS}->{Resolve} : $SOCKS4_RESOLVE; my ($reads, $sends, $debugs) = (0, 0, 0); @{${*$self}->{SOCKS}->{COMMAND}} = (); #-------------------------------------------------------------------------- # Read the auth mechanisms #-------------------------------------------------------------------------- # +-----+-----+----------+---------------+----------+------+ # | VER | CMD | DST.PORT | DST.ADDR | USERID | NULL | # +-----+-----+----------+---------------+----------+------+ # | 1 | 1 | 2 | 4 | variable | 1 | # +-----+-----+----------+---------------+----------+------+ my $request; $request = $self->_socks_read(8, ++$reads) or return _fail($request); my ($ver, $cmd, $dstport) = unpack('CCn', $request); substr($request, 0, 4) = ''; my $dstaddr = length($request) == 4 ? inet_ntoa($request) : undef; my $userid = ''; my $c; while(1) { length( $c = $self->_socks_read(1, ++$reads) ) or return _fail($c); if($c ne "\0") { $userid .= $c; } else { last; } } if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => $ver, cmd => $cmd, dstport => $dstport, dstaddr => $dstaddr, userid => $userid, null => 0 ); } my $atyp = ADDR_IPV4; if($resolve && $dstaddr =~ /^0\.0\.0\.[1-9]/) { # socks4a $dstaddr = ''; $atyp = ADDR_DOMAINNAME; while(1) { length( $c = $self->_socks_read(1, ++$reads) ) or return _fail($c); if($c ne "\0") { $dstaddr .= $c; } else { last; } } if($debug && !$self->_debugged(++$debugs)) { $debug->add( dsthost => $dstaddr, null => 0 ); } } if($debug && !$self->_debugged(++$debugs)) { $debug->show('Server Recv: '); } if(defined(${*$self}->{SOCKS}->{UserAuth})) { unless( &{${*$self}->{SOCKS}->{UserAuth}}($userid) ) { ${*$self}->{SOCKS}->{queue} = [ ['_socks4_accept_command_reply', [REQUEST_REJECTED_USERID, '0.0.0.0', 0], undef, [], 0] ]; $! = ESOCKSPROTO; $SOCKS_ERROR->set(REQUEST_REJECTED_USERID, $@ = 'Authentication failed with SOCKS4 proxy'); return 1; } } if($ver != SOCKS4_VER) { $! = ESOCKSPROTO; $SOCKS_ERROR->set(ISS_BAD_VERSION, $@ = "Socks version should be 4, $ver recieved"); return; } @{${*$self}->{SOCKS}->{COMMAND}} = ($cmd, $dstaddr, $dstport, $atyp); return 1; } ############################################################################### # # _socks4_acccept_command_reply - Answer a SOCKS4 command request. Since this # is a library and not a server, we cannot # process the command. Let the parent program # handle that. # ############################################################################### sub _socks4_accept_command_reply { my $self = shift; my $reply = shift; my $host = shift; my $port = shift; my $debug = IO::Socket::Socks::Debug->new() if ${*$self}->{SOCKS}->{Debug}; my ($reads, $sends, $debugs) = (0, 0, 0); if (!defined($reply) || !defined($host) || !defined($port)) { croak("You must provide a reply, host, and port on the command reply."); } #-------------------------------------------------------------------------- # Send the reply #-------------------------------------------------------------------------- # +-----+-----+----------+---------------+ # | VER | REP | BND.PORT | BND.ADDR | # +-----+-----+----------+---------------+ # | 1 | 1 | 2 | 4 | # +-----+-----+----------+---------------+ my $bndaddr = inet_aton($host); my $rc; $rc = $self->_socks_send(pack('CCna*', 0, $reply, $port, $bndaddr), ++$sends) or return _fail($rc); if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => 0, rep => $reply, bndport => $port, bndaddr => length($bndaddr) == 4 ? inet_ntoa($bndaddr) : undef ); $debug->show('Server Send: '); } 1; } ############################################################################### # # command - return the command the user request along with the host and # port to operate on. # ############################################################################### sub command { my $self = shift; unless(exists ${*$self}->{SOCKS}->{RequireAuth}) # TODO: find more correct way { return ${*$self}->{SOCKS}->{COMMAND}; } else { my @keys = qw(Version AuthType RequireAuth UserAuth Username Password Debug Resolve AuthMethods CmdAddr CmdPort Bind TCP); my %tmp; $tmp{$_} = ${*$self}->{SOCKS}->{$_} for @keys; my %args = @_; $self->_configure(\%args); if( $self->_connect() ) { return 1; } ${*$self}->{SOCKS}->{$_} = $tmp{$_} for @keys; return 0; } } ############################################################################### # # command_reply - public reply wrapper to the client. # ############################################################################### sub command_reply { my $self = shift; ${*$self}->{SOCKS}->{ready} = 0; if(${*$self}->{SOCKS}->{Version} == 4) { ${*$self}->{SOCKS}->{queue} = [ ['_socks4_accept_command_reply', [@_], undef, [], 0] ]; } else { ${*$self}->{SOCKS}->{queue} = [ ['_socks5_accept_command_reply', [@_], undef, [], 0] ]; } $self->_run_queue(); } ############################################################################### # # dst - access to the address and port selected by socks server when connect/bind/udpassoc # ############################################################################### sub dst { my $self = shift; return (${*$self}->{SOCKS}->{DstAddr}, ${*$self}->{SOCKS}->{DstPort}); } ############################################################################### # # send - send UDP datagram # ############################################################################### sub send { my $self = shift; unless(defined ${*$self}->{SOCKS}->{TCP}) { return $self->SUPER::send(@_); } my ($msg, $flags, $peer) = @_; my $debug = IO::Socket::Socks::Debug->new() if ${*$self}->{SOCKS}->{Debug}; my $resolve = defined(${*$self}->{SOCKS}->{Resolve}) ? ${*$self}->{SOCKS}->{Resolve} : $SOCKS5_RESOLVE; croak "send: Cannot determine peer address" unless defined $peer; my ($dstport, $dstaddr) = sockaddr_in($peer); my ($sndaddr, $sndport) = $self->dst; if($sndaddr eq '0.0.0.0') { $sndaddr = ${*$self}->{SOCKS}->{ProxyAddr}; } $sndaddr = inet_aton($sndaddr); $peer = sockaddr_in($sndport, $sndaddr); my ($atyp, $hlen); if($resolve) { $atyp = ADDR_DOMAINNAME; $dstaddr = inet_ntoa($dstaddr); $hlen = length($dstaddr); } else { $atyp = ADDR_IPV4; } my $msglen = length($msg) if $debug; # we need to add socks header to the message # +----+------+------+----------+----------+----------+ # |RSV | FRAG | ATYP | DST.ADDR | DST.PORT | DATA | # +----+------+------+----------+----------+----------+ # | 2 | 1 | 1 | Variable | 2 | Variable | # +----+------+------+----------+----------+----------+ $msg = pack('C4', 0, 0, 0, $atyp) . ($resolve ? pack('C', $hlen) : '') . $dstaddr . pack('n', $dstport) . $msg; if($debug) { $debug->add( rsv => '00', frag => '0', atyp => $atyp ); $debug->add(hlen => $hlen) if $resolve; $debug->add( dstaddr => $resolve ? $dstaddr : (length($dstaddr) == 4 ? inet_ntoa($dstaddr) : undef), dstport => $dstport, data => "...($msglen)" ); $debug->show('Client Send: '); } $self->SUPER::send($msg, $flags, $peer); } ############################################################################### # # recv - receive UDP datagram # ############################################################################### sub recv { my $self = shift; unless(defined ${*$self}->{SOCKS}->{TCP}) { return $self->SUPER::recv(@_); } my $debug = IO::Socket::Socks::Debug->new() if ${*$self}->{SOCKS}->{Debug}; defined(my $peer = $self->SUPER::recv($_[0], $_[1]+262, $_[2]) ) or return; # we need to remove socks header from the message # +----+------+------+----------+----------+----------+ # |RSV | FRAG | ATYP | DST.ADDR | DST.PORT | DATA | # +----+------+------+----------+----------+----------+ # | 2 | 1 | 1 | Variable | 2 | Variable | # +----+------+------+----------+----------+----------+ my $rsv = join('', unpack('C2', $_[0])); substr($_[0], 0, 2) = ''; my ($frag, $atyp) = unpack('C2', $_[0]); substr($_[0], 0, 2) = ''; if($debug) { $debug->add( rsv => $rsv, frag => $frag, atyp => $atyp ); } my $dstaddr; if($atyp == ADDR_DOMAINNAME) { my $hlen = unpack('C', $_[0]); $dstaddr = substr($_[0], 1, $hlen); substr($_[0], 0, $hlen+1) = ''; if($debug) { $debug->add( hlen => $hlen ); } } elsif($atyp == ADDR_IPV4) { $dstaddr = substr($_[0], 0, 4); $dstaddr = length($dstaddr) == 4 ? inet_ntoa($dstaddr) : undef; substr($_[0], 0, 4) = ''; } else { $! = ESOCKSPROTO; $SOCKS_ERROR->set(ISS_UNKNOWN_ADDRESS, $@ = "Unsupported address type returned by socks server: $atyp"); return; } my $dstport = unpack('n', $_[0]); substr($_[0], 0, 2) = ''; if($debug) { $debug->add( dstaddr => $dstaddr, dstport => $dstport, data => "...(" . length($_[0]) . ")" ); $debug->show('Client Recv: '); } return $peer; } ############################################################################### #+----------------------------------------------------------------------------- #| Helper Functions #+----------------------------------------------------------------------------- ############################################################################### sub _socks_send { # this sub may cause SIGPIPE if you'll not alternate it call with _socks_read() my $self = shift; my $data = shift; my $numb = shift; $SOCKS_ERROR->set(); my $rc; my $writed = 0; my $blocking = ${*$self}{io_socket_timeout} ? $self->blocking(0) : $self->blocking; unless($blocking || ${*$self}{io_socket_timeout}) { if(${*$self}->{SOCKS}->{queue}[0][Q_SENDS] >= $numb) { # already sent return 1; } if(defined ${*$self}->{SOCKS}->{queue}[0][Q_BUF]) { # some chunk already sent substr($data, 0, ${*$self}->{SOCKS}->{queue}[0][Q_BUF]) = ''; } while(length $data) { $rc = $self->syswrite($data); if(defined $rc) { ${*$self}->{SOCKS}->{connected} = 1 unless ${*$self}->{SOCKS}->{connected}; if($rc > 0) { ${*$self}->{SOCKS}->{queue}[0][Q_BUF] += $rc; substr($data, 0, $rc) = ''; } else { # XXX: socket closed? if smth writed, but not all? last; } } elsif($! == EWOULDBLOCK || $! == EAGAIN || ($! == ENOTCONN && !