updated
BIN
servers/tor/bridge/1.png
Normal file
After Width: | Height: | Size: 57 KiB |
BIN
servers/tor/bridge/10.png
Normal file
After Width: | Height: | Size: 56 KiB |
BIN
servers/tor/bridge/11.png
Normal file
After Width: | Height: | Size: 66 KiB |
BIN
servers/tor/bridge/2.png
Normal file
After Width: | Height: | Size: 34 KiB |
BIN
servers/tor/bridge/3.png
Normal file
After Width: | Height: | Size: 112 KiB |
BIN
servers/tor/bridge/4.png
Normal file
After Width: | Height: | Size: 99 KiB |
BIN
servers/tor/bridge/5.png
Normal file
After Width: | Height: | Size: 31 KiB |
BIN
servers/tor/bridge/6.png
Normal file
After Width: | Height: | Size: 108 KiB |
BIN
servers/tor/bridge/7.png
Normal file
After Width: | Height: | Size: 77 KiB |
BIN
servers/tor/bridge/8.png
Normal file
After Width: | Height: | Size: 39 KiB |
BIN
servers/tor/bridge/9.png
Normal file
After Width: | Height: | Size: 318 KiB |
266
servers/tor/bridge/index.html
Normal file
|
@ -0,0 +1,266 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<meta name="description" content="">
|
||||
<meta name="author" content="">
|
||||
<link rel="shortcut icon" href="../../../../../../assets/img/favicon.png">
|
||||
|
||||
<title>TOR Bridge</title>
|
||||
|
||||
<!-- Bootstrap core CSS -->
|
||||
<link href="../../../assets/css/bootstrap.css" rel="stylesheet">
|
||||
<link href="../../../assets/css/xt256.css" rel="stylesheet">
|
||||
<script src="../../../assets/js/highlight.pack.js"></script>
|
||||
|
||||
|
||||
<!-- Custom styles for this template -->
|
||||
<link href="../../../assets/css/main.css" rel="stylesheet">
|
||||
|
||||
|
||||
|
||||
<!-- HTML5 shim and Respond.js IE8 support of HTML5 elements and media queries -->
|
||||
<!--[if lt IE 9]>
|
||||
<script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
|
||||
<script src="https://oss.maxcdn.com/libs/respond.js/1.3.0/respond.min.js"></script>
|
||||
<![endif]-->
|
||||
</head>
|
||||
|
||||
<body>
|
||||
|
||||
<!-- Static navbar -->
|
||||
<div class="navbar navbar-inverse-anon navbar-static-top">
|
||||
<div class="container">
|
||||
<div class="navbar-header">
|
||||
<button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse">
|
||||
<span class="icon-bar"></span>
|
||||
<span class="icon-bar"></span>
|
||||
<span class="icon-bar"></span>
|
||||
</button>
|
||||
<a class="navbar-brand-anon" href="\index.html">nihilist`s Blog</a>
|
||||
</div>
|
||||
<div class="navbar-collapse collapse">
|
||||
<ul class="nav navbar-nav navbar-right">
|
||||
|
||||
<li><a href="/about.html">About</a></li>
|
||||
<li><a href="/blog.html">Categories</a></li>
|
||||
<li><a href="https://blog.nihilism.network/donate.html">Donate</a></li>
|
||||
<li><a href="/contact.html">Contact</a></li>
|
||||
</ul>
|
||||
</div><!--/.nav-collapse -->
|
||||
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- +++++ Posts Lists +++++ -->
|
||||
<!-- +++++ First Post +++++ -->
|
||||
<div id="anon2">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-8 col-lg-offset-2">
|
||||
<a href="../../anon.html">Previous Page</a></br></br> <p><img src="../../../assets/img/user.png" width="50px" height="50px"> <ba>nihilist - 01 / 02 / 2024</ba></p>
|
||||
<h1>TOR Bridge (June 2023 update)</h1>
|
||||
<img src="../logo.png" class="imgRz">
|
||||
<p> Before we start, you will need a Debian VPS (you can get one on digitalocean for example), if you prefer to use your own self hosted server, make sure that port 80 and 443 are correctly port forwarded so that the public ip points to the server and not the router. Once that's done, go and ssh into your Debian server. </p>
|
||||
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
</div> <!-- /container -->
|
||||
</div><!-- /grey -->
|
||||
|
||||
<!-- +++++ Second Post +++++ -->
|
||||
<div id="anon3">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-8 col-lg-offset-2">
|
||||
<h2><b>Initial Setup </b></h2>
|
||||
<p></p>
|
||||
<pre><code class="nim">
|
||||
|
||||
apt update -y && apt upgrade -y
|
||||
apt install curl tmux vim obfs4proxy nyx gnupg2 -y
|
||||
|
||||
root@Datura:~# cat /etc/apt/sources.list |head -n3
|
||||
|
||||
deb [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org bookworm main
|
||||
deb-src [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org bookworm main
|
||||
|
||||
root@Datura:~# wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor | tee /usr/share/keyrings/tor-archive-keyring.gpg >/dev/null
|
||||
|
||||
apt update -y
|
||||
apt install tor nyx
|
||||
|
||||
#To configure tor we need to edit the configuration file with the following entry. Replace the TODOs with the port numbers you wish to use
|
||||
|
||||
#Open conf file
|
||||
vim /etc/tor/torrc
|
||||
|
||||
#Added configuration
|
||||
BridgeRelay 1
|
||||
|
||||
# Replace "TODO1" with a Tor port of your choice.
|
||||
# This port must be externally reachable.
|
||||
# Avoid port 9001 because it's commonly associated with Tor and censors may be scanning the Internet for this port.
|
||||
ORPort 37051
|
||||
|
||||
ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy
|
||||
|
||||
# Replace "TODO2" with an obfs4 port of your choice.
|
||||
# This port must be externally reachable and must be different from the one specified for ORPort.
|
||||
# Avoid port 9001 because it's commonly associated with Tor and censors may be scanning the Internet for this port.
|
||||
ServerTransportListenAddr obfs4 0.0.0.0:8042
|
||||
|
||||
# Local communication port between Tor and obfs4. Always set this to "auto".
|
||||
# "Ext" means "extended", not "external". Don't try to set a specific port number, nor listen on 0.0.0.0.
|
||||
ExtORPort auto
|
||||
|
||||
# Replace "<<b></b>address@email.com>" with your email address so we can contact you if there are problems with your bridge.
|
||||
# This is optional but encouraged.
|
||||
ContactInfo nihilist@nihilism.network
|
||||
|
||||
# Pick a nickname that you like for your bridge. This is optional.
|
||||
Nickname Nihilist
|
||||
|
||||
</code></pre>
|
||||
<p>Then restart the tor service + enable it:</p>
|
||||
<pre><code class="nim">
|
||||
#Restart service
|
||||
systemctl restart tor@default
|
||||
|
||||
#Enable at boot
|
||||
systemctl enable --now tor@default
|
||||
</code></pre>
|
||||
|
||||
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
</div> <!-- /container -->
|
||||
</div><!-- /white -->
|
||||
|
||||
<div id="anon2">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-8 col-lg-offset-2">
|
||||
<h2><b>Nyx monitoring</b></h2> </br> </br>
|
||||
<p>Once it finished installing, you can monitor your tor bridge node activity with nyx:</p>
|
||||
<pre><code class="nim">
|
||||
sudo -u debian-tor nyx
|
||||
|
||||
</code></pre>
|
||||
<img src="4.png" class="imgRz">
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
</div> <!-- /container -->
|
||||
</div><!-- /white -->
|
||||
|
||||
|
||||
<!-- +++++ Second Post +++++ -->
|
||||
<div id="anon1">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-8 col-lg-offset-2">
|
||||
<h2><b>Using your own bridge</b></h2> </br> </br>
|
||||
<p>Next install tor-browser (in arch linux you can do it from the AUR), if not just go to the <a href="https://www.torproject.org/download/">downloads</a> page.</p>
|
||||
<pre><code class="nim">
|
||||
yay -S torbrowser-launcher
|
||||
|
||||
</code></pre>
|
||||
<img src="5.png" class="imgRz">
|
||||
<p>Then Launch it, and go in your preferences:</p>
|
||||
<img src="6.png" class="imgRz">
|
||||
<img src="7.png" class="imgRz">
|
||||
<p>Here specifying your own bridge is not that simple, you need to use the following syntax:</p>
|
||||
<pre><code class="nim">
|
||||
Bridge obfs4 <<b></b>IP ADDRESS>:<<b></b>PORT> <<b></b>FINGERPRINT> cert=<<b></b>CERTIFICATE> iat-mode=0
|
||||
|
||||
</code></pre>
|
||||
<p>First find the ip address of your server:</p>
|
||||
<pre><code class="nim">
|
||||
root@debian-s-1vcpu-1gb-lon1-01:~# curl ifconfig.me && echo && echo
|
||||
<b>134.209.26.190</b>
|
||||
|
||||
</code></pre>
|
||||
<p>Next find the port :</p>
|
||||
<pre><code class="nim">
|
||||
sudo -u debian-tor nyx
|
||||
|
||||
</code></pre>
|
||||
<p>Just hit right arrow 3 times to get to your torrc config preview:</p>
|
||||
<img src="8.png" class="imgRz">
|
||||
<p>And here we have port <b>8042</b>. Next we need the fingerprint which is at page 1 of nyx, so press leftarrow to get back to page 1 and then scroll down using the downarrow:</p>
|
||||
<img src="9.png" class="imgRz">
|
||||
<p>Here it is <b>829165B21621041E7A9CDF7192AFFC51CA640B0E</b>, be careful not to copy the other one above which is the HASHED identity key. Here we want the original identity key fingerprint.
|
||||
After this, we need the server's certificate:</p>
|
||||
<pre><code class="nim">
|
||||
|
||||
root@debian-s-1vcpu-1gb-lon1-01:~# cat /var/lib/tor/pt_state/obfs4_bridgeline.txt
|
||||
# obfs4 torrc client bridge line
|
||||
#
|
||||
# This file is an automatically generated bridge line based on
|
||||
# the current obfs4proxy configuration. EDITING IT WILL HAVE
|
||||
# NO EFFECT.
|
||||
#
|
||||
# Before distributing this Bridge, edit the placeholder fields
|
||||
# to contain the actual values:
|
||||
# <<b></b>IP ADDRESS> - The public IP address of your obfs4 bridge.
|
||||
# <<b></b>PORT> - The TCP/IP port of your obfs4 bridge.
|
||||
# <<b></b>FINGERPRINT> - The bridge's fingerprint.
|
||||
|
||||
Bridge obfs4 <<b></b>IP ADDRESS>:<<b></b>PORT> <<b></b>FINGERPRINT> <b>cert=L04rcSpDJb9xdGUy/LgAlxbNgtQUWPJFsdF3q2i8lKRmzffiVFJU5ARjr4RYXRZSrsNYXg iat-mode=0</b>
|
||||
</code></pre>
|
||||
<p>Here in this case we need the last part: <b>cert=L04rcSpDJb9xdGUy/LgAlxbNgtQUWPJFsdF3q2i8lKRmzffiVFJU5ARjr4RYXRZSrsNYXg iat-mode=0</b></p>
|
||||
<p>And so we combine it all to get the string we need:</p>
|
||||
<pre><code class="nim">
|
||||
Bridge obfs4 134.209.26.190:8042 829165B21621041E7A9CDF7192AFFC51CA640B0E cert=L04rcSpDJb9xdGUy/LgAlxbNgtQUWPJFsdF3q2i8lKRmzffiVFJU5ARjr4RYXRZSrsNYXg iat-mode=0
|
||||
</code></pre>
|
||||
<p>Paste it in and hit "new identity":</p>
|
||||
<img src="10.png" class="imgRz">
|
||||
<p>Then we check if it is working on <a href="https://check.torproject.org/">check.torproject.org</a>:</p>
|
||||
<img src="11.png" class="imgRz">
|
||||
<p>And that's it! we have been able to use our own VPS-hosted tor bridge!</p>
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
</div> <!-- /container -->
|
||||
</div><!-- /white -->
|
||||
|
||||
<!-- +++++ Footer Section +++++ -->
|
||||
|
||||
<div id="anonb">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-4">
|
||||
<h4>Nihilism</h4>
|
||||
<p>
|
||||
Until there is Nothing left.
|
||||
|
||||
</p>
|
||||
</div><!-- /col-lg-4 -->
|
||||
|
||||
<div class="col-lg-4">
|
||||
<h4>My Links</h4>
|
||||
<p>
|
||||
|
||||
<a target="_blank" rel="noopener noreferrer" href="http://blog.nihilism.network/rss/feed.xml">RSS Feed</a><br/><a target="_blank" rel="noopener noreferrer" href="https://matrix.to/#/#nihilism:m.datura.network">Matrix Chat</a><br/>
|
||||
|
||||
</p>
|
||||
</div><!-- /col-lg-4 -->
|
||||
|
||||
<div class="col-lg-4">
|
||||
<h4>About nihilist</h4>
|
||||
<p style="word-wrap: break-word;"><u>Donate XMR:</u> 8AUYjhQeG3D5aodJDtqG499N5jXXM71gYKD8LgSsFB9BUV1o7muLv3DXHoydRTK4SZaaUBq4EAUqpZHLrX2VZLH71Jrd9k8</p></br><p><u>Contact:</u> nihilist@nihilism.network (<a href="https://nihilism.network/nihilist.pubkey">PGP</a>)</p>
|
||||
</div><!-- /col-lg-4 -->
|
||||
|
||||
</div>
|
||||
|
||||
</div>
|
||||
</div>
|
||||
|
||||
|
||||
<!-- Bootstrap core JavaScript
|
||||
================================================== -->
|
||||
<!-- Placed at the end of the document so the pages load faster -->
|
||||
|
||||
</body>
|
||||
</html>
|
BIN
servers/tor/exit_node/0.png
Normal file
After Width: | Height: | Size: 124 KiB |
BIN
servers/tor/exit_node/1.png
Normal file
After Width: | Height: | Size: 52 KiB |
BIN
servers/tor/exit_node/2.jpg
Normal file
After Width: | Height: | Size: 93 KiB |
BIN
servers/tor/exit_node/2.png
Normal file
After Width: | Height: | Size: 83 KiB |
BIN
servers/tor/exit_node/3.png
Normal file
After Width: | Height: | Size: 25 KiB |
BIN
servers/tor/exit_node/4.png
Normal file
After Width: | Height: | Size: 121 KiB |
BIN
servers/tor/exit_node/5.png
Normal file
After Width: | Height: | Size: 214 KiB |
BIN
servers/tor/exit_node/6.png
Normal file
After Width: | Height: | Size: 332 KiB |
BIN
servers/tor/exit_node/7.png
Normal file
After Width: | Height: | Size: 125 KiB |
BIN
servers/tor/exit_node/8.png
Normal file
After Width: | Height: | Size: 102 KiB |
BIN
servers/tor/exit_node/9.png
Normal file
After Width: | Height: | Size: 53 KiB |
255
servers/tor/exit_node/index.html
Normal file
|
@ -0,0 +1,255 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<meta name="description" content="">
|
||||
<meta name="author" content="">
|
||||
<link rel="shortcut icon" href="../../../../../../assets/img/favicon.png">
|
||||
|
||||
<title>TOR Exit Node</title>
|
||||
|
||||
<!-- Bootstrap core CSS -->
|
||||
<link href="../../../assets/css/bootstrap.css" rel="stylesheet">
|
||||
<link href="../../../assets/css/xt256.css" rel="stylesheet">
|
||||
<script src="../../../assets/js/highlight.pack.js"></script>
|
||||
|
||||
|
||||
<!-- Custom styles for this template -->
|
||||
<link href="../../../assets/css/main.css" rel="stylesheet">
|
||||
|
||||
|
||||
|
||||
<!-- HTML5 shim and Respond.js IE8 support of HTML5 elements and media queries -->
|
||||
<!--[if lt IE 9]>
|
||||
<script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
|
||||
<script src="https://oss.maxcdn.com/libs/respond.js/1.3.0/respond.min.js"></script>
|
||||
<![endif]-->
|
||||
</head>
|
||||
|
||||
<body>
|
||||
|
||||
<!-- Static navbar -->
|
||||
<div class="navbar navbar-inverse-anon navbar-static-top">
|
||||
<div class="container">
|
||||
<div class="navbar-header">
|
||||
<button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse">
|
||||
<span class="icon-bar"></span>
|
||||
<span class="icon-bar"></span>
|
||||
<span class="icon-bar"></span>
|
||||
</button>
|
||||
<a class="navbar-brand-anon" href="\index.html">nihilist`s Blog</a>
|
||||
</div>
|
||||
<div class="navbar-collapse collapse">
|
||||
<ul class="nav navbar-nav navbar-right">
|
||||
|
||||
<li><a href="/about.html">About</a></li>
|
||||
<li><a href="/blog.html">Categories</a></li>
|
||||
<li><a href="https://blog.nihilism.network/donate.html">Donate</a></li>
|
||||
<li><a href="/contact.html">Contact</a></li>
|
||||
</ul>
|
||||
</div><!--/.nav-collapse -->
|
||||
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- +++++ Posts Lists +++++ -->
|
||||
<!-- +++++ First Post +++++ -->
|
||||
<div id="anon2">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-8 col-lg-offset-2">
|
||||
<a href="../../anon.html">Previous Page</a></br></br> <p><img src="../../../assets/img/user.png" width="50px" height="50px"> <ba>nihilist - 29 / 01 / 2024</ba></p>
|
||||
<h1>TOR Exit Node </h1>
|
||||
<img src="../logo.png" class="imgRz">
|
||||
<p> Before we start, make sure you either rent a VPS anonymously (tor+XMR + ssh via tor) click <a href="https://kycnot.me/search?q=hosting&type=service">here</a> for the list of anonymity-friendly hosting providers or rent a VPS on a cloud provider that <a href="https://community.torproject.org/relay/community-resources/good-bad-isps/">explicitely</a> allows for tor exit nodes to be hosted on their platform.</p>
|
||||
|
||||
<img src="2.jpg" class="imgRz">
|
||||
<p>As a disclaimer, you need to know who allows these tor exit nodes, if you're going to pick a random host provider to host an exit node for you,
|
||||
you really don't know how the host may respond to that. Therefore it is best to pre-emptively see who actually accepts those exit nodes by looking at their TOS or
|
||||
by contacting them for additional information. </p>
|
||||
<img src="1.png" class="imgRz">
|
||||
|
||||
<p> ⚠️ Beware that authorities aren't always aware of tor exit node and what to do from a legal stand point. Before hosting an exit node, please take time to do sufficient legal research.
|
||||
People have been arrested all around the world and had a lot of trouble with authorities because they hosted exit nodes.
|
||||
If you are still motivated to get your own exit node, keep the phone number of a lawyer specialised in this field just in case anything goes wrong. ⚠️ </p>
|
||||
|
||||
<p>Now you can get a domain name to resolve to your exit node, or just use the one provided by njal.la :</p>
|
||||
<img src="8.png" class="imgRz">
|
||||
|
||||
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
</div> <!-- /container -->
|
||||
</div><!-- /grey -->
|
||||
|
||||
<!-- +++++ Second Post +++++ -->
|
||||
<div id="anon3">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-8 col-lg-offset-2">
|
||||
<h2><b>Initial setup</b></h2> </br> </br>
|
||||
|
||||
<pre><code class="nim">
|
||||
apt update && apt -y dist-upgrade && apt -y autoremove && apt install -y curl tmux vim obfs4proxy gnupg2
|
||||
|
||||
apt update -y && apt upgrade -y
|
||||
apt install curl tmux vim -y
|
||||
|
||||
root@Datura:~# cat /etc/apt/sources.list |head -n3
|
||||
|
||||
deb [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org bookworm main
|
||||
deb-src [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org bookworm main
|
||||
|
||||
root@Datura:~# wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor | tee /usr/share/keyrings/tor-archive-keyring.gpg >/dev/null
|
||||
|
||||
apt update -y
|
||||
apt install tor nyx
|
||||
|
||||
|
||||
</code></pre>
|
||||
<p>From inside nyx you can view tor's status :</p>
|
||||
<pre><code class="nim">
|
||||
root@exit:~# nyx
|
||||
|
||||
</code></pre>
|
||||
<img src="5.png" class="imgRz">
|
||||
<p>inside nyx you can use the left and right arrow to navigate the different pages:</p>
|
||||
<img src="6.png" class="imgRz">
|
||||
<p>Above you can see the connections, pressing right again shows how your server is configurated, along with extra details on each setting:</p>
|
||||
<img src="7.png" class="imgRz">
|
||||
<p>Next we make sure it's an exit like so: (be aware that this is where it gets dangerous if you're not doing this on a non-KYC VPS, or on a cloud provider that doesnt accept tor exit nodes.</p>
|
||||
<pre><code class="nim">
|
||||
root@exit:~# vim /etc/tor/torrc
|
||||
root@exit:~# cat /etc/tor/torrc
|
||||
RunAsDaemon 1
|
||||
ControlPort 9051
|
||||
CookieAuthentication 1
|
||||
ORPort 9001
|
||||
Nickname anonymous
|
||||
|
||||
ExitPolicy accept *:* # Accept exit connections
|
||||
ExitPolicy reject private:* # Block private IPv4
|
||||
IPv6Exit 1 # Allow IPv6 connections
|
||||
ExitPolicy accept6 *:* # Accept IPv6
|
||||
ExitPolicy reject6 [FC00::]/7:* # Block private IPv6
|
||||
ExitPolicy reject6 [FE80::]/10:* # Block link-local IPv6
|
||||
ExitPolicy reject6 [2002::]/16:* # Block 6to4 addresses
|
||||
|
||||
</code></pre>
|
||||
<p>you can also make a stricter tor exit policy like so:</p>
|
||||
<pre><code class="nim">
|
||||
root@Datura:~# cat /etc/tor/torrc
|
||||
RunAsDaemon 1
|
||||
ControlPort 9051
|
||||
CookieAuthentication 1
|
||||
ORPort 9001
|
||||
Nickname Datura
|
||||
|
||||
ExitPolicy accept *:20-21 # FTP
|
||||
ExitPolicy accept *:43 # WHOIS
|
||||
ExitPolicy accept *:53 # DNS
|
||||
ExitPolicy accept *:80-81 # HTTP, HTTP alt.
|
||||
ExitPolicy accept *:443 # HTTPS
|
||||
ExitPolicy accept *:5222-5223 # XMPP, XMPP over
|
||||
ExitPolicy accept *:6667-7000 # IRC
|
||||
ExitPolicy accept *:8008 # HTTP alternate
|
||||
ExitPolicy accept *:8082 # HTTPS Electrum Bitcoin port
|
||||
ExitPolicy accept *:8332-8333 # Bitcoin
|
||||
ExitPolicy accept *:8888 # HTTP Proxies, NewsEDGE, HUSH coin
|
||||
ExitPolicy accept *:9418 # git - Git pack transfer service
|
||||
ExitPolicy accept *:50002 # Electrum Bitcoin SSL
|
||||
ExitPolicy accept *:64738 # Mumble - voice over IP
|
||||
ExitPolicy accept *:18080-18081 # Monero
|
||||
ExitPolicy reject *:*
|
||||
|
||||
ExitPolicy reject private:* # Block private IPv4
|
||||
