Better dial & read timeout value.
Add config test.
NewIPV4Mask function.
Parse allowedClients in config file and cmd line option.
Auth: check allowed clients before checking user password.
Check nonce not too early instead of exact match.

iOS creates new connection to authenticate, so adding random number
in nonce would make it harder to check nonce.
Parse header for CONNECT method to support authentication.