Tor Extras

Notice

Some of the information on this page may be outdated and could require revision or removal.

SSH Remote Login Over Tor

This guide will instruct you on how to SSH into your RoninDojo over Tor using an Android device.

Prerequisites

• Orbot Android app
• An Android SSH app such as JuiceSSH or Termux

Setup SSH Hidden Service

1. Open the command line interface (RoninCLI).

2. Open your torrc file.

   sudoedit /etc/tor/torrc

3. Add the following lines under the section labeled “This section is just for location-hidden services”.

   # SSH Hidden Service
   HiddenServiceDir /var/lib/tor/hidden_service/
   HiddenServicePort 22

4. Save the torrc file and exit back to the command line.

5. Restart Tor.

   sudo systemctl restart tor

6. Retrieve your SSH onion address.

   sudo cat /var/lib/tor/hidden_service/hostname

Connect Through a Mobile Device

1. Install and configure Orbot.

   Make sure any VPN service is turned off before launching Orbot. Install and launch Orbot, enable VPN mode, add Termux or JuiceSSH under Tor-Enabled Apps, and connect to Tor by pressing Start on the onion icon.

2. Launch your SSH app and connect to your RoninDojo.

   JuiceSSH
   • Add a new connection (the yellow circle with the “+” sign at the bottom-right).
   • Type: SSH
   • Address: youraddress.onion (from step 6 above)
   • Username (under Identity): admin
   • Password: optional — select the checkmark at the top-right to save.
   • Port: 22 (under Advanced settings) — select the checkmark to save.
   • Select your new connection to start the remote session and log in as usual.
   Termux

   Run the following commands:

   pkg install openssh
   ssh admin@youraddress.onion

   Replace youraddress.onion with the address from step 6 above.

Tor Bridges

Tor bridges, also called Tor bridge relays, are alternative entry points to the Tor network that are not all listed publicly. Using a bridge makes it harder (but not impossible) for your Internet Service Provider to know that you are using Tor. This guide shows you how to install the necessary dependencies to use Tor bridges and bypass ISP censorship of the Tor network.

Tor bridges depend on the obfs4proxy package. This package is not available through the official Manjaro Linux repositories and is only available through the AUR (Arch Linux User Repository). Follow the instructions below to get going.

Install System Build Dependencies

Before you begin, make sure you have the base-devel package group installed.

sudo pacman -S --noconfirm --needed git base-devel

Install the Yay Package Manager for the AUR

Yay (“yet another yogurt”) is a Pacman wrapper and AUR helper written in Go. It manages the installation of all AUR packages for you.

mkdir ~/.git-repos
cd ~/.git-repos
git clone https://aur.archlinux.org/yay-git.git
cd yay-git
makepkg -si --noconfirm

Install obfs4proxy With Yay

Most pluggable transports, such as obfs4, rely on the use of bridge relays. Like ordinary Tor relays, bridges are run by volunteers; unlike ordinary relays, however, they are not listed publicly, so an adversary cannot identify them easily.

Caution

Do not run the command below with sudo.

yay -S obfs4proxy --noconfirm

Get Bridge Addresses

Because bridge addresses are not public, you will need to request them yourself. You have a few options:

Note

Remember you are getting Tor bridges for the Tor daemon, not for Tor Browser.

• Visit bridges.torproject.org and follow the instructions, or
• Email bridges@torproject.org from a Gmail or Riseup address, or
• Use MOAT to fetch bridges from within Tor Browser.

You should receive something similar to:

71.13.96.76:3096 1F5B5CB6498F7ED19B9EA2D9410552C8
172.15.54.21:9001 01B64240040747CA0DC34223343088167
185.20.101.16:2387 EA818BEA04D4543F06063E220E0272A83

Configure Your Bridges

1. Open /etc/tor/torrc.

   sudo nano /etc/tor/torrc

2. Add your Tor bridge data at the very bottom of the file, then exit and save (Ctrl + X).

   Bridge obfs4 71.13.96.76:3096 1F5B5CB6498F7ED19B9EA2D9410552C846
   Bridge obfs4 172.15.54.21:9001 01B64240040747CA0DC3422334308816747
   Bridge obfs4 185.20.101.16:2387 EA818BEA04D4543F06063E220E0272A83
   UseBridges 1

3. Restart the Tor service.

   sudo systemctl reload tor

4. Confirm your Tor bridge is enabled.

   Check the status of the Tor systemd service. Confirm that you have output similar to the following:

   Oct 31 04:20:00 rockpro64 Tor[2907775]: new bridge descriptor 'ARCON' (fresh): $EA818BEA04D4543F06063E220E0272A83~ARCON at 185.20.101.16 and [2b:fc2:1::16]
   Oct 31 04:20:00 rockpro64 Tor[2907775]: new bridge descriptor 'Unnamed' (fresh): $01B64240040747CA0DC3422334308816747~Unnamed at 172.15.54.21

Tip

If your output looks like the above, your Tor bridge setup was successful. Enjoy a censorship-resistant Tor daemon!

References

YayPacman wrapper and AUR helper.

obfs4The obfs4 pluggable transport.

Tor BridgesLearn more about Tor bridges.