Setting up Tor with Privoxy and Proxomitron

[z12]

Hi notageek

First off, when you start up tor, verify you get a message similar to the following:

Quote:Jan 01 08:38:47.593 [notice] Tor v0.1.0.15. This is experimental software. Do no
t rely on it for strong anonymity.
Jan 01 08:38:47.656 [notice] Initialized libevent version 1.1a using method win3
2
Jan 01 08:38:54.359 [notice] Tor has successfully opened a circuit. Looks like i
t's working.

Next, use the Privoxy config files that you know works with proxo, then add the following to the end of Section 5.2 of Privoxy's config.txt :

Quote:# to use Privoxy with the tor, the following entry is required
forward-socks4a / localhost:9050 .

Also, since your using Proxo to do web filtering, you can start Privoxy with filtering disabled if you like by changing the "toggle" value at the end of Section 4.2 in Privoxy's config.txt to look like this:

Quote:# using proxo, start privoxy with filtering disabled
toggle 0

I have verified that http & https works ok and there are no DNS leaks with Privoxy configured as mentioned.

If Tor is working, and you have set proxo to use the remote proxy that Privoxy is listening on, this should be all you need to get started.


HTH
Mike

[notageek]

OK I'll try the suggestsion. My tor says the same thing.

[notageek]

I did everything you said to do and I still can't view websites. I still get a 404 - no such domain. I also get a giving up in tor.

[z12]

Hi notageek

notageek Wrote:I also get a giving up in tor.

I get a 404 from Prixoxy when trying to go here:

http://archives.seul.org/or/talk/Oct-2005/msg00167.html

This is what tor said about it:

Quote:Jan 01 11:41:30.171 [notice] connection_ap_expire_beginning(): Stream is 15 seco
nds late on address '[scrubbed]'. Retrying.
Jan 01 11:41:30.171 [notice] circuit_log_path(): exit circ (length 3, exit csueb
): Patra(open) dali(open) csueb(open)
Jan 01 11:41:45.171 [notice] connection_ap_expire_beginning(): Stream is 15 seco
nds late on address '[scrubbed]'. Retrying.
Jan 01 11:41:45.171 [notice] circuit_log_path(): exit circ (length 3, exit Pasca
l): waagtor(open) KnightLife(open) Pascal(open)
Jan 01 11:42:00.171 [notice] connection_ap_expire_beginning(): Stream is 15 seco
nds late on address '[scrubbed]'. Retrying.
Jan 01 11:42:00.171 [notice] circuit_log_path(): exit circ (length 3, exit letfr
eedomring): csueb(open) Pascal(open) letfreedomring(open)
Jan 01 11:42:15.171 [notice] connection_ap_expire_beginning(): Stream is 15 seco
nds late on address '[scrubbed]'. Retrying.
Jan 01 11:42:15.171 [notice] circuit_log_path(): exit circ (length 3, exit gnune
t): 1898(open) spoon(open) gnunet(open)
Jan 01 11:42:15.171 [notice] Tried for 60 seconds to get a connection to [scrubb
ed]:80. Giving up.

Thing is, when proxo tries to connect to the same site when it's not using a remote proxy, I get Proxo's "Error connecting to site" message.

Here's Proxo's log:

Quote:+++GET 212+++
GET /or/talk/Oct-2005/msg00167.html HTTP/1.1
Host: archives.seul.org
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051228 Firefox/1.5
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://archives.seul.org/
** 212 Socket Error 10060 for connect() **
+++CLOSE 212+++

So the bottom line in this case is the site is down.


However, cnn works fine (but slow) via tor.

Mike

[notageek]

OK Here's what what's going on. When I load tor it takes awhile for it to say

Quote:[notice] Tor has successfully opened a circuit. Looks like i
t's working. "

After it does that it lets me log on to webpages but only once though.
When I try to see if the proxy work when testing it in proxo, I get a

Quote:New Message Log Window....

Testing 127.0.0.1:8118
Waiting for remote proxy's reply
Proxy test Failed!
>HTTP/1.0 404 No such domain
Ending proxy test

I'n not even sure what that means.

Could it be that tor server is down where I'm at?

