Experience masking OpenVPN-tunnel using obfsproxy

To work in socks mode, we configure OpenVPN a little bit differently:

 #remote 1.2.3.4 1800 #    remote 1.2.3.4 81 #  obfsproxy- (!    ) socks-proxy-retry socks-proxy 127.0.0.1 81 #  socks proxy 

Considering the need to replace the address of the OpenVPN server with the address of the obfsproxy server, I do not see any particular benefit from the proxy mode — applications in which the connection addresses are tightly protected are still not zaproksirue.

#! / bin / sh
### BEGIN INIT INFO
# Provides: obfsproxy-openvpn
# Required-Start: $ remote_fs $ syslog
# Required-Stop: $ remote_fs $ syslog
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Short-Description: obfsproxy wrapper for openvpn
# Description: This file starts up obfsproxy configured to process obfuscated openvpn client connections.
### END INIT INFO

# Author: Vindicar <the.vindicar@gmail.com>

# Do NOT "set -e"

# PATH should only include / usr / * if it runs after the mountnfs.sh script
PATH = "/ sbin: / usr / sbin: / bin: / usr / bin: / usr / local / bin"
DESC = "obfsproxy wrapper for openvpn"
NAME = obfs-openvpn
DAEMON = "/ usr / local / bin / obfsproxy"

OBFSPROXY_KEYFILE = "/ etc / obfsproxy-openvpn.key"
SERVER_IP =?.?.?.? # <<< TODO: insert server address here
OPENVPN_PORT = 443 #port 443 due to use of sslh
OBFSPROXY_PORT = 81

DAEMON_ARGS = "- log-file /var/log/obfs-openvpn.log --log-min-severity warning \
--data-dir / tmp / obfs-openvpn \
scramblesuit --password-file $ OBFSPROXY_KEYFILE \
--dest $ SERVER_IP: $ OPENVPN_PORT server $ SERVER_IP: $ OBFSPROXY_PORT "
PIDFILE = / var / run / $ NAME.pid
SCRIPTNAME = / etc / init.d / $ NAME

# Exit if the package is not installed
[-x "$ DAEMON"] || exit 0

# Read configuration variable file if it is present
[-r / etc / default / $ NAME] &&. / etc / default / $ NAME

# Load the rcS variables
. /lib/init/vars.sh

# Define LSB log_ * functions.
# Depend on lsb-base (> = 3.2-14) to ensure that this file is present
# and status_of_proc is working.
. / lib / lsb / init-functions

#
# Function that starts the daemon / service
#
do_start ()
{
# Return
# 0 if daemon has been started
# 1 if daemon was already running
# 2 if daemon could not be started
start-stop-daemon --start --quiet --pidfile $ PIDFILE --exec $ DAEMON --test> / dev / null \
|| return 1
start-stop-daemon - start - background - quiet - make-pidfile - pidfile $ PIDFILE - exe $ DAEMON - \
$ DAEMON_ARGS \
|| return 2
# Add code here, if necessary, that waits
# to handle requests from services started
# on this one. As a last resort, sleep for some time.
}

#
# Function that stops the daemon / service
#
do_stop ()
{
# Return
# 0 if daemon has been stopped
# 1 if daemon was already stopped
# 2 if daemon could not be stopped
# other if a failure occurred
# EDIT: removed --name parameter since ssd matches
# will be relying on the pidfile to stop it.
start-stop-daemon --stop --quiet --retry = TERM / 30 / KILL / 5 --pidfile $ PIDFILE
RETVAL = "$?"
["$ RETVAL" = 2] && return 2
# Wait for children to finish
# and if the daemon is from ever in this script.
# If the conditions above are not satisfied then add some other code
# that waits
# needed by services started subsequently. A last resort is to
# sleep for some time.
# start-stop-daemon --stop --quiet --oknodo --retry = 0/30 / KILL / 5 --exec $ DAEMON
# ["$?" = 2] && return 2
# Many daemons don't exit their pidfiles when they exit.
rm -f $ PIDFILE
return "$ RETVAL"
}

#
# Function that sends a SIGHUP to the daemon / service
#
do_reload () {
#
# If the daemon can reload configuration without
# restarting (for example, when it is sent a SIGHUP),
# then implement that here.
#
start-stop-daemon --stop --signal 1 --quiet --pidfile $ PIDFILE
return 0
}

case "$ 1" in
start)
["$ VERBOSE"! = No] && log_daemon_msg "Starting $ DESC" "$ NAME"
do_start
case "$?" in
0 | 1) ["$ VERBOSE"! = No] && log_end_msg 0 ;;
2) ["$ VERBOSE"! = No] && log_end_msg 1 ;;
esac
;;
stop)
["$ VERBOSE"! = No] && log_daemon_msg "Stopping $ DESC" "$ NAME"
do_stop
case "$?" in
0 | 1) ["$ VERBOSE"! = No] && log_end_msg 0 ;;
2) ["$ VERBOSE"! = No] && log_end_msg 1 ;;
esac
;;
status)
status_of_proc "$ DAEMON" "$ NAME" && exit 0 || exit $?
;;
#reload | force-reload)
#
# Leave this commented out
# and leave 'force-reload' as an alias for 'restart'.
#
#log_daemon_msg "Reloading $ DESC" "$ NAME"
#do_reload
#log_end_msg $?
# ;;
restart | force-reload)
#
# If the "reload" option is then removed the
# 'force-reload' alias
#
log_daemon_msg "Restarting $ DESC" "$ NAME"
do_stop
case "$?" in
0 | 1)
do_start
case "$?" in
0) log_end_msg 0 ;;
1) log_end_msg 1 ;; # Old process is still running
*) log_end_msg 1 ;; # Failed to start
esac
;;
*)
# Failed to stop
log_end_msg 1
;;
esac
;;
*)
#echo "Usage: $ SCRIPTNAME {start | stop | restart | reload | force-reload}"> & 2
echo "Usage: $ SCRIPTNAME {start | stop | status | restart | force-reload}"> & 2
exit 3
;;
esac