Richard,

I've tried sending you Email, but perhaps it hasn't arrived (remailers!)

What I am trying to figure out is how do I socksify QS?   I can start it OK,
 from inside
FreeCap, so it looks as if it is pointing to a socks server (Tor), but it is
 not routing
through Tor. Any idea what is happening?

Doctor Who

[ Post a follow-up to this message ]

Doctor Who@A.B.C wrote:

> Richard,
>
> I've tried sending you Email, but perhaps it hasn't arrived (remailers!)
>
> What I am trying to figure out is how do I socksify QS?   I can start it O
K, from inside
> FreeCap, so it looks as if it is pointing to a socks server (Tor), but it 
is not routing
> through Tor. Any idea what is happening?

Has to be something about the way QS makes connections. Or maybe it's
because QS is socksified, but QSPOP isn't. Having different programs for
different functions would be a real big problem that way. Try it with
JBN. But I think SMTP is a bit flaky through Tor because of the
possibility of SPAM abuse. I'd bet that port is blocked.

Better to use Putty to capture the ports rather than the program, and
run them through a tunneling SSH server. No muss, no fuss, no worries.
No questions about it working right, and no dead connections from Tor
exit nodes that block SMTP.

--
( .. )         Thor Hammerman   http://thor.jungleman.info
-ooO-()-Ooo-  thor@ifyoucantfigureitoutidontwantyourem
ailanyway.duh

[ Post a follow-up to this message ]

In article <l65on09o17ejq9h4gs287u5g3kdvvsdgtn@4ax.com>
"Doctor Who@A.B.C" <> wrote:
>
> Richard,
>
> I've tried sending you Email, but perhaps it hasn't arrived (remailers!)
>
> What I am trying to figure out is how do I socksify QS?   I can start it O
K, from inside
> FreeCap, so it looks as if it is pointing to a socks server (Tor), but it 
is not routing
> through Tor. Any idea what is happening?

Hi Doc,

I use QS with stunnel and for that I need to set the host header
to 127.0.0.1:3025. Might something like that be needed for tor?
That's about all I can come up with.

Richard
- --
R.Christman
quicksilver <at> skuz.net
http://www.quicksilvermail.net
How many people download QS?
http://quicksilvermail.net/ftpusage.html
QS mailing list
http://www.quicksilvermail.net/mailman/listinfo/qslist
Superb remailer statistical analysis http://www.noreply.org

-----BEGIN PGP SIGNATURE-----
Version: N/A

 iQBVAwUBQX1NnfkiDnOECmYBAQEFhQIAoy7yBO5j
Lc6lZX1dSAvwy0S7vxCxaGTY
 P1iGCWeA9EutjuiDbgGvXJ0jqFsi7kZ0L2QlL3Nn
L8v4U9w8il6FyQ==
=VTBD
-----END PGP SIGNATURE-----

[ Post a follow-up to this message ]

On Mon, 25 Oct 2004 13:01:57 -0600 (MDT), QuickSilver <Use-Author-Address-He
ader@[127.1]>
wrote:

>:
>:In article <l65on09o17ejq9h4gs287u5g3kdvvsdgtn@4ax.com>
>:"Doctor Who@A.B.C" <> wrote:
>:>
>:> Richard,
>:>
>:> I've tried sending you Email, but perhaps it hasn't arrived (remailers!)
>:>
>:> What I am trying to figure out is how do I socksify QS?   I can start it
 OK, from inside
>:> FreeCap, so it looks as if it is pointing to a socks server (Tor), but i
t is not routing
>:> through Tor. Any idea what is happening?
>:
>:Hi Doc,
>:
>:I use QS with stunnel and for that I need to set the host header
>:to 127.0.0.1:3025. Might something like that be needed for tor?
>:That's about all I can come up with.
>:
>:Richard


Thanks Richard.

The host headers are in Stunnel?

