This is what I get when attempting to browse a web page using the mechanisms described: (Mac OS X points to delegate, delegate points to SOCKS exposed via SSH) 01/28 08:59:04.16 [16108] 1+1: {R} retrying AAAA [www.cnn.com] 01/28 08:59:04.16 [16108] 1+1: SocksV5_udpassoc: UDP ASSOC error(V5 0) 01/28 08:59:06.16 [16108] 1+1: {R} [www.cnn.com]*1 q=1,a=0, s=1,r=0 (2s) 01/28 08:59:06.21 [16108] 1+1: SocksV5_udpassoc: UDP ASSOC error(V5 0) 01/28 08:59:14.21 [16108] 1+1: {R} [www.cnn.com]*2 q=1,a=0, s=1,r=0 (10s) 01/28 08:59:14.27 [16108] 1+1: SocksV5_udpassoc: UDP ASSOC error(V5 0) 01/28 08:59:16.27 [16108] 1+1: {R} [www.cnn.com.lan]*1 q=1,a=0, s=1,r=0 (2s) 01/28 08:59:16.32 [16108] 1+1: SocksV5_udpassoc: UDP ASSOC error(V5 0) 01/28 08:59:24.32 [16108] 1+1: {R} [www.cnn.com.lan]*2 q=1,a=0, s=1,r=0 (10s) 01/28 08:59:24.37 [16108] 1+1: gethostbyname(www.cnn.com) unknown [20.21s] My command line: delegated -v -P28222 SERVER=socks SOCKS="localhost:9250:*.cnn.com" Full debug: 01/28 08:57:58.51 [16105] 0+0: -- setCredhyCache /tmp/credhy_cache128 >> /Users/tim/delegate/act/credhy_cache128 01/28 08:57:58.51 [16105] 0+0: command PATH: /usr/bin/delegated -> / usr/bin/delegated 01/28 08:57:58.51 [16105] 0+0: PORT> -P28222 01/28 08:57:58.52 [16105] 0+0: ... testing resolver[SYS] with 'WWW.DeleGate.ORG' 01/28 08:57:58.52 [16105] 0+0: ... you can suppress this test by RES_WAIT=0 01/28 08:57:58.52 [16105] 0+0: ... gethostname(vertice) 01/28 08:57:58.52 [16105] 0+0: configuring default RESOLV ... 01/28 08:57:58.52 [16105] 0+0: ... gethostname()='vertice' 01/28 08:57:58.52 [16105] 0+0: ... SYS: vertice -> 127.0.0.1 01/28 08:57:58.53 [16105] 0+0: ... DNS: 127.0.0.1 -> localhost.lan 01/28 08:57:58.53 [16105] 0+0: ... DNS available 01/28 08:57:58.53 [16105] 0+0: ... NIS not available (no default domain) 01/28 08:57:58.53 [16105] 0+0: ... export RES_ORDER=CFD 01/28 08:57:58.53 [16105] 0+0: export RESOLV=cache,file,dns (set by default) 01/28 08:57:58.53 [16105] 0+0: default netmask 127.0.0.1/. = FFFFFF00 SRCSIGN=9.4.3-pre1:20070120110043 +0900:5fbadfc4cc3cf0da:Author@DeleGate.ORG:Zl3+Cq1Y6Pr/X2i5LzGTKTC/ 4yAjkpu56vAK92qi8zBEao2MiaWKxWO/ IVI3tN3L8eTwwV3AV9hFr1q3XF1ItPAt79ceGhpfjcWUSz44qaBkufA4A4xDtNgkJT8LXWS1 rjpIA//vXy97pAKMq9Zi8rIskP81J4+19zr/jPrI2X8= BLDSIGN=9.4.3-pre1:20070123154524--500:5fbadfc4cc3cf0da:tim@localhost:- 01/28 08:57:58.53 [16105] 0+0: --INITIALIZATION START-00000000--00X: 9.4.3-pre1 on Darwin/8.8.2-- 01/28 08:57:58.53 [16105] 0+0: EXECDIR=/usr/bin 01/28 08:57:58.53 [16105] 0+0: BINSHELL=/bin/sh 01/28 08:57:58.54 [16105] 0+0: server_open(delegate,:28222,listen=20) 01/28 08:57:58.54 [16105] 0+0: server_open(delegate,:28222) BOUND 01/28 08:57:58.54 [16105] 0+0: DGROOT=/Users/tim/delegate^M 01/28 08:57:58.54 [16105] 0+0: <DeleGate/9.4.3-pre1> [16105] -P28222 READY^M <DeleGate/9.4.3-pre1> [16105] -P28222 READY Config: Darwin/8.8.2; FileSize-Bits=64/64,64/32,32 DGROOT=/Users/tim/delegate