3
votes
Accepted
Should I first stop all local servers running on localhost before starting Tor?
Unless you edit your tor configuration (your torrc file) to add an onion service, tor won't run any onion services and no one will be able to connect to any of your local servers, so you're safe. Even ...
- 3,142
3
votes
Is there a way to connect to a git remote located on the onion hidden service?
While marked answer is 100% correct I use a bit different approach. For ssh connections using OpenSSH client I utilze ProxyCommand for *.onion sites in the following way:
Host *.onion
...
- 431
3
votes
Accepted
What prevents directory server from being attacked?
What prevents a directory server from being dishonest and give malicious data to the user?
The information served by the directories is generated by reaching a consensus between the authorities. You ...
- 1,342
2
votes
Why my Tor relay server only use 10-15% of my bandwidth?
Thanks for running a relay. (:
Clients choose which relays to use based on their consensus weight. The consensus weight is assigned by the directory authorities after measuring the throughput for ...
- 56
2
votes
What is the StaleDesc (state descriptor) flag and how do I update my state descriptor?
It has just happened to me and tor gave me useful piece of information in logs:
Your server (xxx.xxx.xxx.xx:0) has not managed to confirm that its DirPort is reachable. Relays do not publish ...
- 431
2
votes
Registering .onion with Certificate Authority?
As of February 2020, this is now technically possible, but it has yet to be implemented by Let's Encrypt.
Why https for .onion domains?
First, I think it's necessary to point out that there are non-...
- 160
2
votes
Registering .onion with Certificate Authority?
You cannot.
Currently only EV certs that are valid for both some canonicle domain and an onion address are able to have TLS certificates issued but not an onion address alone, and not non-EV ...
- 11k
2
votes
Accepted
Sharing port 80 between tor and nginx
You have a simple nginx webserver and it is listening on http port 80 for mywebsite.com.
You set up tor to also listen externally on virtual port 80 as a onion service for mywebsiteabcxyz.onion.
...
- 2,284
2
votes
How to disable JavaScript on Servers
I'm not sure what exactly you mean here; but if you're trying to run a onion service you don't have to deal with JavaScript at all if you don't want to. Just don't include any JavaScript code on the ...
1
vote
Shutterstock sends "406 Not Acceptable"
I also tried to open the Shutterstock site and got the same error message. Furthermore I used several different exit relays. All resulting in the same message.
So I assume they block the Tor network. ...
- 8,580
1
vote
Does ISP know I have an onion server if I set up a onion website at home?
It is generally easy for an ISP to tell that you're connecting to the Tor network. Tor onion service traffic looks similar to Tor client proxy traffic, so it shouldn't be immediately obvious to your ...
- 3,142
1
vote
Accepted
how to make tor functions on Heroku
@lmen is probably talking about Tor Proxy Buildpack for Heroku, it can setup Tor on a heroku node with socks5 and control port available (They can be configured in the environment values).
All you ...
- 670
1
vote
How can I get consensus data from Directory authority servers for research purpose?
The votes themselves are also hosted at
https://collector.torproject.org/archive/relay-descriptors/votes/
where they can be downloaded directly.
- 11
1
vote
What is the StaleDesc (state descriptor) flag and how do I update my state descriptor?
The flag StaleDesc was developed throught a proposal. Anyone can send in a proposal to improve the Tor protocol. The specific proposal has the number 293 with the title "Other ways for relays to know ...
- 8,580
1
vote
How to run a LOCAL webserver on tails
To access localhost with Tor Browser in Tails you can use the following script
#!/bin/bash
grep -qxF "user_pref(\"network.proxy.no_proxies_on\", \"127.0.0.1\");" '/home/...
- 156
1
vote
Test nmap over tor with psad
Tor cannot help you perform a SYN scan. Tor anonymizes client TCP connections and a SYN scan does not establish a full TCP connection. In this case nmap does not use your SOCKS proxy at all as it does ...
- 3,142
1
vote
Accepted
Is there a way to connect to a git remote located on the onion hidden service?
torsocks is the way to go. You may need to install it separately from Tor if it is not installed automatically.
Make sure Tor is running: systemctl status tor
Run your command through torsocks: ...
- 2,284
1
vote
does anyone know how I can setup a server to host my own private shop on the hidden service
Most of these questions are far too broad, but I'll do my best.
Setting an onion service is easy. You install the Tor service, tell it to use port 80, get your new onion address and start a web ...
- 2,284
1
vote
Accepted
How do Tor websites continue to work behind NATs?
The main idea is that the onion service only makes outbound connections. Whenever it communicates with someone, the onion service creates a circuit to some relay and receives communication from the ...
- 3,142
1
vote
Accepted
How can I use the control port to fetch content from an onion url?
No.
The Control Port is used to control and query the Tor client.
Using Tor as a client and implementing the HTTP protocol is outside of the scope of what the Control Port and the Tor daemon aim to ...
- 11k
1
vote
Your Guard is failing - Tor Server on Raspberry Pi
If your guard node is failing, you could try using a different guard node if you really really want to:
How to change the entry node?
But according to this answer, you shouldn't have to:
Should I ...
- 168
1
vote
Accepted
Reducing Tor service shutdown time
The short answer "you can't", the description is: after sending a termination signal - it's wise to let the network find another chains, so that's why there's a delay in order, and there's absolutely ...
- 6,275
1
vote
Using ddclient in Whonix?
No, you cannot directly have an incoming clearnet IP. I.e. you cannot use the public clearnet IP of a Tor exit relay to anonymously host a server.
Explanation on incoming connections / opening ports:
...
- 2,807
1
vote
Can't get 2/4 servers run
Yes, it's sad that it's not in the logs, but it is buried deep in the protocol mechanics. A brief guess is coming out of the EnforceDistinctSubnets directive description. To fix the case when you have ...
- 6,275
1
vote
Registering .onion with Certificate Authority?
As of March 2021, it appears the HARICA, a certificate authority based in Greece, also allows you to obtain an SSL certificate for a .onion domain. While HARICA offers them cheaper,
To quote their ...
- 11
Only top scored, non community-wiki answers of a minimum length are eligible