16
The Tor Project's official guide is available here. It has instructions on how to set up an obfs4 bridge for several platforms, including Debian and Ubuntu. Don't forget to make sure that your OR port and your obfs4 port must be publicly reachable. Tor automatically tests its OR port but it currently (as of August 2019) does not test its obfs4 port. You can ...
5
In your torrc there is the line
ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy --managed
Furthermoer the log file states:
Jun 08 21:33:05.000 [warn] Could not launch managed proxy executable at '/usr/bin/obfs4proxy' ('Operation not permitted').
According to the manpage of obfs4proxy there is no option --managed. This was used for obfsproxy. So if ...
5
From the obfs4proxy README:
The autogenerated obfs4 bridge parameters are placed in
DataDir/pt_state/obfs4_state.json. To ease deployment, the client side
bridge line is written to DataDir/pt_state/obfs4_bridgeline.txt.
So /var/lib/tor/pt_state/obfs4_bridgeline.txt.
4
Great explanation, it helped me a lot. Like to add the following; These days I do not see a lot of obfs4 traffic yet. If you want to publish as an obfs3 AND obfs4 bridge relay you can change the line
ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy
to
ServerTransportPlugin obfs3,obfs4 exec /usr/bin/obfs4proxy
You only need to install obfs4 as ...
3
Make sure your time zone and time settings are correct, if your system clock time is off, obfs4 will fail to connect.
Tails automatically synchronize time upon start, but sometimes the time synchronization may fail(the OS notify you when that happens). I'm not sure which timezone you're in, however, as a last resort, if you own the computer you're using and ...
3
Obfs3 and Obfs4 have a goal of obscuring traffic so that it looks like arbitrary random data. Some environments have created policies such that if the protocol identified via deep packet inspection is unknown, block it. By design, obfs3/4 will never be fingerprinted as an existing protocol and therefore blocked these environments.
When you attempted to ...
2
I have solved this problem. Under Windows 7, the absolute path must be used for the obfs4proxy configuration in torrc-default; the relative path for obfs4proxy plugin doesn't work!
## obfs4proxy configuration
ClientTransportPlugin obfs2,obfs3,obfs4,scramblesuit exec E:\Tor Browser\Browser\TorBrowser\Tor\PluggableTransports\obfs4proxy
2
I have finally found a solution to this problem. For me, the offender was the /lib/systemd/system/tor@default.service file. I was directed by Tor ops to modify this file to include only the following after the "Hardening" comment:
# Hardening
AppArmorProfile=
NoNewPrivileges=yes
PrivateTmp=no
Comment out or delete everything else and you will no longer get ...
2
You probably want to have a read through the Pluggable Transport specification, they're controlled and configured through environment variables. You'll need to set them appropriately to get it to work with OpenVPN. Note that obfs4 also requires the client to have a "certificate" to be able to connect.
I'm unsure why tor cannot terminate obfs4, maybe you've ...
2
You can edit your ClientTransportPlugin or ServerTransportPlugin for obfs4proxy to include a -logLevel followed by one of ERROR,WARN,INFO, or DEBUG, an -enableLogging=true flag to enable logging, and a further -unsafeLogging=true flag which removed the address scrubbing. For example:
ClientTransportPlugin obfs3,obfs4,scramblesuit exec /usr/local/bin/...
2
You could fix your problem with apparmor like this:
First open /etc/apparmor.d/abstractions/tor with your favorite editor (with root user)
sudo gedit /etc/apparmor.d/abstractions/tor
Then change the /usr/bin/obfs4proxy PUx, to /usr/bin/obfs4proxy ix, and save it!
And after that reboot
2
A program that wants to connect to obfsproxy must first
speak the Socks4 protocol with obfsproxy. obfsproxy also has to be started with the right Tor pluggable transport enviroment variables.
There is this project:
github.com/twisteroidambassador/pluggabletransportadapter
that handles Socks4 startup protocol and starting obfsproxy with the right ...
2
In other document I read about if all of this Directory Servers become compromised then relays work as a cache to give the clients a list of Tor servers so it is probably not possible to shutdown Tor network completely without Directory Authorities (another article said that clients also have a small cache of Tor Servers addresses).
There are a few ...
1
Sadly, getting bridges from bridges.torproject.org automatically to torrc is not possible without some kind of automation. As for what can be done, you have these options:
Make a program that solves captchas (you can use "captcha solving services" for that, just google it and you'll find a bunch of sites that can do that) for you and sets the ...
1
I managed to get it working by setting the tor Data Directory to the same Data Directory of TorBrowser.
