Proxies

Proxies: Serving, Using, and TOR

Context

Outcome

This guide will help you configure your system to route all network traffic through the Tor network using Privoxy. By the end of this guide, your internet traffic will be anonymized, enhancing your privacy and security.

Benefits

Routing all traffic through Tor provides several benefits:

• Anonymity: Tor hides your IP address by routing your traffic through multiple nodes.
• Privacy: Your internet service provider (ISP) and other third parties cannot easily monitor your online activities.
• Access to Restricted Content: You can access content that may be blocked or restricted in your region.

Tor vs. VPN

• Tor: Tor is a free, decentralized network that anonymizes your traffic by routing it through multiple volunteer-operated nodes. It is particularly effective for high privacy needs but may be slower due to multiple hops.
• VPN: A VPN provides encryption and routes your traffic through a server operated by the VPN provider. VPNs can offer faster speeds and are easier to use but require trust in the VPN provider.

Proxy vs. VPN

• Proxy: A proxy routes your internet traffic through a single server, hiding your IP address but not necessarily encrypting your data. Proxies are useful for accessing geo-restricted content but offer less security than VPNs or Tor.
• VPN: A VPN encrypts all your traffic and routes it through a secure server, providing both privacy and security. VPNs are generally faster than Tor but require trust in the VPN provider.

Privacy and Security Considerations

Serving a Proxy

When setting up a proxy server, consider the following:

• Security: Ensure the server is secured to prevent unauthorized access. Use strong passwords and consider setting up a firewall.
• Privacy: Be aware that the server can log all traffic passing through it. If privacy is critical, configure the server to avoid logging or encrypt logs.

Using a Proxy

When using a proxy server, consider the following:

• Anonymity: Your traffic is routed through the proxy, masking your IP address but not necessarily encrypting your data.
• Trust: Ensure you trust the proxy server you are using, as it can potentially log your traffic and access sensitive information.

Routing All Traffic Through Tor Using Privoxy

For macOS

Step 1: Install Tor and Privoxy

First, we need to install both Tor and Privoxy using Homebrew.

1. Install Homebrew (if not already installed):

/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"

1. Install Tor:

brew install tor

1. Install Privoxy:

brew install privoxy

Step 2: Configure Privoxy to Use Tor

Edit the Privoxy configuration file to route traffic through Tor.

1. Open Privoxy’s Configuration File:

nano /opt/homebrew/etc/privoxy/config

1. Add Tor Configuration: Add the following line to the configuration file:

forward-socks5t / 127.0.0.1:9050 .

1. Save and Exit:

• Press CTRL + X to exit.
• Press Y to confirm saving the changes.
• Press Enter to save the file.

Step 3: Start Privoxy

Start Privoxy as a background service.

1. Start Privoxy:

brew services start privoxy

Step 4: Configure macOS to Use Privoxy as a System Proxy

Configure your macOS network settings to use Privoxy.

= Open System Preferences:

1. Go to System Preferences > Network.

= Select the Network Interface:

1. Select the network interface you are using (e.g., Wi-Fi or Ethernet).

= Configure Proxies:

1. Click on Advanced.
2. Go to the Proxies tab.
3. Check Web Proxy (HTTP) and Secure Web Proxy (HTTPS).
4. Set both to 127.0.0.1 and 8118 (Privoxy’s default port).

= Apply Changes:

1. Click OK and Apply.

Step 5: Verify the Configuration

Ensure that your traffic is being routed through Tor.

1. Check IP Address: Open a web browser and navigate to http://check.torproject.org. This page should confirm that your traffic is being routed through the Tor network.
2. Test Connection: Use

   curl -L --proxy http://127.0.0.1:8118 http://check.torproject.org

   to verify the connection.

Example Privoxy Configuration

Here is an example of what your Privoxy configuration might look like after editing:

# Forward all traffic through Tor
forward-socks5t / 127.0.0.1:9050 .

For Linux

Step 1: Install Tor and Privoxy

First, we need to install both Tor and Privoxy.

1. Update Package List:

sudo apt update

1. Install Tor:

sudo apt install tor

1. Install Privoxy:

sudo apt install privoxy

Step 2: Configure Privoxy to Use Tor

Edit the Privoxy configuration file to route traffic through Tor.

1. Open Privoxy’s Configuration File:

sudo nano /etc/privoxy/config

1. Add Tor Configuration: Add the following line to the configuration file:

forward-socks5t / 127.0.0.1:9050 .

