only starts if configured to do so

now runs on the configured port

for security it only stores connections that are locally initiated

allowed connections are now identified by the stream digest (was just a counter in old implementation)

proxy now responds with errors where possible (old implementation just closed the stream) (http://tools.ietf.org/html/rfc1928 Chapter 3 and Chapter 6)

contains test to verify implementation