With Agent it is relatively easy.  I use the following for my Stunnel.conf f
ile:

# config file for connecting to Easynews
client = yes
[nntps]
accept = 119
connect = secure.news.easynews.com:563
# end of config file


But as QS is (I presume) using both ports 25 and 110 for sendmail and receiv
ing mail, how do I
modify stunnel to work with multiple ports?    I still need Stunnel for Agen
t.  Or are you
perhpas suggesting I have several cppies of Stunnel in different folders, ea
ch with its own
copy of the stunnel.conf file for use with Agent, QS sending and receiving m
ail?

Why port 3025?  Is that significant for a particular service?

Using Putty it is fine.  I can force Putty to use Tor as the proxy host no p
roblem.

[ Post a follow-up to this message ]

On Mon, 25 Oct 2004 16:08:45 +0000, Thor Hammerman <thor@jungleman.info.inva
lid> wrote:

>:Doctor Who@A.B.C wrote:
>:
>:> Richard,
>:>
>:> I've tried sending you Email, but perhaps it hasn't arrived (remailers!)
>:>
>:> What I am trying to figure out is how do I socksify QS?   I can start it
 OK, from inside
>:> FreeCap, so it looks as if it is pointing to a socks server (Tor), but i
t is not routing
>:> through Tor. Any idea what is happening?
>:
>:Has to be something about the way QS makes connections. Or maybe it's
>:because QS is socksified, but QSPOP isn't. Having different programs for
>:different functions would be a real big problem that way. Try it with
>:JBN. But I think SMTP is a bit flaky through Tor because of the
>:possibility of SPAM abuse. I'd bet that port is blocked.
>:
>:Better to use Putty to capture the ports rather than the program, and
>:run them through a tunneling SSH server. No muss, no fuss, no worries.
>:No questions about it working right, and no dead connections from Tor
>:exit nodes that block SMTP.

Thanks Thor.  Yes, that looks to be the likely way I will have to use it.   
I have been
successful with the Putty method, but I was just trying to be purist and use
 just Stunnel (to
socksify QS) and Tor.   Using Putty means I have to have an SSH subscription
 service, that is
all.

[ Post a follow-up to this message ]

-----BEGIN PGP SIGNED MESSAGE-----

In article <4pkqn056ds2q70scnrua9s723c8n9rgm8u@4ax.com>
"Doctor Who@A.B.C" <> wrote:
>
> On Mon, 25 Oct 2004 13:01:57 -0600 (MDT), QuickSilver <Use-Author-Address-
Header@[127.1]>
> wrote:
> 
>
>
> Thanks Richard.
>
> The host headers are in Stunnel?
>
> With Agent it is relatively easy.  I use the following for my Stunnel.conf
 file:
>
> # config file for connecting to Easynews
> client = yes
> [nntps]
> accept = 119
> connect = secure.news.easynews.com:563
> # end of config file

> But as QS is (I presume) using both ports 25 and 110 for sendmail and rece
iving mail, how do I
> modify stunnel to work with multiple ports?    I still need Stunnel for Ag
ent.  Or are you
> perhpas suggesting I have several cppies of Stunnel in different folders, 
each with its own
> copy of the stunnel.conf file for use with Agent, QS sending and receiving
 mail?
>
> Why port 3025?  Is that significant for a particular service?
>
> Using Putty it is fine.  I can force Putty to use Tor as the proxy host no problem
.

My mistake, I was thinking of Putty. Sorry for the confusion.
However, the host header in QS can be set to any host and any
port. For example.
Host: 127.0.0.1:3025

Again, sorry for the confusion. I don't know if this info will
help.

