Re: User tor issue

Udo van den Heuvel wrote:
>> Compare your graph and bandwidth settings with that of this randomly
>> picked router:
>>
http://torstatus.blutmagie.de/router_detail.php?FP=611a96764577d2a2ff490666ba732382bae08bbc 
>>
> 
> Yes, looks different.
> But how come?
> 
> How can I find out?

Would a debug log be helpful?

Please let me know.

Udo

SSL certificate checker plugin for Firefox?

Hi,

unfortunately Petname tool is not working on this site:
https://slo-tech.com/

It says "unauthenticated", and I cannot change that.

Any other solution?

bye, Matej

Re: SSL certificate checker plugin for Firefox?

On Thu, Jan 01, 2009 at 05:52:18PM +0100, matej.kovacic <at> owca.info wrote 0.2K bytes in 10 lines about:
: unfortunately Petname tool is not working on this site:
: https://slo-tech.com/
: It says "unauthenticated", and I cannot change that.

That's what it is supposed to say until you give it a name.  The
assumption is that you use out of band methods to authenticate the cert
is correctly assigned.  And then you type whatever nickname you want to
give it into the petname field.  Should the slo-tech.com cert change,
you'll receive a red box instead of green.  

--

-- 
Andrew

Re: Tutorials for providing Hidden Services?

On Thu, Dec 18, 2008 at 06:24:46PM -0000, 6cnf6cp02 <at> sneakemail.com wrote 0.7K bytes in 10 lines about:
: I want to provide basic free anonymous blogging services using Tor's hidden services. Are there any
tutorials for this, apart from the basic setup information on Torproject.org? More specifically, how
can I stop my users from identifying my server? What do I have to pay attention to?

There is no tutorial that I know of.  Each piece of software has
different concerns and configurations to protect both your and your
users anonymity.  

: How can I block connection attempts by Apache using my external network interface, eg. if the users
execute scripts that contact external addresses? What information is exposed by environment
variables, and how can I stop the user from reading them? For example, can I modify timezone/timestamps to
obfuscate my server location?

Just some thoughts.  Run apache on localhost.  Set the system time to UTC.
Check the 404 page and such so that it doesn't give out the hostname.
Run apache in a jail, etc.  Run the jail/vm on a system without a public
IP; such that if someone does break apache, they find the IP address is
192.168.1.2 (or some other RFC1918 scheme).

: What settings do I have to change to fully remove Apache's IP logging to protect my users?

Disable access logging.

--

-- 
Andrew

Re: User tor issue

On Thu, Jan 01, 2009 at 08:01:51AM +0100, udovdh <at> xs4all.nl wrote 0.3K bytes in 16 lines about:
> Would a debug log be helpful?

info level is probably good enough.

--

-- 
Andrew

Jailed/sandboxed/chrooted applications

Does anyone here jail, sandbox or chroot the applications they use with Tor?

I have been trying to adapt the Wiki's transparent proxy recommendations
to a FreeBSD jail for the last couple weeks with no luck. What is the 
best way
to isolate applications completely for use with Tor?

GeoIP down?

Re: Jailed/sandboxed/chrooted applications

On Thu, Jan 1, 2009 at 6:56 PM, Adlesshaven <adlesshaven <at> embarqmail.com> wrote:
> Does anyone here jail, sandbox or chroot the applications they use with Tor?
>... What is the best way
> to isolate applications completely for use with Tor?

situations vary but my personal preference is for distinct virtual
machines to run groups of applications and Tor separately.  the main
benefit this provides is stronger isolation from arbitrary execution
and other exploits as well as providing a virtual network address that
does not provide any hints about the topology or configuration of your
internal LAN / Internet connection.

being able to configure Tor'ified applications in freebsd jails would
be useful though; i've only tried to do that (owner match) with
iptables on linux though...

best regards,

Re: SSL certificate checker plugin for Firefox?

Re: Jailed/sandboxed/chrooted applications

Adlesshaven <adlesshaven <at> embarqmail.com> wrote:

> Does anyone here jail, sandbox or chroot the applications they use with Tor?

I'm running Tor and Privoxy in FreeBSD jails,
Xorg applications (which probably pose a bigger thread)
are running on the host system, though.

> I have been trying to adapt the Wiki's transparent proxy recommendations
> to a FreeBSD jail for the last couple weeks with no luck.

I wrote about trans-proxy-tor running in a FreeBSD jail at:
http://www.fabiankeil.de/blog-surrogat/2006/06/15/jail-experimente-mit-ezjail.html

The text is in German but the only thing that really matters is
the /etc/devfs.rules example to make /dev/pf visible in the jail.

Nowadays I use Tor's TransPort option instead of trans-proxy-tor,
but the configuration is pretty much the same.

Fabian