---
name: "afserver"
section: "1"
platform: "linux"
package: "apf-server"
version: "0.8.4-1+b1"
release: "Debian 8 (Jessie)"
platforms: ["linux"]
url: "https://new.carta.tech/afserver"
---

# afserver(1)

active port forwarder server

## NAME

afserver - active port forwarder server

## SYNOPSIS

**afserver \[** *options* **\]**

## DESCRIPTION

**Afserver** is a port forwarding program designed to be efficient and easy to use. It listens for incoming **afclient** connections at listenport (default listenport is 50126). After successful client authorization, **afserver** listens for incoming user connections. When a new user connection is opened, all the data is redirected to previously connected **afclient,** which redirects it to the specified destination host:port.

## EXAMPLES

**afserver**\
   program starts with default options (become a daemon)

**afserver -v**\
   verbose mode is enabled (program won't enter daemon mode)

**afserver -n localhost -l 5435 -m 6375**\
   program will listen on localhost:5435 for users and on localhost:6375 for clients

## OPTIONS

*Basic options*

**-n, --hostname NAME**\
   used when creating listening sockets (default: '')

**-l, --listenport \[HOST:\]PORT**\
   listening \[host:\]port number - users connect to it (default: 50127)

**-m, --manageport \[HOST:\]PORT**\
   manage \[host:\]port number - *afclient* connects to it (default: 50126)

**-V, --version**\
   display version number

**-h, --help**\
   prints help screen

*Authorization*

**--pass PASSWORD**\
   password used for client identification (default: no password)

*Configuration*

**-c, --cerfile FILE**\
   the name of the file with certificate (default: server-cert.pem)

**-A, --cacerfile FILE**\
   the name of the file with CA certificates (if used, require clients to have valid certificates)

**-d, --cerdepth**\
   the maximum depth of valid certificate-chains

**-k, --keyfile FILE**\
   the name of the file with RSA key (default: server.rsa)

**-f, --cfgfile FILE**\
   the name of the file with the configuration for the *afserver*

**-D, --dateformat FORMAT**\
   format of the date printed in logs (see 'man strftime' for details) (default: %d.%m.%Y %H:%M:%S)

**-t, --timeout N**\
   the timeout value for the client's connection (default: 5)

**--maxidle N**\
   the maximum idle time for the client's connection (default: disabled)

**-u, --users N**\
   the amount of users allowed to use this server (default: 5)

**-C, --clients N**\
   the number of allowed clients to use this server (default: 1)

**-r, --realm**\
   set the realm name (default: none)

**-R, --raclients N**\
   the number of allowed clients in remote administration mode to use this server (default: 1)

**-U, --usrpcli N**\
   the number of allowed users per client (default: $users)

**-M, --climode N**\
   strategy used to connect users with clients (default: 1)\
   Available strategies:\
     1\. fill first client before go to next

**-p, --proto TYPE**\
   type of server (tcp\|udp) - what protocol it will be operating for (default: tcp)

**-b, --baseport**\
   listenports are temporary and differ for each client

**-a, --audit**\
   additional information about connections are logged

**--nossl**\
   ssl is not used to transfer data (but it's still used to establish a connection) (default: ssl is used)

**--nozlib**\
   zlib is not used to compress data (default: zlib is used)

**--dnslookups**\
   try to obtain dns names of the computers rather than their numeric IP

*Logging*

**-o, --log LOGCMD**\
   log choosen information to file/socket

**-v, --verbose**\
   to be verbose - program won't enter the daemon mode (use several times for greater effect)

*IP family*

**-4, --ipv4**\
   use ipv4 only

**-6, --ipv6**\
   use ipv6 only

*HTTP PROXY*

**-P, --enableproxy**\
   enable http proxy mode

## REMOTE ADMINISTRATION

Currently available commands are:

**help**\
   display help

**lcmd**\
   lists available commands

**info**\
   prints info about server

**rshow**\
   display realms

**cshow X**\
   display clients in X realm

**ushow X**\
   display users in X realm

**quit**\
   quit connection

**timeout N X**\
   set timeout value in X realm

**audit {0\|1} X**\
   set audit mode in X realm

**dnslookups {0\|1} X**\
   set dnslookups mode in X realm

**dateformat S**\
   set dateformat

**kuser S**\
   kick user named S

**kclient N**\
   kick client with number N

## LOGCMD FORMAT

**LOGCMD** has the following synopsis: **target,description,msgdesc**

Where **target** is **file** or **sock**

**description** is **filename** or **host,port**

and **msgdesc** is the subset of:

**LOG\_T\_ALL,** **LOG\_T\_USER,** **LOG\_T\_CLIENT,** **LOG\_T\_INIT,** **LOG\_T\_MANAGE,** **LOG\_T\_MAIN,** **LOG\_I\_ALL,** **LOG\_I\_CRIT,** **LOG\_I\_DEBUG,** **LOG\_I\_DDEBUG,** **LOG\_I\_INFO,** **LOG\_I\_NOTICE,** **LOG\_I\_WARNING,** **LOG\_I\_ERR**

written without spaces.

  Example:

  file,filename,LOG\_T\_ALL,LOG\_I\_CRIT,LOG\_I\_ERR,LOG\_I\_WARNING

## SEE ALSO

[**afserver.conf**(5)](/afserver.conf/5.md), [**afclient**(1)](/afclient/1.md), [**afclient.conf**(5)](/afclient.conf/5.md)

## BUGS

**Afserver** is still under development. There are no known open bugs at the moment.

## REPORTING BUGS

Please report bugs to \<jeremian \[at\] poczta.fm\>

## AUTHOR

Jeremian \<jeremian \[at\] poczta.fm\>

## CONTRIBUTIONS

Alex Dyatlov \<alex \[at\] gray-world.net\>, Simon \<scastro \[at\] entreelibre.com\>, Ilia Perevezentsev \<iliaper \[at\] mail.ru\> Marco Solari \<marco.solari \[at\] koinesistemi.it\>, and Joshua Judson Rosen \<rozzin \[at\] geekspace.com\>

## LICENSE

Active Port Forwarder is distributed under the terms of the GNU General Public License v2.0 and is copyright (C) 2003-2007 jeremian \<jeremian \[at\] poczta.fm\>. See the file COPYING for details.