27

The Tor FAQ also tries to answer this, but here's my attempt : Circuits get created on start-up and whenever Tor thinks it might need more in the future or right now. Once a circuits is actually used for the first time, it'll be marked dirty. Dirty circuits are used for new connections for 10 minutes by default (see MaxCircuitDirtiness in the manual). ...


15

Warning: The Tor Project advises against configuring systems manually like this. The safe method is the Tor Browser Bundle, you can not expect Chrome to keep you anonymous just like this. Another option might be to tunnel an entire (virtual) machine's traffic through Tor (like Tails OS does I think) but that is out of scope here. That error message is ...


15

I found it. ~/Library/Application Support/TorBrowser-Data/torrc I got the info from a bug tracking ticket: https://trac.torproject.org/projects/tor/ticket/13252 Thanks to https://tor.stackexchange.com/users/12737/canonizing-ironize who gave a pointer to the ticket in the answer to another question.


13

The easiest way is to emulate the network, such as with ExperimenTor (which uses virtual machines) or Shadow (which uses a discrete event simulator). With Shadow (which I have more experience with), a 20 node network should fit in 4 GB of RAM such as on a Amazon EC2 m1.large server. Another option is Chutney, which is simpler than either ExperimenTor or ...


13

Increasing the number of hops in a Tor circuit has various impacts : Performance is decreased since the path is longer and latency is bigger. A bigger path is also less reliable and more failures will occur. The same goes for Throughput of the circuit. Throughput is better when having three hops. Anonymity is not enhanced as a matter of fact. Increasing ...


13

Tor Browser Bundle uses the Data/Tor/torrc file inside its own directory. From Tor Project FAQ: If you installed Tor Browser Bundle, look for Data/Tor/torrc inside your Tor Browser Bundle directory. Core Tor puts the torrc file in /usr/local/etc/tor/torrc if you compiled Tor from source, and /etc/tor/torrc or /etc/torrc if you installed a pre-...


12

Yes, it is possible (through a source-code change), but it is a bad idea. If an attacker is observing (or controls) the first and last hop of your circuit they will very likely be able to de-anonymize you. Changing to four (or more) hop paths doesn't affect the probability of this occurring but it does slow down your Tor connection and increases the load on ...


12

Normally the Tor service should be started/stopped with either: sudo systemctl start/stop tor.service Or: sudo service tor start/stop Personally I've always used the service command because it is simpler. I'm guessing things get a little more complicated when you run multiple Tor instances, but I have no experience with that. Running Tor in a terminal runs ...


11

The geographical information comes from a so-called geoip file. This file has a mapping from IP address to country. This file (or database) is provided by Maxmind, a company that deals with such information. The Tor Project cleans up and converts this file and ships it with every Tor client. This company can forge its data to give you a wrong impression. ...


10

You can try to use Tortunnel by Moxie Marlinspike: Tortunnel is a partial Onion Proxy implementation that's designed to build single-hop circuits through Tor exit nodes Another possibility is to set AllowSingleHopCircuits 1 in your torrc. In this case you'll need to find exit relays which have the option set in their config.


10

Warning: be extremely careful about sending traffic through tor when not using the tor browser. Any unencrypted traffic will be seen by a potentially malicious exit node. Using any other browser besides tor browser to browse the internet is highly discouraged and will likely not provide any anonymity because your browser will give up your real ip address or ...


9

If your proxy cannot do CONNECT, you lose. Sorry. Most proxies actually do connect - else how would you visit gmail or anything else doing https - but they only do it for https on port 443. If your proxy does connect, set the HTTPProxy and HTTPSProxy config options in your torrc -- that will make tor make all requests through that proxy using the http ...


8

Yes, you can mix them. The example in the manpage even has that: ExcludeNodes SlowServer, ABCD1234CDEF5678ABCD1234CDEF5678ABCD1234, {cc}, 255.254.0.0/8


8

There's only about 70 relays with an IPv6 address. So you should probably connect over IPv6 about one time out of sixty. But that's only if you don't use entry guards (you do use entry guards by default). There is currently no client configuration option for not using IPv4. Also, if there was one, using that would sadly fail at the moment (see https://trac....


