stone(1)

💖 stone(1) 💖

okay bestie, we're in section 1 of the General Commands Manual and the girl of the hour is stone. she's a tiny, adorable packet repeater and she has ZERO chill. (also psst — the original page is written in Japanese, so this is the translated-into-girlfriend-voice edition. same facts, better energy. 💅)

---

🌸 NAME 🌸

stone — Simple TCP/UDP Packet Repeater. that's the whole name. short, sweet, slays. ✨

---

✨ SYNOPSYS ✨

(yes it's spelled SYNOPSYS in the original and honestly? iconic. we do not correct her. 💀)

stone [-d] [-n] [-u max] [-f n] [-l] [-z SSL] st [-- st]...

---

🎀 OPTIONS 🎀

• -d — cranks up the debug level. 📈 more debug, more... debug.
• -z — the SSL encryption option. that's her entire personality. 🔐
• -n — instead of host names and service names, she shows you the IP addresses and service numbers. lowkey the raw unfiltered truth. 🔢
• -u — sets the maximum number of sources of UDP packets she'll handle at the same time. the default is 10. 🫧
• -f — sets the number of child processes. the default is no child processes at all — she is an only child, periodt. 👶
• -l — sends error messages and friends out to syslog. 📝
• st — the main character!! she's one of the following, and ngl you can pass multiple sts by separating them with --. 💫

(1)    host:port sport [xhost ...]
(2)    host:port shost:sport [xhost ...]
(3)    display [xhost ...]
(4)    proxy sport [xhost ...]
(5)    host:port/http request [hosts ...]
(6)    host:port/proxy header [hosts...]

so the tea is this: stone takes connections coming in to port sport on the machine she's running on, and relays them to port port on another machine host. and on machines with multiple interfaces, you do it like form (2) — specify the interface address shost — and then only connections to that one specific interface get forwarded. she's picky like that, we respect it. 🫶

• display [xhost ...] — the shorthand notation for X protocol relaying. she forwards connections to display number display over to the X server that you named in the DISPLAY environment variable. ✨
• proxy sport [xhost ...] — it's an http proxy. in your WWW browser's http proxy settings you just put in the machine stone is running on, plus port sport. done. 🧚
• host:port/http request [hosts ...] — relays packets by carrying them on an http request. request is a request as defined by HTTP 1.0. 📨
• host:port/proxy header [hosts...] — adds header to the very front of the http request header and then relays. 🎀

now, if you list out xhosts, you can restrict which machines are allowed to connect to stone. give her machine names, or their IP addresses, separated by whitespace, and she'll relay connections only from those machines. gatekeeping, but make it networking. 🚪

and if you stick a /mask on an xhost, she'll allow connections from machines on a specific network. for example, for the class C network 192.168.1.0, you'd write 192.168.1.0/255.255.255.0. 📝

• put /udp on sport → instead of relaying TCP packets, she relays UDP packets. 🛸
• put /ssl on port → packets get relayed encrypted with SSL. 🔒
• put /ssl on sport → packets that are encrypted with SSL get decrypted and then relayed. 🔓
• put /http on sport → she relays packets carried on an http request. 🌐

---

🦋 DESCRIPTION 🦋

stone is an application-level TCP & UDP packet repeater. she relays TCP packets or UDP packets from inside a firewall to the outside, or from the outside to the inside. both directions, no drama. 🫧

here's what makes her special:

1. Win32 support — firewalls used to mostly be built out of UNIX machines, but lately WindowsNT is getting used more and more. stone can be run easily on WindowsNT or Windows95. and obviously she works on UNIX machines too — Linux, FreeBSD, BSD/OS, SunOS, Solaris, HP-UX, the whole roster. 👑
2. Simplicity — she's only about 2000 lines (C language), which keeps the possibility of security holes to an absolute minimum. small girl, huge brain. 🧠
3. SSLeay support — by using Eric Young's SSLeay, she can encrypt/decrypt packets while relaying them. 🔐
4. http proxy — she can also be used as a simple http proxy. multitasking queen. 💅

---

🌈 EXAMPLE 🌈

outer:    the machine outside the firewall
inner:    the machine inside the firewall
fwall:    the firewall. run stone on this machine

(the original labels these in Japanese — outer is the machine outside the firewall, inner is the machine inside it, and fwall is the firewall itself, the box you actually run stone on. 🧱)

relay X protocol to the X server named in DISPLAY:

stone 7 outer

then on outer, set DISPLAY=inner:7 and run your X client. 🖥️

relay telnet protocol to outer:

stone outer:telnet 10023

then on inner, run telnet fwall 10023. 📞

relay DNS queries to outer:

stone outer:domain/udp domain/udp

then on inner, run nslookup - fwall. 🔎

relay NTP to outer:

stone outer:ntp/udp ntp/udp

then on inner, run ntpdate fwall. ⏰

make a WWW server https-capable:

stone localhost:http 443/ssl

then hit https://fwall/ in your WWW browser. 🌐

SSL-ify telnet:

stone localhost:telnet 10023/ssl

then on inner, run SSLtelnet -z ssl fwall 10023. 🔐

http proxy:

stone proxy 8080

when fwall is an http proxy (port 8080):

stone fwall:8080/http 10023 'POST http://outer:8023 HTTP/1.0'
stone localhost:telnet 8023/http

run stone on inner and on outer respectively, and packets get relayed over http. 🔁

stone fwall:8080/proxy 9080 'Proxy-Authorization: Basic c2VuZ29rdTpoaXJvYWtp'

this one is for browsers that don't support proxy authentication. 🙈

---

👑 COPYRIGHT 👑

all copyright relating to this stone belongs to the original author, 仙石浩明 (Sengoku Hiroaki). this stone is free software that follows the GNU General Public License (GPL). if you're using it personally, there are no restrictions on modifying or duplicating it. if you're going to distribute it, please follow the GPL. 🫶

---

💀 DISCLAIMER 💀

this stone comes with no warranty. the original author takes no responsibility for any damages that arise from using this stone. read the GPL for the full details, bestie. no cap. ⚠️

---

🦋 AUTHOR 🦋

仙石 浩明 (Sengoku Hiroaki) sengoku@gcd.org http://www.gcd.org/sengoku/

---

and that's the whole page!! this was Version 2.0, straight from the source, and she ate, no crumbs. go relay something responsibly. mwah 💖🎀🦋