6
votes
Accepted
What's the correct syntax for listing multiple ExitNodes?
The correct syntax is as follows:
ExcludeExitNodes {fr},{de},{??}
StrictNodes 1
This should work for you.
- 3,236
4
votes
Accepted
Why do Tor hidden service operators bother with SSL/TLS encryption?
It has it's uses, of course! At least:
Integrity you know, that your server is responsible for cipher strength, and a potential malicious node in a chain will have some trouble-time due to that fact ...
- 5,401
4
votes
Question about Tor browser and whether if it routes all of my computer's network traffic through the Tor network
Only your internet surfing through the Tor browser is "protected" by using the Tor network, not the system (Operating System).
You can install the Tor service along with Obfsproxy and configure your ...
- 41
4
votes
Accepted
Are hidden services portable?
Yes, the .onion address stays the same no matter what network you're using to connect to the Tor network.
- 1,342
3
votes
Accepted
Tor 4.5.3 - obfs4 bridges can't connect to network
Obfs3 and Obfs4 have a goal of obscuring traffic so that it looks like arbitrary random data. Some environments have created policies such that if the protocol identified via deep packet inspection is ...
- 1,274
3
votes
Work censorship
If you need Tor access for work purposes, make arrangements through management. If it's for personal use, use your own device and network connection, such as a WiFi AP. Circumventing your employer's ...
- 2,989
3
votes
How can I configure my network so that when Tor is running no other traffic can leave the box?
You could use a virtual machine if you don't have an extra computer for Tails and install Whonix on it. Whonix has a gateway VM which works like a router and a workstation which connects to it. All ...
- 41
3
votes
What would happen when multiple servers are having the same onion hostname?
It depends on the exponent, if the people will use the same exponent - yes, they will have an identical keys. And - as far as I know - as soon you publish your HS descriptor, no descriptor with the ...
- 5,401
3
votes
Accepted
Run TOR relay with ipv6 only ("DualStack Lite")
You are right, it will not work. You need to have an ipv4 address. Only (full) dual-stack provides both ipv6 and ipv4.
DualStack Lite (very common in Germany) means you have only a native ipv6 ...
- 156
3
votes
Accepted
Does Tor protect against KRACK?
Yes, Tor is unaffected by KRACK.
At best KRACK could be used to perform some denial of service (stopping your packets from being sent), but it will not be able to forge or intercept Tor traffic, ...
- 10.8k
3
votes
Is Tor network traceable
Tor connections are in general secure.
However for a global adversary it would be possible to trace a Tor connection back to a user.
It is not known whether such a global adversary exists or if ...
- 426
2
votes
How can I configure my network so that when Tor is running no other traffic can leave the box?
This is very old thread discussed everywhere. The best solution for you, is to read the official FAQ, so called "Wiki".
See here the Tor Project Wiki page on IsolatingProxy.
Take a look, there are ...
- 31
2
votes
Any way to use Flash with Tor (to ONLY view country-blocked video streams)?
This is possible. You first need to get a fake IP for the specific region, then you need to activate the Flash plugin, which by default is disabled in the Tor Browser.
Check the answer of
IP address ...
- 41
2
votes
Tails Tor not starting
Tails uses UTC time. But the time of most devices is set up to the timezone of their sale, which can be considered as de-anonimization.
What I usually do is manual explicit setting the hardware clock ...
- 121
2
votes
Tor on my network's firewall?
Ah, I see now I want an Isolating Proxy (https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/IsolatingProxy). I've been looking through the documentation and wiki and didn't find it. Looking ...
- 41
2
votes
How to make a system like Whonix?
There are multiple correct answers to a question like this because its vauge. If you want a whonix copy why not use whonix? One other easy way to build a gateway would be to download the openwrt x86 ...
- 350
2
votes
Setting tor hidden service in /etc/hosts
Should be fine. You're just affecting connections originating at your own machine. Whether it is safe to use drupal's autoupdater at all is something you have to ask yourself, of course.
- 2,209
2
votes
Create a wifi hotspot by a laptop which pass all traffic through Tor (Windows)
Use Virtualbox with USB Wi-Fi dongle. Your host(Windows) will go to the Internet directly, and the Linux VM will be routed through it(NAT or bridge) - and USB 2.0(not 3.0 !) will be a mapping ...
- 5,401
2
votes
How to use tor exit node and VPN to break through GFW in China?
I'm not familiar with Tor, but I suppose you just want to go through the GFW in China with a VPS server.(Hong Kong Server is ok)
Most people in China nowadays use SS(shadowsocks)/SSR/V2ray to get ...
- 21
2
votes
How to block all non-tor network traffic on GNU/Linux?
You are right, this can be achieved by using iptables. This is described in Tor documentation. So, as a root, type:
iptables -F OUTPUT
iptables -A OUTPUT -j ACCEPT -m owner --uid-owner debian-tor
...
- 708
2
votes
I need help choosing my type of internet connection
First try "connect directly to Tor network". Normally it works. If it doesn't work then check whether you are using any proxy to connect to internet or not. Bridges are required when your ISP stops ...
- 647
2
votes
can't connect please help
The important bit of information from the logs is Network is unreachable [WSAENETUNREACH ]; NOROUTE. (Second line from the bottom.)
A couple of ideas:
Check you can connect to the internet normally (...
- 3,105
2
votes
Will Tor work in an "openDNS" system
Tor is mostly DNS agnostic. Building connections to relays is based on IP, so except for the connections that you make over it there are no DNS lookups.
The connections you make over it should be ...
- 10.8k
2
votes
Accepted
ORPort different from 443 and 80, will I actually help anyone?
The only time an "end user" will ever directly connect to your ORPort is when or if you are their guard, in those situations you might be able to help weakly censored users by providing it on a more ...
- 10.8k
2
votes
Tor and encryption
If you are using an external client (such as an onion pi) and then connect to the internet over that client, then yes you can use any browser you want and your traffic will be encrypted and sent over ...
- 73
2
votes
Tor stopped working upon installing new router/modem
[WARN] Could not bind to 127.0.0.1:9150: Permission denied [WSAEACCES ]
This is something local, not related to censorship or a new router (unless the router appears as an "unknown network" and has ...
- 10.8k
Only top scored, non community-wiki answers of a minimum length are eligible