IPv6Exit 1 # Allow IPv6 connections
|
||||
ExitPolicy accept6 *:* # Accept IPv6
|
||||
ExitPolicy reject6 [FC00::]/7:* # Block private IPv6
|
||||
ExitPolicy reject6 [FE80::]/10:* # Block link-local IPv6
|
||||
ExitPolicy reject6 [2002::]/16:* # Block 6to4 addresses
|
||||
|
||||
</pre></code>
|
||||
<p>And then just restart the tor service to make sure the exit node is active:</p>
|
||||
<pre><code class="nim">
|
||||
root@exit:~# systemctl restart tor@default
|
||||
root@exit:~# systemctl status tor@default
|
||||
● tor@default.service - Anonymizing overlay network for TCP
|
||||
Loaded: loaded (/lib/systemd/system/tor@default.service; enabled-runtime; preset: enabled)
|
||||
Active: active (running) since Mon 2024-01-29 10:43:02 UTC; 5s ago
|
||||
Process: 3852 ExecStartPre=/usr/bin/install -Z -m 02755 -o debian-tor -g debian-tor -d /run/tor (code=exited, status=0/SUCCESS)
|
||||
Process: 3853 ExecStartPre=/usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 0 --verify-config (code=exited, status=0/SUCCESS)
|
||||
Main PID: 3855 (tor)
|
||||
Tasks: 3 (limit: 19110)
|
||||
Memory: 140.1M
|
||||
CGroup: /system.slice/system-tor.slice/tor@default.service
|
||||
└─3855 /usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 0
|
||||
|
||||
Jan 29 10:43:03 exit Tor[3855]: Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits
|
||||
Jan 29 10:43:04 exit Tor[3855]: Bootstrapped 89% (ap_handshake): Finishing handshake with a relay to build circuits
|
||||
Jan 29 10:43:04 exit Tor[3855]: Bootstrapped 90% (ap_handshake_done): Handshake finished with a relay to build circuits
|
||||
Jan 29 10:43:04 exit Tor[3855]: Bootstrapped 95% (circuit_create): Establishing a Tor circuit
|
||||
Jan 29 10:43:05 exit Tor[3855]: Bootstrapped 100% (done): Done
|
||||
Jan 29 10:43:05 exit Tor[3855]: Now checking whether IPv4 ORPort 80.78.22.215:9001 is reachable... (this may take up to 20 minutes -- look for log messages indicating success)
|
||||
Jan 29 10:43:05 exit Tor[3855]: Now checking whether IPv6 ORPort [2a0a:3840:8078:22:0:504e:16d7:1337]:9001 is reachable... (this may take up to 20 minutes -- look for log messages indicating success)
|
||||
Jan 29 10:43:06 exit Tor[3855]: Self-testing indicates your ORPort [2a0a:3840:8078:22:0:504e:16d7:1337]:9001 is reachable from the outside. Excellent.
|
||||
Jan 29 10:43:06 exit Tor[3855]: Self-testing indicates your ORPort 80.78.22.215:9001 is reachable from the outside. Excellent. Publishing server descriptor.
|
||||
Jan 29 10:43:06 exit Tor[3855]: Performing bandwidth self-test...done.
|
||||
|
||||
root@exit:~# nyx
|
||||
|
||||
</code></pre>
|
||||
<p>Then wait a few hours for the exit node to appear on tor metrics, then you can take the node fingerprint (example 916EDD8E5D61613BBC7B6CCEFB2778AE706786B9) and check it's status on torproject.org <a href="https://metrics.torproject.org/rs.html#search/flag:exit">here</a>.</p>
|
||||
<p>After that, you need to wait 2 weeks for the exit node to be fully operational as explained <a href="https://blog.torproject.org/lifecycle-of-a-new-relay/">here</a>.</p>
|
||||
<pre><code class="nim">
|
||||
"A new relay, assuming it is reliable and has plenty of bandwidth, goes through four phases: the unmeasured phase (days 0-3) where it gets roughly no use, the remote-measurement phase (days 3-8) where load starts to increase, the ramp-up guard phase (days 8-68) where load counterintuitively drops and then rises higher, and the steady-state guard phase (days 68+). "
|
||||
|
||||
</pre></code>
|
||||
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
</div> <!-- /container -->
|
||||
</div><!-- /white -->
|
||||
|
||||
|
||||
<!-- +++++ Footer Section +++++ -->
|
||||
|
||||
<div id="anonb">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-4">
|
||||
<h4>Nihilism</h4>
|
||||
<p>
|
||||
Until there is Nothing left.
