# Install cntlm with Homebrew, apk, apt, dnf, MacPorts, Nix, zypper
NTLM authentication proxy with tunneling. Version 0.92.3 via Homebrew; verified from local package data. Also installable with debian: sudo apt install cntlm.
## Install
```sh
sudo av install brew:cntlm
```
Additional install commands:
### macOS
- Homebrew (100%):
```sh
brew install cntlm
```
Evidence: local Homebrew formula metadata
- MacPorts (94%):
```sh
sudo port install cntlm
```
Evidence: MacPorts ports tree: net/cntlm/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
### Linux
- apk (92%):
```sh
sudo apk add cntlm
```
Evidence: Alpine Linux edge package indexes: cntlm from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
- Debian apt (92%):
```sh
sudo apt install cntlm
```
Evidence: Debian stable package indexes: cntlm from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
- dnf (92%):
```sh
sudo dnf install cntlm
```
Evidence: Fedora Rawhide package metadata: cntlm from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst
- Nix (92%):
```sh
nix profile install nixpkgs#cntlm
```
Evidence: nixpkgs package indexes: pkgs/by-name/cn/cntlm/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- zypper (92%):
```sh
sudo zypper install cntlm
```
Evidence: openSUSE Tumbleweed package metadata: cntlm from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst
## Package facts
- **Package key:** brew:cntlm
- **Package manager:** Homebrew
- **Version:** 0.92.3
- **Source summary:** NTLM authentication proxy with tunneling
- **Homepage:**
- **Generated:** 2026-08-03T19:37:03+00:00
## Executables
- cntlm (alias)
## Install behavior
- Bottle: not available
## Freshness
- Page generated: 2026-08-03
- Package-manager version: 0.92.3
## Project history and usage
Cntlm is a small C NTLM/NTLM Session Response/NTLMv2 authenticating HTTP proxy with TCP/IP tunneling, built to let applications that lack NTLM support work behind corporate Microsoft-style proxy infrastructure.
### Project history
The official SourceForge site presents Cntlm as a cross-platform proxy written in plain C with no external dependencies, connection caching, tunneling, SOCKS5 mode, and support for parent proxy failover. The project's public news shows active 0.35-era work in 2007, a larger 0.91 rewrite/testing cycle in 2010, and 0.92.x Windows and packaging fixes in 2011-2012.
### Adoption history
Cntlm was adopted by Unix users working behind NTLM-authenticated corporate proxies, especially when command-line package managers, browsers, version-control clients, or build tools could use a normal local HTTP proxy but could not authenticate to NTLM directly. This batch input records packages in Alpine, Homebrew, Debian, Fedora, MacPorts, Nix, Ubuntu, and openSUSE.
### How it is used
Users configure usernames, domains, parent proxies, and password hashes in cntlm.conf or cntlm.ini, then point applications at the local Cntlm listener. The official site emphasizes authenticated connection reuse, multiple parent proxies, TCP/IP port forwarding, SOCKS5 proxy mode, and running on Unix and Windows.
### Why package nerds care
Cntlm is significant as a pragmatic corporate-network survival package: small, old, and often invisible, but essential when bootstrap tools such as package managers, Git/SVN, language installers, or build systems need ordinary HTTP proxy access through an NTLM-only network.
### Timeline
- 2007: Version 0.35 brought FreeBSD support, Debian packaging visibility, and built-in SOCKS5 proxy support.
- 2010: 0.91 release candidates tested a major rewrite with standalone proxy behavior, WWW authentication support, Windows installer work, and packaging targets.
- 2011: Version 0.92 appeared with bug fixes and feature work after the 0.35.1 stable era.
- 2012: 0.92.3 and updated manual/WebSVN notes were published while 0.93 testing was requested.
### Related projects
- NTLMAPS is the older Python NTLM proxy that Cntlm documentation compares itself against.
- Squid, Tinyproxy, WinGate, NetCache, and Microsoft ISA Server appear in Cntlm's own compatibility and proxy discussion.
### Sources
-
-
-
## Security Notes
formula declares a Homebrew service.
- **Geiger risk:** orange / medium
- formula declares a Homebrew service
## Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
## Configuration files
- Unix: /etc/cntlm.conf, /usr/local/etc/cntlm.conf
- Windows: %PROGRAMFILES%\Cntlm\cntlm.ini
## Credential files
- Unix: /etc/cntlm.conf, /usr/local/etc/cntlm.conf
- Windows: %PROGRAMFILES%\Cntlm\cntlm.ini
## Other Package-Manager Records
- Debian apt - cntlm - 0.92.3-1.3: normalized package name match | Debian stable package indexes: cntlm from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Fast NTLM authentication proxy with tunneling | http://cntlm.sourceforge.net/
- Nix - cntlm: normalized package name match | nixpkgs package indexes: pkgs/by-name/cn/cntlm/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - cntlm - 0.92.3-1.3build1: normalized package name match | Ubuntu 24.04 LTS package indexes: cntlm from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Fast NTLM authentication proxy with tunneling | http://cntlm.sourceforge.net/
- apk - cntlm - 0.92.3-r5: normalized package name match | Alpine Linux edge package indexes: cntlm from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | NTLM Session Response / NTLMv2 authenticating HTTP proxy | https://cntlm.sourceforge.net/
- apk - cntlm-doc - 0.92.3-r5: normalized package name match | Alpine Linux edge package indexes: cntlm-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | NTLM Session Response / NTLMv2 authenticating HTTP proxy (documentation) | https://cntlm.sourceforge.net/
- apk - cntlm-openrc - 0.92.3-r5: normalized package name match | Alpine Linux edge package indexes: cntlm-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | NTLM Session Response / NTLMv2 authenticating HTTP proxy (OpenRC init scripts) | https://cntlm.sourceforge.net/
- dnf - cntlm - 0.92.3-35.fc45: normalized package name match | Fedora Rawhide package metadata: cntlm from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Fast NTLM authentication proxy with tunneling | http://cntlm.sourceforge.net/
- zypper - cntlm - 0.94.0-1.3: normalized package name match | openSUSE Tumbleweed package metadata: cntlm from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Fast NTLM authentication proxy with tunneling | https://github.com/versat/cntlm
- MacPorts - cntlm: normalized package name match | MacPorts ports tree: net/cntlm/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
## Combined YAML source
View the package source record on GitHub. [combined/cntlm.yml](https://github.com/mxcl/pkgdb/blob/main/combined/cntlm.yml)
## Sources
- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph