SOCKS proxy server chained to NTLM protected HTTP proxy on Linux Unicorn Meta Zoo #1: Why another podcast? Announcing the arrival of Valued Associate #679: Cesar Manara Come Celebrate our 10 Year Anniversary!Is there a name based virtual host SSH reverse proxy?setting up a proxy to mirror an SSH SOCKS connectionBypassing HTTP Proxy throug a machine in cloudSSH Socks Proxy wiith iptables REDIRECTTransparent Proxy or VPN that listens on all portsNTLM through proxy serverCross-server NTLM authentication failingMake a basic auth client authenticate on a digest auth proxy serverHow to access a proxy enabled internet with ssh tunneling?Looking for a lightweight NTLM HTTP proxy server

I preordered a game on my Xbox while on the home screen of my friend's account. Which of us owns the game?

Map material from china not allowed to leave the country

Is accepting an invalid credit card number a security issue?

Why isn't everyone flabbergasted about Bran's "gift"?

Does Feeblemind produce an ongoing magical effect that can be dispelled?

With indentation set to `0em`, when using a line break, there is still an indentation of a size of a space

How to translate "red flag" into Spanish?

What to do with someone that cheated their way through university and a PhD program?

Trumpet valves, lengths, and pitch

"My boss was furious with me and I have been fired" vs. "My boss was furious with me and I was fired"

Are all CP/M-80 implementations binary compatible?

Why did Israel vote against lifting the American embargo on Cuba?

Multiple fireplaces in an apartment building?

How to open locks without disable device?

How to avoid introduction cliches

Are these square matrices always diagonalisable?

What's parked in Mil Moscow helicopter plant?

"Whatever a Russian does, they end up making the Kalashnikov gun"? Are there any similar proverbs in English?

Did the Roman Empire have penal colonies?

Retract an already submitted recommendation letter (written for an undergrad student)

Are there moral objections to a life motivated purely by money? How to sway a person from this lifestyle?

Suing a Police Officer Instead of the Police Department

Married in secret, can marital status in passport be changed at a later date?

Can I criticise the more senior developers around me for not writing clean code?



SOCKS proxy server chained to NTLM protected HTTP proxy on Linux



Unicorn Meta Zoo #1: Why another podcast?
Announcing the arrival of Valued Associate #679: Cesar Manara
Come Celebrate our 10 Year Anniversary!Is there a name based virtual host SSH reverse proxy?setting up a proxy to mirror an SSH SOCKS connectionBypassing HTTP Proxy throug a machine in cloudSSH Socks Proxy wiith iptables REDIRECTTransparent Proxy or VPN that listens on all portsNTLM through proxy serverCross-server NTLM authentication failingMake a basic auth client authenticate on a digest auth proxy serverHow to access a proxy enabled internet with ssh tunneling?Looking for a lightweight NTLM HTTP proxy server



.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;








0















Our application can connect to Internet only directly or via SOCKS proxy. Unfortunately we can only access the Internet via HTTP proxy protected by NTLM authentication. Is there any SOCKS server that chains outgoing connections via HTTP proxy? NTLM authentication support is mandatory.



We've checked antinat but found nothing about NTLM there.



Other solution could be to use SSH acting as SOCKS proxy chained to Proxytunnel, but this requires to have an additional server out of our network to act as SSH tunneling endpoint.










share|improve this question






















  • I heard once of an Apache module that listens to connections and then chains them to a proxy server, but I don't know if it supports NTLM

    – golimar
    Feb 25 '12 at 10:10

















0















Our application can connect to Internet only directly or via SOCKS proxy. Unfortunately we can only access the Internet via HTTP proxy protected by NTLM authentication. Is there any SOCKS server that chains outgoing connections via HTTP proxy? NTLM authentication support is mandatory.



We've checked antinat but found nothing about NTLM there.



Other solution could be to use SSH acting as SOCKS proxy chained to Proxytunnel, but this requires to have an additional server out of our network to act as SSH tunneling endpoint.










share|improve this question






















  • I heard once of an Apache module that listens to connections and then chains them to a proxy server, but I don't know if it supports NTLM

    – golimar
    Feb 25 '12 at 10:10













0












0








0








Our application can connect to Internet only directly or via SOCKS proxy. Unfortunately we can only access the Internet via HTTP proxy protected by NTLM authentication. Is there any SOCKS server that chains outgoing connections via HTTP proxy? NTLM authentication support is mandatory.



We've checked antinat but found nothing about NTLM there.



Other solution could be to use SSH acting as SOCKS proxy chained to Proxytunnel, but this requires to have an additional server out of our network to act as SSH tunneling endpoint.










share|improve this question














Our application can connect to Internet only directly or via SOCKS proxy. Unfortunately we can only access the Internet via HTTP proxy protected by NTLM authentication. Is there any SOCKS server that chains outgoing connections via HTTP proxy? NTLM authentication support is mandatory.



We've checked antinat but found nothing about NTLM there.



Other solution could be to use SSH acting as SOCKS proxy chained to Proxytunnel, but this requires to have an additional server out of our network to act as SSH tunneling endpoint.







ssh proxy ntlm http-proxy socks






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Feb 23 '12 at 14:27









Martin ŽdilaMartin Ždila

1014




1014












  • I heard once of an Apache module that listens to connections and then chains them to a proxy server, but I don't know if it supports NTLM

    – golimar
    Feb 25 '12 at 10:10

















  • I heard once of an Apache module that listens to connections and then chains them to a proxy server, but I don't know if it supports NTLM

    – golimar
    Feb 25 '12 at 10:10
















I heard once of an Apache module that listens to connections and then chains them to a proxy server, but I don't know if it supports NTLM

– golimar
Feb 25 '12 at 10:10





I heard once of an Apache module that listens to connections and then chains them to a proxy server, but I don't know if it supports NTLM

– golimar
Feb 25 '12 at 10:10










1 Answer
1






active

oldest

votes


















0














SOCKS is a TCP/UDP proxy, which means that it can't be arbitrarily passed through an HTTP proxy. ntlmaps and cntlm are HTTP proxies which do NTLM authentication. I think your only bet is to try use iptables to transparently proxy traffic via ntlmaps/cntlm (I don't know if they support being used in transparent mode; if not you may need to add Squid into the mix as well).






share|improve this answer























    Your Answer








    StackExchange.ready(function()
    var channelOptions =
    tags: "".split(" "),
    id: "2"
    ;
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function()
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled)
    StackExchange.using("snippets", function()
    createEditor();
    );

    else
    createEditor();

    );

    function createEditor()
    StackExchange.prepareEditor(
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader:
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    ,
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    );



    );













    draft saved

    draft discarded


















    StackExchange.ready(
    function ()
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f363035%2fsocks-proxy-server-chained-to-ntlm-protected-http-proxy-on-linux%23new-answer', 'question_page');

    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    0














    SOCKS is a TCP/UDP proxy, which means that it can't be arbitrarily passed through an HTTP proxy. ntlmaps and cntlm are HTTP proxies which do NTLM authentication. I think your only bet is to try use iptables to transparently proxy traffic via ntlmaps/cntlm (I don't know if they support being used in transparent mode; if not you may need to add Squid into the mix as well).






    share|improve this answer



























      0














      SOCKS is a TCP/UDP proxy, which means that it can't be arbitrarily passed through an HTTP proxy. ntlmaps and cntlm are HTTP proxies which do NTLM authentication. I think your only bet is to try use iptables to transparently proxy traffic via ntlmaps/cntlm (I don't know if they support being used in transparent mode; if not you may need to add Squid into the mix as well).






      share|improve this answer

























        0












        0








        0







        SOCKS is a TCP/UDP proxy, which means that it can't be arbitrarily passed through an HTTP proxy. ntlmaps and cntlm are HTTP proxies which do NTLM authentication. I think your only bet is to try use iptables to transparently proxy traffic via ntlmaps/cntlm (I don't know if they support being used in transparent mode; if not you may need to add Squid into the mix as well).






        share|improve this answer













        SOCKS is a TCP/UDP proxy, which means that it can't be arbitrarily passed through an HTTP proxy. ntlmaps and cntlm are HTTP proxies which do NTLM authentication. I think your only bet is to try use iptables to transparently proxy traffic via ntlmaps/cntlm (I don't know if they support being used in transparent mode; if not you may need to add Squid into the mix as well).







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Apr 26 '12 at 1:05









        mgorvenmgorven

        26.4k755109




        26.4k755109



























            draft saved

            draft discarded
















































            Thanks for contributing an answer to Server Fault!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid


            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.