${*$self}->{SOCKS}->{connected})) { $SOCKS_ERROR->set(SOCKS_WANT_WRITE, 'Socks want write'); return undef; } else { $SOCKS_ERROR->set($!, $@ = "send: $!"); last; } } $writed = int(${*$self}->{SOCKS}->{queue}[0][Q_BUF]); ${*$self}->{SOCKS}->{queue}[0][Q_BUF] = undef; ${*$self}->{SOCKS}->{queue}[0][Q_SENDS]++; return $writed; } my $selector = IO::Select->new($self); my $start = time(); while(1) { if(${*$self}{io_socket_timeout} && time() - $start >= ${*$self}{io_socket_timeout}) { $! = ETIMEDOUT; last; } unless($selector->can_write(1)) { # socket couldn't accept data for now, check if timeout expired and try again next; } $rc = $self->syswrite($data); if($rc > 0) { # reduce our message $writed += $rc; substr($data, 0, $rc) = ''; if(length($data) == 0) { # all data successfully writed last; } } else { # some error in the socket; will return false $SOCKS_ERROR->set($!, $@ = "send: $!") unless defined $rc; last; } } $self->blocking(1) if $blocking; return $writed; } sub _socks_read { my $self = shift; my $length = shift || 1; my $numb = shift; $SOCKS_ERROR->set(); my $data = ''; my ($buf, $rc); my $blocking = $self->blocking; # non-blocking read unless ($blocking || ${*$self}{io_socket_timeout}) { # no timeout should be specified for non-blocking connect if(defined ${*$self}->{SOCKS}->{queue}[0][Q_READS][$numb]) { # already readed return ${*$self}->{SOCKS}->{queue}[0][Q_READS][$numb]; } if(defined ${*$self}->{SOCKS}->{queue}[0][Q_BUF]) { # some chunk already readed $data = ${*$self}->{SOCKS}->{queue}[0][Q_BUF]; $length -= length $data; } while($length > 0) { $rc = $self->sysread($buf, $length); if(defined $rc) { if($rc > 0) { $length -= $rc; $data .= $buf; } else { # XXX: socket closed, if smth readed but not all? last } } elsif($! == EWOULDBLOCK || $! == EAGAIN) { # no data to read if (length $data) { # save already readed data in the queue buffer ${*$self}->{SOCKS}->{queue}[0][Q_BUF] = $data; } $SOCKS_ERROR->set(SOCKS_WANT_READ, 'Socks want read'); return undef; } else { $SOCKS_ERROR->set($!, $@ = "read: $!"); last; } } ${*$self}->{SOCKS}->{queue}[0][Q_BUF] = undef; ${*$self}->{SOCKS}->{queue}[0][Q_READS][$numb] = $data; return $data; } # blocking read my $selector = IO::Select->new($self); my $start = time(); while($length > 0) { if(${*$self}{io_socket_timeout} && time() - $start >= ${*$self}{io_socket_timeout}) { $! = ETIMEDOUT; last; } unless($selector->can_read(1)) { # no data in socket for now, check if timeout expired and try again next; } $rc = $self->sysread($buf, $length); if(defined $rc && $rc > 0) { # reduce limit and modify buffer $length -= $rc; $data .= $buf; } else { # EOF or error in the socket $SOCKS_ERROR->set($!, $@ = "read: $!") unless defined $rc; last; # TODO handle unexpected EOF more correct } } # XXX it may return incomplete $data if timed out. Could it break smth? return $data; } sub _debugged { my ($self, $debugs) = @_; if(${*$self}->{SOCKS}->{queue}[0][Q_DEBUGS] >= $debugs) { return 1; } ${*$self}->{SOCKS}->{queue}[0][Q_DEBUGS] = $debugs; return 0; } sub _fail { if(!@_ || defined($_[0])) { $SOCKS_ERROR->set(ETIMEDOUT, $@ = 'Timeout') if $SOCKS_ERROR == undef; return; } return -1; } ############################################################################### #+----------------------------------------------------------------------------- #| Helper Package to bring some magic in $SOCKS_ERROR #+----------------------------------------------------------------------------- ############################################################################### package IO::Socket::Socks::Error; use strict; use overload '==' => \&num_eq, '!=' => sub { !num_eq(@_) }, '""' => \&as_str, '0+' => \&as_num; sub new { my ($class, $num, $str) = @_; my $self = { num => $num, str => $str, }; bless $self, $class; } sub set { my ($self, $num, $str) = @_; $self->{num} = defined $num ? int($num) : $num; $self->{str} = $str; } sub as_str { my $self = shift; return $self->{str}; } sub as_num { my $self = shift; return $self->{num}; } sub num_eq { my ($self, $num) = @_; unless(defined $num) { return !defined($self->{num}); } return $self->{num} == int($num); } ############################################################################### #+----------------------------------------------------------------------------- #| Helper Package to display pretty debug messages #+----------------------------------------------------------------------------- ############################################################################### package IO::Socket::Socks::Debug; sub new { my ($class) = @_; my $self = []; bless $self, $class; } sub add { my $self = shift; push @{$self}, @_; } sub show { my ($self, $tag) = @_; $self->_separator($tag); $self->_row(0, $tag); $self->_separator($tag); $self->_row(1, $tag); $self->_separator($tag); print STDERR "\n"; @{$self} = (); } sub _separator { my $self = shift; my $tag = shift; my ($row1_len, $row2_len, $len); print STDERR $tag, '+'; for(my $i=0; $i<@$self; $i+=2) { $row1_len = length($self->[$i]); $row2_len = length($self->[$i+1]); $len = ($row1_len > $row2_len ? $row1_len : $row2_len)+2; print STDERR '-' x $len, '+'; } print STDERR "\n"; } sub _row { my $self = shift; my $row = shift; my $tag = shift; my ($row1_len, $row2_len, $len); print STDERR $tag, '|'; for(my $i=0; $i<@$self; $i+=2) { $row1_len = length($self->[$i]); $row2_len = length($self->[$i+1]); $len = ($row1_len > $row2_len ? $row1_len : $row2_len); printf STDERR ' %-'.$len.'s |', $self->[$i+$row]; } print STDERR "\n"; } 1; __END__ =head1 NAME IO::Socket::Socks - Provides a way to create socks client or server both 4 and 5 version. =head1 SYNOPSIS =head2 Client use IO::Socket::Socks; my $socks = new IO::Socket::Socks(ProxyAddr=>"proxy host", ProxyPort=>"proxy port", ConnectAddr=>"remote host", ConnectPort=>"remote port", ); print $socks "foo\n"; $socks->close(); =head2 Server use IO::Socket::Socks ':constants'; my $socks_server = new IO::Socket::Socks(ProxyAddr=>"localhost", ProxyPort=>"8000", Listen=>1, UserAuth=>\&auth, RequireAuth=>1 ); my $select = new IO::Select($socks_server); while(1) { if ($select->can_read()) { my $client = $socks_server->accept(); if (!defined($client)) { print "ERROR: $SOCKS_ERROR\n"; next; } my $command = $client->command(); if ($command->[0] == CMD_CONNECT) { # Handle the CONNECT $client->command_reply(REPLY_SUCCESS, addr, port); } ... #read from the client and send to the CONNECT address ... $client->close(); } } sub auth { my $user = shift; my $pass = shift; return 1 if (($user eq "foo") && ($pass eq "bar")); return 0; } =head1 DESCRIPTION IO::Socket::Socks connects to a SOCKS proxy, tells it to open a connection to a remote host/port when the object is created. The object you receive can be used directly as a socket for sending and receiving data from the remote host. In addition to create socks client this module could be used to create socks server. See examples below. =head1 EXAMPLES For complete examples of socks 4/5 client and server see `examples' subdirectory in the distribution. =head1 METHODS =head2 Socks Client =head3 new( %cfg ) =head3 new_from_socket($socket, %cfg) =head3 new_from_fd($socket, %cfg) Creates a new IO::Socket::Socks client object. new_from_socket() is the same as new(), but allows one to create object from an existing socket (new_from_fd is new_from_socket alias). Both takes the following config hash: SocksVersion => 4 or 5. Default is 5 Timeout => connect/accept timeout Blocking => Since IO::Socket::Socks version 0.5 you can perform non-blocking connect/bind by passing false value for this option. Default is true - blocking. See ready() below for more details. SocksResolve => resolve host name to ip by proxy server or not (will resolve by client). This overrides value of $SOCKS4_RESOLVE or $SOCKS5_RESOLVE variable. Boolean. SocksDebug => This will cause all of the SOCKS traffic to be presented on the command line in a form similar to the tables in the RFCs. This overrides value of $SOCKS_DEBUG variable. Boolean. ProxyAddr => Hostname of the proxy ProxyPort => Port of the proxy ConnectAddr => Hostname of the remote machine ConnectPort => Port of the remote machine BindAddr => Hostname of the remote machine which will connect to the proxy server after bind request BindPort => Port of the remote machine which will connect to the proxy server after bind request UdpAddr => Associate UDP socket on the server with this client hostname UdpPort => Associate UDP socket on the server with this client port AuthType => What kind of authentication to support: none - no authentication (default) userpass - Username/Password. For socks5 proxy only. RequireAuth => Do not send ANON as a valid auth mechanism. For socks5 proxy only Username => For socks5 if AuthType is set to userpass, then you must provide a username. For socks4 proxy with this option you can specify userid. Password => If AuthType is set to userpass, then you must provide a password. For socks5 proxy only. The following options should be specified: ProxyAddr and ProxyPort ConnectAddr and ConnectPort or BindAddr and BindPort or UdpAddr and UdpPort Other options are facultative. =head3 ready( ) Returns true when socket becomes ready to transfer data (socks handshake done), false otherwise. This is useful for non-blocking connect/bind. When this method returns false value you can determine what socks handshake need for with $SOCKS_ERROR variable. It may need for read, then $SOCKS_ERROR will be SOCKS_WANT_READ or need for write, then it will be SOCKS_WANT_WRITE. Example: use IO::Socket::Socks; use IO::Select; my $sock = IO::Socket::Socks->new( ProxyAddr => 'localhost', ProxyPort => 1080, ConnectAddr => 'mail.com', ConnectPort => 80, Blocking => 0 ) or die $SOCKS_ERROR; my $sel = IO::Select->new($sock); until ($sock->ready) { if ($SOCKS_ERROR == SOCKS_WANT_READ) { $sel->can_read(); } elsif ($SOCKS_ERROR == SOCKS_WANT_WRITE) { $sel->can_write(); } else { die $SOCKS_ERROR; } } # you may want to return socket to blocking state by $sock->blocking(1) $sock->syswrite("I am ready"); =head3 accept( ) Accept an incoming connection after bind request. On failed returns undef. On success returns socket. No new socket created, returned socket is same on which this method was called. Because accept(2) is not invoked on the client side, socks server calls accept(2) and proxify all traffic via socket opened by client bind request. You can call accept only once on IO::Socket::Socks client socket. =head3 command( %cfg ) Allows one to execute socks command on already opened socket. Thus you can create socks chain. For example see L section. %cfg is like hash in the constructor. Only options listed below makes sence: ConnectAddr ConnectPort BindAddr BindPort UdpAddr UdpPort SocksVersion SocksDebug SocksResolve AuthType RequireAuth Username Password AuthMethods Values of the other options (Timeout for example) inherited from the constructor. Options like ProxyAddr and ProxyPort are not included. =head3 dst( ) Return (host, port) of the remote host after connect/accept or socks server (host, port) after bind/udpassoc. =head2 Socks Server =head3 new( %cfg ) =head3 new_from_socket($socket, %cfg) =head3 new_from_fd($socket, %cfg) Creates a new IO::Socket::Socks server object. new_from_socket() is the same as new(), but allows one to create object from an existing socket (new_from_fd is new_from_socket