6 votes
Accepted

How can I pass all wifi traffic through Tor?

This is not a good idea, in theory at least. (False security as programs may leak data) Adafruit offers a tutorial on how to do this using a Raspberry Pi running Raspbian (which is based on Debian). ...
user avatar
  • 933
6 votes

Torsocks vs Proxychains?

You should prefer torsocks over proxychains, since torsocks is intended to block potential leaks. Especially in cases with tools like youtube-dl which might try to pass over execution to programs ...
user avatar
  • 10.8k
3 votes
Accepted

How does Tor transparent proxying work?

I have solved this question. Source; an extensive iptables manual. The REDIRECT target puts the stream into the conntrack table, and rewrites the destination host to that of the machine itself. That ...
user avatar
  • 171
3 votes

Firefox doesn't resolve onion addresses

For the transparent proxy functionality of Tor to work you also need to set Tor as your DNS server, normally by setting the DNSPort torrc option to 53 and changing your /etc/resolv.conf. See the ...
user avatar
3 votes

Android can't connect after Orbot crash

This is what I did and all is fine now: Reboot into ClockworkMod recovery Select advanced Wipe Dalvik cache Wipe cache partition Reboot All is working fine Hope this works for you.
user avatar
2 votes

Route c++ through Tor using socks

https://tor.stackexchange.com/a/2131/743 this is a description of what I did when I implemented (using c# instead of c++ though, but it should be the same) here is a copy paste of the text Tor ...
user avatar
  • 500
2 votes
Accepted

Is it possible to run Tor before windows login?

Based on mirimir's comment, To install Tor as a service, you can simply run: tor --service install
user avatar
2 votes

Why Tor node maintains TLS keys with every other Tor node?

If I understand your question right, you're wondering about the link protocol that relays use to talk to each other. This protocol ensures that relays establish exactly one connection to each other, ...
user avatar
  • 2,209
2 votes
Accepted

How Tor client determinates the destination port when transparent proxy is configured?

I'm not sure that Linostar's answer is correct. Rather, I think that Tor is able to extract the original destination address using the SO_ORIGINAL_DST socket option, as described here: How does a ...
user avatar
  • 36
2 votes

How Tor client determinates the destination port when transparent proxy is configured?

This is a very good question indeed, although it is more about how a tranparent proxy and iptables work. The corresponding rule in iptables to redirect to a transparent proxy is usually something like:...
user avatar
  • 1,195
2 votes
Accepted

Is TransPort deprecated? If not, what are recommended use cases?

From my point-of-view, torsocks and using TransPort selectively for some applications (e.g. like Mike's suggested setup for Android) is quite equivalent. Two key differences, though: torsocks will ...
user avatar
  • 627
1 vote

Firefox doesn't resolve onion addresses

In the search bar, type about:config and accept the risk to continue. Then find the variable network.dns.blockDotOnion and change it to false. If your network configuration was done correctly, ...
user avatar
1 vote

Firefox doesn't resolve onion addresses

Closed. This was wrong iptables redirect rule that excludes loop from redirect devices: Was: #iptables -t nat -A OUTPUT ! -o lo -p udp -m owner --uid-owner anonymous -m udp --dport 53 -j REDIRECT --...
user avatar
1 vote

Why does TransparentProxy working with `nameserver 127.0.0.1` but doesn't working with iptables redirects?

My good advice to you - use local instance of Bind and route all DNS queries through it. I'm using it quite for a long time - no problems so far. And - dhclient will not vandalize resolv conf after ...
user avatar
  • 5,401
1 vote

Why does TransparentProxy working with `nameserver 127.0.0.1` but doesn't working with iptables redirects?

@canonizing ironize was right. It is my Setup. My mistake. I've used suricata IDS in inline mode with default drop policy for almost every available rule. So, rule number 2014939: emerging-policy....
user avatar
1 vote
Accepted

resolving onion domains partially fails

If you're using a standard setup with local DNS server located on your very PC - it caches the response locally inside the server, so no second request is made. If you have more questions - feel free ...
user avatar
  • 5,401
1 vote

How to map public static IP addresses to Hidden Services?

This is a pretty simple task, just to answer the question, here is how you'd do it.... But before you read how, repeat after me: "I should never actually do this!" Hypothetically, if this ...
user avatar
  • 10.8k
1 vote

Use IPTables to force traffic through Tor?

First install ferm by running sudo apt-get install ferm Use Tails' ferm.conf as a base and removing Tails' restrictions on localhost connections (you can add these back if required but a lot of them ...
user avatar
  • 10.8k
1 vote
Accepted

Error configuring tor as transparent proxy with IPv6

Looks like a documentation error. This should be raised as a ticket on the Tor Project Bug Tracker. There are details on the front page for an anonymous login, if required. I think that it should be ...
user avatar
  • 10.8k
1 vote

Trying to setup a transparent proxy, getting getsockopt() errors

You're trying to use a transparent proxy as an http proxy, this will not work. You will need to follow the iptables setup, or some kind of packetfilter that has REDIRECT-like fucntionality. Have a ...
user avatar
1 vote

Transparent proxy improvement using haproxy load balancer?

It's questionable whether it's an improvement to the existing way that a client generates certificates. Your HAProxy is basically converting your configuration into an pre-2014 Tor circuit building ...
user avatar
  • 1,274
1 vote

How to share my Tor connection with my internal network (Tor 3.5)?

Add a new SOCKSPort line to your torrc file, located inside the Tor Browser folder in the sub-folder \Browser\TorBrowser\Data\Tor\torrc, setting it to be something like: SocksPort 0.0.0.0:9250 ...
user avatar
  • 10.8k
1 vote

How to share my Tor connection with my internal network (Tor 3.5)?

the best way - IMHO - is to use redsocks or IPTables/pf+TransPort and put a Tor node as a router to your network. Don't forget a DNS server too!
user avatar
  • 5,401
1 vote

How to share my Tor connection with my internal network (Tor 3.5)?

Two ways: The more hard way: install PRIVOXY and configure it to work as a 'transparent proxy' then let other machines on your LAN point the PRIVOXY ADDR. Simply way: let the program you use on ...
1 vote

Orbot settings for Wifi with proxy!

I believe what you're looking for is near the bottom of the settings screen in Orbot. There is a section for "Outbound network Proxy (Optional)" that lets you set an HTTP, HTTPS, Socks4, or Socks5 ...
user avatar
1 vote

Orbot, SSL Error 3 - Why?

In such cases proxies usually performing at least one of the bad tricks like that: MitM attack by intruding into SSL/TLS connecions. Tor will give you an error because for directories it has ...
user avatar
  • 5,401
1 vote

Anonymous Tor middlebox

No insult intended, but that would be an ambitious project for someone asking a question like this ;) I recommend starting with Whonix. Whonix comprises two virtual machines (VMs). One is a Tor ...
user avatar
  • 2,989
1 vote

How should I configure my Isolating Proxy firewall for optimum security?

Not sure about adding more rules but from what I understand having a drop all incoming and outgoing policy is a good thing to start from. Afterward , building your rule-set to punch holes in the wall. ...
user avatar
1 vote

Setting up Tor middlebox through ubuntu and debian on VM

The first things, I usually check,when I have this kind of problems, are: /etc/resolv.conf verify, if used, firewall rules use a traceroute command to follow the path done from your data I give as ...
user avatar
1 vote
Accepted

For filtering connections to Tor with ipset, do I need to set the protocol to tcp?

Tor clients only use TCP to connect to nodes. hash:ip,port defaults to TCP, so you don't need to specify a protocol. You may be interested in https://github.com/rustybird/corridor, which builds ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible