SOCKS proxy server chained to NTLM protected HTTP proxy on Linux Unicorn Meta Zoo #1: Why another podcast? Announcing the arrival of Valued Associate #679: Cesar Manara Come Celebrate our 10 Year Anniversary!Is there a name based virtual host SSH reverse proxy?setting up a proxy to mirror an SSH SOCKS connectionBypassing HTTP Proxy throug a machine in cloudSSH Socks Proxy wiith iptables REDIRECTTransparent Proxy or VPN that listens on all portsNTLM through proxy serverCross-server NTLM authentication failingMake a basic auth client authenticate on a digest auth proxy serverHow to access a proxy enabled internet with ssh tunneling?Looking for a lightweight NTLM HTTP proxy server
I preordered a game on my Xbox while on the home screen of my friend's account. Which of us owns the game?
Map material from china not allowed to leave the country
Is accepting an invalid credit card number a security issue?
Why isn't everyone flabbergasted about Bran's "gift"?
Does Feeblemind produce an ongoing magical effect that can be dispelled?
With indentation set to `0em`, when using a line break, there is still an indentation of a size of a space
How to translate "red flag" into Spanish?
What to do with someone that cheated their way through university and a PhD program?
Trumpet valves, lengths, and pitch
"My boss was furious with me and I have been fired" vs. "My boss was furious with me and I was fired"
Are all CP/M-80 implementations binary compatible?
Why did Israel vote against lifting the American embargo on Cuba?
Multiple fireplaces in an apartment building?
How to open locks without disable device?
How to avoid introduction cliches
Are these square matrices always diagonalisable?
What's parked in Mil Moscow helicopter plant?
"Whatever a Russian does, they end up making the Kalashnikov gun"? Are there any similar proverbs in English?
Did the Roman Empire have penal colonies?
Retract an already submitted recommendation letter (written for an undergrad student)
Are there moral objections to a life motivated purely by money? How to sway a person from this lifestyle?
Suing a Police Officer Instead of the Police Department
Married in secret, can marital status in passport be changed at a later date?
Can I criticise the more senior developers around me for not writing clean code?
SOCKS proxy server chained to NTLM protected HTTP proxy on Linux
Unicorn Meta Zoo #1: Why another podcast?
Announcing the arrival of Valued Associate #679: Cesar Manara
Come Celebrate our 10 Year Anniversary!Is there a name based virtual host SSH reverse proxy?setting up a proxy to mirror an SSH SOCKS connectionBypassing HTTP Proxy throug a machine in cloudSSH Socks Proxy wiith iptables REDIRECTTransparent Proxy or VPN that listens on all portsNTLM through proxy serverCross-server NTLM authentication failingMake a basic auth client authenticate on a digest auth proxy serverHow to access a proxy enabled internet with ssh tunneling?Looking for a lightweight NTLM HTTP proxy server
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
Our application can connect to Internet only directly or via SOCKS proxy. Unfortunately we can only access the Internet via HTTP proxy protected by NTLM authentication. Is there any SOCKS server that chains outgoing connections via HTTP proxy? NTLM authentication support is mandatory.
We've checked antinat but found nothing about NTLM there.
Other solution could be to use SSH acting as SOCKS proxy chained to Proxytunnel, but this requires to have an additional server out of our network to act as SSH tunneling endpoint.
ssh proxy ntlm http-proxy socks
add a comment |
Our application can connect to Internet only directly or via SOCKS proxy. Unfortunately we can only access the Internet via HTTP proxy protected by NTLM authentication. Is there any SOCKS server that chains outgoing connections via HTTP proxy? NTLM authentication support is mandatory.
We've checked antinat but found nothing about NTLM there.
Other solution could be to use SSH acting as SOCKS proxy chained to Proxytunnel, but this requires to have an additional server out of our network to act as SSH tunneling endpoint.
ssh proxy ntlm http-proxy socks
I heard once of an Apache module that listens to connections and then chains them to a proxy server, but I don't know if it supports NTLM
– golimar
Feb 25 '12 at 10:10
add a comment |
Our application can connect to Internet only directly or via SOCKS proxy. Unfortunately we can only access the Internet via HTTP proxy protected by NTLM authentication. Is there any SOCKS server that chains outgoing connections via HTTP proxy? NTLM authentication support is mandatory.