alias). Both takes the following config hash: SocksVersion => 4 for socks v4, 5 for socks v5. Default is 5 Timeout => Timeout value for various operations Blocking => Since IO::Socket::Socks version 0.6 you can perform non-blocking accept by passing false value for this option. Default is true - blocking. See ready() below for more details. SocksResolve => For socks v5: return destination address to the client in form of 4 bytes if true, otherwise in form of host length and host name. For socks v4: allow use socks4a protocol extension if true and not otherwise. This overrides value of $SOCKS4_RESOLVE or $SOCKS5_RESOLVE. SocksDebug => This will cause all of the SOCKS traffic to be presented on the command line in a form similar to the tables in the RFCs. This overrides value of $SOCKS_DEBUG variable. Boolean. ProxyAddr => Local host bind address ProxyPort => Local host bind port UserAuth => Reference to a function that returns 1 if client allowed to use socks server, 0 otherwise. For socks5 proxy it takes login and password as arguments. For socks4 argument is userid. RequireAuth => Not allow anonymous access for socks5 proxy. Listen => Same as IO::Socket::INET listen option. Should be specified as number > 0. The following options should be specified: Listen ProxyAddr ProxyPort Other options are facultative. =head3 accept( ) Accept an incoming connection and return a new IO::Socket::Socks object that represents that connection. You must call command() on this to find out what the incoming connection wants you to do, and then call command_reply() to send back the reply. =head3 ready( ) After non-blocking accept you will get new client socket object, which may be not ready to transfer data (if socks handshake is not done yet). ready() will return true value when handshake will be done successfully and false otherwise. Note, socket returned by accept() call will be always in blocking mode. So if your program can't block you should set non-blocking mode for this socket before ready() call: $socket->blocking(0). When ready() returns false value you can determine what socks handshake needs for with $SOCKS_ERROR variable. It may need for read, then $SOCKS_ERROR will be SOCKS_WANT_READ or need for write, then it will be SOCKS_WANT_WRITE. Example: use IO::Socket::Socks; use IO::Select; my $server = IO::Socket::Socks->new(ProxyAddr => 'localhost', ProxyPort => 1080, Blocking => 0) or die $@; my $select = IO::Select->new($server); $select->can_read(); # wait for client my $client = $server->accept() or die "accept(): $! ($SOCKS_ERROR)"; $client->blocking(0); # !!! $select->add($client); $select->remove($server); # no more connections while (1) { if ($client->ready) { my $command = $client->command; ... # do client command $client->command_reply(IO::Socket::Socks::REPLY_SUCCESS, $command->[1], $command->[2]); ... # transfer traffic last; } elsif ($SOCKS_ERROR == SOCKS_WANT_READ) { $select->can_read(); } elsif ($SOCKS_ERROR == SOCKS_WANT_WRITE) { $select->can_write(); } else { die "Unexpected error: $SOCKS_ERROR"; } } =head3 command( ) After you call accept() the client has sent the command they want you to process. This function should be called on the socket returned by accept(). It returns a reference to an array with the following format: [ COMMAND, ADDRESS, PORT, ADDRESS TYPE ] =head3 command_reply( REPLY CODE, ADDRESS, PORT ) After you call command() the client needs to be told what the result is. The REPLY CODE is one of the constants as follows (integer value): For socks v4 REQUEST_GRANTED(90): request granted REQUEST_FAILED(91): request rejected or failed REQUEST_REJECTED_IDENTD(92): request rejected becasue SOCKS server cannot connect to identd on the client REQUEST_REJECTED_USERID(93): request rejected because the client program and identd report different user-ids For socks v5 REPLY_SUCCESS(0): Success REPLY_GENERAL_FAILURE(1): General Failure REPLY_CONN_NOT_ALLOWED(2): Connection Not Allowed REPLY_NETWORK_UNREACHABLE(3): Network Unreachable REPLY_HOST_UNREACHABLE(4): Host Unreachable REPLY_CONN_REFUSED(5): Connection Refused REPLY_TTL_EXPIRED(6): TTL Expired REPLY_CMD_NOT_SUPPORTED(7): Command Not Supported REPLY_ADDR_NOT_SUPPORTED(8): Address Not Supported HOST and PORT are the resulting host and port that you use for the command. =head1 VARIABLES =head2 $SOCKS_ERROR This scalar behaves like $! in that if undef is returned. C<$SOCKS_ERROR> is IO::Socket::Socks::Error object with some overloaded operators. In string context this variable should contain a string reason for the error. In numeric context it contains error code. =head2 $SOCKS4_RESOLVE If this variable has true value resolving of host names will be done by proxy server, otherwise resolving will be done locally. Resolving host by socks proxy version 4 is extension to the protocol also known as socks4a. So, only socks4a proxy supports resolving of hostnames. Default value of this variable is false. This variable is not importable. See also `SocksResolve' parameter in the constructor. =head2 $SOCKS5_RESOLVE If this variable has true value resolving of host names will be done by proxy server, otherwise resolving will be done locally. Note: some bugous socks5 servers doesn't support resolving of host names. Default value is true. This variable is not importable. See also `SocksResolve' parameter in the constructor. =head2 $SOCKS_DEBUG Default value is $ENV{SOCKS_DEBUG}. If this variable has true value and no SocksDebug option in the constructor specified, then SocksDebug will has true value. This variable is not importable. =head1 CONSTANTS The following constants could be imported manually or using `:constants' tag: SOCKS5_VER SOCKS4_VER ADDR_IPV4 ADDR_DOMAINNAME ADDR_IPV6 CMD_CONNECT CMD_BIND CMD_UDPASSOC AUTHMECH_ANON AUTHMECH_USERPASS AUTHMECH_INVALID AUTHREPLY_SUCCESS AUTHREPLY_FAILURE ISS_UNKNOWN_ADDRESS ISS_BAD_VERSION REPLY_SUCCESS REPLY_GENERAL_FAILURE REPLY_CONN_NOT_ALLOWED REPLY_NETWORK_UNREACHABLE REPLY_HOST_UNREACHABLE REPLY_CONN_REFUSED REPLY_TTL_EXPIRED REPLY_CMD_NOT_SUPPORTED REPLY_ADDR_NOT_SUPPORTED REQUEST_GRANTED REQUEST_FAILED REQUEST_REJECTED_IDENTD REQUEST_REJECTED_USERID SOCKS_WANT_READ SOCKS_WANT_WRITE ESOCKSPROTO SOCKS_WANT_READ, SOCKS_WANT_WRITE and ESOCKSPROTO are imported by default. =head1 FAQ =over =item How to determine is connection to socks server (client accept) failed or some protocol error occurred? You can check $! variable. If $! == ESOCKSPROTO constant, then it was error in the protocol. Error description could be found in $SOCKS_ERROR. =item How to determine which error in the protocol occurred? You should compare C<$SOCKS_ERROR> with constants below: AUTHMECH_INVALID AUTHREPLY_FAILURE ISS_UNKNOWN_ADDRESS # address type sent by client/server not supported by I::S::S ISS_BAD_VERSION # socks version sent by client/server != specified version REPLY_GENERAL_FAILURE REPLY_CONN_NOT_ALLOWED REPLY_NETWORK_UNREACHABLE REPLY_HOST_UNREACHABLE REPLY_CONN_REFUSED REPLY_TTL_EXPIRED REPLY_CMD_NOT_SUPPORTED REPLY_ADDR_NOT_SUPPORTED REQUEST_FAILED REQUEST_REJECTED_IDENTD REQUEST_REJECTED_USERID =back =head1 BUGS The following options are not implemented: =over =item GSSAPI authentication =item UDP server side support =item IPV6 support =back Patches are welcome. =head1 SEE ALSO L =head1 AUTHOR Original author is Ryan Eatmon Now maintained by Oleg G =head1 COPYRIGHT This module is free software, you can redistribute it and/or modify it under the terms of LGPL. =cut IO-Socket-Socks-0.62/META.yml0000644000175000017500000000130411722612361014164 0ustar olegoleg--- #YAML:1.0 name: IO-Socket-Socks version: 0.62 abstract: Provides a way to create socks client or server both 4 and 5 version. author: - Oleg G license: lgpl distribution_type: module configure_requires: ExtUtils::MakeMaker: 6.52 build_requires: Test::More: 0.88 requires: constant: 1.03 IO::Select: 0 IO::Socket::INET: 0 resources: repository: https://github.com/olegwtf/p5-IO-Socket-Socks no_index: directory: - t - inc generated_by: ExtUtils::MakeMaker version 6.56 meta-spec: url: http://module-build.sourceforge.net/META-spec-v1.4.html version: 1.4 IO-Socket-Socks-0.62/t/0000755000175000017500000000000011722612361013160 5ustar olegolegIO-Socket-Socks-0.62/t/subs.pm0000644000175000017500000000634611706553405014510 0ustar olegoleguse IO::Socket::Socks qw/:constants $SOCKS_ERROR/; use IO::Socket; use IO::Select; use strict; sub make_socks_server { my ($version, $login, $password, %delay) = @_; my $serv = IO::Socket::Socks->new(Listen => 3, SocksVersion => $version, RequireAuth => ($login && $password), UserAuth => sub { $login = '' unless defined $login; $password = '' unless defined $password; $_[0] = '' unless defined $_[0]; $_[1] = '' unless defined $_[1]; return $_[0] eq $login && $_[1] eq $password; }) or die $@; my $child = fork(); die 'fork: ', $! unless defined $child; if ($child == 0) { while (1) { if ($delay{accept}) { sleep $delay{accept}; } my $client = $serv->accept() or next; my $subchild = fork(); die 'subfork: ', $! unless defined $subchild; if ($subchild == 0) { my ($cmd, $host, $port) = @{$client->command()}; if($cmd == CMD_CONNECT) { # connect my $socket = IO::Socket::INET->new(PeerHost => $host, PeerPort => $port, Timeout => 10); if ($delay{reply}) { sleep $delay{reply}; } if($socket) { # request granted $client->command_reply($version == 4 ? REQUEST_GRANTED : REPLY_SUCCESS, $socket->sockhost, $socket->sockport); } else { # request rejected or failed $client->command_reply($version == 4 ? REQUEST_FAILED : REPLY_HOST_UNREACHABLE, $host, $port); $client->close(); exit; } my $selector = IO::Select->new($socket, $client); MAIN_CONNECT: while(1) { my @ready = $selector->can_read(); foreach my $s (@ready) { my $readed = $s->sysread(my $data, 1024); unless($readed) { # error or socket closed $socket->close(); last MAIN_CONNECT; } if($s == $socket) { # return to client data readed from remote host $client->syswrite($data); } else { # return to remote host data readed from the client $socket->syswrite($data); } } } } exit; } } } return ($child, $serv->sockhost eq "0.0.0.0" ? "127.0.0.1" : $serv->sockhost, $serv->sockport); } sub make_http_server { my $serv = IO::Socket::INET->new(Listen => 3) or die $@; my $child = fork(); die 'fork: ', $! unless defined $child; if ($child == 0) { while (1) { my $client = $serv->accept() or next; my $subchild = fork(); die 'subfork: ', $! unless defined $subchild; if ($subchild == 0) { my $buf; while (1) { $client->sysread($buf, 1024, length $buf) or last; if (rindex($buf, "\015\012\015\012") != -1) { last; } } my ($path) = $buf =~ /GET\s+(\S+)/ or exit; my $response; if ($path eq '/') { $response = 'ROOT'; } elsif ($path eq '/index') { $response = 'INDEX'; } else { $response = 'UNKNOWN'; } $client->syswrite( join( "\015\012", "HTTP/1.1 200 OK", "Connection: close", "Content-Type: text/html", "\015\012" ) . $response ); exit; } } exit; } return ($child, $serv->sockhost eq "0.0.0.0" ? "127.0.0.1" : $serv->sockhost, $serv->sockport); } 1; IO-Socket-Socks-0.62/t/5_accept5.t0000644000175000017500000000415511664203151015120 0ustar olegoleg#!