[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Torlock - a simple script to prevent outgoing packets from bypassing Tor.
- To: or-talk@xxxxxxxx
- Subject: Torlock - a simple script to prevent outgoing packets from bypassing Tor.
- From: Irratar <irratar77@xxxxxxxxx>
- Date: Mon, 1 Mar 2010 15:04:39 +0000
- Delivered-to: archiver@xxxxxxxx
- Delivered-to: or-talk-outgoing@xxxxxxxx
- Delivered-to: or-talk@xxxxxxxx
- Delivery-date: Mon, 01 Mar 2010 10:04:51 -0500
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=xpsnJyNxY9jmdKNXoNDp7ej985ug3IH2MRa9gNvXtBw=; b=mbH0OqyljFN/IjS+eAWVpBeOWor1+1cZryvpK5EwAM0Ztv9ns26mwYHYxHOGoAJmzy 17RFxzfVkYClffksxf9SkOnKBnJ66QBHxx7b2BUaYdOabedJbZnIayO/pwVS0uDE4C3C IWJMPYjF20q0fUJMYUo7cFLN8Is5RLM5C3edk=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=HTJzMYinSYi6BCOH59a0i7TJQBNObwqIRO8w6c9d9BBl62RjFzrMrLGpCAYlsnq7cZ ubf9o0KIoT8BIxSlaWPVG9A9Wbc6McQANmJh4ySKI24NQPKeNU3XaOOJx0iZR/vE9F+f tl4vVeJYNKny7/MNcKc0zZFi3V4iDVdrN6I90=
- Reply-to: or-talk@xxxxxxxxxxxxx
- Sender: owner-or-talk@xxxxxxxxxxxxx
Hello.
I have created a simple Bash script to prevent any data from bypassing Tor
when Tor is running. I started it to use just for myself, but now I think
it will be better to share it with other users of Tor.
This script, named Torlock, does the following things when used to start Tor:
- Creates a special user named torlock by default (if you run it first time
or have removed that user after previous Tor session).
- Uses Iptables to block network access for everyone except for torlock.
- Setuids to torlock and starts Tor. Tor will be started in background mode,
and its output redirected to a file.
When used to stop Tor, it stops Tor, unlocks network access, and (optionally)
removes torlock user.
More information is in included text file. Even more can be obtained by reading
the script. It is small, simple, and easy to make sure it's not
backdoored. The script can be downloaded from Sourceforge:
http://sourceforge.net/projects/torlock/files/
Inspite of its simplicity, Torlock saved me at least twice when I forgot to
switch Torbutton on.
With best regards,
Irratar.
***********************************************************************
To unsubscribe, send an e-mail to majordomo@xxxxxxxxxxxxxx with
unsubscribe or-talk in the body. http://archives.seul.org/or/talk/