# pacman -S squid

# nano /etc/squid/squid.conf

# systemctl enable squid.service

# squid -k check

# squid -z

# systemctl start squid.service

# gid=`id -g proxy`
# iptables -t nat -A OUTPUT -p tcp –dport 80 -m owner –gid-owner $gid -j ACCEPT
# iptables -t nat -A OUTPUT -p tcp –dport 80 -j DNAT –to-destination 127.0.0.1:3128

# iptables-save > /etc/iptables/iptables.rules

# systemctl enable iptables.service

$ yum install rpm-build openldap-devel pam-devel openssl-devel libgssapi-devel -y

$ wget http://sourceforge.net/projects/ss5/files/ss5/3.8.9-6/ss5-3.8.9-6.src.rpm/download

$ rpmbuild –rebuild ss5-3.8.9-6.src.rpm

$ rpm -ivh rpmbuild/RPMS/i386/ss5-3.8.9-6.i386.rpm

$ nano /etc/opt/ss5/ss5.conf

auth    0.0.0.0/0               –               –

$ service ss5 start

$ nano /etc/sysconfig/iptables

-A INPUT -m state –state NEW -m tcp -p tcp –dport 1080 -j ACCEPT

$ nano /etc/init.d/ss5

export SS5_SOCKS_PORT=شماره پورت

$ aptitude install stunnel

$ cd /etc/stunnel

$ openssl genrsa -out private.pem 2048
$ openssl req -new -x509 -key private.pem -out cacert.pem -days 365
$ cat private.pem cacert.pem >> /etc/stunnel/stunnel.pem

$ touch /etc/stunnel/stunnel.conf

setuid = stunnel4
setgid = stunnel4
pid = /var/lib/stunnel4/stunnel4.pid

socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1

debug = 5

[proxy]
accept = 7080

connect = 127.0.0.1:3128

cert = /etc/stunnel/stunnel.pem

$ nano /etc/default/stunnel4

$ service stunnel4 restart

  $ touch /etc/stunnel/stunnel.conf

setuid = stunnel4
setgid = stunnel4
pid = /var/lib/stunnel4/stunnel4.pid
debug = 7
output = /var/log/stunnel4/stunnel.log
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
client = yes
[stunnel]
accept = 7080
connect = SERVER_IP:7080

$ service stunnel4 restart

socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
[stunnel]
accept = 7080
connect = SERVER_IP:7080
client = yes