8

In regard to the server requirements, there are a few important differences between a hidden FTP service and a regular FTP service. Also, you should check your ftp server software to make sure it doesn't leak your IP address. Force the client to use passive mode, not active/port mode. In passive mode the client initiates both the control and the data ...


7

First of all, note that doing this is not supported by Tor and you'll be better served by setting up a proxy of your own somewhere (you lose all benefits that Tor provides by doing this and will introduce a lot of latency into your connections). Also note that very few exit relays will have this set if any, so it probably won't work anyways and it may result ...


7

Short answer: Download Tails. Long answer that more properly answers your qustion and use case: Once Tor is installed (I'll leave that to you; I recommend using the official Tor repos for Debian), add the following to your torrc: AutomapHostsOnResolve 1 DNSPort 53530 TransPort 9040 If you're using selinux (I'm not familiar ...


7

This is a known bug, due to the lack of developers working on the Expert bundle. Meanwhile, if you are looking for a workaround, you can use Tor binaries and files found in the TorBrowserBundle. You will find Tor/ and Data/ directories under c:\path-to-your-torbrowser-dir\TorBrowser\Browser. The rest should be easy. And you will get a console output with ...


6

I don't think there are any plans to deprecate FascistFirewall. At least the manpage does not say it is, unlike FirewallPorts. And yes, that's exactly the equivalent if you haven't also set FirewallPorts. In fact, it's how FascistFirewall is implemented. Maybe the log messages should be slightly change to not imply FascistFirewall is going away.


6

Yes, it can be multiple lines. The config option is a LINELIST type, just like ExitPolicy.


6

You can look up your own relay on Atlas and check your Exit Policy and flags. And yes, rejecting everything, like you do, makes you a non-exit.


6

First you need to install obfsproxy package. Then configure torrc file like @user263485 said: UseBridges 1 # This works for Ubuntu Linux, adjust the path according to your platform ClientTransportPlugin obfs3, scramblesuit exec /usr/bin/obfsproxy managed Bridge obfs3 <ip:port> <key> To obtain obfs3 bridges visit BridgeDB (step 2) and ...


6

Tor relies on TCP,please see more details about how Tor works in https://www.torproject.org/about/overview.html.en ,notice " Tor only works for TCP streams and can be used by any application with SOCKS support."So you can`t use Tor through UDP protocol.


6

Manually configuring a Tor Relay on OS X (Yosemite, Tor 0.2.5.11) This guide walks you through the process of configuring your very own tor relay explaining each step along the way. It's targeted for people interested in running a relay outside of the Tor Browser Bundle. Hopefully you'll find these steps concise and easy to follow - this is the manual ...


6

You can run tor.exe without Tor browser in this way: 1) Copy torrc.defaults into the directory in which tor.exe is 2) Open cmd prompt windows 3) chdir to the directory where tor.exe is 4) Execute cmd line: tor.exe -f .\torrc.defaults You will see tor is running and Socks listening on port 9150, Control listening on port 9151.


6

It is repeatedly warning you about the time being wrong. A synchronized clock is extremely important to make a connection to anything even if you've been able to download all of the consensus information. 7/8/2015 6:49:43 AM.695 [WARN] Our clock is 1 hours, 10 minutes behind the time published in the consensus network status document (2015-07-08 08:00:00 ...


6

Actually, there is an onion address for Tor: http://expyuzz4wqqyqhjn.onion/ The Tor Project runs quite a few onion addresses: https://onion.torproject.org/ I can't confirm if the Tor Browser uses this onion address for updating though.


6

You should prefer torsocks over proxychains, since torsocks is intended to block potential leaks. Especially in cases with tools like youtube-dl which might try to pass over execution to programs that can make network connections of their own in unexpected or attacker controlled ways. Specifically with proxychains, if anything wrapped in proxychains tries ...


6

No, .onion's are not exempt from DNS leaks. Since it's possible for people to run local DNS gTLDs, DNS infrastructure will generally respect and dutifully perform lookups for invalid domain names. DNS itself is agnostic to the gTLD being valid or not, with a few exceptions (for example .invalid should always fail). There is an RFC covering .onion which ...


6

This is a bug related to Windows' cmd.exe, the Tor processes doesn't print output as expected. One way around print out the resulting commands values is to pipe (|) it into the more command e.g. tor.exe -h | more


Only top voted, non community-wiki answers of a minimum length are eligible