/usr/bin/env perl use Test::More; use IO::Socket::Socks; use IO::Select; use strict; my $server = IO::Socket::Socks->new(Listen => 10, Blocking => 0, SocksVersion => 5) or die $@; my $read_select = IO::Select->new($server); my $serveraddr = $server->sockhost eq '0.0.0.0' ? '127.0.0.1' : $server->sockhost; my $serverport = $server->sockport; my %local_clients; for (1..10) { my $client = IO::Socket::Socks->new(Blocking => 0, ProxyAddr => $serveraddr, ProxyPort => $serverport, ConnectAddr => '2gis.com', ConnectPort => 8080); ok(defined($client), "Socks 5 client non-blocking connection $_ started"); $local_clients{$client} = $client; } my $accepted = 0; my $i = 0; my %server_clients; while ($accepted != 10 && $i < 30) { $i++; if ($read_select->can_read(0.5)) { my $client = $server->accept(); $accepted++; ok($client, "Socks 5 accept() $accepted") or diag $SOCKS_ERROR; if ($client) { $client->blocking(0); $server_clients{$client} = $client; } } } is(scalar keys %server_clients, 10, "All socks 5 clients accepted"); $read_select->remove($server); my $write_select = IO::Select->new(); $i = 0; do { $i++; my @ready; if ($read_select->count() || $write_select->count()) { if ($read_select->count()) { push @ready, $read_select->can_read(0.5); } if ($write_select->count()) { push @ready, $write_select->can_write(0.5); } } else { @ready = (values %local_clients, values %server_clients); } for my $client (@ready) { $read_select->remove($client); $write_select->remove($client); if ($client->ready) { if (exists $local_clients{$client}) { delete $local_clients{$client}; } else { delete $server_clients{$client}; } } elsif ($SOCKS_ERROR == SOCKS_WANT_READ) { $read_select->add($client); } elsif ($SOCKS_ERROR == SOCKS_WANT_WRITE) { $write_select->add($client); } else { ok(0, "Socks 5 no error") or diag $SOCKS_ERROR; } } } while (%server_clients && $i < 30); $server->close(); ok(!%server_clients, "All socks 5 connections accepted properly") or diag((scalar keys %server_clients) . " connections was not completed"); done_testing(); IO-Socket-Socks-0.62/t/7_accept_nb5.t0000644000175000017500000001142011720213546015574 0ustar olegoleg#!/usr/bin/env perl package IO::Socket::Socks::Slow; use IO::Socket::Socks qw(:constants); use base 'IO::Socket::Socks'; use strict; our $DELAY = 0; *_fail = \&IO::Socket::Socks::_fail; sub _socks5_connect { my $self = shift; my $debug = IO::Socket::Socks::Debug->new() if ${*$self}->{SOCKS}->{Debug}; my ($reads, $sends, $debugs) = (0, 0, 0); my $sock = defined( ${*$self}->{SOCKS}->{TCP} ) ? ${*$self}->{SOCKS}->{TCP} : $self; my $nmethods = 0; my $methods; foreach my $method (0..$#{${*$self}->{SOCKS}->{AuthMethods}}) { if (${*$self}->{SOCKS}->{AuthMethods}->[$method] == 1) { $methods .= pack('C', $method); $nmethods++; } } my $reply; my $request = pack('CCa*', SOCKS5_VER, $nmethods, $methods); my @p = $request =~ /(..?)/g; my $sent = 0; while ($request =~ /(..?)/g) { $reply = $sock->_socks_send($1, ++$sends) or return _fail($reply); $sent += length($1); last if $sent == length($request); sleep $DELAY; } if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => SOCKS5_VER, nmethods => $nmethods, methods => join('', unpack("C$nmethods", $methods)) ); $debug->show('Client Send: '); } $reply = $sock->_socks_read(2, ++$reads) or return _fail($reply); my ($version, $auth_method) = unpack('CC', $reply); if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => $version, method => $auth_method ); $debug->show('Client Recv: '); } if ($auth_method == AUTHMECH_INVALID) { $IO::Socket::Socks::SOCKS_ERROR = $IO::Socket::Socks::CODES{AUTHMECH}->[$auth_method]; return; } return $auth_method; } package main; use Test::More; use IO::Socket::Socks; use IO::Select; use Time::HiRes; use strict; use constant CONN_CNT => 3; if( $^O eq 'MSWin32' ) { plan skip_all => 'Fork and Windows are incompatible'; } my %childs; my @pipes; my %map = ( 1 => {host => 'google.com', port => 80, request => 'wtf', response => 'googlre response'}, 2 => {host => '2gis.ru', port => 22, request => 'defined', response => 'johny'}, 3 => {host => 'academ.info', port => 110, request => 'make', response => 'segmentation fault'}, ); for my $d (1..CONN_CNT) { pipe my $reader, my $writer; push @pipes, $writer; defined (my $child = fork()) or die "fork(): $!"; if ($child == 0) { close $writer; chomp(my $servinfo = <$reader>); my ($host, $port) = split /:/, $servinfo; close $reader; $IO::Socket::Socks::Slow::DELAY = $d; my $cli = IO::Socket::Socks::Slow->new(ProxyAddr => $host, ProxyPort => $port, ConnectAddr => $map{$d}{host}, ConnectPort => $map{$d}{port}) or die $@; $cli->syswrite("$d:$map{$d}{request}") or die $!; $cli->sysread(my $buf, 1024) or die $!; $buf eq $map{$d}{response} or die "$buf != $map{$d}{response}"; exit 0; } $childs{$child} = 1; } my $server = IO::Socket::Socks->new(Blocking => 0, Listen => 10) or die $@; my $host = $server->sockhost eq "0.0.0.0" ? "127.0.0.1" : $server->sockhost; my $port = $server->sockport; print $_ "$host:$port\n" for @pipes; close $_ for @pipes; my $sel_read = IO::Select->new($server); my $sel_write = IO::Select->new(); my $conn_cnt = 0; while ($conn_cnt < CONN_CNT || $sel_read->count() > 1 || $sel_write->count() > 0) { my @ready; push @ready, $sel_read->can_read(0.3); push @ready, $sel_write->can_write(0.3); foreach my $socket (@ready) { my $start = Time::HiRes::time(); if ($socket == $server) { my $client = $server->accept(); ok($client, "New client connection") or diag $SOCKS_ERROR; $client->blocking(0); $socket = $client; $conn_cnt++; } if ($socket->ready) { $socket->command_reply(IO::Socket::Socks::REPLY_SUCCESS, '127.0.0.1', $socket->command->[2]); IO::Select->new($socket)->can_read; ok(defined $socket->sysread(my $request, 1024), "sysread() success") or diag $!; my ($d, $r) = $request =~ /(\d+):(.+)/; ok(defined $d, "Correct key") or diag $request; is($r, $map{$d}{request}, "Correct request"); is($socket->command->[1], $map{$d}{host}, "Command host ok"); is($socket->command->[2], $map{$d}{port}, "Command port ok"); ok(defined $socket->syswrite($map{$d}{response}), "syswrite() success") or diag $!; $sel_read->remove($socket); $sel_write->remove($socket); $socket->close(); } elsif ($SOCKS_ERROR == SOCKS_WANT_READ) { $sel_write->remove($socket); $sel_read->add($socket); } elsif ($SOCKS_ERROR == SOCKS_WANT_WRITE) { $sel_read->remove($socket); $sel_write->add($socket); } else { ok(0, '$SOCKS_ERROR is known') or diag $SOCKS_ERROR; } my $time_spent = Time::HiRes::time() - $start; ok($time_spent < 1, "ready() not blocked") or diag "$time_spent sec spent"; } } while (%childs) { my $child = wait(); is($?, 0, "Client $child finished successfully"); delete $childs{$child}; } done_testing(); IO-Socket-Socks-0.62/t/4_accept4.t0000644000175000017500000000427011720200174015107 0ustar olegoleg#!/usr/bin/env perl use Test::More; use IO::Socket::Socks; use IO::Select; use strict; my $server = IO::Socket::Socks->new(Listen => 10, Blocking => 0, SocksVersion => 4) or die $@; my $read_select = IO::Select->new($server); my $serveraddr = $server->sockhost eq '0.0.0.0' ? '127.0.0.1' : $server->sockhost; my $serverport = $server->sockport; my %local_clients; for (1..10) { my $client = IO::Socket::Socks->new(Blocking => 0, ProxyAddr => $serveraddr, ProxyPort => $serverport, ConnectAddr => '2gis.com', ConnectPort => 8080, SocksVersion => 4, SocksResolve => 1); ok(defined($client), "Socks 4 client non-blocking connection $_ started"); $local_clients{$client} = $client; } my $accepted = 0; my $i = 0; my %server_clients; while ($accepted != 10 && $i < 30) { $i++; if ($read_select->can_read(0.5)) { my $client = $server->accept(); $accepted++; ok($client, "Socks 4 accept() $accepted") or diag $SOCKS_ERROR; if ($client) { $client->blocking(0); $server_clients{$client} = $client; } } } is(scalar keys %server_clients, 10, "All socks 4 clients accepted"); $read_select->remove($server); my $write_select = IO::Select->new(); $i = 0; do { $i++; my @ready; if ($read_select->count() || $write_select->count()) { if ($read_select->count()) { push @ready, $read_select->can_read(0.5); } if ($write_select->count()) { push @ready, $write_select->can_write(0.5); } } else { @ready = (values %local_clients, values %server_clients); } for my $client (@ready) { $read_select->remove($client); $write_select->remove($client); if ($client->ready) { if (exists $local_clients{$client}) { delete $local_clients{$client}; } else { delete $server_clients{$client}; } } elsif ($SOCKS_ERROR == SOCKS_WANT_READ) { $read_select->add($client); } elsif ($SOCKS_ERROR == SOCKS_WANT_WRITE) { $write_select->add($client); } else { ok(0, "Socks 4 no error") or diag $SOCKS_ERROR; } } } while (%server_clients && $i < 30); $server->close(); ok(!%server_clients, "All socks 4 connections accepted properly") or diag((scalar keys %server_clients) . " connections was not completed"); done_testing(); IO-Socket-Socks-0.62/t/3_conect.t0000644000175000017500000001123111722445133015041 0ustar olegoleg#!/usr/bin/env perl use Test::More; use IO::Socket::Socks; use IO::Select; use Time::HiRes 'time'; use strict; require 't/subs.pm'; if( $^O eq 'MSWin32' ) { plan skip_all => 'Fork and Windows are incompatible'; } my ($s_pid, $s_host, $s_port) = make_socks_server(4); my ($h_pid, $h_host, $h_port) = make_http_server(); my $sock = IO::Socket::Socks->new( SocksVersion => 4, ProxyAddr => $s_host, ProxyPort => $s_port, ConnectAddr => $h_host, ConnectPort => $h_port ); ok(defined($sock), 'Socks 4 connect') or diag $SOCKS_ERROR; kill 15, $s_pid; ($s_pid, $s_host, $s_port) = make_socks_server(5); $sock = IO::Socket::Socks->new( SocksVersion => 5, ProxyAddr => $s_host, ProxyPort => $s_port, ConnectAddr => $h_host, ConnectPort => $h_port ); ok(defined($sock), 'Socks 5 connect') or diag $SOCKS_ERROR; kill 15, $s_pid; ($s_pid, $s_host, $s_port) = make_socks_server(5, 'root', 'toor'); $sock = IO::Socket::Socks->new( SocksVersion => 5, ProxyAddr => $s_host, ProxyPort => $s_port, ConnectAddr => $h_host, ConnectPort => $h_port, Username => 'root', Password => 'toor', AuthType => 'userpass' ); ok(defined($sock), 'Socks 5 connect with auth') or diag $SOCKS_ERROR; $sock = IO::Socket::Socks->new( SocksVersion => 5, ProxyAddr => $s_host, ProxyPort => $s_port, ConnectAddr => $h_host, ConnectPort => $h_port, Username => 'root', Password => '123', AuthType => 'userpass' ) or my $error = int($!); # save it _immediately_ after fail ok(!defined($sock), 'Socks 5 connect with auth and incorrect password'); ok($error == ESOCKSPROTO, '$! == ESOCKSPROTO') or diag $error, "!