6 votes
Accepted

What's the correct syntax for listing multiple ExitNodes?

The correct syntax is as follows: ExcludeExitNodes {fr},{de},{??} StrictNodes 1 This should work for you.
user avatar
  • 3,236
4 votes
Accepted

Why do Tor hidden service operators bother with SSL/TLS encryption?

It has it's uses, of course! At least: Integrity you know, that your server is responsible for cipher strength, and a potential malicious node in a chain will have some trouble-time due to that fact ...
user avatar
  • 5,401
4 votes

Question about Tor browser and whether if it routes all of my computer's network traffic through the Tor network

Only your internet surfing through the Tor browser is "protected" by using the Tor network, not the system (Operating System). You can install the Tor service along with Obfsproxy and configure your ...
user avatar
4 votes
Accepted

Are hidden services portable?

Yes, the .onion address stays the same no matter what network you're using to connect to the Tor network.
user avatar
  • 1,342
3 votes
Accepted

Tor 4.5.3 - obfs4 bridges can't connect to network

Obfs3 and Obfs4 have a goal of obscuring traffic so that it looks like arbitrary random data. Some environments have created policies such that if the protocol identified via deep packet inspection is ...
user avatar
  • 1,274
3 votes

Work censorship

If you need Tor access for work purposes, make arrangements through management. If it's for personal use, use your own device and network connection, such as a WiFi AP. Circumventing your employer's ...
user avatar
  • 2,989
3 votes

How can I configure my network so that when Tor is running no other traffic can leave the box?

You could use a virtual machine if you don't have an extra computer for Tails and install Whonix on it. Whonix has a gateway VM which works like a router and a workstation which connects to it. All ...
user avatar
3 votes

What would happen when multiple servers are having the same onion hostname?

It depends on the exponent, if the people will use the same exponent - yes, they will have an identical keys. And - as far as I know - as soon you publish your HS descriptor, no descriptor with the ...
user avatar
  • 5,401
3 votes
Accepted

Run TOR relay with ipv6 only ("DualStack Lite")

You are right, it will not work. You need to have an ipv4 address. Only (full) dual-stack provides both ipv6 and ipv4. DualStack Lite (very common in Germany) means you have only a native ipv6 ...
user avatar
3 votes
Accepted

Does Tor protect against KRACK?

Yes, Tor is unaffected by KRACK. At best KRACK could be used to perform some denial of service (stopping your packets from being sent), but it will not be able to forge or intercept Tor traffic, ...
user avatar
  • 10.8k
3 votes

Is Tor network traceable

Tor connections are in general secure. However for a global adversary it would be possible to trace a Tor connection back to a user. It is not known whether such a global adversary exists or if ...
user avatar
  • 426
2 votes

How can I configure my network so that when Tor is running no other traffic can leave the box?

This is very old thread discussed everywhere. The best solution for you, is to read the official FAQ, so called "Wiki". See here the Tor Project Wiki page on IsolatingProxy. Take a look, there are ...
user avatar
2 votes

Any way to use Flash with Tor (to ONLY view country-blocked video streams)?

This is possible. You first need to get a fake IP for the specific region, then you need to activate the Flash plugin, which by default is disabled in the Tor Browser. Check the answer of IP address ...
user avatar
2 votes

Tails Tor not starting

Tails uses UTC time. But the time of most devices is set up to the timezone of their sale, which can be considered as de-anonimization. What I usually do is manual explicit setting the hardware clock ...
user avatar
  • 121
2 votes

Tor on my network's firewall?

Ah, I see now I want an Isolating Proxy (https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/IsolatingProxy). I've been looking through the documentation and wiki and didn't find it. Looking ...
user avatar
  • 41
2 votes

How to make a system like Whonix?

There are multiple correct answers to a question like this because its vauge. If you want a whonix copy why not use whonix? One other easy way to build a gateway would be to download the openwrt x86 ...
user avatar
2 votes

Setting tor hidden service in /etc/hosts

Should be fine. You're just affecting connections originating at your own machine. Whether it is safe to use drupal's autoupdater at all is something you have to ask yourself, of course.
user avatar
  • 2,209
2 votes

Create a wifi hotspot by a laptop which pass all traffic through Tor (Windows)

Use Virtualbox with USB Wi-Fi dongle. Your host(Windows) will go to the Internet directly, and the Linux VM will be routed through it(NAT or bridge) - and USB 2.0(not 3.0 !) will be a mapping ...
user avatar
  • 5,401
2 votes

How to use tor exit node and VPN to break through GFW in China?

I'm not familiar with Tor, but I suppose you just want to go through the GFW in China with a VPS server.(Hong Kong Server is ok) Most people in China nowadays use SS(shadowsocks)/SSR/V2ray to get ...
user avatar
  • 21
2 votes

How to block all non-tor network traffic on GNU/Linux?

You are right, this can be achieved by using iptables. This is described in Tor documentation. So, as a root, type: iptables -F OUTPUT iptables -A OUTPUT -j ACCEPT -m owner --uid-owner debian-tor ...
user avatar
  • 708
2 votes

I need help choosing my type of internet connection

First try "connect directly to Tor network". Normally it works. If it doesn't work then check whether you are using any proxy to connect to internet or not. Bridges are required when your ISP stops ...
user avatar
  • 647
2 votes

can't connect please help

The important bit of information from the logs is Network is unreachable [WSAENETUNREACH ]; NOROUTE. (Second line from the bottom.) A couple of ideas: Check you can connect to the internet normally (...
user avatar
2 votes

Will Tor work in an "openDNS" system

Tor is mostly DNS agnostic. Building connections to relays is based on IP, so except for the connections that you make over it there are no DNS lookups. The connections you make over it should be ...
user avatar
  • 10.8k
2 votes
Accepted

ORPort different from 443 and 80, will I actually help anyone?

The only time an "end user" will ever directly connect to your ORPort is when or if you are their guard, in those situations you might be able to help weakly censored users by providing it on a more ...
user avatar
  • 10.8k
2 votes

Tor and encryption

If you are using an external client (such as an onion pi) and then connect to the internet over that client, then yes you can use any browser you want and your traffic will be encrypted and sent over ...
user avatar
2 votes

Tor stopped working upon installing new router/modem

[WARN] Could not bind to 127.0.0.1:9150: Permission denied [WSAEACCES ] This is something local, not related to censorship or a new router (unless the router appears as an "unknown network" and has ...
user avatar
  • 10.8k

Only top scored, non community-wiki answers of a minimum length are eligible