Переглянути джерело

Updated Tor configuration with circuit isolation

Maxim Kammerer 12 роки тому
батько
коміт
81ea161535
3 змінених файлів з 4 додано та 11 видалено
  1. 1 1
      src/etc/privoxy/config
  2. 0 5
      src/etc/privoxy/user.filter
  3. 3 5
      src/etc/tor/torrc

+ 1 - 1
src/etc/privoxy/config

@@ -11,7 +11,7 @@ actionsfile     match-all.action        # Actions that are applied to all sites
 # actionsfile     user.action             # User customizations
 
 # filterfile      default.filter          # Main filters file
-filterfile      user.filter             # User filters file
+# filterfile      user.filter             # User filters file
 
 logfile         privoxy.log
 

+ 0 - 5
src/etc/privoxy/user.filter

@@ -1,5 +0,0 @@
-# Testing filters: perl -e '$s = "..."; $s =~ s@...@...@i; print $s . "\n"'
-
-CLIENT-HEADER-FILTER: hide-tor-exit-notation Removes the Tor exit node notation in Host and Referer headers.
-
-s@^((?:Referer|Host):\s*(?:https?://)?[^/]*)\.[^./]*?\.exit(/|\s|$)@$1$2@i

+ 3 - 5
src/etc/tor/torrc

@@ -5,9 +5,8 @@ PIDFile              /var/run/tor/tor.pid
 Log notice syslog
 # Log notice file     /var/log/tor/tor.log
 
-## "SocksPort 0" for server-only setup
-SocksListenAddress   127.0.0.1
-SocksPort            9050
+## "SOCKSPort 0" for server-only setup
+SOCKSPort            127.0.0.1:9050 IsolateDestAddr IsolateClientProtocol
 
 ## control_auth_cookie in data directory
 ControlListenAddress 127.0.0.1
@@ -18,7 +17,7 @@ CookieAuthentication 1
 DataDirectory        /var/lib/tor/data
 
 ## Hidden service on local port 80 -> 9080
-HiddenServiceDir     /var/lib/tor/hidden_service/
+HiddenServiceDir     /var/lib/tor/hidden_service
 HiddenServicePort    80 127.0.0.1:9080
 
 ## Easy operation behind firewalls, also disguise
@@ -37,7 +36,6 @@ SafeSocks            0
 #   if we're trying to encourage more clients to turn on relay functionality
 #   too (whether as bridge relays or as normal relays), then we need to
 #   understand this threat better and learn how to mitigate it.
-ClientOnly           1
 
 ## Bridges may be added below by /etc/init.d/identity
 UseBridges           0