[z12]

Hi notageek

Quote:Testing 127.0.0.1:8118
Waiting for remote proxy's reply
Proxy test Failed!
>HTTP/1.0 404 No such domain
Ending proxy test

I see the same thing when trying to "Test" via proxo. Apparently, tor doesn't like it and won't respond.

Here's tor complaining about the Proxy test:

Quote:Jan 01 14:28:35.546 [notice] No Tor server exists that allows exit to [scrubbed]
:7734. Rejecting.

Yet tor still works when I use it.

It is not uncommon for remote proxys to not respond, yet still work ok. For the most part, I never bother with testing remote proxies, I just try it & see if it works.

Surfing via tor is painfully slow. I have a cable connection that usually screams, but when using tor, it slows to a crawl. Cnn which usually loads for me in a second or two, took over a minute via tor. This is the major drawback of using remote proxies.

I suggest when connecting via tor to monitor whats happening in proxo's log window. You may see that the replies come back so slowly that it appears that the site is not loading at all.

From what I can tell, if tor has a connection problem, you'll see a message in tor's window.

HTH
Mike

[notageek]

I get this when I try to connect using tor

Quote:Jan 01 15:35:12:250 [notice] tried for 60 seconds to get connection to [scrubb
ed]:80. Giving up.

I'm not sure what [scrubbed] is.

This what the proxo log window says.

Quote:New Message Log Window....

+++GET 1650+++
Using Proxy - 127.0.0.1:8118
GET http://www.wilderssecurity.com/index.php HTTP/1.1
Host: http://www.wilderssecurity.com
User-Agent: Opera/5.02 (Windows 98; U) [en]
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Cookie:
Cache-Control: max-age=0
Connection: keep-alive
X-Forwarded-For: yahoo.com, microsoft.com, netscape.com, aol.com, http://www.wilderssecurity.com
Browser reload detected...

+++RESP 1650+++
HTTP/1.1 404 No such domain
Content-Length: 3704
Content-Type: text/html
Date: Sun, 01 Jan 2006 20:45:38 GMT
Last-Modified: Sun, 01 Jan 2006 20:45:38 GMT
Match 1650: Disable: JavaScript Errors {1.se}
Match 1650: Disable: Browser Window Manipulation {4.d.se}
Match 1650: Disable: Status Bar Manipulation {4.d.se}
Match 1650: Kill pop-up windows
Match 1650: Force pop-ups to have browser controls
Match 1650: Suppress all JavaScript errors
Match 1650: Stop browser window resizing
Match 1650: Stop status bar scrollers
Match 1650: Stop JavaScript Timers
Match 1650: Remove: Pre-HTML Scripts {R}
Match 1650: Frame Jumper-Outer
Match 1650: Frame Jumper-Outer
Match 1650: Frame Jumper-Outer
Match 1650: Frame Jumper-Outer
Match 1650: Frame Jumper-Outer
Match 1650: Frame Jumper-Outer
Match 1650: Frame Jumper-Outer
Match 1650: Frame Jumper-Outer
Match 1650: Frame Jumper-Outer
Match 1650: Frame Jumper-Outer
Match 1650: Frame Jumper-Outer
Match 1650: Highlight: Email, FTP & Javascript Links {2.d}
Match 1650: Frame Jumper-Outer
Match 1650: Frame Jumper-Outer
Match 1650: Frame Jumper-Outer
<end> 1650: Disable: Unwanted Javascript Event Handlers {4.d.se}
<end> 1650: Restore pop-ups after a page loads
+++CLOSE 1650+++
BlockList 1651: in Bypass, line 19
Browser reload detected...

+++GET 1652+++
Using Proxy - 127.0.0.1:8118
GET http://config.privoxy.org/send-stylesheet HTTP/1.1
Host: config.privoxy.org
User-Agent: Opera/5.02 (Windows 98; U) [en]
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Referer: http://config.privoxy.org/send-stylesheet
If-Modified-Since: Sun, 01 Jan 2006 20:35:12 GMT
Cache-Control: max-age=0
Connection: keep-alive
X-Forwarded-For: yahoo.com, microsoft.com, netscape.com, aol.com, config.privoxy.org
Browser reload detected...

+++RESP 1652+++
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 3156
Date: Sun, 01 Jan 2006 20:45:38 GMT
Last-Modified: Sun, 01 Jan 2006 20:45:38 GMT
+++CLOSE 1652+++

[z12]

Hi notageek

From what you posted, it looks like everything is ok on your side of things.

Only problem is, the tor network can't seem to make the connection to wilders. I'm not sure there is much you can do about that.

The documentation included with tor doesn't seem to have any tips on how to resolve this.

Perhaps there might be some info at the tor site, but I won't be able to check this out till later.

Edit: you might want to remove the cookie data you have posted for wilders
Mike

[notageek]

Thanks, I removed it. I thought I removed it but I must of left it when I posted it. So, it's tor that might be cuasing the problem? I have been all over tor website and couldn't find anything. If you do please le me know. Thank you so much.

[Kye-U]

Quote:X-Forwarded-For: yahoo.com, microsoft.com, netscape.com, aol.com, config.privoxy.org

Very weird header...

Double-check your Header filters for any X-Forwarded-For filters, and try disabling them and trying Privoxy/Tor again. Worth a shot.

Anyways, here's an example of me going to grc.com with the Tor+Privoxy setup:

Quote:+++GET 28466+++
Using Proxy - 127.0.0.1:8118
GET http://grc.com/ HTTP/1.1
User-Agent: Googlebot/2.1 (+http://www.googlebot.com/bot.html)
Host: grc.com
Accept-Language: en
Accept-Encoding: gzip, x-gzip, deflate
If-Modified-Since: Mon, 02 Jan 2006 08:36:15 GMT
TE: deflate, gzip, chunked, identity, trailers
Connection: keep-alive
Referer: http://www.google.com/search?hl=en&ie=UT...q=Big+Bang
RESP 28462 : Expires killed: Mon, 21 Dec 2015 18:17:33 GMT

+++GET 28467+++
Using Proxy - 127.0.0.1:8118
GET http://grc.com/image/sr6largelogo.gif HTTP/1.1
User-Agent: Googlebot/2.1 (+http://www.googlebot.com/bot.html)
Host: grc.com
Accept-Language: en
Accept-Encoding: gzip, x-gzip, deflate
Referer: http://grc.com/
TE: deflate, gzip, chunked, identity, trailers
Connection: keep-alive
BlockList 28468: in URL-Parser, line 30

+++GET 28468+++
Using Proxy - 127.0.0.1:8118
GET http://grc.com/image/su2blackglow.gif HTTP/1.1
User-Agent: Googlebot/2.1 (+http://www.googlebot.com/bot.html)
Host: grc.com
Accept-Language: en
Accept-Encoding: gzip, x-gzip, deflate
Referer: http://grc.com/
TE: deflate, gzip, chunked, identity, trailers
Connection: keep-alive
RESP 28467 : Cache-Control replaced: max-age=3600
RESP 28467 : Expires killed: Mon, 02 Jan 2006 09:54:18 GMT

[z12]

Hi notageek

I looked around the site and didn't see any tips on how to optimize speed.

From http://tor.eff.org/cvs/tor/doc/tor-doc-server.html

Quote:If you have at least 20 kilobytes/s each way, please help out Tor by configuring your Tor to be a server too.

Not exactly a blazingly fast transfer rate. If you end up going through a server that is rate limited like this, things will slow down considerably.

http://tor.eff.org/overview.html

Quote:For efficiency, the Tor software uses the same circuit for connections that happen within the same minute or so. Later requests are given a new circuit, to keep people from linking your earlier actions to the new ones.

So it would seem that the throughput you get at any give time will be a real crapshoot.

Due to the way the network works, I really don't see anything you can do to optimize speed.

I suppose there are a few things you can do to minimize the time you spend waiting for a page to load via tor:

Tor only when needed.

Disable images & scripts for sites you torify.

Play Minesweeper.

The main feature tor provides is anonymity, not speed. I think if you need both, you'll need a pay service to get it.

Mike

[notageek]

The speed isn't what's bothering me, it's the fact that I can't get any webpages, but 404- no such domain everytime I use Proxo, privoxt and tor together. I'll try your suggestions. I'm not sure where I got that xforward from.

[notageek]

Here's my example of going to grc.

Quote:New Message Log Window....