1. Save and Exit:

• Press CTRL + X to exit.
• Press Y to confirm saving the changes.
• Press Enter to save the file.

Step 3: Start Privoxy

Start Privoxy as a background service.

1. Start Privoxy:

sudo systemctl start privoxy
sudo systemctl enable privoxy

Step 4: Set Up Port Forwarding

1. Configure Your Router: Ensure your router forwards external traffic on port 8118 to your Linux machine’s IP address. You can find your IP address using:

PUBLIC_IP=$(curl -s ifconfig.me)
echo $PUBLIC_IP

Step 5: Secure Remote Access with SSH Tunneling

1. Create SSH Tunnel Script: Create a script to automate the creation of an SSH tunnel. Replace your_linux_username with your actual Linux username.

PUBLIC_IP=$(curl -s ifconfig.me)
echo "ssh -L 8118:localhost:8118 $(whoami)@$PUBLIC_IP" > connect_proxy.sh
chmod +x connect_proxy.sh

1. Run the Script on the Remote Machine: On your remote machine, run the script to create an SSH tunnel:

./connect_proxy.sh

1. Configure Remote Device to Use Proxy: On your remote device, configure your web browser or system settings to use the proxy:

• HTTP Proxy: 127.0.0.1
• Port: 8118

Connecting to the Proxy from a Remote System

For macOS

Step 1: Create SSH Tunnel

1. Run the SSH Tunnel Script: On your macOS remote machine, run the script created previously to establish an SSH tunnel:

./connect_proxy.sh

Step 2: Configure macOS to Use the Proxy

= Open System Preferences:

1. Go to System Preferences > Network.

= Select the Network Interface:

1. Select the network interface you are using (e.g., Wi-Fi or Ethernet).

= Configure Proxies:

1. Click on Advanced.
2. Go to the Proxies tab.
3. Check Web Proxy (HTTP) and Secure Web Proxy (HTTPS).
4. Set both to 127.0.0.1 and 8118.

= Apply Changes:

1. Click OK and Apply.

For Windows

Step 1: Create SSH Tunnel

= Install PuTTY (if not already installed):

1. Download and install PuTTY from here.

= Configure SSH Tunnel:

1. Open PuTTY.
2. Enter the hostname or IP address of your proxy server.
3. In the left-hand menu, go to Connection > SSH > Tunnels.
4. Add a new forwarded port:
5. Source port: 8118
6. Destination: localhost:8118
7. Click Add.
8. Go back to the Session category.
9. Click Open to start the SSH session.

Step 2: Configure Windows to Use the Proxy

= Open Internet Options:

1. Go to Control Panel > Internet Options.

= Configure LAN Settings:

1. Go to the Connections tab and click on LAN settings.
2. Check Use a proxy server for your LAN.
3. Enter 127.0.0.1 for the address and 8118 for the port.
4. Click OK to apply the changes.

For iOS

Step 1: Create SSH Tunnel

= Install an SSH Client:

1. Install an SSH client like Termius from the App Store.

= Configure SSH Tunnel:

1. Open Termius.
2. Add a new host with the IP address of your proxy server.
3. Go to the Port Forwarding section and add a new rule:
4. Local port: 8118
5. Remote host: localhost
6. Remote port: 8118
7. Connect to the host to start the tunnel.

Step 2: Configure iOS to Use the Proxy

= Configure Wi-Fi Proxy:

1. Go to Settings > Wi-Fi.
2. Tap the information icon (i) next to your Wi-Fi network.
3. Scroll down to HTTP Proxy and select Manual.
4. Enter 127.0.0.1 for the Server and 8118 for the Port.
5. Save the settings.

For Android

Step 1: Create SSH Tunnel

= Install an SSH Client:

1. Install an SSH client like ConnectBot from the Google Play Store.

= Configure SSH Tunnel:

1. Open ConnectBot.
2. Add a new host with the IP address of your proxy server.
3. Go to the port forwarding section and add a new rule:
4. Type: Local
5. Source port: 8118
6. Destination: localhost:8118
7. Connect to the host to start the tunnel.

Step 2: Configure Android to Use the Proxy

= Configure Wi-Fi Proxy:

1. Go to Settings > Network & Internet > Wi-Fi.
2. Long-press your connected Wi-Fi network and select Modify network.
3. Scroll down and select Advanced options.
4. Set Proxy to Manual.
5. Enter 127.0.0.1 for the Hostname and 8118 for the Port.
6. Save the settings.