|
||||
|
||||
</p>
|
||||
</div><!-- /col-lg-4 -->
|
||||
|
||||
<div class="col-lg-4">
|
||||
<h4>My Links</h4>
|
||||
<p>
|
||||
|
||||
<a target="_blank" rel="noopener noreferrer" href="http://blog.nihilism.network/rss/feed.xml">RSS Feed</a><br/><a target="_blank" rel="noopener noreferrer" href="https://matrix.to/#/#nihilism:m.datura.network">Matrix Chat</a><br/>
|
||||
|
||||
</p>
|
||||
</div><!-- /col-lg-4 -->
|
||||
|
||||
<div class="col-lg-4">
|
||||
<h4>About nihilist</h4>
|
||||
<p style="word-wrap: break-word;"><u>Donate XMR:</u> 8AUYjhQeG3D5aodJDtqG499N5jXXM71gYKD8LgSsFB9BUV1o7muLv3DXHoydRTK4SZaaUBq4EAUqpZHLrX2VZLH71Jrd9k8</p></br><p><u>Contact:</u> nihilist@nihilism.network (<a href="https://nihilism.network/nihilist.pubkey">PGP</a>)</p>
|
||||
</div><!-- /col-lg-4 -->
|
||||
|
||||
</div>
|
||||
|
||||
</div>
|
||||
</div>
|
||||
|
||||
|
||||
<!-- Bootstrap core JavaScript
|
||||
================================================== -->
|
||||
<!-- Placed at the end of the document so the pages load faster -->
|
||||
|
||||
</body>
|
||||
</html>
|
BIN
servers/tor/logo.png
Normal file
After Width: | Height: | Size: 436 KiB |
BIN
servers/tor/relay/1.png
Normal file
After Width: | Height: | Size: 42 KiB |
BIN
servers/tor/relay/2.png
Normal file
After Width: | Height: | Size: 83 KiB |
BIN
servers/tor/relay/3.png
Normal file
After Width: | Height: | Size: 39 KiB |
BIN
servers/tor/relay/4.png
Normal file
After Width: | Height: | Size: 53 KiB |
BIN
servers/tor/relay/5.png
Normal file
After Width: | Height: | Size: 163 KiB |
BIN
servers/tor/relay/6.png
Normal file
After Width: | Height: | Size: 22 KiB |
BIN
servers/tor/relay/7.png
Normal file
After Width: | Height: | Size: 19 KiB |
BIN
servers/tor/relay/8.png
Normal file
After Width: | Height: | Size: 232 KiB |
181
servers/tor/relay/index.html
Normal file
|
@ -0,0 +1,181 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<meta name="description" content="">
|
||||
<meta name="author" content="">
|
||||
<link rel="shortcut icon" href="../../../../../../assets/img/favicon.png">
|
||||
|
||||
<title>TOR Relay</title>
|
||||
|
||||
<!-- Bootstrap core CSS -->
|
||||
<link href="../../../assets/css/bootstrap.css" rel="stylesheet">
|
||||
<link href="../../../assets/css/xt256.css" rel="stylesheet">
|
||||
<script src="../../../assets/js/highlight.pack.js"></script>
|
||||
|
||||
|
||||
<!-- Custom styles for this template -->
|
||||
<link href="../../../assets/css/main.css" rel="stylesheet">
|
||||
|
||||
|
||||
|
||||
<!-- HTML5 shim and Respond.js IE8 support of HTML5 elements and media queries -->
|
||||
<!--[if lt IE 9]>
|
||||
<script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
|
||||
<script src="https://oss.maxcdn.com/libs/respond.js/1.3.0/respond.min.js"></script>
|
||||
<![endif]-->
|
||||
</head>
|
||||
|
||||
<body>
|
||||
|
||||
<!-- Static navbar -->
|
||||
<div class="navbar navbar-inverse-anon navbar-static-top">
|
||||
<div class="container">
|
||||
<div class="navbar-header">
|
||||
<button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse">
|
||||
<span class="icon-bar"></span>
|
||||
<span class="icon-bar"></span>
|
||||
<span class="icon-bar"></span>
|
||||
</button>
|
||||
<a class="navbar-brand-anon" href="\index.html">nihilist`s Blog</a>
|
||||
</div>
|
||||
<div class="navbar-collapse collapse">
|
||||
<ul class="nav navbar-nav navbar-right">
|
||||
|
||||
<li><a href="/about.html">About</a></li>
|
||||
<li><a href="/blog.html">Categories</a></li>
|
||||
<li><a href="https://blog.nihilism.network/donate.html">Donate</a></li>
|
||||
<li><a href="/contact.html">Contact</a></li>
|
||||
</ul>
|
||||
</div><!--/.nav-collapse -->
|
||||
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- +++++ Posts Lists +++++ -->
|
||||
<!-- +++++ First Post +++++ -->
|
||||
<div id="anon2">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-8 col-lg-offset-2">
|
||||
<a href="../../anon.html">Previous Page</a></br></br> <p><img src="../../../assets/img/user.png" width="50px" height="50px"> <ba>nihilist - 01 / 02 / 2024</ba></p>
|
||||
<h1>TOR Relay </h1>
|
||||
<img src="../logo.png" class="imgRz">
|
||||
<p> Before we start, you will need a Debian VPS (you can get one on digitalocean for example), if you prefer to use your own self hosted server, make sure that port 80 and 443 are correctly port forwarded so that the public ip points to the server and not the router. Once that's done, go and ssh into your debian 10 server. </p>
|
||||
<p>You will also need to make sure that the VPS provider allows the hosting of a tor node! check torproject's good/bad isps page <a href="https://community.torproject.org/relay/community-resources/good-bad-isps/">here</a>. </p>
|
||||
<img src="1.png" class="imgRz">
|
||||
<p> For example, you wouldn't be able to host an exit node on DigitalOcean, however hosting a regular node is completely fine.</p>
|
||||
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
</div> <!-- /container -->
|
||||
</div><!-- /grey -->
|
||||
|
||||
<!-- +++++ Second Post +++++ -->
|
||||
<div id="anon3">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-8 col-lg-offset-2">
|
||||
<h2><b>Installation</b></h2> </br> </br>
|
||||
<pre><code class="nim">
|
||||
apt update -y && apt upgrade -y
|
||||
apt install curl tmux vim gnupg2 -y
|
||||
|
||||
root@Datura:~# cat /etc/apt/sources.list |head -n3
|
||||
|
||||
deb [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org bookworm main
|
||||
deb-src [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org bookworm main
|
||||
|
||||
root@Datura:~# wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor | tee /usr/share/keyrings/tor-archive-keyring.gpg >/dev/null
|
||||
|
||||
apt update -y
|
||||
apt install tor nyx
|
||||
|
||||
#To configure tor we need to edit the configuration file with the following entry. Replace the TODOs with the port numbers you wish to use