=", ESOCKSPROTO; ok($SOCKS_ERROR == IO::Socket::Socks::AUTHREPLY_FAILURE, '$SOCKS_ERROR == AUTHREPLY_FAILURE') or diag int($SOCKS_ERROR), "!=", IO::Socket::Socks::AUTHREPLY_FAILURE; kill 15, $s_pid; ($s_pid, $s_host, $s_port) = make_socks_server(4, undef, undef, accept => 3, reply => 2); my $start = time(); $sock = IO::Socket::Socks->new( SocksVersion => 4, ProxyAddr => $s_host, ProxyPort => $s_port, ConnectAddr => $h_host, ConnectPort => $h_port ); ok(defined($sock), 'Socks 4 blocking connect success'); $start = time(); $sock = IO::Socket::Socks->new( SocksVersion => 4, ProxyAddr => $s_host, ProxyPort => $s_port, ConnectAddr => $h_host, ConnectPort => $h_port, Blocking => 0 ); ok(defined($sock), 'Socks 4 non-blocking connect success'); my $time_spent = time()-$start; ok($time_spent < 3, 'Socks 4 non-blocking connect time') or diag "$time_spent sec spent"; my $sel = IO::Select->new($sock); my $i = 0; $start = time(); until ($sock->ready) { $i++; $time_spent = time()-$start; ok($time_spent < 1, "Connection attempt $i not blocked") or diag "$time_spent sec spent"; if ($SOCKS_ERROR == SOCKS_WANT_READ) { $sel->can_read(0.8); } elsif ($SOCKS_ERROR == SOCKS_WANT_WRITE) { $sel->can_write(0.8); } else { last; } $start = time(); } ok($sock->ready, 'Socks 4 non-blocking socket ready') or diag $SOCKS_ERROR; kill 15, $s_pid; ($s_pid, $s_host, $s_port) = make_socks_server(5, 'root', 'toor', accept => 3, reply => 2); $start = time(); $sock = IO::Socket::Socks->new( SocksVersion => 5, ProxyAddr => $s_host, ProxyPort => $s_port, ConnectAddr => $h_host, ConnectPort => $h_port, Username => 'root', Password => 'toor', AuthType => 'userpass', Blocking => 0 ); ok(defined($sock), 'Socks 5 non-blocking connect success'); $time_spent = time()-$start; ok($time_spent < 3, 'Socks 5 non-blocking connect time') or diag "$time_spent sec spent"; $sel = IO::Select->new($sock); $i = 0; $start = time(); until ($sock->ready) { $i++; $time_spent = time()-$start; ok($time_spent < 1, "Connection attempt $i not blocked") or diag "$time_spent sec spent"; if ($SOCKS_ERROR == SOCKS_WANT_READ) { $sel->can_read(0.8); } elsif ($SOCKS_ERROR == SOCKS_WANT_WRITE) { $sel->can_write(0.8); } else { last; } $start = time(); } ok($sock->ready, 'Socks 5 non-blocking socket ready') or diag $SOCKS_ERROR; $sock = IO::Socket::Socks->new( SocksVersion => 5, ProxyAddr => $s_host, ProxyPort => $s_port, ConnectAddr => $h_host, ConnectPort => $h_port, Username => 'root', Password => 'toot', AuthType => 'userpass', Blocking => 0 ); if (defined $sock) { $sel = IO::Select->new($sock); $i = 0; $start = time(); until ($sock->ready) { $i++; $time_spent = time()-$start; ok($time_spent < 1, "Connection attempt $i not blocked") or diag "$time_spent sec spent"; if ($SOCKS_ERROR == SOCKS_WANT_READ) { $sel->can_read(0.8); } elsif ($SOCKS_ERROR == SOCKS_WANT_WRITE) { $sel->can_write(0.8); } else { last; } $start = time(); } ok(!$sock->ready, 'Socks 5 non-blocking connect with fail auth'); } else { pass('Socks 5 non-blocking connect with fail auth (immediatly)'); } kill 15, $s_pid; kill 15, $h_pid; done_testing(); IO-Socket-Socks-0.62/t/1_load.t0000644000175000017500000000010311575067703014510 0ustar olegoleguse Test::More tests=>1; BEGIN{ use_ok( "IO::Socket::Socks" ); } IO-Socket-Socks-0.62/t/2_new.t0000644000175000017500000000025611575067703014374 0ustar olegoleguse Test::More tests=>3; BEGIN{ use_ok( "IO::Socket::Socks" ); } my $socks = new IO::Socket::Socks(); ok( defined($socks), "new()"); isa_ok( $socks, "IO::Socket::Socks"); IO-Socket-Socks-0.62/t/6_accept_nb4.t0000644000175000017500000001126011720213661015572 0ustar olegoleg#!/usr/bin/env perl package IO::Socket::Socks::Slow; use Socket; use IO::Socket::Socks qw(:constants); use base 'IO::Socket::Socks'; use strict; our $DELAY = 0; *_fail = \&IO::Socket::Socks::_fail; sub _socks4_connect_command { my $self = shift; my $command = shift; my $debug = IO::Socket::Socks::Debug->new() if ${*$self}->{SOCKS}->{Debug}; my ($reads, $sends, $debugs) = (0, 0, 0); my $resolve = defined(${*$self}->{SOCKS}->{Resolve}) ? ${*$self}->{SOCKS}->{Resolve} : $IO::Socket::Socks::SOCKS4_RESOLVE; my $dstaddr = $resolve ? inet_aton('0.0.0.1') : inet_aton(${*$self}->{SOCKS}->{CmdAddr}); my $dstport = pack('n', ${*$self}->{SOCKS}->{CmdPort}); my $userid = ${*$self}->{SOCKS}->{Username} || ''; my $dsthost = ''; if($resolve) { # socks4a $dsthost = ${*$self}->{SOCKS}->{CmdAddr} . pack('C', 0); } my $reply; my $request = pack('CC', SOCKS4_VER, $command) . $dstport . $dstaddr . $userid . pack('C', 0) . $dsthost; my $sent = 0; while ($request =~ /(..{0,3})/g) { $reply = $self->_socks_send($1, ++$sends) or return _fail($reply); $sent += length($1); last if $sent == length($request); sleep $DELAY; } if($debug && !$self->_debugged(++$debugs)) { $debug->add( ver => SOCKS4_VER, cmd => $command, dstport => ${*$self}->{SOCKS}->{CmdPort}, dstaddr => length($dstaddr) == 4 ? inet_ntoa($dstaddr) : undef, userid => $userid, null => 0 ); if($dsthost) { $debug->add( dsthost => ${*$self}->{SOCKS}->{CmdAddr}, null => 0 ); } $debug->show('Client Send: '); } return 1; } package main; use Test::More; use IO::Socket::Socks; use IO::Select; use Time::HiRes; use strict; use constant CONN_CNT => 3; if( $^O eq 'MSWin32' ) { plan skip_all => 'Fork and Windows are incompatible'; } my %childs; my @pipes; my %map = ( 1 => {host => 'google.com', port => 80, request => 'wtf', response => 'googlre response'}, 2 => {host => '2gis.ru', port => 22, request => 'defined', response => 'johny'}, 3 => {host => 'academ.info', port => 110, request => 'make', response => 'segmentation fault'}, ); for my $d (1..CONN_CNT) { pipe my $reader, my $writer; push @pipes, $writer; defined (my $child = fork()) or die "fork(): $!"; if ($child == 0) { close $writer; chomp(my $servinfo = <$reader>); my ($host, $port) = split /:/, $servinfo; close $reader; $IO::Socket::Socks::Slow::DELAY = $d; my $cli = IO::Socket::Socks::Slow->new(ProxyAddr => $host, ProxyPort => $port, ConnectAddr => $map{$d}{host}, ConnectPort => $map{$d}{port}, SocksVersion => 4, SocksResolve => 1) or die $@; $cli->syswrite("$d:$map{$d}{request}") or die $!; $cli->sysread(my $buf, 1024) or die $!; $buf eq $map{$d}{response} or die "$buf != $map{$d}{response}"; exit 0; } $childs{$child} = 1; } my $server = IO::Socket::Socks->new(Blocking => 0, Listen => 10, SocksVersion => 4, SocksResolve => 1) or die $@; my $host = $server->sockhost eq "0.0.0.0" ? "127.0.0.1" : $server->sockhost; my $port = $server->sockport; print $_ "$host:$port\n" for @pipes; close $_ for @pipes; my $sel_read = IO::Select->new($server); my $sel_write = IO::Select->new(); my $conn_cnt = 0; while ($conn_cnt < CONN_CNT || $sel_read->count() > 1 || $sel_write->count() > 0) { my @ready; push @ready, $sel_read->can_read(0.3); push @ready, $sel_write->can_write(0.3); foreach my $socket (@ready) { my $start = Time::HiRes::time(); if ($socket == $server) { my $client = $server->accept(); ok($client, "New client connection") or diag $SOCKS_ERROR; $client->blocking(0); $socket = $client; $conn_cnt++; } if ($socket->ready) { $socket->command_reply(IO::Socket::Socks::REQUEST_GRANTED, '127.0.0.1', $socket->command->[2]); IO::Select->new($socket)->can_read; ok(defined $socket->sysread(my $request, 1024), "sysread() success") or diag $!; my ($d, $r) = $request =~ /(\d+):(.+)/; ok(defined $d, "Correct key") or diag $request; is($r, $map{$d}{request}, "Correct request"); ok(defined $socket->syswrite($map{$d}{response}), "syswrite() success") or diag $!; $sel_read->remove($socket); $sel_write->remove($socket); $socket->close(); } elsif ($SOCKS_ERROR == SOCKS_WANT_READ) { $sel_write->remove($socket); $sel_read->add($socket); } elsif ($SOCKS_ERROR == SOCKS_WANT_WRITE) { $sel_read->remove($socket); $sel_write->add($socket); } else { ok(0, '$SOCKS_ERROR is known') or diag $SOCKS_ERROR; } my $res = Time::HiRes::time() - $start; ok($res < 1, "ready() not blocked") or diag "$res sec spent"; } } while (%childs) { my $child = wait(); is($?, 0, "Client $child finished successfully"); delete $childs{$child}; } done_testing(); IO-Socket-Socks-0.62/examples/0000755000175000017500000000000011722612361014533 5ustar olegolegIO-Socket-Socks-0.62/examples/bind.pl0000755000175000017500000000316211575067703016023 0ustar olegoleg#!/usr/bin/env perl use lib '../lib'; use IO::Socket::Socks; use strict; # example of using socks bind with FTP active data connection use constant { FTP_HOST => 'host.net', FTP_PORT => 21, FTP_USER => 'root', FTP_PASS => 'lsdadp', SOCKS_HOST => '195.190.0.20', SOCKS_PORT => 1080 }; # create control connection my $primary = IO::Socket::Socks->new( ConnectAddr => FTP_HOST, ConnectPort => FTP_PORT, ProxyAddr => SOCKS_HOST, ProxyPort => SOCKS_PORT, SocksVersion => 5, SocksDebug => 1, Timeout => 30 ) or die $SOCKS_ERROR; # create data connection my $secondary = IO::Socket::Socks->new( BindAddr => FTP_HOST, BindPort => FTP_PORT, ProxyAddr => SOCKS_HOST, ProxyPort => SOCKS_PORT, SocksVersion => 5, SocksDebug => 1, Timeout => 30 ) or die $SOCKS_ERROR; # login to ftp $primary->syswrite("USER ". FTP_USER ."\015\012"); $primary->getline(); $primary->syswrite("PASS ". FTP_PASS ."\015\012"); $primary->getline(); # get address where socks bind and pass it to the ftp server my ($host, $port) = $secondary->dst(); $host = SOCKS_HOST if $host eq '0.0.0.0'; # RFC says that if host == '0.0.0.0' it means that it should be replaced by socks host $primary->syswrite("PORT " . join(',', split (/\./, $host), (map hex, sprintf("%04x", $port) =~ /(..)(..)