I added this to my torrc:
DataDirectory /Users/armin/Library/Application Support/TorBrowser-Data/Tor
I don't know why this works! but I guess its about the cached data which is not present in the cli tor, but its available in the TorBrowser data.
if ...
1
The Tor Project put out a basic obfs4 Transport Evaluation. The pertinent quote is:
The (obfs4) design improves on the vulnerability to censorship based
on active attackers identifying suspect flows and attempting to
confirm which protocol is running via active attacks
The page goes on to say that it would be very difficult and expensive to try to ...
1
Based upon the code that Andrei posted, it seems that 0 means IAT obfuscation is off, 1 means it is enabled, and 2 is paranoid.
A random paper I found says IAT stands for "Inter-Arrival Time", another random website I found says IAT is "The amount of time that elapses after the receipt of a packet until the next packet arrives"
Of course,...
1
I have the same problem. Did you restart tor or reboot your pi very often before you got all working and up for longer time?
After i set up my bridge the first time i allways had 1-3 unique clients when i checked the logs.
But i had some config problems and restarted the system too often, now i dont see unique clients any more.
I think the auth-servers stop ...
1
Set the time zone to London and change time to London time. You can update the time first when you connect to the wireless internet (not yet configuring tor), once that is done you can connect without any problem. If there are problems, try -1 hour or +1 hour to account for daylight savings depending on your area. Mine was -1 and worked well.
You can also ...
1
it depends on usage case, but generally - yes. Obfs 3 and 4 are good when properly used - as all bridges you need to pay attention to elaborate the bridge key. But in such a countries you better use a private bridges, i.e. not published ones
1
Bridges are like guards, there are advantages to keeping them and advantages to changing them.
As a general rule you want to keep guards for as long as you can. Given a hypothetical pair of evil nodes in the network, a guard and an exit who together can deanonymize you, every time you pick a new guard you roll a dice. If the dice roll is unlucky, you pick ...
1
My little trick to connect to more obfs4 bridges in TAILS:
First collect some working bridges via bridge DB (e.g. obfs3) or connect to regular tor.
When connected cut the connection in the on/off menu.
Reconnect.
While reconnecting quickly click to connect via bridges and enter your obfs4 bridge relays.
TAILS now connects to obfs4 bridges that were at ...
1
obfs4 does not have a standalone mode like obfs3 does. It talks to Tor using the Pluggable Transport protocol (specification), so to use it for something else you could write a program implementing that protocol.
Shameless plug: I have written a Python 3 program that create a standalone tunnel from pluggable transports. The documentation still needs work, ...
1
You need to use it with Tor, because the bridge - after passing through OBFS4(and any pluggable transport) expects a tor protocol, it's not a transparent proxy
1
I modified apparmor profile /etc/apparmor.d/system_tor,
just added three lines in it:
/usr/bin/obfsproxy PUx,
profile /etc/apparmor.d/usr.bin.obfsproxy {
}
Whole file sample:
# vim:syntax=apparmor
#include <tunables/global>
profile system_tor flags=(attach_disconnected) {
#include <abstractions/tor>
/usr/bin/obfsproxy PUx,
profile /...
1
obfs4 and obfs3, among others, are "pluggable transports", and the protocol they speak to Tor is well specified. You could write a program / script to implement that protocol in order to use any pluggable transport for your own purposes.
Shameless plug: I have written a Python 3 program that takes a pluggable transport binary and creates a standalone TCP ...
1
I used to have a similar problem as you. Now it is fixed for me, using the method described here:
https://trac.torproject.org/projects/tor/ticket/17377
obfs4proxy crash no apparent reason
Problem solved by change the relative path in the torrc-defaults to absolute path where the installation path insdead
1
Give me an example of what it should include:
This is an example torrc file:
DataDirectory C:\Documents and Settings\ron\Desktop\Tor\Data
#ControlPort 9151
SocksPort 9150
# UseBridges 1
# bridge 60.16.182.53:9001
# bridge 87.237.118.139:444
# bridge 60.63.97.221:443
# ExitNodes 172.10.0.0/16
GeoIPFile C:\Documents and Settings\ron\Desktop\Tor\Data\Tor\...
1
Just download the Tor Browser alpha release, it includes the obfs4 binary and allows you to configure it easily.
1
The lines have the following meaning:
bridge-stats-end 2015-02-13 04:17:28 (86400 s)
The time when the statistics have ended. They included 86400 seconds of data, which translates to a day.
bridge-ips cn=8,es=8,us=8
Your bridge had connections from China, Spain and the US. The number 8 basically tells you that there were only a low number of connections. ...
Only top voted, non community-wiki answers of a minimum length are eligible