ADMIN=tim@localhost AIST-Product-ID: 2000-ETL-198715-01, H14PRO-049, H15PRO-165, H18PRO-443 Copyright (c) 1994-2000 Yutaka Sato and ETL,AIST,MITI Copyright (c) 2001-2006 National Institute of Advanced Industrial Science and Technology (AIST) BLDSIGN=9.4.3-pre1:20070123154524--500:5fbadfc4cc3cf0da:tim@localhost:- 01/28 08:57:58.54 [16105] 0+0: PORT= 20000/0 (000,0X) 01/28 08:57:58.54 [16105] 0+0: OWNER=nobody => OWNER=tim/tim(tim/tim) 01/28 08:57:58.54 [16105] 0+0: REMITTABLE = socks,tcprelay 01/28 08:57:58.54 [16105] 0+0: --- [z] 0 dglibz.dylib 01/28 08:57:58.54 [16105] 0+0: --- [z] 0 libz.0.9.8.dylib 01/28 08:57:58.54 [16105] 0+0: --- [/usr/lib/libz.dylib] 01/28 08:57:58.54 [16105] 0+0: --- [z] 400C30 /usr/lib/libz.dylib 01/28 08:57:58.54 [16105] 0+0: ---- [z] loaded 9 syms, unknown=0+0, already=0 01/28 08:57:58.54 [16105] 0+0: +++ loaded Zlib 1.2.3 01/28 08:57:58.54 [16105] 0+0: #### gzip/gunzip = dynamically linked 01/28 08:57:58.54 [16105] 0+0: ADMIN=tim@localhost protocol=socks (specialist) 01/28 08:57:58.54 [16105] 0+0: #### CACHE DISABLED #### Cache directory seems not exist: /Users/tim/delegate/cache 01/28 08:57:58.54 [16105] 0+0: MOUNT[0]X[2] /-/builtin/icons/* = default 01/28 08:57:58.54 [16105] 0+0: MOUNT[1]X[3] /-/* = forbidden,from=!.RELIABLE,default 01/28 08:57:58.54 [16105] 0+0: MOUNT[2]X[0] /-* = default 01/28 08:57:58.54 [16105] 0+0: MOUNT[3]X[1] /=* = default 01/28 08:57:58.54 [16105] 0+0: Stay open PIDFILE for accept() lock [fd=11] 01/28 08:57:58.54 [16105] 0+0: StickyReport[12,13]0.0.0.0:0><0.0.0.0:0 01/28 08:57:58.54 [16105] 0+0: env[17] LIBPATH=.;/Users/tim;/Users/ tim/delegate/lib;/usr/bin;/Users/tim/delegate/etc 01/28 08:57:58.54 [16105] 0+0: env[19] RESOLV=cache,file,dns 01/28 08:57:58.54 [16105] 0+0: arg[3] SERVER=socks 01/28 08:57:58.54 [16105] 0+0: arg[4] SOCKS=localhost:9250:\!*.cisco.com 01/28 08:57:58.54 [16105] 0+0: DELEGATE_Modified[1]: 45bcabe6 000000000X 01/28 08:57:58.54 [16105] 0+0: --INITIALIZATION DONE-00000000--00X: 9.4.3-pre1 on Darwin/8.8.2-- 01/28 08:58:10.91 [16106] 1+0: -- Fork(SequentialServer): 16105 -> 16106 01/28 08:58:10.91 [16106] 1+1: (0) accepted [41] -@[127.0.0.1] localhost:62192 (0.006s)(1) 01/28 08:58:10.92 [16106] 1+1: PATH: socks://-:1080!localhost:28222! localhost:62192!anonymous@localhost;1169992690 01/28 08:58:10.92 [16106] 1+1: [SocksV5-serv] VER[5] NMETHODS[1] [0][0] 01/28 08:58:10.92 [16106] 1+1: [SocksV5-serv] VER[5] CMD[1] ATYP[3] www.cnn.com:80 01/28 08:58:10.92 [16106] 1+1: SocksV5_udpassoc: UDP ASSOC error(V5 0) 01/28 08:58:12.92 [16106] 1+1: {R} [www.cnn.com]*1 q=1,a=0, s=1,r=0 (2s) 01/28 08:58:12.97 [16106] 1+1: SocksV5_udpassoc: UDP ASSOC error(V5 0) 01/28 08:58:20.97 [16106] 1+1: {R} [www.cnn.com]*2 q=1,a=0, s=1,r=0 (10s) 01/28 08:58:21.02 [16106] 1+1: SocksV5_udpassoc: UDP ASSOC error(V5 0) 01/28 08:58:23.02 [16106] 1+1: {R} [www.cnn.com.lan]*1 q=1,a=0, s=1,r=0 (2s) 01/28 08:58:23.08 [16106] 1+1: SocksV5_udpassoc: UDP ASSOC error(V5 0) 01/28 08:58:31.08 [16106] 1+1: {R} [www.cnn.com.lan]*2 q=1,a=0, s=1,r=0 (10s) 01/28 08:58:31.13 [16106] 1+1: {R} retrying AAAA [www.cnn.com] 01/28 08:58:31.13 [16106] 1+1: SocksV5_udpassoc: UDP ASSOC error(V5 0) 01/28 08:58:33.13 [16106] 1+1: {R} [www.cnn.com]*1 q=1,a=0, s=1,r=0 (2s) 01/28 08:58:33.18 [16106] 1+1: SocksV5_udpassoc: UDP ASSOC error(V5 0) 01/28 08:58:41.18 [16106] 1+1: {R} [www.cnn.com]*2 q=1,a=0, s=1,r=0 (10s) 01/28 08:58:41.23 [16106] 1+1: SocksV5_udpassoc: UDP ASSOC error(V5 0) 01/28 08:58:43.23 [16106] 1+1: {R} [www.cnn.com.lan]*1 q=1,a=0, s=1,r=0 (2s) 01/28 08:58:43.29 [16106] 1+1: SocksV5_udpassoc: UDP ASSOC error(V5 0) ^C01/28 08:58:49.21 [16106] 1+1: DeleGate SERVER EXITS: caught SIGINT [2] 01/28 08:58:49.21 [16105] 1+0: DeleGate SERVER EXITS: caught SIGINT [2] 01/28 08:58:49.21 [16105] 1+0: Killpg(16105,15) DeleGate[16106] got SIGTERM(2) for server=16105 01/28 08:58:49.22 [16105] 1+0: Left children: 1 [16105] RUSAGE: 0.01u 0.02s 1S 1R 0r 0t 0d 0k 0e 0f 0w 0i 8o 1g 14x 0y 01/28 08:58:49.22 [16105] 1+0: RUSAGE: 0.01u 0.02s 1S 1R 0r 0t 0d 0k 0e 0f 0w 0i 8o 1g 14x 0y 01/28 08:58:49.22 [16105] 1+0: FINISH. This is on Mac OS X. Resolver issues? On Jan 25, 2007, at 4:49 PM, Yutaka Sato wrote: > In message <_A3617@delegate-en.ML_> on > 01/25/07(23:54:17) > you Timothy Brown <pdyhabdyi-pg3up56huedw.ml@delegate.org> wrote: > |Ah! The missing link! This is because I thought the SOCKS= > |variables would override each other. > > You can specify multiple upstream SOCKS proxies, possibly together > with > multiple PROXY, MASTER, ROUTE and FORWARD which are to be tested in > the > order defined in CONNECT, tried when the specified condition with eath > parameter is true, until a connection suceeds. > > |Are they additive or are they treated independently? Could I do for > |instance > | > |SOCKS="sockshost:1080:!*.local,sockshost2:1080:host1,host1" > > No. It is interpreted as a list including strange element as this: > > SOCKS="{sockshost}:{1080}:{!*.local,sockshost2}:{1080:host1,host1}" > > |and then am I correct in understanding items not referenced will go > |direct? > > Yes. It's the default of the "CONNECT" parameter as: > CONNECT="cache,icp,master,https,vsap,socks,direct:*:*:*" > See the description of the CONNECT parameter for more details. > > |How do I do the use case whereby I want certain hosts to to > |go direct but all other hosts to go socks? > > If the "certain hosts" means "certain destination hosts" then it can > be specified as: > > SOCKS="host:port:!host1,!host2" > > or > > SOCKS="host:port" > CONNECT="direct:host1,host2" > > Cheers, > Yutaka > -- > 9 9 Yutaka Sato <pfqcabdyi-pg3up56huedw.ml@delegate.org> http://delegate.org/y.sato/ > ( ~ ) National Institute of Advanced Industrial Science and > Technology > _< >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan > Do the more with the less -- B. Fuller