Richard
- --
R.Christman
quicksilver <at> skuz.net
http://www.quicksilvermail.net
How many people download QS?
http://quicksilvermail.net/ftpusage.html
QS mailing list
http://www.quicksilvermail.net/mailman/listinfo/qslist
Superb remailer statistical analysis http://www.noreply.org

-----BEGIN PGP SIGNATURE-----
Version: N/A

 iQBVAwUBQX2lovkiDnOECmYBAQGJJgIAlHxfLPLo
F7idT6AiZadx4jZXaRgdvAlK
 ozT3vZEnQUBk9nU0i3BhndhZcUkyZHNOdCjGiUn6
bP/x5yBmW75cjA==
=jOoT
-----END PGP SIGNATURE-----

[ Post a follow-up to this message ]

In article <clj8ji$t57$1@bananasplit.info>, Thor Hammerman wrote:
>Doctor Who@A.B.C wrote:
> 
>
>Has to be something about the way QS makes connections. Or maybe it's
>because QS is socksified, but QSPOP isn't. Having different programs for
>different functions would be a real big problem that way. Try it with
>JBN. But I think SMTP is a bit flaky through Tor because of the
>possibility of SPAM abuse. I'd bet that port is blocked.
>


a quick sampling of three Tor nodes shows a good idea of ports that work
with tor:

sample1
reject 0.0.0.0/255.0.0.0:*
reject 169.254.0.0/255.255.0.0:*
reject 127.0.0.0/255.0.0.0:*
reject 192.168.0.0/255.255.0.0:*
reject 10.0.0.0/255.0.0.0:*
reject 172.16.0.0/255.240.0.0:*
accept *:20-22
accept *:53
accept *:79-81
accept *:110
accept *:143
accept *:443
accept *:873
accept *:993
accept *:995
accept *:1024-65535
reject *:*

sample2
reject 0.0.0.0/255.0.0.0:*
reject 169.254.0.0/255.255.0.0:*
reject 127.0.0.0/255.0.0.0:*
reject 192.168.0.0/255.255.0.0:*
reject 10.0.0.0/255.0.0.0:*
reject 172.16.0.0/255.240.0.0:*
accept *:20-22
accept *:53
accept *:79-81
accept *:110
accept *:143
accept *:443
accept *:873
accept *:993
accept *:995
reject *:4661-4662
reject *:1214
reject *:6346
accept *:1024-65535
reject *:*

sample3
reject 0.0.0.0/255.0.0.0:*
reject 169.254.0.0/255.255.0.0:*
reject 127.0.0.0/255.0.0.0:*
reject 192.168.0.0/255.255.0.0:*
reject 10.0.0.0/255.0.0.0:*
reject 172.16.0.0/255.240.0.0:*
accept *:20-22
accept *:53
accept *:79-81
accept *:110
accept *:143
accept *:443
accept *:873
accept *:993
accept *:995
accept *:1024-65535
reject *:*



~~~~~~~~~~~~~~~~~~~~~
This message was posted via one or more anonymous remailing services.
The original sender is unknown.  Any address shown in the From header
is unverified. You need a valid hashcash token to post to groups other
than alt.test and alt.anonymous.messages. Visit www.panta-rhei.dyndns.org
for abuse and hashcash info.

[ Post a follow-up to this message ]

-----BEGIN PGP SIGNED MESSAGE-----

Doctor Who@A.B.C wrote:

| Thanks Thor.  Yes, that looks to be the likely way I will have to use
it.   I have been
| successful with the Putty method, but I was just trying to be purist
and use just Stunnel (to
| socksify QS) and Tor.   Using Putty means I have to have an SSH
subscription service, that is
| all.

Be sure to use 0.56, 0.55 has a (*serious* as they call it) security
hole :-( <http://www.chiark.greenend.org.uk/~sgtatham/putty/>

Regards,
Thomas
- --
The Thraddash: "So, what's this? SNORT! An unknown alien species?"
"How wonderful! Someone new to fight!"
Full Game Win/Mac/Linux: <http://sc2.sourceforge.net>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

 iQB5AwUBQYOZCgEP2l8iXKAJAQGbcwMeJLNArhZH
0Nfh/UEl+Rjt6kBmK7IvTnzL
AfD5qAD0yA/ SruzxxIUdGP8z56lyalhqw8ka7qMpzyeG4ujlfe9
CmyWrzu0pkr71
9/5h0sInbUvrHT650hjWr4zhmrjHa8kH3v2jaQ==
=/0op
-----END PGP SIGNATURE-----

[ Post a follow-up to this message ]