# ============================================================================
# proxychains4.conf -- Hardened Configuration for Pentesting
# Place at: /etc/proxychains.conf or ~/.proxychains/proxychains.conf
# ============================================================================

# --- CHAIN TYPE ---
# strict_chain: all proxies in order, fail if any is down
# dynamic_chain: skip dead proxies, at least one must work
# random_chain: random order each connection
# round_robin_chain: round-robin through proxy list

dynamic_chain
# strict_chain
# random_chain
# round_robin_chain

# --- CHAIN LENGTH (for random_chain only) ---
# chain_len = 2

# --- DNS ---
proxy_dns                                   # resolve DNS through proxy chain
# proxy_dns_daemon 5353                     # use Tor DNS port

# --- TIMEOUTS ---
tcp_read_time_out 15000                     # 15s read timeout
tcp_connect_time_out 8000                   # 8s connect timeout

# --- LOGGING ---
# quiet_mode                               # no output (uncomment for cron/scripts)

# --- PROXY LIST ---
# format: type host port [user pass]

[ProxyList]

# Tor SOCKS5 (default)
socks5 127.0.0.1 9050

# Tor isolated ports for specific tools
# socks5 127.0.0.1 9060   # nmap-dedicated circuit
# socks5 127.0.0.1 9070   # curl-dedicated circuit

# Burp Suite HTTP proxy
# http 127.0.0.1 8080

# Additional SOCKS proxies (chain through multiple)
# socks5 <proxy2-ip> <port>
# socks5 <proxy3-ip> <port>

# === MULTI-HOP EXAMPLE ===
# Uncomment strict_chain above and add multiple proxies:
# socks5 127.0.0.1 9050         # hop 1: local Tor
# socks5 <vps-ip> 1080          # hop 2: VPS SOCKS proxy
# socks5 <exit-ip> 1080         # hop 3: exit proxy