Re: Question about TOR and IIS

Re: Question about TOR and IIS - Also hello!

To: or-talk@xxxxxxxxxxxxx

Subject: Re: Question about TOR and IIS - Also hello!

From: "Chris Burge" <burgechris@xxxxxxxxx>

Date: Tue, 15 Jan 2008 11:00:22 -0500

Delivered-to: archiver@xxxxxxxx

Delivered-to: or-talk-outgoing@xxxxxxxx

Delivered-to: or-talk@xxxxxxxx

Delivery-date: Tue, 15 Jan 2008 11:00:34 -0500

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references; bh=fBDTnje3F5RUU/sj9rqej2QKfvu3xYdBvjA2B2FFoBM=; b=Q+KrNrfstpC+Yufj1c/UYdpupmLPMLy+6oOOnR/UGcMrLnGKDNIE7DOftRS0i9OFgm4+Tc0AxVqP2Ix5QkbCfVwQeIKCPJ1qkn6qfdqoDReVRbRMU0frOXvoFrd07qngzIzk9rvG2pT8vpX36y2fWk3oeyIpAOF8XdR80yoPka8=

Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references; b=WfDSMYkSCyJTx2BG7CCIjtKsAgE9e4K/VUKCM/Etdowbd0lBesY2goqQffqpn/BAWFSUdRhs10JcQBd2arJjhz9iPKxJgCq2/KAKlee/qhqcCu+c89q24YpD9nvBbA1w8X5OYeDiDAvFHNGs0eDlGbR0LHJtenBEIH5VvpJ89QE=

In-reply-to: <20080115151900.GP20802@xxxxxxxxxxxxxx>

References: <22cafe8b0801150710t3112de66j99f666fddb26dc2@xxxxxxxxxxxxxx> <20080115151900.GP20802@xxxxxxxxxxxxxx>

Reply-to: or-talk@xxxxxxxxxxxxx

Sender: owner-or-talk@xxxxxxxxxxxxx

Roger! Thanks! I've read and re-read that document and I just finally realized that the directory path I've been pointing it to was not correct. LOL. Man....no telling how much time I've spent on it being convinced that it was the fact that I was on a Server 2003 boc\x and not a linux box. Sigh. Anywho....Once I had the hidden_service directory fixed in my torrc file, it worked like a charm.

Following your suggestion, I have it pointing to port 81 rather than 80. At first, Vidalia ran my processes up to 50% CPU usage for a few minutes and then went back down to the nominal 0-1% CPU usage. Any ideas why this is the case?

I'm currently pouring over how to leave the website and server anonymous. Any suggestions on how to suppress information and how to poll IIS for information? I want to really button this thing up!

Thank you so much!

Chris

On Jan 15, 2008 10:19 AM, Roger Dingledine <arma@xxxxxxx> wrote:

On Tue, Jan 15, 2008 at 10:10:32AM -0500, Chris Burge wrote:
> Ok...I've been running a relay on Windows (XP, Vista and Server 2003) for
> the past year.

Thanks. :)

> I hope this is the right list I can post this on. Either
> way, I a m looking to become more involved with TOR
> (donations/development/etc)

https://www.torproject.org/donate
https://www.torproject.org/documentation#DesignDoc
are probably two good places to start.

> given that none of the leading presidential
> candidates (except Huckabee or Ron Paul who are both lagging in the
> polls) in the US seem to be worried about privacy, Real ID and etc..
>
> I am now ready to try and run a hidden service on my Server 2003 box
> (specificly IIS) but have failed miserably. I'm stuck with IIS for now as I
> have always been a Microsoft developer (hey brings food to the table) and am
> not currently confident in running Apache at this time with IIS (only one
> box at this time). Essentially, I want to run IIS with a mixture of sites
> using TOR and not using TOR. I had imagined I would use my onion routing
> address in the host headers of the site I want TOR packets to hit while
> other sites would naturally take regular packets. Does anyone have a clue
> as to what I'm trying to do and how I might solve it? I'm not interested in
> moving to Apache at this time until I'm more confident with it and with a
> cms such as TYPO3.

The first thing I would worry about with one webserver that handles
hidden services and "normal" websites is if somebody can connect to the
hidden service website, ask for the real website, and get it. This lets
an attacker guess-and-check about where your hidden service lives. In
apache-land this is usually solved by listening on two different ports,
and making sure to keep the two classes of sites separate in apache's
mind. I imagine there's a way for IIS to do it too.

https://www.torproject.org/docs/tor-hidden-service#three
has a bit more discussion.

If you get it working well and want to document what you did and why,
that would be great. Hidden services haven't received much attention
over the past few years in terms of writing tutorials.

--Roger