Tor: Difference between revisions

Tor is an anonymity network using onion routing.

Installation

Linux

Download and compile the Tor source. Alternatively, use the Docker image at https://git.steamr.com/docker/tor.

FreeBSD

cd /usr/ports/security/tor
make config-recursive
make install clean

echo 'enable_tor="YES"' >> /etc/rc.conf
vi /usr/local/etc/tor/torrc

Put the following in your torrc file:

#
# Refer to https://www.torproject.org/docs/tor-manual.html.en
#

# Listen on localhost, using the default port of 9051
SocksPort 9051
SocksListenAddress 127.0.0.1

ORPort 9001

# Do not be an exit node
ExitPolicy reject *:* 

BandwidthRate 10 MB
BandwidthBurst 100 MB

RunAsDaemon 1

ContactInfo tor@steamr.com

To start tor, run

# /usr/local/etc/rc.d/tor start

Usage

As a Transparent Proxy

For detailed instructions on setting up a transparent proxy, see TOR_Transparent_Proxy.

Setup a Hidden Service

See: https://www.torproject.org/docs/tor-hidden-service.html.en

With Tor set up, add the following lines to the torrc configuration file:

HiddenServiceDir /srv/tor/hidden_services/
HiddenServicePort 80 192.168.192.10:8881

The HiddenServiceDir will contain the hidden service hostname and private key. All subsequent HiddenServicePort directives after will define the ports available from that hostname and to which IP data should be forwarded to.

The Dark Net

Sites

Hidden Wiki - zqktlwi4fecvo6ri.onion
Not evil search engine - hss3uro2hsxfogfq.onion
Intel exchange - rrcc5xgpiuf3xe6p.onion
0day.in - qzbkwswfv5k2oj5d.onion
abraxas (online store) - abraxasdegupusel.onion
Readers against DRM - c3jemx2ube5v5zpg.onion

Hosting

VPS Hosting - kowloon5aibdbege.onion Freedom Hosting 2 - http://fhostingesps6bly.onion/

Other Tasks

Blocking Tor

To block all tor exit nodes that can reach your server, use the TorBulkExitList.py script at https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=xxx

#/bin/sh

# create a new set for individual IP addresses
ipset -N tor iphash

# get a list of Tor exit nodes that can access $YOUR_IP, skip the comments and read line by line
wget -q https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=$YOUR_IP -O - | sed '/^#/d' | while read IP
do
  # add each IP address to the new set, silencing the warnings for IPs that have already been added
  ipset -q -A tor $IP
done

# filter our new set in iptables
iptables -A INPUT -m set --match-set tor src -j DROP

Script above copied from: https://github.com/scriptzteam/BlockTor/blob/master/block.sh

v t e Linux

Various Linux Notes	/etc/fstab Access.conf ACL Apache Proxy to Internal Server APM X-C1 (Mustang) ARP Authselect Bash Scripting Blockparser Booting Linux without a Graphics Card Building Container Images Burning CD/DVD in Linux Clear RAID Signatures on Linux Cobbler Colorized Terminal Outputs Compiling MIPS Configure Sendmail CPanel CPanel Fork Bomb Protection CPU Frequency Scaling Create a Linux User with an Empty Password Cron and PAM Issues Dell OpenManage Diff Two Command Outputs DirectAdmin Disable Filesystem Check on Startup DNS Ad Blocker Driver Disk Drop caches End / Home keys don't work in Terminal Entropy in the Linux Kernel Entropy Source using RTL-SDR Exit Codes Extract .exe Resources with dd File Attributes Fixing ixgbe unsupported SFP+ module type was detected Get Active Linux Virtual Console Getting Hardware UUID Hosts.deny How to change Linux desktop user directories How to hot-swap SATA disks on Linux HP Smart Storage Administrator Hyper-threading IBM Spectrum Archive IBM Spectrum Protect IBM Tape IBM Tape Diagnostic Tool InterWorx Kerberize NFS Kerberize SSH Linux Clustering Linux Fonts Linux Namespaces Linux Network Interface Naming Linux Nvidia Driver Linux Process Accounting Linux Uptime in Seconds Linux UTF-8 Font Mainline Kernel on CentOS 7 Missing Fonts Mod fastcgi Install on Apache 2 / cPanel Mod fcgid Monitoring network traffic in Linux Mounting / Unmounting KVM Image Mounting Samba (CIFS) shares Multiple Networks on Linux MySQL Database with Hash Sign No Console Output Number of Files Opened Open OnDemand Packing and unpacking initrd PAM Issues Partition Alignment Patching a binary file with dd Perl Module Location Raspberry Pi Red Hat kickstart Red Hat to Debian Reverse SSH Tunnel Ruby on Rails under cPanel Rutorrent + rtorrent Installation Guide on CentOS 6.4 Self Signed SSL Certificates Service Management Sick Beard StartSSL Free Certificate Symlink Taking a Screenshot in X11 Timezone Tor TOR Transparent Proxy Traefik Troubleshooting a Slow Linux System Turning on swap with a page file Udev Rules Verify SSL Certificate matches Private Key VMware Workstation Webcam X Display Manipulation X Forwarding

Linux Tools and Utilites	Anaconda Ansible Aria2 Autofs Awk Badblocks Bash Shell Binwalk Bosh Ceph Chntpw Chrony Clonezilla Cloud-init CloudStack Column Cron Curl Cvs2git Date Dbus Dd Dm-crypt Dovecot DRBD ElasticSearch Enroot Environment Module Envsubst Fail2ban FFmpeg Find Firecracker Flashrom Foreman FortiClient Fswebcam Galaxy Git Gnome Gobetween GPFS Grafana Grub Hdparm Home Assistant How to disable SELinux Htaccess Infiniband InfluxDB InfluxDB 1.x Insert a kickstart file into a iso image Inspircd IOzone Iperf3 Ipmitool Irqbalance John The Ripper Lightdm Lm sensors Logrotate LSF LVM Lynx Mailx Md5sum Mdadm Midnight Commander Motion Mount Mutt Nomad OpenLDAP Openocd OpenSSL OpenVPN Packer PHP Pi-hole Postgres PowerBroker Identity Service Proxmox Pueue PulseAudio Puppet Quota Red Hat Satellite Restic Rsync Rtorrent Ruby Sabnzbd Sage Samba Screen Sed SELinux Sendmail Shell Configs Singularity Sleep Slurm SMART Sonarr Sqlite SquashFS Squid SSH Steam Stoken Strace Sudo Sync Sysctl Syslog Sysrq System Security Services Daemon (SSSD) Systemd Tar Tcsh Telegraf Terraform Thttpd Tmux Tomcat Top Umask Unix2dos Vim Virsh Virt-customize VirtualBox VirtualGL Visidata Vnstat Weechat Wget XFS Youtube-dl ZFS Zram

Package Management	APT Pacman RPM Yum

Linux Distributions	Alpine Linux Arch Linux CentOS Fedora NixOS Red Hat Enterprise Linux Tails Tiny Core Linux Ubuntu

Networking	Blazemeter CSF/LFD Exim Firewall FreeIPA Get DHCP Network Settings IP Aliasing Ipset IPTables IPv6 IPXE Link Aggregation Linux Network Namespaces MTU Net-tools to iproute2 Netcat Open vSwitch OpenWRT Postfix Raspberry Pi Torified Wifi Socat Static Routes StrongSwan Tcpdump Traffic Forwarder using IPTables Wi-Fi WireGuard

Containers	Docker Docker Compose Docker Swarm Helm K3s Kibana Kubernetes Mailu PKS Podman

v t e Web Related

Web Related	Amazon Web Services AngularJS CPanel CSS DirectAdmin GitLab Gogs Grafana InterWorx Let's Encrypt MediaWiki Nextcloud Node-RED NZEDb PHP Shell Exploit PHPMyAdmin Sabnzbd Semantic Wiki Sick Beard SolusVM Sonarr StealRat Botnet Tor Traefik WordPress Wordpress Hacks

@@ Line 1: / Line 1: @@
 Tor is an anonymity network using onion routing.
-== Transparent Proxy ==
+== Installation ==
-For detailed instructions on setting up a transparent proxy, see [[TOR_Transparent_Proxy]].
+=== Linux ===
+Download and compile the Tor source. Alternatively, use the Docker image at https://git.steamr.com/docker/tor.
-== Hidden Service ==
-See: https://www.torproject.org/docs/tor-hidden-service.html.en
-With Tor set up, add the following lines to the torrc configuration file:
-{{highlight|lang=text|code=
-HiddenServiceDir /srv/tor/hidden_services/
-HiddenServicePort 80 192.168.192.10:8881
-}}
-The {{code|HiddenServiceDir}} will contain the hidden service hostname and private key. All subsequent {{code|HiddenServicePort}} directives after will define the ports available from that hostname and to which IP data should be forwarded to.
-== Sites ==
-* Hidden Wiki - zqktlwi4fecvo6ri.onion
-* Not evil search engine - hss3uro2hsxfogfq.onion
-* Intel exchange - rrcc5xgpiuf3xe6p.onion
-* 0day.in - qzbkwswfv5k2oj5d.onion
-* abraxas (online store) - abraxasdegupusel.onion
-* Readers against DRM - c3jemx2ube5v5zpg.onion
-=== Hosting ===
-VPS Hosting - kowloon5aibdbege.onion
-Freedom Hosting 2 - http://fhostingesps6bly.onion/
-== Installation ==
 === FreeBSD ===
 {{highlight|lang=text|code=
 cd /usr/ports/security/tor
@@ Line 71: / Line 45: @@
 }}
-== Blocking Tor ==
+== Usage ==
+=== As a Transparent Proxy ===
+For detailed instructions on setting up a transparent proxy, see [[TOR_Transparent_Proxy]].
+=== Setup a Hidden Service ===
+See: https://www.torproject.org/docs/tor-hidden-service.html.en
+With Tor set up, add the following lines to the torrc configuration file:
+{{highlight|lang=text|code=
+HiddenServiceDir /srv/tor/hidden_services/
+HiddenServicePort 80 192.168.192.10:8881
+}}
+The {{code|HiddenServiceDir}} will contain the hidden service hostname and private key. All subsequent {{code|HiddenServicePort}} directives after will define the ports available from that hostname and to which IP data should be forwarded to.
+== The Dark Net ==
+=== Sites ===
+* Hidden Wiki - zqktlwi4fecvo6ri.onion
+* Not evil search engine - hss3uro2hsxfogfq.onion
+* Intel exchange - rrcc5xgpiuf3xe6p.onion
+* 0day.in - qzbkwswfv5k2oj5d.onion
+* abraxas (online store) - abraxasdegupusel.onion
+* Readers against DRM - c3jemx2ube5v5zpg.onion
+=== Hosting ===
+VPS Hosting - kowloon5aibdbege.onion
+Freedom Hosting 2 - http://fhostingesps6bly.onion/
+== Other Tasks ==
+=== Blocking Tor ===
 To block all tor exit nodes that can reach your server, use the TorBulkExitList.py script at https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=xxx

Tor: Difference between revisions

Revision as of 03:22, 16 June 2020