[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Tor and port 80

To: or-talk@xxxxxxxxxxxxx
Subject: Re: Tor and port 80
From: Patrick Coleman <blinken@xxxxxxxxx>
Date: Tue, 27 Sep 2005 17:23:57 +0800
Delivered-to: archiver@seul.org
Delivered-to: or-talk-outgoing@seul.org
Delivered-to: or-talk@seul.org
Delivery-date: Tue, 27 Sep 2005 05:24:29 -0400
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=B2P4CefcLRiQkNgtRSy1V0tdBH0vgkkhRaNMazaprmLA7Kz9mDLY7VOq8SvgLxaIWkPQFn3aGmMQ1Cy3Xl5fqvYZFatb9e4O0z1L51kSvngtapBMjcAA19oEVLdYNdQqc6vt5juqOC7zZWYivR+zI8AAFysJ3k8T1EP0KWuYtZo=
In-reply-to: <20050926173747.GA19303@totoro.wangafu.net>
References: <7d9163f305092609285b7a5e9d@mail.gmail.com> <1127752785.4969.93.camel@gihon> <7d9163f30509260951c4af54c@mail.gmail.com> <1127754731.4969.102.camel@gihon> <20050926173747.GA19303@totoro.wangafu.net>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx

If you could determine the IP ranges used by the authorities, it would
be possible to reroute packets coming in on a particular port to a
HTTP server or a tor server depending on the originating IP. This is
assuming the authorities use a fixed set of IPs; though AFAIK IP
matching is used sucessfully on bittorrent clients like Azureus to
block RIAA/MPAA from connecting.

Again, if the "authorities" are smart then they could just change
their IP regularly.
-Patrick

On 27/09/05, Nick Mathewson <nickm@xxxxxxxxxxxxx> wrote:
> On Mon, Sep 26, 2005 at 01:12:12PM -0400, Marc Abel wrote:
> > Shame on me for not reading up on this prior to posting, but....
> >
> > Is there a hack for sharing port 80 between a Tor server AND a WWW
> > server on a single IP?
>
> For directory purposes, yes.  You need to make your web browser
> redirect all requests that start with /tor to the Tor server's
> directory port.
>
> For OR purposes, it's not likely to be easy.  You'd need to write a
> proxy that would check initial connections to see whether they look
> like SSL or HTTP, redirecting them to Tor in the first case and your
> browser in the second.
>
> >    What I'm thinking is, "looks like a website to
> > the authorities", and "looks like a Tor server to Chinese dissidents".
>
> The method you describe is unlikely to achieve this purpose, assuming
> that the "authorities" are smart.  If the server is a Tor server,
> you can find this out by trying to use Tor with it, and seeing whether
> it answers you.
>
> Later, Arrakis Tor <arrakistor@xxxxxxxxx> wrote:
> > Good question. I have no clue.
>
> Arrakis: when somebody sends a message to or-talk, hundreds of people
> receive it.  If every one of them who *didn't* know the answer said "I
> have no clue", it would be impossible to use the list.  I'm glad
> you want to help out, but please realize that it's not helpful to tell
> everybody when you don't know the answer to their question.
>
> yrs,
> --
> Nick Mathewson
>
>
>


--
Public Key ID 0x4A6880B2
Key Fingerprint: 7867 E238 1608 1A20 89C4  BA6C 8FC3 C6EB 4A68 80B2
http://warhn.org/pcoleman/pubkey.txt

Follow-Ups:
- Re: Tor and port 80
  - From: Chris Palmer

References:
- New Release: TorPark; Tor + Portable Browser + Flash Drive = China Unhappy
  - From: Arrakis Tor
- Re: TorPark mirrors and China
  - From: Marc Abel
- Re: TorPark mirrors and China
  - From: Arrakis Tor
- Tor and port 80
  - From: Marc Abel
- Re: Tor and port 80
  - From: Nick Mathewson

Prev by Author: Re: Apache Hidden Service
Next by Author: Re: selecting Node lists by criteria?
Previous by thread: Re: Tor and port 80
Next by thread: Re: Tor and port 80
Index(es):
- Author
- Thread