stone - a simple TCP/IP packet repeater

       Hiroaki Sengoku
       sengoku@gcd.orghttp://www.gcd.org/sengoku/

                                                   Version 2.0                                          stone(1)

       All rights about this program stone are reserved by the original author, Hiroaki Sengoku.  The program is
       free software; you can redistribute it and/or modify it under the terms of the GNU General Public License
       (GPL).

       Stone is a TCP/IP packet repeater in the application layer.  It repeats TCP and UDP packets  from  inside
       to outside of a firewall, or from outside to inside.

       Stone has following features:

       1. Stone supports Win32.
              Formerly, UNIX machines are used as firewalls, but recently WindowsNT machines are used, too.  You
              can  easily run Stone on WindowsNT and Windows95.  Of course, available on Linux, FreeBSD, BSD/OS,
              SunOS, Solaris, HP-UX and so on.

       2.  Simple.
              Stone's source code is only 2000 lines long (written in C language), so you can minimize the  risk
              of security holes.

       3.  Stone supports SSLeay.
              Using SSLeay developed by Eric Young, Stone can encrypt/decrypt packets.

       4.  Stone is a http proxy.
              Stone can also be a tiny http proxy.

outer:    a machine in the outside of the firewall
       inner:    a machine in the inside of the firewall
       fwall:    the firewall on which the stone is executed

       stone7outer
            Repeats  the  X  protocol  to  the  machine designated by the environmental variable DISPLAY.  Run X
            clients under DISPLAY=inner:7 on outer.

       stoneouter:telnet10023
            Repeats the telnet protocol to outer.
            Run telnetfwall10023 on inner.

       stoneouter:domain/udpdomain/udp
            Repeats the DNS query to outer.
            Run nslookup-fwall on inner.

       stoneouter:ntp/udpntp/udp
            Repeats the NTP to outer.
            Run ntpdatefwalloninner.stonelocalhost:http443/ssl
            Make WWW server that supports https.
            Access https://fwall/ using a WWW browser.

       stonelocalhost:telnet10023/ssl
            Make telnet server that supports SSL.
            Run SSLtelnet-zsslfwall10023 on inner.stoneproxy8080
            http proxy.

       Where fwall is a http proxy (port 8080):

       stonefwall:8080/http10023'POSThttp://outer:8023HTTP/1.0'stonelocalhost:telnet8023/http
              Run stones on inner and outer respectively.
              Repeats packets over http.

       stonefwall:8080/proxy9080´Proxy-Authorization:Basicc2VuZ29rdTpoaXJvYWtp´
              for browser that does not support proxy authorization.

       stone - a simple TCP/IP packet repeater

       This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY.

-d     Increase the debug level.

       -z     SSL encryption.

       -n     IP addresses and service port numbers are shown instead of host names and service names.

       -umaxmax is integer. The program will memorize max sources simultaneously where UDP packets are sent.

       -fnn is integer. The program will spawn n child processes.

       -l     Sends error messages to the syslog instead of stderr.

       st     is one of the followings; Multiple st can be designated, separated by --.
              (1)    host:portsport [xhost ...]
              (2)    host:portshost:sport [xhost ...]
              (3)    display [xhost ...]
              (4)    proxysport [xhost ...]
              (5)    host:port/httprequest [hosts ...]
              (6)    host:port/proxyheader [hosts...]

       The program repeats the connection on port sport to the other machine host port port.  If the machine, on
       which  the program runs, has two or more interfaces, type (2) can be used to repeat the connection on the
       specified interface shost.

       display [xhost ...]
              Abbreviating notation.  The program repeats the connection on display  number  display  to  the  X
              server designated by the environment variable DISPLAY.

       proxysport [xhost ...]
              Http  Proxy.   Specify  the  machine,  on which the program runs, and port sport in the http proxy
              settings of your WWW browser.

       host:port/httprequest [hosts ...]
              Repeats packets over http request.  request is the request specified in HTTP 1.0.  host:port/proxyheader [hosts...]

       host:port/proxyheader [hosts...]
              Type (6) repeats http request with header in the top of request headers.

       xhost  Only machines xhost can connect to the program.

       xhost/mask
              Only machines on specified networks are permitted to connect to the program.  In the case of class
              C network 192.168.1.0, for example, use 192.168.1.0/255.255.255.0.

       sport/udp
              Repeats UDP packets instead of TCP packets.

       port/ssl
              Repeats packets with encryption.

       sport/ssl
              Repeats packets with decryption.

       sport/http
              Repeats packets over http.

stone [-d] [-n] [-umax] [-fn] [-l] [-zSSL] st [--st] ...