4

I'm trying to make a tor relay server over a http proxy on a ubuntu 14.04 lts machine.

Log output:

$ cat /var/log/tor/log
Aug 17 18:19:06.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening new log file.
Aug 17 18:19:06.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.
Aug 17 18:19:07.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.
Aug 17 18:19:08.000 [notice] Bootstrapped 5%: Connecting to directory server.
Aug 17 18:20:43.000 [notice] Interrupt: exiting cleanly.
Aug 17 18:20:45.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening log file.
Aug 17 18:20:45.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.
Aug 17 18:20:45.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.
Aug 17 18:20:45.000 [notice] Configured to measure statistics. Look for the *-stats files that will first be written to the data directory in 24 hours from now.
Aug 17 18:20:46.000 [notice] Your Tor server's identity key fingerprint is 'ididntedittheconfig 511FBDFE23658FB9C76695C2251753ED22F4D054'
Aug 17 18:23:56.000 [warn] eventdns: All nameservers have failed
$

My network settings are correct,i can connect to internet:

computer > router > http_proxy > internet

My torrc after correction looks like that:

HTTPSProxy 192.168.x.x:44355

ORPort 443
Exitpolicy reject *:*
Nickname ididntedittheconfig
ContactInfo human@...

DNS settings:

$ cat /etc/resolv.conf  
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
#     DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
nameserver 127.0.0.1
$
Improve this question

1 Answer 1

Reset to default
1

First of all that isn't how you make Tor use an HTTP proxy.

HTTPProxy host[:port]

Tor will make all its directory requests through this host:port (or host:80 if port is not specified), rather than connecting directly to any directory servers.

The option you probably want is this one

HTTPSProxy host[:port]

Tor will make all its OR (SSL) connections through this host:port (or host:443 if port is not specified), via HTTP CONNECT rather than connecting directly to servers. You may want to set FascistFirewall to restrict the set of ports you might try to connect to, if your HTTPS proxy only allows connecting to certain ports.

Second of all, you can't make it be a relay over a proxy, you're going to have to have port 443 exposed so that users trying to connect to your relay can connect to your ORPort.

Improve this answer
13
  • thanks for answering,if i understand the right option is the HTTPS one?Also are you saying that it's impossible to make a relay over a proxy or dangerous? If i understand this related topic,it's not dangerous to have port 443 exposed as long as its for HTTPS only.
    – userv
    Commented Aug 16, 2017 at 22:03
  • Proxy is for outbound connections, generally its for clients who are on networks that require the use of some gateway proxy to access any resources outside of the local network. Relays need to be accessible from the internet, clients do not. Are you sure it's a relay that you want to run?
    – cacahuatl
    Commented Aug 16, 2017 at 23:12
  • I used the HTTPS option,still the same result,any idea?
    – userv
    Commented Aug 17, 2017 at 3:35
  • Provide a full log output, please.
    – cacahuatl
    Commented Aug 17, 2017 at 4:46
  • tor log file added.
    – userv
    Commented Aug 17, 2017 at 15:26

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .