Skip to main content
Share Your Experience: Take the 2024 Developer Survey
3 votes
Accepted

Should I first stop all local servers running on localhost before starting Tor?

Unless you edit your tor configuration (your torrc file) to add an onion service, tor won't run any onion services and no one will be able to connect to any of your local servers, so you're safe. Even ...
Steve's user avatar
  • 3,142
3 votes

Is there a way to connect to a git remote located on the onion hidden service?

While marked answer is 100% correct I use a bit different approach. For ssh connections using OpenSSH client I utilze ProxyCommand for *.onion sites in the following way: Host *.onion ...
Tomek's user avatar
  • 421
3 votes
Accepted

What prevents directory server from being attacked?

What prevents a directory server from being dishonest and give malicious data to the user? The information served by the directories is generated by reaching a consensus between the authorities. You ...
Peter Gerber's user avatar
  • 1,342
2 votes

Registering .onion with Certificate Authority?

As of February 2020, this is now technically possible, but it has yet to be implemented by Let's Encrypt. Why https for .onion domains? First, I think it's necessary to point out that there are non-...
Michael Altfield's user avatar
2 votes

Registering .onion with Certificate Authority?

You cannot. Currently only EV certs that are valid for both some canonicle domain and an onion address are able to have TLS certificates issued but not an onion address alone, and not non-EV ...
cacahuatl's user avatar
  • 11k
2 votes

Why my Tor relay server only use 10-15% of my bandwidth?

Thanks for running a relay. (: Clients choose which relays to use based on their consensus weight. The consensus weight is assigned by the directory authorities after measuring the throughput for ...
irl's user avatar
  • 56
2 votes

How to disable JavaScript on Servers

I'm not sure what exactly you mean here; but if you're trying to run a onion service you don't have to deal with JavaScript at all if you don't want to. Just don't include any JavaScript code on the ...
championquizzer's user avatar
2 votes

What is the StaleDesc (state descriptor) flag and how do I update my state descriptor?

It has just happened to me and tor gave me useful piece of information in logs: Your server (xxx.xxx.xxx.xx:0) has not managed to confirm that its DirPort is reachable. Relays do not publish ...
Tomek's user avatar
  • 421
2 votes
Accepted

Sharing port 80 between tor and nginx

You have a simple nginx webserver and it is listening on http port 80 for mywebsite.com. You set up tor to also listen externally on virtual port 80 as a onion service for mywebsiteabcxyz.onion. ...
elmerjfudd's user avatar
  • 2,274
1 vote

Shutterstock sends "406 Not Acceptable"

I also tried to open the Shutterstock site and got the same error message. Furthermore I used several different exit relays. All resulting in the same message. So I assume they block the Tor network. ...
Jens Kubieziel's user avatar
  • 8,570
1 vote

Does ISP know I have an onion server if I set up a onion website at home?

It is generally easy for an ISP to tell that you're connecting to the Tor network. Tor onion service traffic looks similar to Tor client proxy traffic, so it shouldn't be immediately obvious to your ...
Steve's user avatar
  • 3,142
1 vote
Accepted

how to make tor functions on Heroku

@lmen is probably talking about Tor Proxy Buildpack for Heroku, it can setup Tor on a heroku node with socks5 and control port available (They can be configured in the environment values). All you ...
NeverMine17's user avatar
1 vote

What is the StaleDesc (state descriptor) flag and how do I update my state descriptor?

The flag StaleDesc was developed throught a proposal. Anyone can send in a proposal to improve the Tor protocol. The specific proposal has the number 293 with the title "Other ways for relays to know ...
Jens Kubieziel's user avatar
  • 8,570
1 vote

How to run a LOCAL webserver on tails

To access localhost with Tor Browser in Tails you can use the following script #!/bin/bash grep -qxF "user_pref(\"network.proxy.no_proxies_on\", \"127.0.0.1\");" '/home/...
roneo.org's user avatar
  • 156
1 vote

Test nmap over tor with psad

Tor cannot help you perform a SYN scan. Tor anonymizes client TCP connections and a SYN scan does not establish a full TCP connection. In this case nmap does not use your SOCKS proxy at all as it does ...
Steve's user avatar
  • 3,142
1 vote
Accepted

Is there a way to connect to a git remote located on the onion hidden service?

torsocks is the way to go. You may need to install it separately from Tor if it is not installed automatically. Make sure Tor is running: systemctl status tor Run your command through torsocks: ...
elmerjfudd's user avatar
  • 2,274
1 vote

does anyone know how I can setup a server to host my own private shop on the hidden service

Most of these questions are far too broad, but I'll do my best. Setting an onion service is easy. You install the Tor service, tell it to use port 80, get your new onion address and start a web ...
elmerjfudd's user avatar
  • 2,274
1 vote
Accepted

How do Tor websites continue to work behind NATs?

The main idea is that the onion service only makes outbound connections. Whenever it communicates with someone, the onion service creates a circuit to some relay and receives communication from the ...
Steve's user avatar
  • 3,142
1 vote
Accepted

How can I use the control port to fetch content from an onion url?

No. The Control Port is used to control and query the Tor client. Using Tor as a client and implementing the HTTP protocol is outside of the scope of what the Control Port and the Tor daemon aim to ...
cacahuatl's user avatar
  • 11k
1 vote

Your Guard is failing - Tor Server on Raspberry Pi

If your guard node is failing, you could try using a different guard node if you really really want to: How to change the entry node? But according to this answer, you shouldn't have to: Should I ...
Alexander Taylor's user avatar
1 vote
Accepted

Reducing Tor service shutdown time

The short answer "you can't", the description is: after sending a termination signal - it's wise to let the network find another chains, so that's why there's a delay in order, and there's absolutely ...
Alexey Vesnin's user avatar
  • 6,240
1 vote

Using ddclient in Whonix?

No, you cannot directly have an incoming clearnet IP. I.e. you cannot use the public clearnet IP of a Tor exit relay to anonymously host a server. Explanation on incoming connections / opening ports: ...
adrelanos's user avatar
  • 2,797
1 vote

Can't get 2/4 servers run

Yes, it's sad that it's not in the logs, but it is buried deep in the protocol mechanics. A brief guess is coming out of the EnforceDistinctSubnets directive description. To fix the case when you have ...
Alexey Vesnin's user avatar
  • 6,240
1 vote

Registering .onion with Certificate Authority?

As of March 2021, it appears the HARICA, a certificate authority based in Greece, also allows you to obtain an SSL certificate for a .onion domain. While HARICA offers them cheaper, To quote their ...
Community's user avatar
1 vote

This appeared in one of my PHP files

"How did it get there" No idea. "what is it" It looks like a Tor network consensus document "why did it delete my PHP file" It's a plain text file, it couldn't have. "how do I prevent this from ...
cacahuatl's user avatar
  • 11k
1 vote

How to make the "Tor-network"

Tor Project: FAQ says: If you want to experiment locally with your own network, or you're cut off from the Internet and want to be able to mess with Tor still, then you may want to set up your own ...
v7d8dpo4's user avatar
  • 305
1 vote

How can i change the server of a Tor relay

you must migrate your whole DataDirectory - the one you've specified in your torrc. after that you're pointing your new-hosted Tor to the same directory and config - and that's it! You can change a ...
Alexey Vesnin's user avatar
  • 6,240
1 vote

How can I get consensus data from Directory authority servers for research purpose?

The votes themselves are also hosted at https://collector.torproject.org/archive/relay-descriptors/votes/ where they can be downloaded directly.
Layerone's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible