How to Add More IPs to a Dante Proxy
Dante is a proxy server software application that runs on Unix-like operating systems such as Linux. A computer running Dante sits between an internal network ("intranet") of computers belonging to the same organization and external networks such as an Internet Service Provider's (ISP) connection to the Internet. Dante supports various versions of the SOCKS proxy protocol. A client inside the intranet cannot access the Internet directly; instead, the client sends information to Dante about the connection he wishes to establish on the Internet. Dante checks whether that connection is allowed by the organization's security policies and, if it is, establishes it for the client. Dante identifies intranet hosts by their Internet Protocol (IP) addresses. You can add the IP addresses of additional intranet hosts to Dante's configuration, so that Dante will allow those hosts to open connections to the Internet.
Instructions
-
-
1
Log in as administratorto t he computer running Dante. Type the following commands into a shell:
cd /etc
vi sockd.conf
Press "Enter" after each line.
-
2
Add an individual IP address to Dante's list of valid clients by adding to the "sockd.conf" file a stanza like the following sample:
client pass {
from: 192.168.34.12 port 1025-32767 to:0.0.0.0/0
}
Replace "192.168.34.12" with the IP address you want to add, and "1025-32767" with the range of IP ports you want to allow for that address.
-
-
3
Add a range of IP addresses to Dante's list of valid clients by adding to the "sockd.conf" file a stanza like the following sample:
client pass {
from: 192.168.34.0/24 port 1025-32767 to:0.0.0.0/0
}
Replace "192.168.34.0/24" with the IP address range you want to add (the sample range denotes addresses 192.168.34.0 through 192.168.34.255, in standard network notation). Replace 1025-32767" with the range of IP ports you want to allow for IP addresses in the specified range.
-
4
Save the "sockd.conf" file and type "ZZ" to exit the text editor. At that point, Dante is configured to accept connection requests from the IP addresses you added.
-
1
References
- Photo Credit Dynamic Graphics Group/Dynamic Graphics Group/Getty Images