/)) . "\015\012"); $primary->getline(); $primary->syswrite("LIST /\015\012"); $primary->getline(); # wait connection from ftp server $secondary->accept() or die $SOCKS_ERROR; # print all data received from ftp server print while <$secondary>; # close all connections $secondary->close(); $primary->close(); IO-Socket-Socks-0.62/examples/chain.pl0000755000175000017500000000447311704317041016162 0ustar olegoleguse lib '../lib'; use IO::Socket::Socks; use strict; # connect to www.google.com via socks chain my @chain = ( {ProxyAddr => '10.0.0.1', ProxyPort => 1080, SocksVersion => 4, SocksDebug => 1}, {ProxyAddr => '10.0.0.2', ProxyPort => 1080, SocksVersion => 4, SocksDebug => 1}, {ProxyAddr => '10.0.0.3', ProxyPort => 1080, SocksVersion => 5, SocksDebug => 1}, {ProxyAddr => '10.0.0.4', ProxyPort => 1080, SocksVersion => 4, SocksDebug => 1}, {ProxyAddr => '10.0.0.5', ProxyPort => 1080, SocksVersion => 5, SocksDebug => 1}, {ProxyAddr => '10.0.0.6', ProxyPort => 1080, SocksVersion => 4, SocksDebug => 1}, ); my $dst = {ConnectAddr => 'www.google.com', ConnectPort => 80}; my $sock; my $len; TRY: while(@chain) { for(my $i=0, $len = 0; $i<@chain; $i++) { unless($len) { $sock = IO::Socket::Socks->new( %{$chain[$i]}, Timeout => 10, $#chain != $i ? (ConnectAddr => $chain[$i+1]->{ProxyAddr}, ConnectPort => $chain[$i+1]->{ProxyPort}) : %$dst ); if($sock) { $len++; } elsif($! != ESOCKSPROTO) { # connection to proxy failed shift @chain; next TRY; } else { splice @chain, 0, 2; next TRY; } } else { my $st = $sock->command( %{$chain[$i]}, $#chain != $i ? (ConnectAddr => $chain[$i+1]->{ProxyAddr}, ConnectPort => $chain[$i+1]->{ProxyPort}) : %$dst ); if($st) { $len++; } else { # on fail we don't know which of the two links broken # so, remove both from the chain splice @chain, $i, 2; # if one of the link in the chain is broken we should # try to build chain from the beginning next TRY; } } } last; } unless($sock) { die('Bad chain'); } else { warn("chain length is $len"); } $sock->syswrite ( "GET / HTTP/1.0\015\012". "Host: www.google.com\015\012\015\012" ); while($sock->sysread(my $buf, 1024)) { print $buf; } IO-Socket-Socks-0.62/examples/client4.pl0000755000175000017500000000205311575067703016447 0ustar olegoleg#!/usr/bin/env perl # Simple socks4 client # gets google.com main page # implemented with IO::Socket::Socks use lib '../lib'; use strict; use IO::Socket::Socks; # uncomment line below if you want to use socks4a #$IO::Socket::Socks::SOCKS4_RESOLVE = 1; my $socks = new IO::Socket::Socks(ProxyAddr=>"127.0.0.1", ProxyPort=>"1080", ConnectAddr=>"www.google.com", ConnectPort=>80, Username=>"oleg", # most socks4 servers doesn't needs userid, you can comment this SocksDebug=>1, # comment this if you are not interested in the debug information SocksVersion => 4, # default is 5 Timeout=>10, ) or die $SOCKS_ERROR; $socks->syswrite ( "GET / HTTP/1.0\015\012". "Host: www.google.com\015\012\015\012" ); while($socks->sysread(my $buf, 1024)) { print $buf; } # tested with server4.pl IO-Socket-Socks-0.62/examples/server4.pl0000755000175000017500000001166611575067703016511 0ustar olegoleg#!/usr/bin/env perl # Simple socks4 server # implemented with IO::Socket::Socks module use lib '../lib'; use IO::Socket::Socks qw(:constants $SOCKS_ERROR); use IO::Select; use strict; # allow socks4a protocol extension $IO::Socket::Socks::SOCKS4_RESOLVE = 1; # create socks server my $server = IO::Socket::Socks->new(SocksVersion => 4, SocksDebug => 1, ProxyAddr => 'localhost', ProxyPort => 1080, Listen => 10) or die $SOCKS_ERROR; # accept connections while() { my $client = $server->accept(); if($client) { my ($cmd, $host, $port) = @{$client->command()}; if($cmd == CMD_CONNECT) { # connect # create socket with requested host my $socket = IO::Socket::INET->new(PeerHost => $host, PeerPort => $port, Timeout => 10); if($socket) { # request granted $client->command_reply(REQUEST_GRANTED, $socket->sockhost, $socket->sockport); } else { # request rejected or failed $client->command_reply(REQUEST_FAILED, $host, $port); $client->close(); next; } my $selector = IO::Select->new($socket, $client); MAIN_CONNECT: while() { my @ready = $selector->can_read(); foreach my $s (@ready) { my $readed = $s->sysread(my $data, 1024); unless($readed) { # error or socket closed warn 'connection closed'; $socket->close(); last MAIN_CONNECT; } if($s == $socket) { # return to client data readed from remote host $client->syswrite($data); } else { # return to remote host data readed from the client $socket->syswrite($data); } } } } elsif($cmd == CMD_BIND) { # bind # create listen socket my $socket = IO::Socket::INET->new(Listen => 10); if($socket) { # request granted $client->command_reply(REQUEST_GRANTED, $socket->sockhost, $socket->sockport); } else { # request rejected or failed $client->command_reply(REQUEST_FAILED, $host, $port); $client->close(); next; } while() { # accept new connection needed proxifycation my $conn = $socket->accept() or next; $socket->close(); if($conn->peerhost ne join('.', unpack('C4', (gethostbyname($host))[4]))) { # connected host should be same as specified in the client bind request last; } $client->command_reply(REQUEST_GRANTED, $conn->peerhost, $conn->peerport); my $selector = IO::Select->new($conn, $client); MAIN_BIND: while() { my @ready = $selector->can_read(); foreach my $s (@ready) { my $readed = $s->sysread(my $data, 1024); unless($readed) { # error or socket closed warn 'connection closed'; $conn->close(); last MAIN_BIND; } if($s == $conn) { # return to client data readed from remote host $client->syswrite($data); } else { # return to remote host data readed from the client $conn->syswrite($data); } } } last; } } else { warn 'Unknown command'; } $client->close(); } else { warn $SOCKS_ERROR; } } sub auth { # add `UserAuth => \&auth' to the server constructor if you want to authenticate user by its id my $userid = shift; my %allowed_users = (root => 1, oleg => 1, ryan => 1); return exists($allowed_users{$userid}); } # tested with `curl --socks4' and `curl --socks4a' IO-Socket-Socks-0.62/examples/client5.pl0000755000175000017500000000244711575067703016457 0ustar olegoleg#!/usr/bin/env perl # Simple socks5 client # gets google.com main page # implemented with IO::Socket::Socks use lib '../lib'; use strict; use IO::Socket::Socks; # uncomment line below if you want to resolve hostnames locally #$IO::Socket::Socks::SOCKS5_RESOLVE = 0; my $socks = new IO::Socket::Socks(ProxyAddr=>"127.0.0.1", ProxyPort=>"1080", ConnectAddr=>"www.google.com", ConnectPort=>80, # uncomment lines below if you want to use authentication #Username=>"oleg", #Password=>"321", #AuthType=>"userpass", # uncomment line below if you want client not to send anonymous as supported method #RequireAuth=>1, SocksDebug=>1, # comment this if you are not interested in the debug information Timeout=>10, ) or die $SOCKS_ERROR; $socks->syswrite ( "GET / HTTP/1.0\015\012". "Host: www.google.com\015\012\015\012" ); while($socks->sysread(my $buf, 1024)) { print $buf; } # tested with server5.pl IO-Socket-Socks-0.62/examples/server5.pl0000755000175000017500000001230411575067703016500 0ustar olegoleg#!/usr/bin/env perl use lib '../lib'; use IO::Socket::Socks qw(:constants $SOCKS_ERROR); use IO::Select; use strict; # return bind address as ip address like most socks5 proxyes does $IO::Socket::Socks::SOCKS5_RESOLVE = 1; # create socks server my $server = IO::Socket::Socks->new(SocksVersion => 5, SocksDebug => 1, ProxyAddr => 'localhost', ProxyPort => 1080, Listen => 10) or die $SOCKS_ERROR; # accept connections while() { my $client = $server->accept(); if($client) { my ($cmd, $host, $port) = @{$client->command()}; if($cmd == CMD_CONNECT) { # connect # create socket with requested host my $socket = IO::Socket::INET->new(PeerHost => $host, PeerPort => $port, Timeout => 10); if($socket) { # success $client->command_reply(REPLY_SUCCESS, $socket->sockhost, $socket->sockport); } else { # Host Unreachable $client->command_reply(REPLY_HOST_UNREACHABLE, $host, $port); $client->close(); next; } my $selector = IO::Select->new($socket, $client); MAIN_CONNECT: while() { my @ready = $selector->can_read(); foreach my $s (@ready) { my $readed = $s->sysread(my $data, 1024); unless($readed) { # error or socket closed warn 'connection closed'; $socket->close(); last MAIN_CONNECT; } if($s == $socket) { # return to client data readed from remote host $client->syswrite($data); } else { # return to remote host data readed from the client $socket->syswrite($data); } } } } elsif($cmd == CMD_BIND) { # bind # create listen socket my $socket = IO::Socket::INET->new(Listen => 10); if($socket) { # success $client->command_reply(REPLY_SUCCESS, $socket->sockhost, $socket->sockport); } else { # request rejected or failed $client->command_reply(REPLY_HOST_UNREACHABLE, $host, $port); $client->close(); next; } while() { # accept new connection needed proxifycation my $conn = $socket->accept() or next; $socket->close(); if($conn->peerhost ne join('.', unpack('C4', (gethostbyname($host))[4]))) { # connected host should be same as specified in the client bind request last; } $client->command_reply(REPLY_SUCCESS, $conn->peerhost, $conn->peerport); my $selector = IO::Select->new($conn, $client); MAIN_BIND: while() { my @ready = $selector->can_read(); foreach my $s (@ready) { my $readed = $s->sysread(my $data, 1024); unless($readed) { # error or socket closed warn 'connection closed'; $conn->close(); last MAIN_BIND; } if($s == $conn) { # return to client data readed from remote host $client->syswrite($data); } else { # return to remote host data readed from the client $conn->syswrite($data); } } } last; } } elsif($cmd == CMD_UDPASSOC) { # UDP associate # who really need it? # you could send me a patch warn 'UDP assoc: not implemented'; $client->command_reply(REPLY_GENERAL_FAILURE, $host, $port); } else { warn 'Unknown command'; } $client->close(); } else { warn $SOCKS_ERROR; } } sub auth { # add `UserAuth => \&auth, RequireAuth => 1' to the server constructor if you want to authenticate user by login and password my $login = shift; my $password = shift; my %allowed_users = (root => 123, oleg => 321, ryan => 213); return $allowed_users{$login} eq $password; } # tested with `curl --socks5' IO-Socket-Socks-0.62/examples/udp.pl0000755000175000017500000000072011575067703015674 0ustar olegoleg#!/usr/bin/env perl use lib '../lib'; use IO::Socket::Socks; use Socket; use strict; # daytime UDP client my $sock = IO::Socket::Socks->new( UdpAddr => 'localhost', UdpPort => 8344, ProxyAddr => 'localhost', ProxyPort => 1080, SocksDebug => 1 ) or die $SOCKS_ERROR; my $peer = inet_aton('localhost'); $peer = sockaddr_in(13, $peer); $sock->send('!', 0, $peer) or die $!; $sock->recv(my $data, 50) or die $!; $sock->close(); print $data; IO-Socket-Socks-0.62/LICENSE.LGPL0000644000175000017500000006143711575067703014504 0ustar olegoleg GNU LIBRARY GENERAL PUBLIC LICENSE Version 2, June 1991 Copyright (C) 1991 Free Software Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. [This is the first released version of the library GPL. It is numbered 2 because it goes with version 2 of the ordinary GPL.] Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public Licenses are intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This license, the Library General Public License, applies to some specially designated Free Software Foundation software, and to any other libraries whose authors decide to use it. You can use it for your libraries, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs; and that you know you can do these things. To protect your rights, we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights. These restrictions translate to certain responsibilities for you if you distribute copies of the library, or if you modify it. For example, if you distribute copies of the library, whether gratis or for a fee, you must give the recipients all the rights that we gave you. You must make sure that they, too, receive or can get the source code. If you link a program with the library, you must provide complete object files to the recipients so that they can relink them with the library, after making changes to the library and recompiling it. And you must show them these terms so they know their rights. Our method of protecting your rights has two steps: (1) copyright the library, and (2) offer you this license which gives you legal permission to copy, distribute and/or modify the library. Also, for each distributor's protection, we want to make certain that everyone understands that there is no warranty for this free library. If the library is modified by someone else and passed on, we want its recipients to know that what they have is not the original version, so that any problems introduced by others will not reflect on the original authors' reputations. Finally, any free program is threatened constantly by software patents. We wish to avoid the danger that companies distributing free software will individually obtain patent licenses, thus in effect transforming the program into proprietary software. To prevent this, we have made it clear that any patent must be licensed for everyone's free use or not licensed at all. Most GNU software, including some libraries, is covered by the ordinary GNU General Public License, which was designed for utility programs. This license, the GNU Library General Public License, applies to certain designated libraries. This license is quite different from the ordinary one; be sure to read it in full, and don't assume that anything in it is the same as in the ordinary license. The reason we have a separate public license for some libraries is that they blur the distinction we usually make between modifying or adding to a program and simply using it. Linking a program with a library, without changing the library, is in some sense simply using the library, and is analogous to running a utility program or application program. However, in a textual and legal sense, the linked executable is a combined work, a derivative of the original library, and the ordinary General Public License treats it as such. Because of this blurred distinction, using the ordinary General Public License for libraries did not effectively promote software sharing, because most developers did not use the libraries. We concluded that weaker conditions might promote sharing better. However, unrestricted linking of non-free programs would deprive the users of those programs of all benefit from the free status of the libraries themselves. This Library General Public License is intended to permit developers of non-free programs to use free libraries, while preserving your freedom as a user of such programs to change the free libraries that are incorporated in them. (We have not seen how to achieve this as regards changes in header files, but we have achieved it as regards changes in the actual functions of the Library.) The hope is that this will lead to faster development of free libraries. The precise terms and conditions for copying, distribution and modification follow. Pay close attention to the difference between a "work based on the library" and a "work that uses the library". The former contains code derived from the library, while the latter only works together with the library. Note that it is possible for a library to be covered by the ordinary General Public License rather than by this special one. GNU LIBRARY GENERAL PUBLIC LICENSE TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 0. This License Agreement applies to any software library which contains a notice placed by the copyright holder or other authorized party saying it may be distributed under the terms of this Library General Public License (also called "this License"). Each licensee is addressed as "you". A "library" means a collection of software functions and/or data prepared so as to be conveniently linked with application programs (which use some of those functions and data) to form executables. The "Library", below, refers to any such software library or work which has been distributed under these terms. A "work based on the Library" means either the Library or any derivative work under copyright law: that is to say, a work containing the Library or a portion of it, either verbatim or with modifications and/or translated straightforwardly into another language. (Hereinafter, translation is included without limitation in the term "modification".) "Source code" for a work means the preferred form of the work for making modifications to it. For a library, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the library. Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running a program using the Library is not restricted, and output from such a program is covered only if its contents constitute a work based on the Library (independent of the use of the Library in a tool for writing it). Whether that is true depends on what the Library does and what the program that uses the Library does. 1. You may copy and distribute verbatim copies of the Library's complete source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and distribute a copy of this License along with the Library. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. 2. You may modify your copy or copies of the Library or any portion of it, thus forming a work based on the Library, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions: a) The modified work must itself be a software library. b) You must cause the files modified to carry prominent notices stating that you changed the files and the date of any change. c) You must cause the whole of the work to be licensed at no charge to all third parties under the terms of this License. d) If a facility in the modified Library refers to a function or a table of data to be supplied by an application program that uses the facility, other than as an argument passed when the facility is invoked, then you must make a good faith effort to ensure that, in the event an application does not supply such function or table, the facility still operates, and performs whatever part of its purpose remains meaningful. (For example, a function in a library to compute square roots has a purpose that is entirely well-defined independent of the application. Therefore, Subsection 2d requires that any application-supplied function or table used by this function must be optional: if the application does not supply it, the square root function must still compute square roots.) These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Library, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Library, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it. Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Library. In addition, mere aggregation of another work not based on the Library with the Library (or with a work based on the Library) on a volume of a storage or distribution medium does not bring the other work under the scope of this License. 3. You may opt to apply the terms of the ordinary GNU General Public License instead of this License to a given copy of the Library. To do this, you must alter all the notices that refer to this License, so that they refer to the ordinary GNU General Public License, version 2, instead of to this License. (If a newer version than version 2 of the ordinary GNU General Public License has appeared, then you can specify that version instead if you wish.) Do not make any other change in these notices. Once this change is made in a given copy, it is irreversible for that copy, so the ordinary GNU General Public License applies to all subsequent copies and derivative works made from that copy. This option is useful when you wish to copy part of the code of the Library into a program that is not a library. 4. You may copy and distribute the Library (or a portion or derivative of it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange. If distribution of object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place satisfies the requirement to distribute the source code, even though third parties are not compelled to copy the source along with the object code. 5. A program that contains no derivative of any portion of the Library, but is designed to work with the Library by being compiled or linked with it, is called a "work that uses the Library". Such a work, in isolation, is not a derivative work of the Library, and therefore falls outside the scope of this License. However, linking a "work that uses the Library" with the Library creates an executable that is a derivative of the Library (because it contains portions of the Library), rather than a "work that uses the library". The executable is therefore covered by this License. Section 6 states terms for distribution of such executables. When a "work that uses the Library" uses material from a header file that is part of the Library, the object code for the work may be a derivative work of the Library even though the source code is not. Whether this is true is especially significant if the work can be linked without the Library, or if the work is itself a library. The threshold for this to be true is not precisely defined by law. If such an object file uses only numerical parameters, data structure layouts and accessors, and small macros and small inline functions (ten lines or less in length), then the use of the object file is unrestricted, regardless of whether it is legally a derivative work. (Executables containing this object code plus portions of the Library will still fall under Section 6.) Otherwise, if the work is a derivative of the Library, you may distribute the object code for the work under the terms of Section 6. Any executables containing that work also fall under Section 6, whether or not they are linked directly with the Library itself. 