+++GET 4894+++
Using Proxy - 127.0.0.1:8118
GET http://grc.com/ HTTP/1.1
Host: grc.com
User-Agent: Opera/5.02 (Windows 98; U) [en]
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Referer: http://grc.com/
Connection: keep-alive

+++RESP 4894+++
HTTP/1.1 404 No such domain
Content-Length: 3612
Content-Type: text/html
Date: Mon, 02 Jan 2006 15:09:50 GMT
Last-Modified: Mon, 02 Jan 2006 15:09:50 GMT
Match 4894: Disable: JavaScript Errors {1.se}
Match 4894: Disable: Browser Window Manipulation {4.d.se}
Match 4894: Disable: Status Bar Manipulation {4.d.se}
Match 4894: Kill pop-up windows
Match 4894: Force pop-ups to have browser controls
Match 4894: Suppress all JavaScript errors
Match 4894: Stop browser window resizing
Match 4894: Stop status bar scrollers
Match 4894: Stop JavaScript Timers
Match 4894: Remove: Pre-HTML Scripts {R}
Match 4894: Frame Jumper-Outer
Match 4894: Frame Jumper-Outer
Match 4894: Frame Jumper-Outer
Match 4894: Frame Jumper-Outer
Match 4894: Frame Jumper-Outer
Match 4894: Frame Jumper-Outer
Match 4894: Frame Jumper-Outer
Match 4894: Frame Jumper-Outer
Match 4894: Frame Jumper-Outer
Match 4894: Frame Jumper-Outer
Match 4894: Frame Jumper-Outer
Match 4894: Highlight: Email, FTP & Javascript Links {2.d}
Match 4894: Frame Jumper-Outer
Match 4894: Frame Jumper-Outer
Match 4894: Frame Jumper-Outer
<end> 4894: Disable: Unwanted Javascript Event Handlers {4.d.se}
<end> 4894: Restore pop-ups after a page loads
+++CLOSE 4894+++

+++GET 4895+++
Using Proxy - 127.0.0.1:8118
GET http://privoxy.org/config/send-stylesheet HTTP/1.1
Host: privoxy.org
User-Agent: Opera/5.02 (Windows 98; U) [en]
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Referer: http://privoxy.org/config/send-stylesheet
Connection: keep-alive

+++RESP 4895+++
HTTP/1.1 404 No such domain
Content-Length: 3694
Content-Type: text/html
Date: Mon, 02 Jan 2006 15:10:50 GMT
Last-Modified: Mon, 02 Jan 2006 15:10:50 GMT
Match 4895: Disable: JavaScript Errors {1.se}
Match 4895: Disable: Browser Window Manipulation {4.d.se}
Match 4895: Disable: Status Bar Manipulation {4.d.se}
Match 4895: Kill pop-up windows
Match 4895: Force pop-ups to have browser controls
Match 4895: Suppress all JavaScript errors
Match 4895: Stop browser window resizing
Match 4895: Stop status bar scrollers
Match 4895: Stop JavaScript Timers
Match 4895: Remove: Pre-HTML Scripts {R}
Match 4895: Frame Jumper-Outer
Match 4895: Frame Jumper-Outer
Match 4895: Frame Jumper-Outer
Match 4895: Frame Jumper-Outer
Match 4895: Frame Jumper-Outer
Match 4895: Frame Jumper-Outer
Match 4895: Frame Jumper-Outer
Match 4895: Frame Jumper-Outer
Match 4895: Frame Jumper-Outer
Match 4895: Frame Jumper-Outer
Match 4895: Frame Jumper-Outer
Match 4895: Highlight: Email, FTP & Javascript Links {2.d}
Match 4895: Frame Jumper-Outer
Match 4895: Frame Jumper-Outer
Match 4895: Frame Jumper-Outer
<end> 4895: Disable: Unwanted Javascript Event Handlers {4.d.se}
<end> 4895: Restore pop-ups after a page loads
+++CLOSE 4895+++

[notageek]

[s:44e4a94643]Seems like it's working. I tinkered with socks4a and socks4 in privoxy and it's working now with socks4a.[/s:44e4a94643]

Not fixed still. Still get 404 after 10 minutes of it working.

[notageek]

I'm getting a feeling that it's not privoxy or proxo, I think it's a problem with tor.