README 5.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118
  1. 'tor' is an implementation of The Onion Routing system, as
  2. described in a bit more detail at http://www.onion-router.net/. You
  3. can read list archives, and subscribe to the mailing list, at
  4. http://archives.seul.org/or/dev/.
  5. Is your question in the FAQ? Should it be?
  6. **************************************************************************
  7. Quickstart version for users:
  8. 0) Download the absolute newest version. No, really.
  9. http://freehaven.net/tor/ (unfortunately they're all unreadable now,
  10. so you must skip this step)
  11. 1) tar xvf it, and then cd into the directory.
  12. 2) ./configure (or do the two-line version below, if you're on bsd)
  13. 3) make
  14. 4) cd src/config
  15. 5) ../or/tor -f oprc
  16. You don't need to run this as root, and you probably shouldn't.
  17. 6) point your browser to socks4 proxy at localhost port 9050. In mozilla,
  18. this is in edit|preferences|advanced|proxies. This allows you to test
  19. to make sure tor is installed correctly.
  20. 7) make sure you've set it up correctly: go to
  21. http://www.junkbusters.com/cgi-bin/privacy and see what IP it says
  22. you're coming from. If it works, you should probably go on to step 8,
  23. to get better privacy.
  24. 8) Optionally, install privoxy (www.privoxy.org), and add the line
  25. "forward-socks4a / localhost:9050 ." (without the quotes) to its config
  26. file. Then change your mozilla to http proxy at localhost port 8118 (and
  27. no socks proxy). This step will give you good html scrubbing as well.
  28. If this works for you, you can stop reading. Otherwise, below is a more
  29. detailed version.
  30. **************************************************************************
  31. You only need to look beyond this point if the above doesn't work for you.
  32. **************************************************************************
  33. Dependencies:
  34. For tor itself, you're going to need openssl (0.9.5 or later
  35. -- including the dev stuff and includes). If you're on Linux,
  36. everything will probably work fine. OS X and BSD (but see below under
  37. troubleshooting) may work too. Let us know if you get it working
  38. elsewhere.
  39. If you got the source from cvs:
  40. Run "./autogen.sh", which will run the various auto* programs and then
  41. run ./configure for you. From there, start at step 3 in the quickstart
  42. list above.
  43. If the quickstart doesn't work for you:
  44. If you have problems finding libraries, try
  45. CPPFLAGS="-I/usr/local/include" LDFLAGS="-L/usr/local/lib" \
  46. ./configure
  47. rather than simply ./configure.
  48. Check out the list archives at http://archives.seul.org/or/dev/ and see
  49. if somebody else has reported your problem. If not, please subscribe
  50. and let us know what you did to fix it, or give us the details and
  51. we'll see what we can do.
  52. Do you want to run a tor server?
  53. First, set up a config file for your node (start with sample-orrc and
  54. edit the top portion). Then run the node (as above, but with the new
  55. config file) to generate keys. One of the generated files is your
  56. 'fingerprint' file. Mail it to arma@mit.edu. Remember that you won't
  57. be able to authenticate to the other tor nodes until I've added you
  58. to the directory.
  59. How to use it for web browsing:
  60. Download privoxy (www.privoxy.org). Install it. Add the following
  61. line to your 'config' file (it might be in /etc/privoxy/config) :
  62. forward-socks4a / localhost:9050 .
  63. Don't forget the . at the end.
  64. From here, you can point your browser/etc to localhost port 8118 (as
  65. an http proxy) and your traffic will go through Privoxy, then through
  66. the onion proxy, to the onion routing network.
  67. You can also ignore the whole privoxy thing and set your Mozilla to
  68. use localhost 9050 directly as a socks4 server. But see doc/CLIENTS
  69. for why this may not give you the anonymity you want.
  70. For more convenient command-line use, I recommend making a ~/.wgetrc
  71. with the line
  72. http_proxy=http://localhost:8118
  73. Then you can do things like "wget seul.org" and watch as it downloads
  74. from the onion routing network.
  75. For fun, you can wget a very large file (a megabyte or more), and
  76. then ^z the wget a little bit in. The onion routers will continue
  77. talking for a while, queueing around 500k in the kernel-level buffers.
  78. When the kernel buffers are full, and the outbuf for the AP connection
  79. also fills, the internal congestion control will kick in and the exit
  80. connection will stop reading from the webserver. The circuit will
  81. wait until you fg the wget -- and other circuits will work just fine
  82. throughout. Then try ^z'ing the onion routers, and watch how well it
  83. recovers. Then try ^z'ing several of them at once. :)
  84. How to use it for ssh:
  85. Download tsocks (tsocks.sourceforge.net) and configure it to talk to
  86. localhost:9050 as a socks4 server. My /etc/tsocks.conf simply has:
  87. server_port = 9050
  88. server = 127.0.0.1
  89. (I had to "cd /usr/lib; ln -s /lib/libtsocks.so" to get the tsocks
  90. library working after install, since my libpath didn't include /lib.)
  91. Then you can do "tsocks ssh arma@moria.mit.edu". But note that since
  92. ssh is suid root, you either need to do this as root, or cp a local
  93. version of ssh that isn't suid.