|
||||
|
||||
#Open conf file
|
||||
vim /etc/tor/torrc
|
||||
|
||||
# Replace "TODO1" with a Tor port of your choice.
|
||||
# This port must be externally reachable.
|
||||
# Avoid port 9001 because it's commonly associated with Tor and censors may be scanning the Internet for this port.
|
||||
ORPort 37051
|
||||
|
||||
# Local communication port between Tor and obfs4. Always set this to "auto".
|
||||
# "Ext" means "extended", not "external". Don't try to set a specific port number, nor listen on 0.0.0.0.
|
||||
ExtORPort auto
|
||||
|
||||
# Replace "<<b></b>address@email.com>" with your email address so we can contact you if there are problems with your bridge.
|
||||
# This is optional but encouraged.
|
||||
ContactInfo nihilist@nihilism.network
|
||||
|
||||
# Pick a nickname that you like for your bridge. This is optional.
|
||||
Nickname Nihilist
|
||||
|
||||
</code></pre>
|
||||
<p>Then restart the tor service + enable it:</p>
|
||||
<pre><code class="nim">
|
||||
#Restart service
|
||||
systemctl restart tor@default
|
||||
|
||||
#Enable at boot
|
||||
systemctl enable --now tor@default
|
||||
|
||||
#monitor it with nyx
|
||||
nyx
|
||||
</code></pre>
|
||||
|
||||
<img src="5.png" class="imgRz">
|
||||
<p>You can also monitor connections by switching to the menu (pressing <b>m</b>) </p>
|
||||
<img src="6.png" class="imgRz">
|
||||
<p>and then just use the <b>arrow keys</b> to navigate:</p>
|
||||
<img src="7.png" class="imgRz">
|
||||
<p>Hit <b>spacebar</b> to choose "connection" </p>
|
||||
<p>EDIT: you can just use left arrow and right arrow to change menus quickly lol</p>
|
||||
<img src="8.png" class="imgRz">
|
||||
<p>This is going to list the active connections (Circuits) to your tor node with their ip addresses.</p>
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
</div> <!-- /container -->
|
||||
</div><!-- /white -->
|
||||
|
||||
|
||||
<div id="anonb">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-4">
|
||||
<h4>Nihilism</h4>
|
||||
<p>
|
||||
Until there is Nothing left.
|
||||
|
||||
</p>
|
||||
</div><!-- /col-lg-4 -->
|
||||
|
||||
<div class="col-lg-4">
|
||||
<h4>My Links</h4>
|
||||
<p>
|
||||
|
||||
<a target="_blank" rel="noopener noreferrer" href="http://blog.nihilism.network/rss/feed.xml">RSS Feed</a><br/><a target="_blank" rel="noopener noreferrer" href="https://matrix.to/#/#nihilism:m.datura.network">Matrix Chat</a><br/>
|
||||
|
||||
</p>
|
||||
</div><!-- /col-lg-4 -->
|
||||
|
||||
<div class="col-lg-4">
|
||||
<h4>About nihilist</h4>
|
||||
<p style="word-wrap: break-word;"><u>Donate XMR:</u> 8AUYjhQeG3D5aodJDtqG499N5jXXM71gYKD8LgSsFB9BUV1o7muLv3DXHoydRTK4SZaaUBq4EAUqpZHLrX2VZLH71Jrd9k8</p></br><p><u>Contact:</u> nihilist@nihilism.network (<a href="https://nihilism.network/nihilist.pubkey">PGP</a>)</p>
|
||||
</div><!-- /col-lg-4 -->
|
||||
|
||||
</div>
|
||||
|
||||
</div>
|
||||
</div>
|
||||
|
||||
|
||||
<!-- Bootstrap core JavaScript
|
||||
================================================== -->
|
||||
<!-- Placed at the end of the document so the pages load faster -->
|
||||
|
||||
</body>
|
||||
</html>
|