7 votes
Accepted

What's the correct syntax for listing multiple ExitNodes?

The correct syntax is as follows: ExcludeExitNodes {fr},{de},{??} StrictNodes 1 This should work for you.
  • 3,256
4 votes
Accepted

Why do Tor hidden service operators bother with SSL/TLS encryption?

It has it's uses, of course! At least: Integrity you know, that your server is responsible for cipher strength, and a potential malicious node in a chain will have some trouble-time due to that fact ...
  • 5,471
4 votes

Question about Tor browser and whether if it routes all of my computer's network traffic through the Tor network

Only your internet surfing through the Tor browser is "protected" by using the Tor network, not the system (Operating System). You can install the Tor service along with Obfsproxy and configure your ...
4 votes
Accepted

Are hidden services portable?

Yes, the .onion address stays the same no matter what network you're using to connect to the Tor network.
  • 1,342
3 votes
Accepted

Tor 4.5.3 - obfs4 bridges can't connect to network

Obfs3 and Obfs4 have a goal of obscuring traffic so that it looks like arbitrary random data. Some environments have created policies such that if the protocol identified via deep packet inspection is ...
  • 1,274
3 votes

How can I configure my network so that when Tor is running no other traffic can leave the box?

You could use a virtual machine if you don't have an extra computer for Tails and install Whonix on it. Whonix has a gateway VM which works like a router and a workstation which connects to it. All ...
3 votes

What would happen when multiple servers are having the same onion hostname?

It depends on the exponent, if the people will use the same exponent - yes, they will have an identical keys. And - as far as I know - as soon you publish your HS descriptor, no descriptor with the ...
  • 5,471
3 votes
Accepted

Run TOR relay with ipv6 only ("DualStack Lite")

You are right, it will not work. You need to have an ipv4 address. Only (full) dual-stack provides both ipv6 and ipv4. DualStack Lite (very common in Germany) means you have only a native ipv6 ...
3 votes
Accepted

Does Tor protect against KRACK?

Yes, Tor is unaffected by KRACK. At best KRACK could be used to perform some denial of service (stopping your packets from being sent), but it will not be able to forge or intercept Tor traffic, ...
  • 10.8k
3 votes

Is Tor network traceable

Tor connections are in general secure. However for a global adversary it would be possible to trace a Tor connection back to a user. It is not known whether such a global adversary exists or if ...
  • 426
2 votes

How to make a system like Whonix?

There are multiple correct answers to a question like this because its vauge. If you want a whonix copy why not use whonix? One other easy way to build a gateway would be to download the openwrt x86 ...
2 votes

Tails Tor not starting

Tails uses UTC time. But the time of most devices is set up to the timezone of their sale, which can be considered as de-anonimization. What I usually do is manual explicit setting the hardware clock ...
  • 121
2 votes

Tor on my network's firewall?

Ah, I see now I want an Isolating Proxy (https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/IsolatingProxy). I've been looking through the documentation and wiki and didn't find it. Looking ...
  • 41
2 votes

How can I configure my network so that when Tor is running no other traffic can leave the box?

This is very old thread discussed everywhere. The best solution for you, is to read the official FAQ, so called "Wiki". See here the Tor Project Wiki page on IsolatingProxy. Take a look, there are ...
2 votes

Create a wifi hotspot by a laptop which pass all traffic through Tor (Windows)

Use Virtualbox with USB Wi-Fi dongle. Your host(Windows) will go to the Internet directly, and the Linux VM will be routed through it(NAT or bridge) - and USB 2.0(not 3.0 !) will be a mapping ...
  • 5,471
2 votes

Setting tor hidden service in /etc/hosts

Should be fine. You're just affecting connections originating at your own machine. Whether it is safe to use drupal's autoupdater at all is something you have to ask yourself, of course.
  • 2,209
2 votes

can't connect please help

The important bit of information from the logs is Network is unreachable [WSAENETUNREACH ]; NOROUTE. (Second line from the bottom.) A couple of ideas: Check you can connect to the internet normally (...
2 votes

How to use tor exit node and VPN to break through GFW in China?

I'm not familiar with Tor, but I suppose you just want to go through the GFW in China with a VPS server.(Hong Kong Server is ok) Most people in China nowadays use SS(shadowsocks)/SSR/V2ray to get ...
  • 21
2 votes

How to block all non-tor network traffic on GNU/Linux?

You are right, this can be achieved by using iptables. This is described in Tor documentation. So, as a root, type: iptables -F OUTPUT iptables -A OUTPUT -j ACCEPT -m owner --uid-owner debian-tor ...
  • 708
2 votes

I need help choosing my type of internet connection

First try "connect directly to Tor network". Normally it works. If it doesn't work then check whether you are using any proxy to connect to internet or not. Bridges are required when your ISP stops ...
  • 657
2 votes

Will Tor work in an "openDNS" system

Tor is mostly DNS agnostic. Building connections to relays is based on IP, so except for the connections that you make over it there are no DNS lookups. The connections you make over it should be ...
  • 10.8k
2 votes
Accepted

ORPort different from 443 and 80, will I actually help anyone?

The only time an "end user" will ever directly connect to your ORPort is when or if you are their guard, in those situations you might be able to help weakly censored users by providing it on a more ...
  • 10.8k
2 votes

Tor and encryption

If you are using an external client (such as an onion pi) and then connect to the internet over that client, then yes you can use any browser you want and your traffic will be encrypted and sent over ...
2 votes

Tor stopped working upon installing new router/modem

[WARN] Could not bind to 127.0.0.1:9150: Permission denied [WSAEACCES ] This is something local, not related to censorship or a new router (unless the router appears as an "unknown network" and has ...
  • 10.8k
2 votes

Why do Darkweb Tor addresses change so often?

no technical reason here, usually it is used to achieve three main goals: audience refining You can give the new address only to the persons you trust hunting avoidance If there're too many ...
  • 5,471
2 votes
Accepted

tor outbound ssh connection visible in netstat

The IP address you posted belongs to the relay c4k3KS1. As you can see at the Atlas page it listens at port 22 for Tor connections. So in your netstat view there is no real SSH session, but a Tor ...
  • 8,683
2 votes
Accepted

How to verify that my ISP is not running a fake tor subnetwork

The Tor binary contains fingerprints of keys for the directory authorities. These are used to then load the consensus, which contains key material for all other relays. Unless your ISP has some new ...
  • 10.8k

Only top scored, non community-wiki answers of a minimum length are eligible