We've checked antinat but found nothing about NTLM there.
Other solution could be to use SSH acting as SOCKS proxy chained to Proxytunnel, but this requires to have an additional server out of our network to act as SSH tunneling endpoint.
ssh proxy ntlm http-proxy socks
Our application can connect to Internet only directly or via SOCKS proxy. Unfortunately we can only access the Internet via HTTP proxy protected by NTLM authentication. Is there any SOCKS server that chains outgoing connections via HTTP proxy? NTLM authentication support is mandatory.
We've checked antinat but found nothing about NTLM there.
Other solution could be to use SSH acting as SOCKS proxy chained to Proxytunnel, but this requires to have an additional server out of our network to act as SSH tunneling endpoint.
ssh proxy ntlm http-proxy socks
ssh proxy ntlm http-proxy socks
asked Feb 23 '12 at 14:27
Martin ŽdilaMartin Ždila
1014
1014
I heard once of an Apache module that listens to connections and then chains them to a proxy server, but I don't know if it supports NTLM
– golimar
Feb 25 '12 at 10:10
add a comment |
I heard once of an Apache module that listens to connections and then chains them to a proxy server, but I don't know if it supports NTLM
– golimar
Feb 25 '12 at 10:10
I heard once of an Apache module that listens to connections and then chains them to a proxy server, but I don't know if it supports NTLM
– golimar
Feb 25 '12 at 10:10
I heard once of an Apache module that listens to connections and then chains them to a proxy server, but I don't know if it supports NTLM
– golimar
Feb 25 '12 at 10:10
add a comment |
1 Answer
1
active
oldest
votes
SOCKS is a TCP/UDP proxy, which means that it can't be arbitrarily passed through an HTTP proxy. ntlmaps and cntlm are HTTP proxies which do NTLM authentication. I think your only bet is to try use iptables to transparently proxy traffic via ntlmaps/cntlm (I don't know if they support being used in transparent mode; if not you may need to add Squid into the mix as well).
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f363035%2fsocks-proxy-server-chained-to-ntlm-protected-http-proxy-on-linux%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
SOCKS is a TCP/UDP proxy, which means that it can't be arbitrarily passed through an HTTP proxy. ntlmaps and cntlm are HTTP proxies which do NTLM authentication. I think your only bet is to try use iptables to transparently proxy traffic via ntlmaps/cntlm (I don't know if they support being used in transparent mode; if not you may need to add Squid into the mix as well).
add a comment |
SOCKS is a TCP/UDP proxy, which means that it can't be arbitrarily passed through an HTTP proxy. ntlmaps and cntlm are HTTP proxies which do NTLM authentication. I think your only bet is to try use iptables to transparently proxy traffic via ntlmaps/cntlm (I don't know if they support being used in transparent mode; if not you may need to add Squid into the mix as well).
add a comment |
SOCKS is a TCP/UDP proxy, which means that it can't be arbitrarily passed through an HTTP proxy. ntlmaps and cntlm are HTTP proxies which do NTLM authentication. I think your only bet is to try use iptables to transparently proxy traffic via ntlmaps/cntlm (I don't know if they support being used in transparent mode; if not you may need to add Squid into the mix as well).
SOCKS is a TCP/UDP proxy, which means that it can't be arbitrarily passed through an HTTP proxy. ntlmaps and cntlm are HTTP proxies which do NTLM authentication. I think your only bet is to try use iptables to transparently proxy traffic via ntlmaps/cntlm (I don't know if they support being used in transparent mode; if not you may need to add Squid into the mix as well).
answered Apr 26 '12 at 1:05
mgorvenmgorven
26.4k755109
26.4k755109
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f363035%2fsocks-proxy-server-chained-to-ntlm-protected-http-proxy-on-linux%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
I heard once of an Apache module that listens to connections and then chains them to a proxy server, but I don't know if it supports NTLM
– golimar
Feb 25 '12 at 10:10