            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f363035%2fsocks-proxy-server-chained-to-ntlm-protected-http-proxy-on-linux%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            Club Baloncesto Breogán Índice Historia | Pavillón | Nome | O Breogán na cultura popular | Xogadores | Adestradores | Presidentes | Palmarés | Historial | Líderes | Notas | Véxase tamén | Menú de navegacióncbbreogan.galCadroGuía oficial da ACB 2009-10, páxina 201Guía oficial ACB 1992, páxina 183. Editorial DB.É de 6.500 espectadores sentados axeitándose á última normativa"Estudiantes Junior, entre as mellores canteiras"o orixinalHemeroteca El Mundo Deportivo, 16 setembro de 1970, páxina 12Historia do BreogánAlfredo Pérez, o último canoneiroHistoria C.B. BreogánHemeroteca de El Mundo DeportivoJimmy Wright, norteamericano do Breogán deixará Lugo por ameazas de morteResultados de Breogán en 1986-87Resultados de Breogán en 1990-91Ficha de Velimir Perasović en acb.comResultados de Breogán en 1994-95Breogán arrasa al Barça. "El Mundo Deportivo", 27 de setembro de 1999, páxina 58CB Breogán - FC BarcelonaA FEB invita a participar nunha nova Liga EuropeaCharlie Bell na prensa estatalMáximos anotadores 2005Tempada 2005-06 : Tódolos Xogadores da Xornada""Non quero pensar nunha man negra, mais pregúntome que está a pasar""o orixinalRaúl López, orgulloso dos xogadores, presume da boa saúde económica do BreogánJulio González confirma que cesa como presidente del BreogánHomenaxe a Lisardo GómezA tempada do rexurdimento celesteEntrevista a Lisardo GómezEl COB dinamita el Pazo para forzar el quinto (69-73)Cafés Candelas, patrocinador del CB Breogán"Suso Lázare, novo presidente do Breogán"o orixinalCafés Candelas Breogán firma el mayor triunfo de la historiaEl Breogán realizará 17 homenajes por su cincuenta aniversario"O Breogán honra ao seu fundador e primeiro presidente"o orixinalMiguel Giao recibiu a homenaxe do PazoHomenaxe aos primeiros gladiadores celestesO home que nos amosa como ver o Breo co corazónTita Franco será homenaxeada polos #50anosdeBreoJulio Vila recibirá unha homenaxe in memoriam polos #50anosdeBreo"O Breogán homenaxeará aos seus aboados máis veteráns"Pechada ovación a «Capi» Sanmartín e Ricardo «Corazón de González»Homenaxe por décadas de informaciónPaco García volve ao Pazo con motivo do 50 aniversario"Resultados y clasificaciones""O Cafés Candelas Breogán, campión da Copa Princesa""O Cafés Candelas Breogán, equipo ACB"C.B. Breogán"Proxecto social"o orixinal"Centros asociados"o orixinalFicha en imdb.comMario Camus trata la recuperación del amor en 'La vieja música', su última película"Páxina web oficial""Club Baloncesto Breogán""C. B. Breogán S.A.D."eehttp://www.fegaba.com

            Vilaño, A Laracha Índice Patrimonio | Lugares e parroquias | Véxase tamén | Menú de navegación43°14′52″N 8°36′03″O / 43.24775, -8.60070

            Cegueira Índice Epidemioloxía | Deficiencia visual | Tipos de cegueira | Principais causas de cegueira | Tratamento | Técnicas de adaptación e axudas | Vida dos cegos | Primeiros auxilios | Crenzas respecto das persoas cegas | Crenzas das persoas cegas | O neno deficiente visual | Aspectos psicolóxicos da cegueira | Notas | Véxase tamén | Menú de navegación54.054.154.436928256blindnessDicionario da Real Academia GalegaPortal das Palabras"International Standards: Visual Standards — Aspects and Ranges of Vision Loss with Emphasis on Population Surveys.""Visual impairment and blindness""Presentan un plan para previr a cegueira"o orixinalACCDV Associació Catalana de Cecs i Disminuïts Visuals - PMFTrachoma"Effect of gene therapy on visual function in Leber's congenital amaurosis"1844137110.1056/NEJMoa0802268Cans guía - os mellores amigos dos cegosArquivadoEscola de cans guía para cegos en Mortágua, PortugalArquivado"Tecnología para ciegos y deficientes visuales. Recopilación de recursos gratuitos en la Red""Colorino""‘COL.diesis’, escuchar los sonidos del color""COL.diesis: Transforming Colour into Melody and Implementing the Result in a Colour Sensor Device"o orixinal"Sistema de desarrollo de sinestesia color-sonido para invidentes utilizando un protocolo de audio""Enseñanza táctil - geometría y color. Juegos didácticos para niños ciegos y videntes""Sistema Constanz"L'ocupació laboral dels cecs a l'Estat espanyol està pràcticament equiparada a la de les persones amb visió, entrevista amb Pedro ZuritaONCE (Organización Nacional de Cegos de España)Prevención da cegueiraDescrición de deficiencias visuais (Disc@pnet)Braillín, un boneco atractivo para calquera neno, con ou sen discapacidade, que permite familiarizarse co sistema de escritura e lectura brailleAxudas Técnicas36838ID00897494007150-90057129528256DOID:1432HP:0000618D001766C10.597.751.941.162C97109C0155020