6. As an exception to the Sections above, you may also compile or link a "work that uses the Library" with the Library to produce a work containing portions of the Library, and distribute that work under terms of your choice, provided that the terms permit modification of the work for the customer's own use and reverse engineering for debugging such modifications. You must give prominent notice with each copy of the work that the Library is used in it and that the Library and its use are covered by this License. You must supply a copy of this License. If the work during execution displays copyright notices, you must include the copyright notice for the Library among them, as well as a reference directing the user to the copy of this License. Also, you must do one of these things: a) Accompany the work with the complete corresponding machine-readable source code for the Library including whatever changes were used in the work (which must be distributed under Sections 1 and 2 above); and, if the work is an executable linked with the Library, with the complete machine-readable "work that uses the Library", as object code and/or source code, so that the user can modify the Library and then relink to produce a modified executable containing the modified Library. (It is understood that the user who changes the contents of definitions files in the Library will not necessarily be able to recompile the application to use the modified definitions.) b) Accompany the work with a written offer, valid for at least three years, to give the same user the materials specified in Subsection 6a, above, for a charge no more than the cost of performing this distribution. c) If distribution of the work is made by offering access to copy from a designated place, offer equivalent access to copy the above specified materials from the same place. d) Verify that the user has already received a copy of these materials or that you have already sent this user a copy. For an executable, the required form of the "work that uses the Library" must include any data and utility programs needed for reproducing the executable from it. However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable. It may happen that this requirement contradicts the license restrictions of other proprietary libraries that do not normally accompany the operating system. Such a contradiction means you cannot use both them and the Library together in an executable that you distribute. 7. You may place library facilities that are a work based on the Library side-by-side in a single library together with other library facilities not covered by this License, and distribute such a combined library, provided that the separate distribution of the work based on the Library and of the other library facilities is otherwise permitted, and provided that you do these two things: a) Accompany the combined library with a copy of the same work based on the Library, uncombined with any other library facilities. This must be distributed under the terms of the Sections above. b) Give prominent notice with the combined library of the fact that part of it is a work based on the Library, and explaining where to find the accompanying uncombined form of the same work. 8. You may not copy, modify, sublicense, link with, or distribute the Library except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense, link with, or distribute the Library is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance. 9. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Library or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Library (or any work based on the Library), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Library or works based on it. 10. Each time you redistribute the Library (or any work based on the Library), the recipient automatically receives a license from the original licensor to copy, distribute, link with or modify the Library subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to this License. 11. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribute the Library at all. For example, if a patent license would not permit royalty-free redistribution of the Library by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Library. If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply, and the section as a whole is intended to apply in other circumstances. It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice. This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. 12. If the distribution and/or use of the Library is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Library under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License. 13. The Free Software Foundation may publish revised and/or new versions of the Library General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Library specifies a version number of this License which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Library does not specify a license version number, you may choose any version ever published by the Free Software Foundation. 14. If you wish to incorporate parts of the Library into other free programs whose distribution conditions are incompatible with these, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally. NO WARRANTY 15. BECAUSE THE LIBRARY IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE LIBRARY, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE LIBRARY "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE LIBRARY IS WITH YOU. SHOULD THE LIBRARY PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 16. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE LIBRARY AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE LIBRARY (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE LIBRARY TO OPERATE WITH ANY OTHER SOFTWARE), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. END OF TERMS AND CONDITIONS How to Apply These Terms to Your New Libraries If you develop a new library, and you want it to be of the greatest possible use to the public, we recommend making it free software that everyone can redistribute and change. You can do so by permitting redistribution under these terms (or, alternatively, under the terms of the ordinary General Public License). To apply these terms, attach the following notices to the library. It is safest to attach them to the start of each source file to most effectively convey the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found. Copyright (C) This library is free software; you can redistribute it and/or modify it under the terms of the GNU Library General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This library is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Library General Public License for more details. You should have received a copy of the GNU Library General Public License along with this library; if not, write to the Free Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA Also add information on how to contact you by electronic and paper mail. You should also get your employer (if you work as a programmer) or your school, if any, to sign a "copyright disclaimer" for the library, if necessary. Here is a sample; alter the names: Yoyodyne, Inc., hereby disclaims all copyright interest in the library `Frob' (a library for tweaking knobs) written by James Random Hacker. , 1 April 1990 Ty Coon, President of Vice That's all there is to it! IO-Socket-Socks-0.62/Makefile.PL0000644000175000017500000000155511716751705014706 0ustar olegoleguse ExtUtils::MakeMaker; # See lib/ExtUtils/MakeMaker.pm for details of how to influence # the contents of the Makefile that is written. WriteMakefile( 'NAME' => 'IO::Socket::Socks', 'LICENSE' => 'lgpl', 'PREREQ_PM' => { 'IO::Socket::INET' => 0, 'IO::Select' => 0, 'constant' => 1.03 }, 'BUILD_REQUIRES' => { 'Test::More' => 0.88 }, 'CONFIGURE_REQUIRES' => { 'ExtUtils::MakeMaker' => 6.52 }, 'META_MERGE' => { resources => {repository => 'https://github.com/olegwtf/p5-IO-Socket-Socks'} }, 'VERSION_FROM' => 'lib/IO/Socket/Socks.pm', ($] >= 5.005 ? ## Add these new keywords supported since 5.005 (ABSTRACT_FROM => 'lib/IO/Socket/Socks.pm', # retrieve abstract from module AUTHOR => 'Oleg G ') : ()), 'dist' => { 'COMPRESS' => 'gzip --best' } ); IO-Socket-Socks-0.62/README0000644000175000017500000000036011626475367013614 0ustar olegolegThis module seeks to provide a full implementation of the SOCKS protocol while behaving like a regular socket as much as possible. Ryan Eatmon reatmon@mail.com Oleg G oleg@cpan.org INSTALLATION perl Makefile.PL make make install IO-Socket-Socks-0.62/Changes0000644000175000017500000000354411722611621014214 0ustar olegoleg0.62 ==== - Some tests didn't work without internet connection because of the resolving on client side. Fixed - New socket after server accept didn't inherit SocksResolve parameter. Fixed - Removed automatically resolving hostname to ip in socks4a server accept. This should be done in the program, not in this library - command() on the server side now in addition returns address type as last value (ADDR_DOMAINNAME or ADDR_IPV4) - Fix for $! test on Solaris and ready() time measurement on OpenBSD 0.61 ==== - Set $! to ESOCKPROTO (new module constant) on error in the protocol - Set $@ on error - $SOCKS_ERROR now behaves more like $!: string or number in appropriate contexts - Return socket to non-blocking state after new_from_fd if socket was non-blocking before 0.60 ==== - Added support for non-blocking clients accept on the server side - new_from_fd() is now alias to new_from_socket() 0.51 ==== - Non-blocking connect on BSD systems could break connection with ENOTCONN error - Spelling patch from the debian project was applied 0.5 === - Added support for non-blocking connect/bind operations on the client side - $SOCKS_DEBUG variable added, debug now to STDERR instead STDOUT - Real tests added 0.4 === - UDP associate support added. It closes Bug #39216 - method new_from_socket() added. It needed for IO::Socket::Socks::Wrapper module - command() method on the client added. It allows to create socks chains and other cool things 0.3 === - clarified the issue with the license (Bug #44047) - socks bind support added - improvements in the documentation 0.2 === - fixed possible SIGPIPE (Bug #62997) - blocking reading and writing replaced by non-blocking equivalents, so `Timeout' option now documented and works - added support for socks v4, both server and client - some bug fixes 0.1 === - Initial version.