I know that the default Tor proxy service listens on localhost:9050. I want to connect to this tor service from a remote machine over the internet. I am using port 9100. I edited the torrc file like this:-

SocksListenAddress (Server's internal IP address here)
SocksPort Server's Internal IP: 9100
SocksPolicy accept *

After this step, the tor proxy service will run on LAN. Now how do i access this tor proxy from a remote machine over WAN? Is it as easy as a port forward?(which maps the internal IP to the external WAN interface). Or is there any torrc configuration for it?

Is there any method to add authentication for this proxy so that only authorized users can access it?


You don't need the SocksListenAddress anymore, it's deprecated, you just need SocksPort (where is it's WAN IP) and the SocksPolicy isn't doing anything either, as the manual states:

Any address not matched by some entry in the policy is accepted.

You cannot add authentication. Tor's SocksPort does accept authentication but it accepts all logins as valid and uses it as a circuit isolation mechanism. SocksPolicy would allow you to restrict which IP addresses are allowed to access the SocksPort.

As for how to use it, you need to get whatever client application you have that supports SOCKS to use as it's SOCKS proxy.

N.B. Since SOCKS provides no cryptographic protection, all Tor traffic will traverse the WAN in plaintext. Anyone who can see WAN traffic can see exactly what Tor is being used for.

  • 1
    I guess a vpn or ssh will solve that plaintext problem by encrypting traffic between the proxy server and the remote machine.(A vpn over tor connection). Aug 27 '17 at 5:48
  • That's still a bad choice, you'd be better using SSH or a VPN to connect to the server providing the Tor service, since a VPN over Tor is harmful.
    – cacahuatl
    Aug 27 '17 at 13:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.