1c8ac595cbd13bb0e2cbc01092f451b93b55f2c0
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1) ## translation metadata
Roger Dingledine looks like we never set the...

Roger Dingledine authored 13 years ago

2) # Revision: $Revision$
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3) # Translation-Priority: 2-medium
4) 
5) #include "head.wmi" TITLE="Tor Project: FAQ" CHARSET="UTF-8"
6) <div id="content" class="clearfix">
7)   <div id="breadcrumbs">
Andrew Lewman change all of the breadcrum...

Andrew Lewman authored 13 years ago

8)     <a href="<page index>">Home &raquo; </a>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

9)     <a href="<page docs/documentation>">Documentation &raquo; </a>
10)     <a href="<page docs/faq>">FAQ</a>
11)   </div>
12)   <div id="maincol">
13)     <!-- PUT CONTENT AFTER THIS TAG -->
14)     <h1>Tor FAQ</h1>
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

15)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

16) 
Matt Pagan Clarified torrc entry.

Matt Pagan authored 10 years ago

17)     <p><a href="#General">General questions:</a><br />
18)     <a href="#CompilationAndInstallation">Compilation and Installation:</a><br />
19)     <a href="#TBBGeneral">Tor Browser Bundle (general):</a><br />
Matt Pagan Visually improve sections h...

Matt Pagan authored 10 years ago

20)     <a href="#TBB3.x">Tor Browser Bundle (3.x series):</a><br />
Matt Pagan Clarified torrc entry.

Matt Pagan authored 10 years ago

21)     <a href="#AdvancedTorUsage">Advanced Tor usage:</a><br />
22)     <a href="#RunningATorRelay">Running a Tor relay:</a><br />
23)     <a href="#TorHiddenServices">Tor hidden services:</a><br />
24)     <a href="#Development">Development:</a><br />
25)     <a href="#AnonymityAndSecurity">Anonymity and Security:</a><br />
26)     <a href="#AlternateDesigns">Alternate designs that we don't do (yet):</a><br />
27)     <a href="#Abuse">Abuse:</a></p>
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

28) 
Matt Pagan Clarified torrc entry.

Matt Pagan authored 10 years ago

29) <hr>
30) 
31)     <p>General questions:</p>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

32)     <ul>
33)     <li><a href="#WhatIsTor">What is Tor?</a></li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

34)     <li><a href="#Torisdifferent">How is Tor different from other
35) proxies?</a></li>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

36)     <li><a href="#CompatibleApplications">What programs can I use with
37)     Tor?</a></li>
38)     <li><a href="#WhyCalledTor">Why is it called Tor?</a></li>
39)     <li><a href="#Backdoor">Is there a backdoor in Tor?</a></li>
Andrew Lewman who ships magazines these d...

Andrew Lewman authored 11 years ago

40)     <li><a href="#DistributingTor">Can I distribute Tor?</a></li>
Andrew Lewman fix two of the faq answers.

Andrew Lewman authored 12 years ago

41)     <li><a href="#SupportMail">How can I get support?</a></li>
Roger Dingledine faq: is there a tor forum?

Roger Dingledine authored 11 years ago

42)     <li><a href="#Forum">Is there a Tor forum?</a></li>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

43)     <li><a href="#WhySlow">Why is Tor so slow?</a></li>
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

44)     <li><a href="#FileSharing">How can I share files anonymously through Tor?
45)     </a></li>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

46)     <li><a href="#Funding">What would The Tor Project do with more
47)     funding?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

48)     <li><a href="#IsItWorking">How can I tell if Tor is working, and that my
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

49)     connections really are anonymized?</a></li>
Matt Pagan FAQ for #11620 (Inform webs...

Matt Pagan authored 9 years ago

50)     <li><a href="#Mobile">Can I use Tor on my phone or mobile device?</a></li>
Lunar Remove duplication about ou...

Lunar authored 9 years ago

51)     <li><a href="#OutboundPorts">Which outbound ports must be open when
52)     using Tor as a client?</a></li>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

53)     <li><a href="#FTP">How do I use my browser for ftp with Tor?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

54)     <li><a href="#NoDataScrubbing">Does Tor remove personal information
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

55)     from the data my application sends?</a></li>
Roger Dingledine import, and correct the fal...

Roger Dingledine authored 13 years ago

56)     <li><a href="#Metrics">How many people use Tor? How many relays or
57)     exit nodes are there?</a></li>
Robert Ransom Fix typo

Robert Ransom authored 12 years ago

58)     <li><a href="#SSLcertfingerprint">What are your SSL certificate
Andrew Lewman update the faq with the ssl...

Andrew Lewman authored 13 years ago

59)     fingerprints?</a></li>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

60)     </ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

61) 
Matt Pagan Clarified torrc entry.

Matt Pagan authored 10 years ago

62)     <p>Compilation and Installation:</p>
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

63) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

64)     <ul>
65)     <li><a href="#HowUninstallTor">How do I uninstall Tor?</a></li>
66)     <li><a href="#PGPSigs">What are these "sig" files on the download
67)     page?</a></li>
Roger Dingledine resurrect our finding-tor p...

Roger Dingledine authored 13 years ago

68)     <li><a href="#GetTor">Your website is blocked in my country. How
69)     do I download Tor?</a></li>
Matt Pagan Added an FAQ entry relevant...

Matt Pagan authored 10 years ago

70)     <li><a href="#VirusFalsePositives">Why does my Tor executable appear to
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

71)     have a virus or spyware?</a></li>
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

72)     <li><a href="#tarballs">How do I open a .tar.gz or .tar.xz file?</a></li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

73)     <li><a href="#LiveCD">Is there a LiveCD or other bundle that
74) includes Tor?</a></li>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

75)     </ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

76) 
Matt Pagan Clarified torrc entry.

Matt Pagan authored 10 years ago

77)     <p>Tor Browser Bundle (general):</p>
Roger Dingledine break off some questions in...

Roger Dingledine authored 12 years ago

78)     <ul>
Roger Dingledine import and flesh out helix'...

Roger Dingledine authored 12 years ago

79) 
Roger Dingledine index more of the questions...

Roger Dingledine authored 12 years ago

80)     <li><a href="#TBBFlash">Why can't I view videos on YouTube and other
81)     Flash-based sites?</a></li>
Matt Pagan Added FAQs re Sophos antivi...

Matt Pagan authored 10 years ago

82)     <li><a href="#Ubuntu">I'm using Ubuntu, and I can't start Tor Browser.
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

83)     </a></li>
Matt Pagan Added FAQs re Sophos antivi...

Matt Pagan authored 10 years ago

84)     <li><a href="#SophosOnMac">I'm using the Sophos anti-virus
Matt Pagan Sophos FAQ should be more p...

Matt Pagan authored 9 years ago

85)     software on my Mac, and Tor starts but I can't browse anywhere.</a></li>
Matt Pagan Provide Webroot users with...

Matt Pagan authored 9 years ago

86)     <li><a href="#XPCOMError">When I start Tor Browser I get an 
87) error message: "Cannot load XPCOM".</a></li>
Roger Dingledine index more of the questions...

Roger Dingledine authored 12 years ago

88)     <li><a href="#TBBOtherExtensions">Can I install other Firefox
Moritz Bartl removed torbutton pages, mo...

Moritz Bartl authored 11 years ago

89)     extensions? Which extensions should I avoid using?</a></li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

90)     <li><a href="#TBBJavaScriptEnabled">Why is NoScript configured to
91) allow JavaScript by default in the Tor Browser Bundle?  Isn't that
92) unsafe?</a></li>
Roger Dingledine import and flesh out helix'...

Roger Dingledine authored 12 years ago

93)     <li><a href="#TBBOtherBrowser">I want to use Chrome/IE/Opera/etc
94)     with Tor.</a></li>
Matt Pagan Added an FAQ entry relevant...

Matt Pagan authored 10 years ago

95)     <li><a href="#GoogleCAPTCHA">Google makes me solve a CAPTCHA or tells
Roger Dingledine break off some questions in...

Roger Dingledine authored 12 years ago

96)     me I have spyware installed.</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

97)     <li><a href="#ForeignLanguages">Why does Google show up in foreign
Matt Pagan added a missing tag

Matt Pagan authored 10 years ago

98)     languages?</a></li>
Roger Dingledine break off some questions in...

Roger Dingledine authored 12 years ago

99)     <li><a href="#GmailWarning">Gmail warns me that my account may have
100)     been compromised.</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

101)     <li><a href="#NeedToUseAProxy">My internet connection requires an HTTP
Matt Pagan Add 1 FAQ entry and cleaned...

Matt Pagan authored 10 years ago

102)     or SOCKS Proxy</a></li>
Matt Pagan Removed 3 FAQs that have no...

Matt Pagan authored 9 years ago

103)     <li><a href="#TBBSocksPort">I want to
104)     run another application through Tor.</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

105)     <li><a href="#CantSetProxy">What should I do if I can't set a proxy
Matt Pagan Added three FAQ entries; fi...

Matt Pagan authored 10 years ago

106)     with my application?</a></li>
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

107)     </ul>
108) 
Matt Pagan Clarified torrc entry.

Matt Pagan authored 10 years ago

109)     <p>Tor Browser Bundle (3.x series):</p>
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

110) 
111)     <ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

112)     <li><a href="#WhereDidVidaliaGo">Where did the world map (Vidalia)
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

113)     go?</a></li>
114)     <li><a href="#DisableJS">How do I disable JavaScript?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

115)     <li><a href="#VerifyDownload">How do I verify the download
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

116)     (sha256sums.txt)?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

117)     <li><a href="#NewIdentityClosingTabs">Why does "New Identity" close
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

118)     all my open tabs?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

119)     <li><a href="#ConfigureRelayOrBridge">How do I configure Tor as a relay
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

120)     or bridge?</a></li>
121)     <li><a href="#Timestamps">Why are the file timestamps from 2000?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

122)     <li><a href="#TBBSourceCode">Where is the source code for the bundle? How do
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

123)     I verify a build?</a></li>
Roger Dingledine break off some questions in...

Roger Dingledine authored 12 years ago

124)     </ul>
125) 
Matt Pagan Clarified torrc entry.

Matt Pagan authored 10 years ago

126)     <p>Advanced Tor usage:</p>
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

127) 
Roger Dingledine import and rewrite the #tor...

Roger Dingledine authored 13 years ago

128)     <ul>
129)     <li><a href="#torrc">I'm supposed to "edit my torrc". What does
130)     that mean?</a></li>
Roger Dingledine revise #Logs entry. fix sev...

Roger Dingledine authored 13 years ago

131)     <li><a href="#Logs">How do I set up logging, or see Tor's
Roger Dingledine import the logs faq entry

Roger Dingledine authored 13 years ago

132)     logs?</a></li>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

133)     <li><a href="#LogLevel">What log level should I use?</a></li>
Andrew Lewman attempt to address ticket 4...

Andrew Lewman authored 12 years ago

134)     <li><a href="#DoesntWork">Tor is running, but it's not working
135)     correctly.</a></li>
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

136)     <li><a href="#TorCrash">My Tor keeps crashing.</a></li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

137)     <li><a href="#ChooseEntryExit">Can I control which nodes (or
138) country)
Roger Dingledine add back the faq entries th...

Roger Dingledine authored 13 years ago

139)     are used for entry/exit?</a></li>
Roger Dingledine import, and correct the fal...

Roger Dingledine authored 13 years ago

140)     <li><a href="#FirewallPorts">My firewall only allows a few outgoing
141)     ports.</a></li>
Matt Pagan Add 1 FAQ entry and cleaned...

Matt Pagan authored 10 years ago

142)     <li><a href="#DefaultExitPorts">Is there a list of default exit ports?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

143)     <li><a href="#WarningsAboutSOCKSandDNSInformationLeaks">I keep seeing
144)     these warnings about SOCKS and DNS information leaks. Should I
Matt Pagan Fixed a couple typos

Matt Pagan authored 10 years ago

145)     worry?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

146)     <li><a href="#SocksAndDNS">How do I check if my application that uses
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

147)     SOCKS is leaking DNS requests?</a></li>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

148)     </ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

149) 
Matt Pagan Clarified torrc entry.

Matt Pagan authored 10 years ago

150)     <p>Running a Tor relay:</p>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

151)     <ul>
Matt Pagan Cleanup. Added two FAQ entr...

Matt Pagan authored 10 years ago

152) 
153)     <li><a href="#HowDoIDecide">How do I decide if I should run a relay?
154)     </a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

155)     <li><a href="#WhyIsntMyRelayBeingUsedMore">Why isn't my relay being
Matt Pagan Added a missing anchor; Add...

Matt Pagan authored 10 years ago

156)     used more?</a></li>
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

157)     <li><a href="#IDontHaveAStaticIP">I don't have a static IP.</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

158)     <li><a href="#PortscannedMore">Why do I get portscanned more often
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

159)     when I run a Tor relay?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

160)     <li><a href="#HighCapacityConnection">How can I get Tor to fully
Matt Pagan Added a missing anchor; Add...

Matt Pagan authored 10 years ago

161)     make use of my high capacity connection?</a></li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

162)     <li><a href="#RelayFlexible">How stable does my relay need to
163) be?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

164)     <li><a href="#BandwidthShaping">What bandwidth shaping options are
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

165)     available to Tor relays?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

166)     <li><a href="#LimitTotalBandwidth">How can I limit the total amount
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

167)     of bandwidth used by my Tor relay?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

168)     <li><a href="#RelayWritesMoreThanItReads">Why does my relay write
Matt Pagan Cleanup.

Matt Pagan authored 10 years ago

169)     more bytes onto the network than it reads?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

170)     <li><a href="#Hibernation">Why can I not browse anymore after
Matt Pagan Cleanup.

Matt Pagan authored 10 years ago

171)     limiting bandwidth on my Tor relay?</a></li>
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

172)     <li><a href="#ExitPolicies">I'd run a relay, but I don't want to deal
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

173)     with abuse issues.</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

174)     <li><a href="#BestOSForRelay">Why doesn't my Windows (or other OS) Tor
Matt Pagan Applied Nick's patch.

Matt Pagan authored 10 years ago

175)     relay run well?</a></li>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

176)     <li><a href="#PackagedTor">Should I install Tor from my package manager,
Matt Pagan Why are Tor packages useful?

Matt Pagan authored 9 years ago

177)     or build from source?</a></li>
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

178)     <li><a href="#WhatIsTheBadExitFlag">What is the BadExit flag?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

179)     <li><a href="#IGotTheBadExitFlagWhyDidThatHappen">I got the BadExit flag.
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

180)     Why did that happen?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

181)     <li><a href="#MyRelayRecentlyGotTheGuardFlagAndTrafficDroppedByHalf">My
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

182)     relay recently got the Guard flag and traffic dropped by half.</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

183)     <li><a href="#TorClientOnADifferentComputerThanMyApplications">I want to run my Tor client on a
Matt Pagan Improved YouTube instructio...

Matt Pagan authored 10 years ago

184)     different computer than my applications.</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

185)     <li><a href="#ServerClient">Can I install Tor on a central server, and
Matt Pagan Improved YouTube instructio...

Matt Pagan authored 10 years ago

186)     have my clients connect to it?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

187)     <li><a href="#JoinTheNetwork">So I can just configure a nickname and
Matt Pagan Improved YouTube instructio...

Matt Pagan authored 10 years ago

188)     ORPort and join the network?</a></li>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

189)     <li><a href="#RelayOrBridge">Should I be a normal relay or bridge
190)     relay?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

191)     <li><a href="#UpgradeOrMove">I want to upgrade/move my relay. How do I
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

192)     keep the same key?</a></li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

193)     <li><a href="#MultipleRelays">I want to run more than one
194) relay.</a></li>
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

195)     <li><a href="#NTService">How do I run my Tor relay as an NT service?
196)     </a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

197)     <li><a href="#VirtualServer">Can I run a Tor relay from my virtual server
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

198)     account?</a></li>
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

199)     <li><a href="#WrongIP">My relay is picking the wrong IP address.</a></li>
200)     <li><a href="#BehindANAT">I'm behind a NAT/Firewall</a></li>
Matt Pagan Faq headers should match

Matt Pagan authored 9 years ago

201)     <li><a href="#OutgoingFirewall">How should I configure the outgoing filters on my relay?</a></li>
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

202)     <li><a href="#RelayMemory">Why is my Tor relay using so much memory?
203)     </a></li>
204)     <li><a href="#BetterAnonymity">Do I get better anonymity if I run a relay?
205)     </a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

206)     <li><a href="#FacingLegalTrouble">I'm facing legal trouble. How do I
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

207)     prove that my server was a Tor relay at a given time?</a></li>
Roger Dingledine change faq title

Roger Dingledine authored 12 years ago

208)     <li><a href="#RelayDonations">Can I donate for a relay rather than
209)     run my own?</a></li>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

210)     </ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

211) 
Matt Pagan Clarified torrc entry.

Matt Pagan authored 10 years ago

212)     <p>Tor hidden services:</p>
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

213) 
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

214)     <ul>
215)     <li><a href="#AccessHiddenServices">How do I access hidden services?</a></li>
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

216)     <li><a href="#ProvideAHiddenService">How do I provide a hidden service?</a></li>
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

217)     </ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

218) 
Matt Pagan Clarified torrc entry.

Matt Pagan authored 10 years ago

219)     <p>Development:</p>
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

220) 
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

221)     <ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

222)     <li><a href="#VersionNumbers">What do these weird version numbers
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

223)     mean?</a></li>
224)     <li><a href="#PrivateTorNetwork">How do I set up my own private
225)     Tor network?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

226)     <li><a href="#UseTorWithJava">How can I make my Java program use the
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

227)     Tor network?</a></li>
228)     <li><a href="#WhatIsLibevent">What is Libevent?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

229)     <li><a href="#MyNewFeature">What do I need to do to get a new feature
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

230)     into Tor?</a></li>
231)     </ul>
232) 
Matt Pagan Clarified torrc entry.

Matt Pagan authored 10 years ago

233)     <p>Anonymity and Security:</p>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

234)     <ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

235)     <li><a href="#WhatProtectionsDoesTorProvide">What protections does Tor
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

236)     provide?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

237)     <li><a href="#CanExitNodesEavesdrop">Can exit nodes eavesdrop on
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

238)     communications? Isn't that bad? </a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

239)     <li><a href="#AmITotallyAnonymous">So I'm totally anonymous if I use
Matt Pagan Added three FAQ entries; fi...

Matt Pagan authored 10 years ago

240)     Tor?</a></li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

241)     <li><a href="#KeyManagement">Tell me about all the keys Tor
242) uses.</a></li>
Roger Dingledine import EntryGuards faq entry

Roger Dingledine authored 13 years ago

243)     <li><a href="#EntryGuards">What are Entry Guards?</a></li>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

244)     <li><a href="#ChangePaths">How often does Tor change its paths?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

245)     <li><a href="#CellSize">Tor uses hundreds of bytes for every IRC line. I
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

246)     can't afford that!</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

247)     <li><a href="#OutboundConnections">Why does netstat show these outbound
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

248)     connections?</a></li>
249)     <li><a href="#PowerfulBlockers">What about powerful blocking mechanisms
250)     </a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

251)     <li><a href="#RemotePhysicalDeviceFingerprinting">Does Tor resist
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

252)     "remote physical device fingerprinting"?</a></li>
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

253)     <li><a href="#IsTorLikeAVPN">Is Tor like a VPN?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

254)     <li><a href="#Proxychains">Aren't 10 proxies (proxychains) better than
Matt Pagan Created a new FAQ entry abo...

Matt Pagan authored 10 years ago

255)     Tor with only 3 hops?</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

256)     <li><a href="#AttacksOnOnionRouting">What attacks remain against onion
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

257)     routing?</a></li>
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

258)     <li><a href="#LearnMoreAboutAnonymity">Where can I learn more about anonymity?</a></li>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

259)     </ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

260) 
Matt Pagan Clarified torrc entry.

Matt Pagan authored 10 years ago

261)     <p>Alternate designs that we don't do (yet):</p>
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

262) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

263)     <ul>
264)     <li><a href="#EverybodyARelay">You should make every Tor user be a
265)     relay.</a></li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

266)     <li><a href="#TransportIPnotTCP">You should transport all IP
267) packets,
Roger Dingledine import TransportIPnotTCP fa...

Roger Dingledine authored 13 years ago

268)     not just TCP packets.</a></li>
Roger Dingledine import the "you should hide...

Roger Dingledine authored 12 years ago

269)     <li><a href="#HideExits">You should hide the list of Tor relays,
270)     so people can't block the exits.</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

271)     <li><a href="#ChoosePathLength">You should let people choose their path
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

272)     length.</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

273)     <li><a href="#SplitEachConnection">You should split each connection over
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

274)     many paths.</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

275)     <li><a href="#MigrateApplicationStreamsAcrossCircuits">You should migrate
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

276)     application streams across circuits.</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

277)     <li><a href="#LetTheNetworkPickThePath">You should let the network pick
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

278)     the path, not the client.</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

279)     <li><a href="#UnallocatedNetBlocks">Your default exit policy should block
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

280)     unallocated net blocks too.</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

281)     <li><a href="#BlockWebsites">Exit policies should be able to block
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

282)     websites, not just IP addresses.</a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

283)     <li><a href="#BlockContent">You should change Tor to prevent users from
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

284)     posting certain content.</a></li>
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

285)     <li><a href="#SendPadding">You should send padding so it's more secure.
286)     </a></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

287)     <li><a href="#Steganography">You should use steganography to hide Tor
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

288)     traffic.</a></li>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

289)     </ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

290) 
Matt Pagan Clarified torrc entry.

Matt Pagan authored 10 years ago

291)     <p>Abuse:</p>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

292)     <ul>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

293)     <li><a href="#Criminals">Doesn't Tor enable criminals to do bad
294) things?</a></li>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

295)     <li><a href="#RespondISP">How do I respond to my ISP about my exit
296)     relay?</a></li>
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

297)     <li><a href="#HelpPoliceOrLawyers">I have questions about
298)    a Tor IP address for a legal case.</a></li>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

299)     </ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

300) 
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

301)     <p>For other questions not yet on this version of the FAQ, see the
302) <a
Roger Dingledine fix a bunch of broken links...

Roger Dingledine authored 13 years ago

303)     href="<wikifaq>">wiki FAQ</a> for now.</p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

304) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

305)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

306) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

307)     <a id="General"></a>
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

308)     <h2><a class="anchor">General:</a></h2>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

309) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

310)     <a id="WhatIsTor"></a>
311)     <h3><a class="anchor" href="#WhatIsTor">What is Tor?</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

312) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

313)     <p>
314)     The name "Tor" can refer to several different components.
315)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

316) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

317)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

318)     The Tor software is a program you can run on your computer that
319) helps keep
320)     you safe on the Internet. Tor protects you by bouncing your
321) communications
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

322)     around a distributed network of relays run by volunteers all around
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

323)     the world: it prevents somebody watching your Internet connection
324) from
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

325)     learning what sites you visit, and it prevents the sites you visit
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

326)     from learning your physical location. This set of volunteer relays
327) is
328)     called the Tor network. You can read more about how Tor works on the
329) <a
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

330)     href="<page about/overview>">overview page</a>.
331)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

332) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

333)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

334)     The Tor Project is a non-profit (charity) organization that
335) maintains
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

336)     and develops the Tor software.
337)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

338) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

339)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

340) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

341)     <a id="Torisdifferent"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

342)     <h3><a class="anchor" href="#Torisdifferent">How is Tor different
343) from other proxies?</a></h3>
344)     <p>
345)     A typical proxy provider sets up a server somewhere on the Internet
346) and
347) allows you to use it to relay your traffic.  This creates a simple, easy
348) to
349) maintain architecture.  The users all enter and leave through the same
350) server.
351) The provider may charge for use of the proxy, or fund their costs
352) through
353) advertisements on the server.  In the simplest configuration, you don't
354) have to
355) install anything.  You just have to point your browser at their proxy
356) server.
357) Simple proxy providers are fine solutions if you do not want protections
358) for
359) your privacy and anonymity online and you trust the provider from doing
360) bad
361) things.  Some simple proxy providers use SSL to secure your connection
362) to them.
363) This may protect you against local eavesdroppers, such as those at a
364) cafe with
Runa A. Sandvik minor changes to make po4a...

Runa A. Sandvik authored 13 years ago

365) free wifi Internet.
366)     </p>
367)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

368)     Simple proxy providers also create a single point of failure.  The
369) provider
370) knows who you are and where you browse on the Internet.  They can see
371) your
372) traffic as it passes through their server.  In some cases, they can even
373) see
Roger Dingledine minor faq cleanups

Roger Dingledine authored 12 years ago

374) inside your
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

375) encrypted traffic as they relay it to your banking site or to ecommerce
376) stores.
Runa A. Sandvik minor changes to make po4a...

Runa A. Sandvik authored 13 years ago

377) You have to trust the provider isn't doing any number of things, such as
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

378) watching your traffic, injecting their own advertisements into your
379) traffic
Roger Dingledine minor faq cleanups

Roger Dingledine authored 12 years ago

380) stream, and recording your personal details.
Runa A. Sandvik minor changes to make po4a...

Runa A. Sandvik authored 13 years ago

381)     </p>
382)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

383)     Tor passes your traffic through at least 3 different servers before
384) sending
385) it on to the destination. Because there's a separate layer of encryption
386) for
387) each of the three relays, Tor does not modify, or even know, what you
388) are
389) sending into it.  It merely relays your traffic, completely encrypted
390) through
391) the Tor network and has it pop out somewhere else in the world,
392) completely
393) intact.  The Tor client is required because we assume you trust your
394) local
395) computer.  The Tor client manages the encryption and the path chosen
396) through
397) the network.  The relays located all over the world merely pass
398) encrypted
Runa A. Sandvik minor changes to make po4a...

Runa A. Sandvik authored 13 years ago

399) packets between themselves.</p>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

400)     <p>
401)     <dl>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

402)     <dt>Doesn't the first server see who I am?</dt><dd>Possibly. A bad
403) first of
404) three servers can see encrypted Tor traffic coming from your computer.
405) It
406) still doesn't know who you are and what you are doing over Tor.  It
407) merely sees
408) "This IP address is using Tor".  Tor is not illegal anywhere in the
409) world, so
410) using Tor by itself is fine.  You are still protected from this node
411) figuring
Runa A. Sandvik minor changes to make po4a...

Runa A. Sandvik authored 13 years ago

412) out who you are and where you are going on the Internet.</dd>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

413)     <dt>Can't the third server see my traffic?</dt><dd>Possibly.  A bad
414) third
415) of three servers can see the traffic you sent into Tor.  It won't know
416) who sent
Runa A. Sandvik minor changes to make po4a...

Runa A. Sandvik authored 13 years ago

417) this traffic.  If you're using encryption, such as visiting a bank or
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

418) e-commerce website, or encrypted mail connections, etc, it will only
419) know the
420) destination.  It won't be able to see the data inside the traffic
421) stream.  You
Runa A. Sandvik minor changes to make po4a...

Runa A. Sandvik authored 13 years ago

422) are still protected from this node figuring out who you are and if using
423) encryption, what data you're sending to the destination.</dd>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

424)     </dl>
425)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

426) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

427)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

428) 
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

429) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

430)     <a id="CompatibleApplications"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

431)     <h3><a class="anchor" href="#CompatibleApplications">What programs
432) can I use with Tor?</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

433) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

434)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

435)     If you want to use Tor with a web browser, we provide the Tor Browser
436)     Bundle, which includes everything you need to browse the web safely using
437)     Tor. If you want to use another web browser with Tor, see <a
438)     href="#TBBOtherBrowser">Other web browsers</a>.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

439)     </p>
440)     <p>
441)     There are plenty of other programs you can use with Tor,
442)     but we haven't researched the application-level anonymity
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

443)     issues on all of them well enough to be able to recommend a safe
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

444)     configuration. Our wiki has a list of instructions for <a
Karsten Loesing Update wiki links

Karsten Loesing authored 12 years ago

445)     href="<wiki>doc/TorifyHOWTO">Torifying
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

446)     specific applications</a>.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

447)     Please add to these lists and help us keep them accurate!
448)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

449) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

450)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

451) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

452)     <a id="WhyCalledTor"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

453)     <h3><a class="anchor" href="#WhyCalledTor">Why is it called
454) Tor?</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

455) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

456)     <p>
457)     Because Tor is the onion routing network. When we were starting the
458)     new next-generation design and implementation of onion routing in
459)     2001-2002, we would tell people we were working on onion routing,
460)     and they would say "Neat. Which one?" Even if onion routing has
461)     become a standard household term, Tor was born out of the actual <a
462)     href="http://www.onion-router.net/">onion routing project</a> run by
463)     the Naval Research Lab.
464)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

465) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

466)     <p>
467)     (It's also got a fine translation from German and Turkish.)
468)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

469) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

470)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

471)     Note: even though it originally came from an acronym, Tor is not
472) spelled
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

473)     "TOR". Only the first letter is capitalized. In fact, we can usually
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

474)     spot people who haven't read any of our website (and have instead
475) learned
476)     everything they know about Tor from news articles) by the fact that
477) they
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

478)     spell it wrong.
479)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

480) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

481)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

482) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

483)     <a id="Backdoor"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

484)     <h3><a class="anchor" href="#Backdoor">Is there a backdoor in
485) Tor?</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

486) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

487)     <p>
Sebastian Hahn rephrase backdoor faq entry

Sebastian Hahn authored 9 years ago

488)     There is absolutely no backdoor in Tor.  We know some smart lawyers
489)     who say that it's unlikely that anybody will try to make us add one
490)     in our jurisdiction (U.S.). If they do ask us, we will fight them,
491)     and (the lawyers say) probably win.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

492)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

493) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

494)     <p>
495)     We think that putting a backdoor in Tor would be tremendously
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

496)     irresponsible to our users, and a bad precedent for security
Sebastian Hahn rephrase backdoor faq entry

Sebastian Hahn authored 9 years ago

497)     software in general. If we ever put a deliberate backdoor in our
498)     security software, it would ruin our professional reputations.
499)     Nobody would trust our software ever again &mdash; for excellent
500)     reason!
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

501)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

502) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

503)     <p>
504)     But that said, there are still plenty of subtle attacks
505)     people might try. Somebody might impersonate us, or break into our
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

506)     computers, or something like that. Tor is open source, and you
Sebastian Hahn rephrase backdoor faq entry

Sebastian Hahn authored 9 years ago

507)     should always check the source (or at least the diffs since the last
508)     release) for suspicious things. If we (or the distributors) don't
509)     give you source, that's a sure sign something funny might be going
510)     on. You should also check the <a href="<page
511)     docs/verifying-signatures>">PGP signatures</a> on the releases, to
512)     make sure nobody messed with the distribution sites.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

513)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

514) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

515)     <p>
516)     Also, there might be accidental bugs in Tor that could affect your
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

517)     anonymity. We periodically find and fix anonymity-related bugs, so
Sebastian Hahn rephrase backdoor faq entry

Sebastian Hahn authored 9 years ago

518)     make sure you keep your Tor versions up-to-date.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

519)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

520) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

521)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

522) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

523)     <a id="DistributingTor"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

524)     <h3><a class="anchor" href="#DistributingTor">Can I distribute
525) Tor?</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

526) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

527)     <p>
528)     Yes.
529)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

530) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

531)     <p>
Matt Pagan Updated the Licensing FAQ.

Matt Pagan authored 9 years ago

532)     The Tor software is <a href="https://www.fsf.org/">free software</a>. This
533)     means we give you the rights to redistribute the Tor software, either
534)     modified or unmodified, either for a fee or gratis. You don't have to
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

535)     ask us for specific permission.
536)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

537) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

538)     <p>
Matt Pagan Updated the Licensing FAQ.

Matt Pagan authored 9 years ago

539)     However, if you want to redistribute the Tor software you must follow our
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

540)     <a href="<gitblob>LICENSE">LICENSE</a>.
Matt Pagan Updated the Licensing FAQ.

Matt Pagan authored 9 years ago

541)     Essentially this means that you need to include our LICENSE file along
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

542)     with whatever part of the Tor software you're distributing.
543)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

544) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

545)     <p>
Matt Pagan Updated the Licensing FAQ.

Matt Pagan authored 9 years ago

546)     Most people who ask us this question don't want to distribute just the
Andrew Lewman attempt to clarify the dist...

Andrew Lewman authored 12 years ago

547)     Tor software, though. They want to distribute the <a
Roger Dingledine touchups on the faq that ha...

Roger Dingledine authored 10 years ago

548)     href="<page projects/torbrowser>">Tor Browser</a>. This includes <a
Matt Pagan Updated the Licensing FAQ.

Matt Pagan authored 9 years ago

549)     href="https://www.mozilla.org/en-US/firefox/organizations/">Firefox
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

550)     Extended Support Release</a>, and the NoScript and HTTPS-Everywhere
551)     extensions. You will need to follow the license for those programs as
552)     well. Both of those Firefox extensions are distributed under
Matt Pagan Updated the Licensing FAQ.

Matt Pagan authored 9 years ago

553)     the <a href="https://www.fsf.org/licensing/licenses/gpl.html">GNU General
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

554)     Public License</a>, while Firefox ESR is released under the Mozilla Public
555)     License. The simplest way to obey their licenses is to include the source
556)     code for these programs everywhere you include the bundles themselves.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

557)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

558) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

559)     <p>
Matt Pagan Updated the Licensing FAQ.

Matt Pagan authored 9 years ago

560)     Also, you should make sure not to confuse your readers about what Tor is,
561)     who makes it, and what properties it provides (and doesn't provide). See
562)     our <a href="<page docs/trademark-faq>">trademark FAQ</a> for details.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

563)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

564) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

565)     <p>
566)     Lastly, you should realize that we release new versions of the
567)     Tor software frequently, and sometimes we make backward incompatible
Matt Pagan Updated the Licensing FAQ.

Matt Pagan authored 9 years ago

568)     changes. So if you distribute a particular version of the Tor software, it
569)     may not be supported &mdash; or even work &mdash; six months later. This
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

570)     is a fact of life for all security software under heavy development.
571)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

572) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

573)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

574) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

575)     <a id="SupportMail"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

576)     <h3><a class="anchor" href="#SupportMail">How can I get
577) support?</a></h3>
Andrew Lewman migration some questions fr...

Andrew Lewman authored 13 years ago

578) 
Andrew Lewman improve the support faq ans...

Andrew Lewman authored 11 years ago

579)     <p>Your best bet is to first try the following:</p>
Andrew Lewman migration some questions fr...

Andrew Lewman authored 13 years ago

580)     <ol>
581)     <li>Read through this <a href="<page docs/faq>">FAQ</a>.</li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

582)     <li>Read through the <a href="<page
583) docs/documentation>">documentation</a>.</li>
Andrew Lewman migration some questions fr...

Andrew Lewman authored 13 years ago

584)     <li>Read through the <a
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

585) 
586) href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk">
587) tor-talk
Andrew Lewman fix two of the faq answers.

Andrew Lewman authored 12 years ago

588)     archives</a> and see if your question is already answered.</li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

589)     <li>Join our <a href="ircs://irc.torproject.org#tor">irc channel</a>
590) and
Andrew Lewman migration some questions fr...

Andrew Lewman authored 13 years ago

591)     state the issue and wait for help.</li>
Andrew Lewman fix two of the faq answers.

Andrew Lewman authored 12 years ago

592)     <li>Send an email to <a
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

593) 
594) href="mailto:help@rt.torproject.org">help@rt.torproject.org</a>.</li>
595)     <li>If all else fails, try <a href="<page about/contact>">contacting
596) us</a> directly.</li>
Andrew Lewman migration some questions fr...

Andrew Lewman authored 13 years ago

597)     </ol>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

598) 
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

599)     <p>If you find your answer, please stick around on the IRC channel
600) or the
Andrew Lewman improve the support faq ans...

Andrew Lewman authored 11 years ago

601)     mailing list to help others who were once in your position.</p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

602) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

603)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

604) 
Roger Dingledine faq: is there a tor forum?

Roger Dingledine authored 11 years ago

605)     <a id="Forum"></a>
606)     <h3><a class="anchor" href="#Forum">Is there a Tor forum?</a></h3>
607) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

608)     <p>We have a <a href="https://tor.stackexchange.com/">StackExchange
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

609)     page</a> that is currently in public beta.
Roger Dingledine faq: is there a tor forum?

Roger Dingledine authored 11 years ago

610)     </p>
611) 
612)     <hr>
613) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

614)     <a id="WhySlow"></a>
615)     <h3><a class="anchor" href="#WhySlow">Why is Tor so slow?</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

616) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

617)     <p>
618)     There are many reasons why the Tor network is currently slow.
619)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

620) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

621)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

622)     Before we answer, though, you should realize that Tor is never going
623) to
624)     be blazing fast. Your traffic is bouncing through volunteers'
625) computers
626)     in various parts of the world, and some bottlenecks and network
627) latency
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

628)     will always be present. You shouldn't expect to see university-style
629)     bandwidth through Tor.
630)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

631) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

632)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

633)     But that doesn't mean that it can't be improved. The current Tor
634) network
635)     is quite small compared to the number of people trying to use it,
636) and
637)     many of these users don't understand or care that Tor can't
638) currently
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

639)     handle file-sharing traffic load.
640)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

641) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

642)     <p>
643)     For the much more in-depth answer, see <a
Roger Dingledine fix another 404 from the fr...

Roger Dingledine authored 13 years ago

644)     href="<blog>why-tor-is-slow">Roger's blog
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

645)     post on the topic</a>, which includes both a detailed PDF and a
646) video
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

647)     to go with it.
648)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

649) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

650)     <p>
651)     What can you do to help?
652)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

653) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

654)     <ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

655) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

656)     <li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

657)     <a href="<page docs/tor-doc-relay>">Configure your Tor to relay
658) traffic
659)     for others</a>. Help make the Tor network large enough that we can
660) handle
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

661)     all the users who want privacy and security on the Internet.
662)     </li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

663) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

664)     <li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

665)     <a href="<page projects/vidalia>">Help us make Tor more usable</a>.
666) We
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

667)     especially need people to help make it easier to configure your Tor
668)     as a relay. Also, we need help with clear simple documentation to
669)     walk people through setting it up.
670)     </li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

671) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

672)     <li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

673)     There are some bottlenecks in the current Tor network. Help us
674) design
675)     experiments to track down and demonstrate where the problems are,
676) and
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

677)     then we can focus better on fixing them.
678)     </li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

679) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

680)     <li>
681)     Tor needs some architectural changes too. One important change is to
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

682)     start providing <a href="#EverybodyARelay">better service to people
683) who
684)     relay traffic</a>. We're working on this, and we'll finish faster if
685) we
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

686)     get to spend more time on it.
687)     </li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

688) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

689)     <li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

690)     Help do other things so we can do the hard stuff. Please take a
691) moment
692)     to figure out what your skills and interests are, and then <a
693) href="<page
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

694)     getinvolved/volunteer>">look at our volunteer page</a>.
695)     </li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

696) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

697)     <li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

698)     Help find sponsors for Tor. Do you work at a company or government
699) agency
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

700)     that uses Tor or has a use for Internet privacy, e.g. to browse the
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

701)     competition's websites discreetly, or to connect back to the home
702) servers
703)     when on the road without revealing affiliations? If your
704) organization has
705)     an interest in keeping the Tor network working, please contact them
706) about
707)     supporting Tor. Without sponsors, Tor is going to become even
708) slower.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

709)     </li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

710) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

711)     <li>
712)     If you can't help out with any of the above, you can still help out
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

713)     individually by <a href="<page donate/donate>">donating a bit of
714) money to the
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

715)     cause</a>. It adds up!
716)     </li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

717) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

718)     </ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

719) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

720)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

721) 
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

722)     <a id="FileSharing"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

723)     <h3><a class="anchor" href="#FileSharing">How can I share files
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

724)     anonymously through Tor?</a></h3>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

725) 
726)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

727)     File sharing (peer-to-peer/P2P) is widely unwanted in the Tor network,
728)     and exit nodes are configured to block file sharing traffic by default.
729)     Tor is not really designed for it, and file sharing through Tor slows
730)     down everyone's browsing. Also, Bittorrent over Tor <a
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

731)     href="https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea">
732)     is not anonymous</a>!
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

733)     </p>
734) 
735)     <hr>
736) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

737)     <a id="Funding"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

738)     <h3><a class="anchor" href="#Funding">What would The Tor Project do
739) with more funding?</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

740) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

741)     <p>
Roger Dingledine future-proof our user and t...

Roger Dingledine authored 12 years ago

742)     The Tor network's <a
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

743) 
744) href="https://metrics.torproject.org/network.html#networksize">several
Roger Dingledine future-proof our user and t...

Roger Dingledine authored 12 years ago

745)     thousand</a> relays push <a
746)     href="https://metrics.torproject.org/network.html#bandwidth">over
747)     1GB per second on average</a>. We have <a
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

748) 
749) href="https://metrics.torproject.org/users.html#direct-users">several
Roger Dingledine future-proof our user and t...

Roger Dingledine authored 12 years ago

750)     hundred thousand daily users</a>. But the Tor network is not yet
751)     self-sustaining.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

752)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

753) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

754)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

755)     There are six main development/maintenance pushes that need
756) attention:
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

757)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

758) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

759)     <ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

760) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

761)     <li>
762)     Scalability: We need to keep scaling and decentralizing the Tor
763)     architecture so it can handle thousands of relays and millions of
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

764)     users. The upcoming stable release is a major improvement, but
765) there's
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

766)     lots more to be done next in terms of keeping Tor fast and stable.
767)     </li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

768) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

769)     <li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

770)     User support: With this many users, a lot of people are asking
771) questions
772)     all the time, offering to help out with things, and so on. We need
773) good
774)     clean docs, and we need to spend some effort coordinating
775) volunteers.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

776)     </li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

777) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

778)     <li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

779)     Relay support: the Tor network is run by volunteers, but they still
780) need
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

781)     attention with prompt bug fixes, explanations when things go wrong,
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

782)     reminders to upgrade, and so on. The network itself is a commons,
783) and
784)     somebody needs to spend some energy making sure the relay operators
785) stay
786)     happy. We also need to work on stability on some platforms &mdash;
787) e.g.,
Damian Johnson Fixing/removing a few dead...

Damian Johnson authored 13 years ago

788)     Tor relays have problems on Win XP currently.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

789)     </li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

790) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

791)     <li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

792)     Usability: Beyond documentation, we also need to work on usability
793) of the
794)     software itself. This includes installers, clean GUIs, easy
795) configuration
796)     to interface with other applications, and generally automating all
797) of
798)     the difficult and confusing steps inside Tor. We've got a start on
799) this
800)     with the <a href="<page projects/vidalia>">Vidalia GUI</a>, but much
801) more work
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

802)     remains &mdash; usability for privacy software has never been easy.
803)     </li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

804) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

805)     <li>
806)     Incentives: We need to work on ways to encourage people to configure
807)     their Tors as relays and exit nodes rather than just clients.
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

808)     <a href="#EverybodyARelay">We need to make it easy to become a
809) relay,
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

810)     and we need to give people incentives to do it.</a>
811)     </li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

812) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

813)     <li>
814)     Research: The anonymous communications field is full
815)     of surprises and gotchas. In our copious free time, we
816)     also help run top anonymity and privacy conferences like <a
817)     href="http://petsymposium.org/">PETS</a>. We've identified a set of
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

818)     critical <a href="<page getinvolved/volunteer>#Research">Tor
819) research questions</a>
820)     that will help us figure out how to make Tor secure against the
821) variety of
822)     attacks out there. Of course, there are more research questions
823) waiting
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

824)     behind these.
825)     </li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

826) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

827)     </ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

828) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

829)     <p>
830)     We're continuing to move forward on all of these, but at this rate
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

831)     <a href="#WhySlow">the Tor network is growing faster than the
832) developers
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

833)     can keep up</a>.
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

834)     Now would be an excellent time to add a few more developers to the
835) effort
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

836)     so we can continue to grow the network.
837)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

838) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

839)     <p>
840)     We are also excited about tackling related problems, such as
841)     censorship-resistance.
842)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

843) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

844)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

845)     We are proud to have <a href="<page about/sponsors>">sponsorship and
846) support</a>
847)     from the Omidyar Network, the International Broadcasting Bureau,
848) Bell
849)     Security Solutions, the Electronic Frontier Foundation, several
850) government
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

851)     agencies and research groups, and hundreds of private contributors.
852)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

853) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

854)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

855)     However, this support is not enough to keep Tor abreast of changes
856) in the
857)     Internet privacy landscape. Please <a href="<page
858) donate/donate>">donate</a>
859)     to the project, or <a href="<page about/contact>">contact</a> our
860) executive
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

861)     director for information on making grants or major donations.
862)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

863) 
Matt Pagan FAQ for #11620 (Inform webs...

Matt Pagan authored 9 years ago

864)     <hr>
865) 
866) 
867)     <a id="Mobile"></a>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

868)     <h3><a class="anchor" href="#Mobile">Can I use Tor on my phone or mobile
Matt Pagan FAQ for #11620 (Inform webs...

Matt Pagan authored 9 years ago

869)     device?</a></h3>
870) 
871)     <p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

872)     Tor on Android devices is maintained by the <a
873)     href="https://guardianproject.info">Guardian Project</a>. Currently, there
874)     is no supported way of using Tor on iOS; the Guardian Project is
Matt Pagan FAQ for #11620 (Inform webs...

Matt Pagan authored 9 years ago

875)     working to make this a reality in the future.
876)     </p>
877) 
Robert Ransom Add a missing horizontal rule

Robert Ransom authored 13 years ago

878)     <hr>
879) 
Lunar Remove duplication about ou...

Lunar authored 9 years ago

880)     <a id="OutboundPorts"></a>
881)     <h3><a class="anchor" href="#OutboundPorts">Which outbound ports must be open when
882)     using Tor as a client?</a></h3>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

883)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

884)     Tor may attempt to connect to any port that is advertised in the
885)     directory as an ORPort (for making Tor connections) or a DirPort (for
Roger Dingledine revise the OutboundPorts fa...

Roger Dingledine authored 9 years ago

886)     fetching updates to the directory). There are a variety of these ports:
887)     many of them are running on 80, 443, 9001, and 9030, but many use other
888)     ports too.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

889)     </p>
890)     <p>
Lunar Remove duplication about ou...

Lunar authored 9 years ago

891)     When using Tor as a client, you could probably get away with opening only those four
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

892)     ports. Since Tor does all its connections in the background, it will retry
893)     ones that fail, and hopefully you'll never have to know that it failed, as
894)     long as it finds a working one often enough. However, to get the most
Roger Dingledine revise the OutboundPorts fa...

Roger Dingledine authored 9 years ago

895)     diversity in your entry nodes &mdash; and thus the most security
896)     &mdash; as well as the most robustness in your connectivity, you'll
897)     want to let it connect to all of them.
898)     See the FAQ entry on <a href="#FirewallPorts">firewalled ports</a> if
899)     you want to explicitly tell your Tor client which ports are reachable
900)     for you.
901)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

902) 
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

903)     <hr>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

904) 
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

905)     <a id="IsItWorking"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

906)     <h3><a class="anchor" href="#IsItWorking">How can I tell if Tor is
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

907)     working, and that my connections really are anonymized?</a></h3>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

908) 
909)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

910)     There are sites you can visit that will tell you if you appear to be
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

911)     coming through the Tor network. Try the <a href="https://check.torproject.org">
912)     Tor Check</a> site and see whether it thinks you are using Tor or not.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

913)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

914) 
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

915)     <hr>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

916) 
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

917)     <a id="FTP"></a>
918)     <h3><a class="anchor" href="#FTP">How do I use my browser for ftp with Tor?
919)     </a></h3>
920) 
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

921)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

922)     Use the <a href="https://torproject.org/projects/torbrowser.html">Tor
923)     Browser Bundle</a>. If you want a separate application for an
924)     ftp client, we've heard good things about  FileZilla for Windows. You can
925)     configure it to point to Tor as a "socks4a" proxy on "localhost" port
926)     "9050".
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

927)     </p>
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

928) 
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

929)     <hr>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

930) 
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

931)     <a id="NoDataScrubbing"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

932)     <h3><a class="anchor" href="#NoDataScrubbing">Does Tor remove personal
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

933)     information from the data my application sends?</a></h3>
934) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

935)     <p>No, it doesn't. You need to use a separate program that understands
936)     your application and protocol and knows how to clean or "scrub" the data
937)     it sends. The Tor Browser Bundle tries to keep application-level data,
938)     like the user-agent string, uniform for all users. The Tor Browser can't
939)     do anything about text that you type into forms, though. <a
Roger Dingledine make the faq work better on...

Roger Dingledine authored 10 years ago

940)     href="<page download/download-easy>#warning">Be
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

941)     careful and be smart.</a>
942)     </p>
943) 
944)     <hr>
945) 
Andrew Lewman migration some questions fr...

Andrew Lewman authored 13 years ago

946)     <a id="Metrics"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

947)     <h3><a class="anchor" href="#Metrics">How many people use Tor? How
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

948)     many relays or exit nodes are there?</a></h3>
Andrew Lewman migration some questions fr...

Andrew Lewman authored 13 years ago

949) 
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

950)     <p>
951)     All this and more about measuring Tor can be found at the <a
Roger Dingledine import, and correct the fal...

Roger Dingledine authored 13 years ago

952)     href="https://metrics.torproject.org/">Tor Metrics Portal</a>.</p>
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

953)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

954) 
Andrew Lewman rename the ssl cert fingerp...

Andrew Lewman authored 13 years ago

955)     <a id="SSLcertfingerprint"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

956)     <h3><a class="anchor" href="#SSLcertfingerprint">What are the SSL
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

957)     certificate fingerprints for Tor's various websites?</a></h3>
Andrew Lewman update the faq with the ssl...

Andrew Lewman authored 13 years ago

958)     <p>
Andrew Lewman s/cerficate/certificate/

Andrew Lewman authored 13 years ago

959)     *.torproject.org SSL certificate from Digicert:
Matt Pagan Updated website SSL fingerp...

Matt Pagan authored 10 years ago

960)     </p>
961)     <pre>
962) Issued Certificate
963) Version: 3
964) Serial Number: 09 48 B1 A9 3B 25 1D 0D B1 05 10 59 E2 C2 68 0A
965) Not Valid Before: 2013-10-22
966) Not Valid After: 2016-05-03
967) Certificate Fingerprints
968) SHA1: 84 24 56 56 8E D7 90 43 47 AA 89 AB 77 7D A4 94 3B A1 A7 D5
969) MD5: A4 16 66 80 AE B9 A4 EC AA 88 01 1B 6F B9 EB CB
Andrew Lewman a pre will look better.

Andrew Lewman authored 13 years ago

970)     </pre>
Matt Pagan Updated website SSL fingerp...

Matt Pagan authored 10 years ago

971) <br>
972)     <p>
973) blog.torproject.org SSL certificate from RapidSSL:
Andrew Lewman update the faq with the ssl...

Andrew Lewman authored 13 years ago

974)     </p>
Matt Pagan Updated website SSL fingerp...

Matt Pagan authored 10 years ago

975)     <pre>
976) Issued Certificate
977) Version: 3
978) Serial Number: 05 CA 2A A9 A5 D6 ED 44 C7 2D 88 1A 18 B0 E7 DC
979) Not Valid Before: 2014-04-09
980) Not Valid After: 2017-06-14
981) Certificate Fingerprints
982) SHA1: DE 20 3D 46 FD C3 68 EB BA 40 56 39 F5 FA FD F5 4E 3A 1F 83
983) MD5: 8A 8A A2 5E D9 7F 84 4C 8F 00 3B 43 E0 2D E6 4D
984)     </pre>
Andrew Lewman update the faq with the ssl...

Andrew Lewman authored 13 years ago

985)     <hr>
986) 
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

987)     <a id="CompilationAndInstallation"></a>
988)     <h2><a class="anchor">Compilation And Installation:</a></h2>
989) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

990)     <a id="HowUninstallTor"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

991)     <h3><a class="anchor" href="#HowUninstallTor">How do I uninstall
992) Tor?</a></h3>
993) 
994)     <p>
995)     Tor Browser does not install itself in the classic sense of
996) applications. You just simply delete the folder or directory named "Tor
997) Browser" and it is removed from your system.
998)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

999) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1000)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1001)     If this is not related to Tor Browser, uninstallation depends
1002) entirely on how you installed it and which operating system you
1003)     have. If you installed a package, then hopefully your package has a
1004) way to
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1005)     uninstall itself. The Windows packages include uninstallers.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1006)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

1007) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1008)     <p>
1009)     For Mac OS X, follow the <a
1010)     href="<page docs/tor-doc-osx>#uninstall">uninstall directions</a>.
1011)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

1012) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1013)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1014)     If you installed by source, I'm afraid there is no easy uninstall
1015) method. But
1016)     on the bright side, by default it only installs into /usr/local/ and
1017) it should
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1018)     be pretty easy to notice things there.
1019)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

1020) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

1021)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

1022) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1023)     <a id="PGPSigs"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1024)     <h3><a class="anchor" href="#PGPSigs">What are these "sig" files on
1025) the download page?</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

1026) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1027)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1028)     These are PGP signatures, so you can verify that the file you've
1029) downloaded is
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1030)     exactly the one that we intended you to get.
1031)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

1032) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1033)     <p>
1034)     Please read the <a
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1035)     href="<page docs/verifying-signatures>">verifying signatures</a>
1036) page for details.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1037)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

1038) 
Roger Dingledine resurrect our finding-tor p...

Roger Dingledine authored 13 years ago

1039) <hr>
1040) 
1041) <a id="GetTor"></a>
1042) <h3><a class="anchor" href="#GetTor">Your website is blocked in my
1043) country. How do I download Tor?</a></h3>
1044) 
1045) <p>
1046) Some government or corporate firewalls censor connections to Tor's
1047) website. In those cases, you have three options. First, get it from
Roger Dingledine man, they sure don't put th...

Roger Dingledine authored 13 years ago

1048) a friend &mdash; the <a href="<page projects/torbrowser>">Tor Browser
Roger Dingledine be expliciter about google...

Roger Dingledine authored 12 years ago

1049) Bundle</a> fits nicely on a USB key. Second, find the <a
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1050) href="https://encrypted.google.com/search?q=tor+mirrors">google
1051) cache</a>
Roger Dingledine resurrect our finding-tor p...

Roger Dingledine authored 13 years ago

1052) for the <a href="<page getinvolved/mirrors>">Tor mirrors</a> page
1053) and see if any of those copies of our website work for you. Third,
1054) you can download Tor via email: log in to your Gmail account and mail
Andrew Lewman implement ticket 6213.

Andrew Lewman authored 11 years ago

1055) '<tt>gettor@gettor.torproject.org</tt>'. If you include the word 'help'
Roger Dingledine resurrect our finding-tor p...

Roger Dingledine authored 13 years ago

1056) in the body of the email, it will reply with instructions. Note that
1057) only a few webmail providers are supported, since they need to be able
1058) to receive very large attachments.
1059) </p>
1060) 
1061) <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1062) Be sure to <a href="<page docs/verifying-signatures>">verify the
1063) signature</a>
Robert Ransom Small language fixups

Robert Ransom authored 13 years ago

1064) of any package you download, especially when you get it from somewhere
1065) other than our official HTTPS website.
Roger Dingledine resurrect our finding-tor p...

Roger Dingledine authored 13 years ago

1066) </p>
1067) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

1068)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

1069) 
Matt Pagan Formatted the new FAQ entry...

Matt Pagan authored 10 years ago

1070)     <a id="VirusFalsePositives"></a>
Roger Dingledine make the anchor link actual...

Roger Dingledine authored 9 years ago

1071)     <h3><a class="anchor" href="#VirusFalsePositives">Why does my
1072)     Tor executable appear to have a virus or spyware?</a></h3>
Matt Pagan Formatted the new FAQ entry...

Matt Pagan authored 10 years ago

1073)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1074)     Sometimes, overzealous Windows virus and spyware detectors trigger on
1075)     some parts of the Tor Windows binary. Our best guess is that these are
1076)     false positives — after all, the anti-virus and anti-spyware business is
1077)     just a guessing game anyway. You should contact your vendor and explain
1078)     that you have a program that seems to be triggering false positives. Or
Matt Pagan Formatted the new FAQ entry...

Matt Pagan authored 10 years ago

1079)     pick a better vendor.
1080)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1081)     <p>In the meantime, we encourage you to not just take our word for it.
1082)     Our job is to provide the source; if you're concerned, please do
Matt Pagan Formatted the new FAQ entry...

Matt Pagan authored 10 years ago

1083)     recompile it yourself.</p>
1084) 
1085)     <hr>
1086) 
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

1087)     <a id="tarballs"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1088)     <h3><a class="anchor" href="#tarballs">How do I open a .tar.gz
Matt Pagan Fix a screwed-up HTML tag.

Matt Pagan authored 10 years ago

1089)     or .tar.xz file?</a></h3>
Matt Pagan Added an FAQ entry relevant...

Matt Pagan authored 10 years ago

1090) 
1091)     <p>
1092)     Tar is a common archive utility for Unix and Linux systems. If your
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1093)     system has a mouse, you can usually open them by double clicking.
1094)     Otherwise open a command prompt and execute</p>
Matt Pagan Added two new FAQ entries.

Matt Pagan authored 10 years ago

1095)     <pre>tar xzf &lt;FILENAME&gt;.tar.gz</pre> or <pre>tar xJf &lt;FILENAME&gt;.tar.xz</pre>
Matt Pagan Added an FAQ entry relevant...

Matt Pagan authored 10 years ago

1096)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1097)     as documented on tar's man page.
Matt Pagan Added an FAQ entry relevant...

Matt Pagan authored 10 years ago

1098)     </p>
1099) 
1100)     <hr>
1101) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1102)     <a id="LiveCD"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1103)     <h3><a class="anchor" href="#LiveCD">Is there a LiveCD or other
1104) bundle that includes Tor?</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

1105) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1106)     <p>
Damian Johnson More changes requested by i...

Damian Johnson authored 13 years ago

1107)     Yes.  Use <a href="https://tails.boum.org/">The Amnesic Incognito
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1108)     Live System</a> or <a href="<page projects/torbrowser>">the Tor
1109) Browser
Robert Ransom Stop directing users to obs...

Robert Ransom authored 13 years ago

1110)     Bundle</a>.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1111)     </p>
Roger Dingledine add back the faq entries th...

Roger Dingledine authored 13 years ago

1112) 
1113) <hr>
1114) 
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

1115) <a id="TBBGeneral"></a>
1116) <h2><a class="anchor">Tor Browser Bundle (general):</a></h2>
1117) 
Roger Dingledine two more tbb faqs, with pla...

Roger Dingledine authored 12 years ago

1118) <a id="TBBFlash"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1119) <h3><a class="anchor" href="#TBBFlash">Why can't I view videos on
1120) YouTube
Roger Dingledine index more of the questions...

Roger Dingledine authored 12 years ago

1121) and other Flash-based sites?</a></h3>
Roger Dingledine two more tbb faqs, with pla...

Roger Dingledine authored 12 years ago

1122) 
1123) <p>
Moritz Bartl removed torbutton pages, mo...

Moritz Bartl authored 11 years ago

1124) YouTube and similar sites require third party browser plugins such as Flash.
1125) Plugins operate independently from Firefox and can perform
1126) activity on your computer that ruins your anonymity. This includes
1127) but is not limited to: <a href="http://decloak.net">completely disregarding
1128) proxy settings</a>, querying your <a
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

1129) href="http://forums.sun.com/thread.jspa?threadID=5162138&amp;messageID=9618376">
1130) local IP address</a>, and <a
Moritz Bartl removed torbutton pages, mo...

Moritz Bartl authored 11 years ago

1131) href="http://epic.org/privacy/cookies/flash.html">storing their own
1132) cookies</a>. It is possible to use a LiveCD solution such as
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1133) or <a href="https://tails.boum.org/">The Amnesic Incognito Live System</a>
1134) that creates a secure, transparent proxy to protect you from proxy bypass,
1135) however issues with local IP address discovery and Flash cookies still remain.
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

1136) </p>
Moritz Bartl removed torbutton pages, mo...

Moritz Bartl authored 11 years ago

1137) 
1138) <p>
Andrew Lewman don't tell users how to kil...

Andrew Lewman authored 11 years ago

1139) <a href="https://www.youtube.com/html5">YouTube offers experimental HTML5 video
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1140) support</a> for many of their videos. Often you can get the HTML5 version of
1141) videos that don't want to play by grabbing the YouTube URL from the "Embed"
Matt Pagan Improved YouTube instructio...

Matt Pagan authored 10 years ago

1142) code under a video's "Share" option. The link switches out a URL that looks</p>
1143) <pre>https://www.youtube.com/watch?v=CJNxbpbHA-I</pre>
1144) <p>to something that looks like</p>
1145) <pre>https://www.youtube.com/embed/CJNxbpbHA-I</pre>
Moritz Bartl removed torbutton pages, mo...

Moritz Bartl authored 11 years ago

1146) 
Roger Dingledine two more tbb faqs, with pla...

Roger Dingledine authored 12 years ago

1147) <hr>
1148) 
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

1149) <a id="Ubuntu"></a>
1150) <h3><a class="anchor" href="#Ubuntu">
Matt Pagan Added FAQs re Sophos antivi...

Matt Pagan authored 10 years ago

1151) I'm using Ubuntu and I can't start Tor Browser.</a></h3>
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

1152) <p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

1153) You'll need to tell Ubuntu that you want the ability to execute shell scripts
1154) from the graphical interface. Open "Files" (Unity's explorer), open
1155) Preferences-> Behavior Tab -> Set "Run executable text files when they are
Matt Pagan When running Ubuntu shell s...

Matt Pagan authored 10 years ago

1156) opened" to "Ask every time", then OK.
Matt Pagan There's a simpler way to ru...

Matt Pagan authored 10 years ago

1157) </p>
1158) <p>You can also start the Tor Browser from the command line by running </p>
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

1159) <pre>./start-tor-browser</pre>
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

1160) <p>
1161) from inside the Tor Browser directory.
1162) </p>
1163) 
Matt Pagan Added an FAQ entry relevant...

Matt Pagan authored 10 years ago

1164) <hr>
1165) 
Matt Pagan Added FAQs re Sophos antivi...

Matt Pagan authored 10 years ago

1166) <a id="SophosOnMac"></a>
1167) <h3><a class="anchor" href="#SophosOnMac">I'm using the Sophos anti-virus
Matt Pagan Sophos FAQ should be more p...

Matt Pagan authored 9 years ago

1168)     software on my Mac, and Tor starts but I can't browse anywhere.</a></h3>
Matt Pagan Added FAQs re Sophos antivi...

Matt Pagan authored 10 years ago

1169) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1170) You'll need to modify Sophos anti-virus so that Tor can connect to the
1171) internet. Go to Preferences -> Web Protection -> General, and turn off
Matt Pagan Added FAQs re Sophos antivi...

Matt Pagan authored 10 years ago

1172) the protections for "Malicious websites" and "Malicious downloads".
1173) </p>
Matt Pagan Encourage Sophos users to c...

Matt Pagan authored 9 years ago

1174) <p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

1175) We encourage affected Sophos users to contact Sophos support about
Matt Pagan Encourage Sophos users to c...

Matt Pagan authored 9 years ago

1176) this issue.
1177) </p>
Matt Pagan Added FAQs re Sophos antivi...

Matt Pagan authored 10 years ago

1178) 
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

1179) <hr>
1180) 
Matt Pagan Added an FAQ about Webroot....

Matt Pagan authored 9 years ago

1181) <a id="XPCOMError"></a>
Matt Pagan Provide Webroot users with...

Matt Pagan authored 9 years ago

1182) <h3><a class="anchor" href="#XPCOMError">When I start Tor Browser I get an 
1183) error message: "Cannot load XPCOM".</a></h3>
Matt Pagan Added an FAQ about Webroot....

Matt Pagan authored 9 years ago

1184) 
1185) <p>
Matt Pagan Provide Webroot users with...

Matt Pagan authored 9 years ago

1186) This <a 
1187) href="https://trac.torproject.org/projects/tor/ticket/10789">problem</a> is 
1188) specifically caused by the Webroot SecureAnywhere Antivirus software. 
1189) From the Webroot control panel, go to Identity Protection &rarr; Application 
1190) Protection, and set all the files in your Tor Browser folder to 'Allow'. 
1191) We encourage affected Webroot users to contact Webroot support about this 
1192) issue.
Roger Dingledine call-for-help on the xpcom...

Roger Dingledine authored 9 years ago

1193) </p>
Matt Pagan Added an FAQ about Webroot....

Matt Pagan authored 9 years ago

1194) 
1195) <hr>
1196) 
Roger Dingledine two more tbb faqs, with pla...

Roger Dingledine authored 12 years ago

1197) <a id="TBBOtherExtensions"></a>
1198) <h3><a class="anchor" href="#TBBOtherExtensions">Can I install other
1199) Firefox extensions?</a></h3>
1200) 
1201) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1202) The Tor Browser is free software, so there is nothing preventing you from
1203) modifying it any way you like. However, we do not recommend installing any
1204) additional Firefox add-ons with the Tor Browser Bundle. Add-ons can break
1205) your anonymity in a number of ways, including browser fingerprinting and
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

1206) bypassing proxy settings.
Roger Dingledine two more tbb faqs, with pla...

Roger Dingledine authored 12 years ago

1207) </p>
Moritz Bartl removed torbutton pages, mo...

Moritz Bartl authored 11 years ago

1208) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1209) Some people have suggested we include ad-blocking software or
1210) anti-tracking software with the Tor Browser Bundle. Right now, we do not
1211) think that's such a good idea. The Tor Browser Bundle aims to provide
1212) sufficient privacy that additional add-ons to stop ads and trackers are
1213) not necessary. Using add-ons like these may cause some sites to break, which
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

1214) <a href="https://www.torproject.org/projects/torbrowser/design/#philosophy">
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1215) we don't want to do</a>. Additionally, maintaining a list of "bad" sites that
1216) should be black-listed provides another opportunity to uniquely fingerprint
1217) users.
Andrew Lewman don't tell users how to kil...

Andrew Lewman authored 11 years ago

1218) </p>
Moritz Bartl removed torbutton pages, mo...

Moritz Bartl authored 11 years ago

1219) 
Roger Dingledine two more tbb faqs, with pla...

Roger Dingledine authored 12 years ago

1220) <hr>
1221) 
Robert Ransom Answer some FAQs about Java...

Robert Ransom authored 12 years ago

1222) <a id="TBBJavaScriptEnabled"></a>
Roger Dingledine try a new answer to the jav...

Roger Dingledine authored 10 years ago

1223) <a id="TBBCanIBlockJS"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1224) <h3><a class="anchor" href="#TBBJavaScriptEnabled">Why is NoScript
1225) configured to allow JavaScript by default in the Tor Browser Bundle?
1226) Isn't that unsafe?</a></h3>
Robert Ransom Answer some FAQs about Java...

Robert Ransom authored 12 years ago

1227) 
1228) <p>
1229) We configure NoScript to allow JavaScript by default in the Tor
1230) Browser Bundle because many websites will not work with JavaScript
1231) disabled.  Most users would give up on Tor entirely if a website
1232) they want to use requires JavaScript, because they would not know
1233) how to allow a website to use JavaScript (or that enabling
1234) JavaScript might make a website work).
1235) </p>
1236) 
Roger Dingledine try a new answer to the jav...

Roger Dingledine authored 10 years ago

1237) <p>
1238) There's a tradeoff here. On the one hand, we should leave
1239) JavaScript enabled by default so websites work the way
1240) users expect. On the other hand, we should disable JavaScript
1241) by default to better protect against browser vulnerabilities (<a
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

1242) href="https://blog.torproject.org/blog/tor-security-advisory-old-tor-browser-bundles-vulnerable">
1243) not just a theoretical concern!</a>). But there's a third issue: websites
Roger Dingledine try a new answer to the jav...

Roger Dingledine authored 10 years ago

1244) can easily determine whether you have allowed JavaScript for them,
1245) and if you disable JavaScript by default but then allow a few websites
1246) to run scripts (the way most people use NoScript), then your choice of
1247) whitelisted websites acts as a sort of cookie that makes you recognizable
1248) (and distinguishable), thus harming your anonymity.
1249) </p>
Robert Ransom Answer some FAQs about Java...

Robert Ransom authored 12 years ago

1250) 
1251) <p>
Roger Dingledine try a new answer to the jav...

Roger Dingledine authored 10 years ago

1252) Ultimately, we want the default Tor bundles to use
1253) a combination of firewalls (like the iptables rules
1254) in <a href="https://tails.boum.org/">Tails</a>) and <a
1255) href="https://trac.torproject.org/projects/tor/ticket/7680">sandboxes</a>
1256) to make JavaScript not so scary. In
1257) the shorter term, TBB 3.0 will hopefully <a
1258) href="https://trac.torproject.org/projects/tor/ticket/9387">allow users
1259) to choose their JavaScript settings more easily</a> &mdash; but the
1260) partitioning concern will remain.
Robert Ransom Answer some FAQs about Java...

Robert Ransom authored 12 years ago

1261) </p>
1262) 
1263) <p>
Roger Dingledine try a new answer to the jav...

Roger Dingledine authored 10 years ago

1264) Until we get there, feel free to leave JavaScript on or off depending
1265) on your security, anonymity, and usability priorities.
Robert Ransom Answer some FAQs about Java...

Robert Ransom authored 12 years ago

1266) </p>
1267) 
1268) <hr>
1269) 
Roger Dingledine import and flesh out helix'...

Roger Dingledine authored 12 years ago

1270) <a id="TBBOtherBrowser"></a>
1271) <h3><a class="anchor" href="#TBBOtherBrowser">I want to use
1272) Chrome/IE/Opera/etc with Tor.</a></h3>
1273) 
1274) <p>
Lunar Remove obsolete statement a...

Lunar authored 9 years ago

1275) In short, using any browser besides Tor Browser with Tor is a
Roger Dingledine import and flesh out helix'...

Roger Dingledine authored 12 years ago

1276) really bad idea.
1277) </p>
1278) 
1279) <p>
Lunar Remove obsolete statement a...

Lunar authored 9 years ago

1280) Our efforts to work with the Chrome team to <a
1281) href="https://blog.torproject.org/blog/google-chrome-incognito-mode-tor-and-fingerprinting">add
1282) missing APIs</a> were unsuccessful, unfortunately. Currently, it is impossible
1283) to use other browsers and get the same level of protections as when using the
1284) Tor Browser.
Roger Dingledine import and flesh out helix'...

Roger Dingledine authored 12 years ago

1285) </p>
1286) 
1287) <hr>
1288) 
Andrew Lewman correct case for CAPTCHA

Andrew Lewman authored 11 years ago

1289) <a id="GoogleCAPTCHA"></a>
1290) <h3><a class="anchor" href="#GoogleCAPTCHA">Google makes me solve a
1291) CAPTCHA or tells me I have spyware installed.</a></h3>
Roger Dingledine break off some questions in...

Roger Dingledine authored 12 years ago

1292) 
1293) <p>
1294) This is a known and intermittent problem; it does not mean that Google
1295) considers Tor to be spyware.
1296) </p>
1297) 
1298) <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1299) When you use Tor, you are sending queries through exit relays that are
Andrew Lewman use page macro, not direct...

Andrew Lewman authored 10 years ago

1300) also shared by thousands of other users. Tor users typically see this
1301) message when many Tor users are querying Google in a short period of time.
1302) Google interprets the high volume of traffic from a single IP address
1303) (the exit relay you happened to pick) as somebody trying to "crawl" their
1304) website, so it slows down traffic from that IP address for a short time.
Roger Dingledine break off some questions in...

Roger Dingledine authored 12 years ago

1305) </p>
1306) <p>
1307) An alternate explanation is that Google tries to detect certain
1308) kinds of spyware or viruses that send distinctive queries to Google
1309) Search. It notes the IP addresses from which those queries are received
1310) (not realizing that they are Tor exit relays), and tries to warn any
1311) connections coming from those IP addresses that recent queries indicate
1312) an infection.
1313) </p>
1314) 
1315) <p>
Andrew Lewman use page macro, not direct...

Andrew Lewman authored 10 years ago

1316) To our knowledge, Google is not doing anything intentionally specifically
Roger Dingledine break off some questions in...

Roger Dingledine authored 12 years ago

1317) to deter or block Tor use. The error message about an infected machine
1318) should clear up again after a short time.
1319) </p>
1320) 
1321) <hr />
1322) 
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

1323) <a id="ForeignLanguages"></a>
1324) <h3><a class="anchor" href="#ForeignLanguages">
1325) Why does Google show up in foreign languages?</a></h3>
1326) 
1327) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1328)  Google uses "geolocation" to determine where in the world you are, so it
1329)  can give you a personalized experience. This includes using the language
1330)  it thinks you prefer, and it also includes giving you different results
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

1331)  on your queries.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

1332) </p>
1333) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1334) If you really want to see Google in English you can click the link that
1335) provides that. But we consider this a feature with Tor, not a bug --- the
1336) Internet is not flat, and it in fact does look different depending on
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

1337) where you are. This feature reminds people of this fact.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

1338) </p>
1339) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1340) Note that Google search URLs take name/value pairs as arguments and one
1341) of those names is "hl". If you set "hl" to "en" then Google will return
1342) search results in English regardless of what Google server you have been
1343) sent to. On a query this looks like:
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

1344) </p>
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

1345) <pre>https://encrypted.google.com/search?q=online%20anonymity&hl=en</pre>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

1346) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1347) Another method is to simply use your country code for accessing Google.
1348) This can be google.be, google.de, google.us and so on.
Matt Pagan Cleaned up some existing FA...

Matt Pagan authored 10 years ago

1349) </p>
1350) <hr />
Roger Dingledine break off some questions in...

Roger Dingledine authored 12 years ago

1351) <a id="GmailWarning"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1352) <h3><a class="anchor" href="#GmailWarning">Gmail warns me that my
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

1353) account may have been compromised.</a></h3>
Roger Dingledine break off some questions in...

Roger Dingledine authored 12 years ago

1354) 
1355) <p>
1356) Sometimes, after you've used Gmail over Tor, Google presents a
1357) pop-up notification that your account may have been compromised.
1358) The notification window lists a series of IP addresses and locations
1359) throughout the world recently used to access your account.
1360) </p>
1361) 
1362) <p>
1363) In general this is a false alarm: Google saw a bunch of logins from
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1364) different places, as a result of running the service via Tor, and
1365) decided
Roger Dingledine break off some questions in...

Roger Dingledine authored 12 years ago

1366) it was a good idea to confirm the account was being accessed by it's
1367) rightful owner.
1368) </p>
1369) 
1370) <p>
1371) Even though this may be a biproduct of using the service via tor,
1372) that doesn't mean you can entirely ignore the warning. It is
1373) <i>probably</i> a false positive, but it might not be since it is
1374) possible for someone to hijack your Google cookie.
1375) </p>
1376) 
1377) <p>
1378) Cookie hijacking is possible by either physical access to your computer
1379) or by watching your network traffic.  In theory only physical access
1380) should compromise your system because Gmail and similar services
1381) should only send the cookie over an SSL link. In practice, alas, it's <a
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1382) href="http://fscked.org/blog/fully-automated-active-https-cookie-
1383) hijacking">
Roger Dingledine break off some questions in...

Roger Dingledine authored 12 years ago

1384) way more complex than that</a>.
1385) </p>
1386) 
1387) <p>
1388) And if somebody <i>did</i> steal your google cookie, they might end
1389) up logging in from unusual places (though of course they also might
1390) not). So the summary is that since you're using Tor, this security
1391) measure that Google uses isn't so useful for you, because it's full of
1392) false positives. You'll have to use other approaches, like seeing if
1393) anything looks weird on the account, or looking at the timestamps for
1394) recent logins and wondering if you actually logged in at those times.
1395) </p>
1396) 
1397) <hr>
1398) 
Matt Pagan Add 1 FAQ entry and cleaned...

Matt Pagan authored 10 years ago

1399) <a id="NeedToUseAProxy"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1400) <h3><a class="anchor" href="#NeedToUseAProxy">My internet connection
Matt Pagan Added three FAQ entries; fi...

Matt Pagan authored 10 years ago

1401) requires an HTTP or SOCKS Proxy</a></h3>
Matt Pagan Add 1 FAQ entry and cleaned...

Matt Pagan authored 10 years ago

1402) 
1403) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1404) You can set Proxy IP address, port, and authentication information in
1405) Tor Browser's Network Settings. If you're using Tor another way, check
1406) out the HTTPProxy and HTTPSProxy config options in the <a
Roger Dingledine make the faq work better on...

Roger Dingledine authored 10 years ago

1407) href="<page docs/tor-manual>">man page</a>,
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1408) and modify your torrc file accordingly. You will need an HTTP proxy for
1409) doing GET requests to fetch the Tor directory, and you will need an
1410) HTTPS proxy for doing CONNECT requests to get to Tor relays. (It's fine
1411) if they're the same proxy.) Tor also recognizes the torrc options
1412) Socks4Proxy and Socks5Proxy.
Matt Pagan Add 1 FAQ entry and cleaned...

Matt Pagan authored 10 years ago

1413) </p>
1414) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1415) Also read up on the HTTPProxyAuthenticator and HTTPSProxyAuthenticator
1416) options if your proxy requires auth. We only support basic auth currently,
1417) but if you need NTLM authentication, you may find <a
1418) href="http://archives.seul.org/or/talk/Jun-2005/msg00223.html">this post
1419) in the archives</a> useful.
Matt Pagan Add 1 FAQ entry and cleaned...

Matt Pagan authored 10 years ago

1420) </p>
1421) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1422) If your proxies only allow you to connect to certain ports, look at the
1423) entry on <a href="#FirewallPorts">Firewalled clients</a> for how
1424) to restrict what ports your Tor will try to access.
Matt Pagan Add 1 FAQ entry and cleaned...

Matt Pagan authored 10 years ago

1425) </p>
1426) 
1427) <hr>
1428) 
Matt Pagan Removed 3 FAQs that have no...

Matt Pagan authored 9 years ago

1429) 
1430) <a id="TBBSocksPort"></a>
1431) <h3><a class="anchor" href="#TBBSocksPort">
1432) I want to run another application through Tor.</a></h3>
1433) 
1434) <p>
1435) If you are trying to use some external application with Tor, step zero
1436) should be to <a href="<page download/download>#warning">reread the set
1437) of warnings</a> for ways you can screw up. Step one should be to try
1438) to use a SOCKS proxy rather than an HTTP proxy.
1439) Typically Tor listens for SOCKS connections on port 9050. Tor Browser listens
1440) on port 9150.
1441) </p>
1442) 
1443) <p>
1444) If your application doesn't support SOCKS proxies, feel free to install <a
1445) href="http://www.privoxy.org/">privoxy</a>.
1446) However, please realize that this approach is not recommended for novice
1447) users. Privoxy has an <a
1448) href="http://www.privoxy.org/faq/misc.html#TOR">example
1449) configuration</a> of Tor and Privoxy.
1450) </p>
1451) 
1452) <p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

1453) If you're unable to use the application's native proxy settings, all hope is
Matt Pagan Removed 3 FAQs that have no...

Matt Pagan authored 9 years ago

1454) not lost. See <a href="#CantSetProxy">below</a>.
1455) </p>
1456) 
1457) <hr>
1458) 
Matt Pagan Added three FAQ entries; fi...

Matt Pagan authored 10 years ago

1459) <a id="CantSetProxy"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1460) <h3><a class="anchor" href="#CantSetProxy">What should I do if I can't
Matt Pagan Added three FAQ entries; fi...

Matt Pagan authored 10 years ago

1461) set a proxy with my application?</a></h3>
1462) 
1463) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1464) On Unix, we recommend you give <a
1465) href="https://github.com/dgoulet/torsocks/">torsocks</a> a try.
1466) Alternative proxifying tools like <a
1467) href="http://www.dest-unreach.org/socat/">socat</a> and <a
1468) href="http://proxychains.sourceforge.net/">proxychains</a> are also
Matt Pagan Added three FAQ entries; fi...

Matt Pagan authored 10 years ago

1469) available.</p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1470) <p>
1471) The Windows way to force applications through Tor is less clear. <a
1472) href="http://freecap.ru/eng/">Some</a> <a
1473) href="http://www.freehaven.net/~aphex/torcap/">tools</a> have been <a
Matt Pagan Added three FAQ entries; fi...

Matt Pagan authored 10 years ago

1474) href="http://www.crowdstrike.com/community-tools/index.html#tool-79">proposed
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1475) </a>, but we'd also like to see further testing done here.
Matt Pagan Added three FAQ entries; fi...

Matt Pagan authored 10 years ago

1476) </p>
1477) 
1478) <hr>
1479) 
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

1480) <a id="TBB3.x"></a>
1481) <h2><a class="anchor">Tor Browser Bundle (3.x series):</a></h2>
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1482)     <a id="WhereDidVidaliaGo"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1483)     <h3><a class="anchor" href="#WhereDidVidaliaGo">Where did the world map
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1484)     (Vidalia) go?</a></h3>
1485) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1486)     <p>Vidalia has been replaced with Tor Launcher, which is a Firefox
1487)     extension that provides similar functionality. Unfortunately, circuit
1488)     status reporting is still missing, but we are <a
1489)     href="https://trac.torproject.org/projects/tor/ticket/8641">working
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1490)     on providing it</a>. </p>
1491) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1492)     <p>In the meantime, we are providing standalone Vidalia packages for
1493)     people who still want the map. Windows and Linux versions are <a
Matt Pagan fixed a hyperlink

Matt Pagan authored 10 years ago

1494)     href="https://people.torproject.org/~erinn/vidalia-standalone-bundles/">
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1495)     available here</a>.</p>
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1496) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1497)     <p>To use these packages, extract them, then run the startup script.
1498)     On Windows, this is "Start Vidalia.exe". On Linux, it is start-vidalia.
1499)     They can be placed in a different directory from TBB (and likely should
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1500)     be). </p>
1501) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1502)     <p>This Vidalia package will only run properly if Tor Browser has already
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1503)     been launched. You cannot start it before launching Tor Browser. </p>
1504) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1505)     <p>MacOS is still under development, but in the mean time you can modify
1506)     your TBB 2.x to be a standalone Vidalia (and then use it after starting
1507)     TBB 3.x) by opening your TBB 2.x vidalia.conf file in an editor and
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1508)     replacing its contents with just these lines:</p>
1509) 
1510)     <pre>
1511)     [General]
1512)     LanguageCode=en
1513) 
1514)     [Tor]
1515)     ControlPort=9151
1516)     TorExecutable=.
1517)     Torrc=.
1518)     DataDirectory=.
1519)     AuthenticationMethod=cookie
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1520)     </pre>
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1521) 
1522)     <hr>
1523) 
1524)     <a id="DisableJS"></a>
1525)     <h3><a class="anchor" href="#DisableJS">How do I disable JavaScript?</a>
1526)     </h3>
1527) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1528)     <p>Alas, Mozilla decided to get rid of the config checkbox for JavaScript
1529)     from earlier Firefox versions. And since TBB 3.5 is based on Firefox 24
1530)     (FF17 is unmaintained), that means TBB 3.5 doesn't have the config
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1531)     checkbox anymore either, which is unfortunate.</p>
1532) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1533)     <p>The simplest way to disable JavaScript in TBB 3.5 is to click on the
1534)     Noscript "S" (between the green onion and the address bar), and select
1535)     "Forbid scripts globally". Note that vanilla NoScript actually whitelists
1536)     several domains even when you try to disable scripts globally, whereas
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1537)     Tor Browser's NoScript configuration disables all of them. </p>
1538) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1539)     <p>The more klunky way to disable JavaScript is to go to about:config,
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1540)     find javascript.enabled, and set it to false.</p>
1541) 
1542)     <p>There is also a very simple addon available at addons.mozilla.org
1543)     called QuickJS, which provides a toolbar toggle for the javascript.enabled
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1544)     about:config control. There are no configuration options for the addon,
1545)     it just switches the javascript.enabled entry between true and false and
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1546)     provides a button for it. </p>
1547) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1548)     <p>If you want to be extra safe, use both the about:config setting and
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1549)     NoScript. </p>
1550) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1551)     <p>As for whether you should disable it or leave it enabled, that's <a
Matt Pagan Improved some links.

Matt Pagan authored 10 years ago

1552)     href="#TBBJavaScriptEnabled">a tradeoff we leave to you</a>.</p>
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1553) 
1554)     <hr>
1555) 
1556)     <a id="VerifyDownload"></a>
1557)     <h3><a class="anchor" href="#VerifyDownload">How do I verify the download
1558)     (sha256sums.txt)?</a></h3>
1559) 
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

1560)     <p>Instructions are on the <a
1561)     href="<page docs/verifying-signatures>#BuildVerification">verifying
Matt Pagan Moved verification instruct...

Matt Pagan authored 9 years ago

1562)     signatures</a> page.</p>
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1563) 
1564)     <hr>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

1565) 
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1566)     <a id="NewIdentityClosingTabs"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1567)     <h3><a class="anchor" href="#NewIdentityClosingTabs">Why does "New
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1568)     Identity" close all my open tabs?</a></h3>
1569) 
1570)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1571)     That's actually a feature, since it's discarding your application-level
1572)     browser data too. But it sure is a surprising feature, for people who
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1573)     are used to Vidalia's "new identity" behavior.
1574)     </p>
1575) 
1576)     <p>
Roger Dingledine get rid of a surprising int...

Roger Dingledine authored 10 years ago

1577)     We're working on ways to make the behavior less surprising, e.g. a popup
1578)     warning or auto restoring tabs. See ticket <a
1579)     href="https://trac.torproject.org/projects/tor/ticket/9906">#9906</a> and
1580)     ticket <a
1581)     href="https://trac.torproject.org/projects/tor/ticket/10400">#10400</a>
1582)     to follow progress there.
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1583)     </p>
1584) 
1585)     <p>
Roger Dingledine make it clearer what 'above...

Roger Dingledine authored 10 years ago

1586)     In the mean time, you can get Vidalia's old "newnym" functionality by
1587)     attaching a Vidalia to your TBB 3.x. See the instructions <a
1588)     href="#WhereDidVidaliaGo">above</a>.
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1589)     </p>
1590) 
1591)     <hr>
1592) 
1593)     <a id="ConfigureRelayOrBridge"></a>
1594)     <h3><a class="anchor" href="#ConfigureRelayOrBridge">How do I configure Tor as a relay or bridge?</a></h3>
1595) 
1596)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1597)     You've got three options.
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1598)     </p>
1599) 
1600)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1601)     First (best option), if you're on Linux, you can install the system
1602)     Tor package (e.g. apt-get install tor) and then set it up to be a relay
1603)     (<a href="https://www.torproject.org/docs/tor-relay-debian">instructions</a>).
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1604)     You can then use TBB independent of that.
1605)     </p>
1606) 
1607)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1608)     Second (simpler option), if you're on Windows, you can fetch the separate
1609)     "Vidalia relay bundle" or "Vidalia bridge bundle" from the download page
1610)     and then use that (again you can use TBB independent of it).
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1611)     </p>
1612) 
1613)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1614)     Third (complex option), you can either hook your Vidalia up to TBB (as
1615)     described in the FAQ above) or edit your torrc file (in Data/Tor/torrc)
1616)     directly to add the following lines:
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1617)     </p>
1618)     <pre>
1619)     ORPort 443
1620)     Exitpolicy reject *:*
1621)     BridgeRelay 1  # only add this line if you want to be a bridge
1622)     </pre>
1623)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1624)     If you've installed <a
Roger Dingledine make the faq work better on...

Roger Dingledine authored 10 years ago

1625)     href="<page projects/obfsproxy-debian-instructions>#instructions">Obfsproxy</a>,
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1626)     you'll need to add one more line:
1627)     </p>
1628)     <pre>
1629)     ServerTransportPlugin obfs3 exec /usr/bin/obfsproxy managed
1630)     </pre>
1631)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1632)     This third option is pretty klunky right now; see e.g. <a
1633)     href="https://trac.torproject.org/projects/tor/ticket/10449">this bug</a>;
1634)     but we're hoping it will become an easy option in the future.
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1635)     </p>
1636) 
1637)     <hr>
1638) 
1639)     <a id="Timestamps"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1640)     <h3><a class="anchor" href="#Timestamps">Why are the file timestamps
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1641)     from 2000?</a></h3>
1642) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1643)     <p>One of the huge new features in TBB 3.x is the "deterministic build"
1644)     process, which allows many people to build the Tor Browser Bundle and
1645)     verify that they all make exactly the same package. See Mike's <a
1646)     href="https://blog.torproject.org/blog/deterministic-builds-part-one-cyberwar-and-global-compromise">first
1647)     blog</a> post for the motivation, and his <a
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1648)     href="https://blog.torproject.org/blog/deterministic-builds-part-two-technical-details">second
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1649)     blog post</a> for the technical details of how we do it.
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1650)     </p>
1651) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1652)     <p>Part of creating identical builds is having everybody use the same
1653)     timestamp. Mike picked the beginning of 2000 for that time. The reason
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1654)     you might see 7pm in 1999 is because of time zones. </p>
1655) 
1656)     <hr>
1657) 
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

1658)     <a id="TBBSourceCode"></a>
1659)     <h3><a class="anchor" href="#TBBSourceCode">Where is the source code for the bundle? How do I verify a build?</a></h3>
Matt Pagan Transferred all TBB FAQs fr...

Matt Pagan authored 10 years ago

1660) 
1661)     <p>
1662)     Start with <a href="https://gitweb.torproject.org/builders/tor-browser-bundle.git">https://gitweb.torproject.org/builders/tor-browser-bundle.git</a> and <a href="https://gitweb.torproject.org/builders/tor-browser-bundle.git/blob/HEAD:/gitian/README.build">https://gitweb.torproject.org/builders/tor-browser-bundle.git/blob/HEAD:/gitian/README.build</a>.
1663)     </p>
1664) 
1665) 
Matt Pagan Added three FAQ entries; fi...

Matt Pagan authored 10 years ago

1666) <hr>
1667) 
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

1668) <a id="AdvancedTorUsage"></a>
1669) <h2><a class="anchor">Advanced Tor usage:</a></h2>
1670) 
Roger Dingledine import and rewrite the #tor...

Roger Dingledine authored 13 years ago

1671) <a id="torrc"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1672) <h3><a class="anchor" href="#torrc">I'm supposed to "edit my torrc".
1673) What does that mean?</a></h3>
Roger Dingledine import and rewrite the #tor...

Roger Dingledine authored 13 years ago

1674) 
1675) <p>
1676) Tor installs a text file called torrc that contains configuration
1677) instructions for how your Tor program should behave. The default
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1678) configuration should work fine for most Tor users.
Roger Dingledine import and rewrite the #tor...

Roger Dingledine authored 13 years ago

1679) </p>
Andrew Lewman add the easy way to edit to...

Andrew Lewman authored 12 years ago

1680) <p>
Matt Pagan Removed references to Vidal...

Matt Pagan authored 10 years ago

1681) If you installed Tor Browser Bundle, look for
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1682) <code>Data/Tor/torrc</code> inside your Tor Browser Bundle directory.
1683) On OS X, you must right-click or command-click on the browser bundle icon,
1684) and select "Show Package Contents" before the Tor Browser directories become
1685) visible.
Matt Pagan Other Vidalia and Tor Brows...

Matt Pagan authored 10 years ago

1686) </p>
1687) <p>
Matt Pagan Spruced up the relay docume...

Matt Pagan authored 10 years ago

1688) Tor puts the torrc file in <code>/usr/local/etc/tor/torrc</code> if you compiled tor from source, and <code>/etc/tor/torrc</code> or <code>/etc/torrc</code> if you installed a pre-built package.</p>
Roger Dingledine import and rewrite the #tor...

Roger Dingledine authored 13 years ago

1689) 
1690) <p>
Matt Pagan Other Vidalia and Tor Brows...

Matt Pagan authored 10 years ago

1691) Once you've changed your torrc, you will need to restart tor for the
1692) changes to take effect. (For advanced users, note that
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1693) you actually only need to send Tor a HUP signal, not actually restart
1694) it.)
Roger Dingledine import and rewrite the #tor...

Roger Dingledine authored 13 years ago

1695) </p>
1696) 
1697) <p>
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

1698) For other configuration options you can use, see the <a href="<page
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1699) docs/tor-manual>">Tor manual page</a>. Have a look at <a
Matt Pagan Add the example torrc link...

Matt Pagan authored 10 years ago

1700) href="https://gitweb.torproject.org/tor.git/blob/HEAD:/src/config/torrc.sample.in">
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1701) the sample torrc file</a> for hints on common configurations. Remember, all
1702) lines beginning with # in torrc are treated as comments and have no effect
Matt Pagan Add the example torrc link...

Matt Pagan authored 10 years ago

1703) on Tor's configuration.
Matt Pagan Added an example torrc file

Matt Pagan authored 10 years ago

1704) </p>
1705) 
1706) <hr>
1707) 
Roger Dingledine revise #Logs entry. fix sev...

Roger Dingledine authored 13 years ago

1708) <a id="Logs"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1709) <h3><a class="anchor" href="#Logs">How do I set up logging, or see Tor's
1710) logs?</a></h3>
Roger Dingledine import the logs faq entry

Roger Dingledine authored 13 years ago

1711) 
1712) <p>
Roger Dingledine revise #Logs entry. fix sev...

Roger Dingledine authored 13 years ago

1713) If you installed a Tor bundle that includes Vidalia, then Vidalia has a
Roger Dingledine explain that you need to cl...

Roger Dingledine authored 12 years ago

1714) window called "Message Log" that will show you Tor's log messages. Click
1715) on "Advanced" to see more details. You can click on "Settings" to change
1716) your log verbosity or save the messages to a file. You're all set.
Roger Dingledine import the logs faq entry

Roger Dingledine authored 13 years ago

1717) </p>
1718) 
1719) <p>
1720) If you're not using Vidalia, you'll have to go find the log files by
Roger Dingledine revise #Logs entry. fix sev...

Roger Dingledine authored 13 years ago

1721) hand. Here are some likely places for your logs to be:
Roger Dingledine import the logs faq entry

Roger Dingledine authored 13 years ago

1722) </p>
1723) 
1724) <ul>
1725) <li>On OS X, Debian, Red Hat, etc, the logs are in /var/log/tor/
1726) </li>
Roger Dingledine revise #Logs entry. fix sev...

Roger Dingledine authored 13 years ago

1727) <li>On Windows, there are no default log files currently. If you enable
1728) logs in your torrc file, they default to <code>\username\Application
1729) Data\tor\log\</code> or <code>\Application Data\tor\log\</code>
1730) </li>
1731) <li>If you compiled Tor from source, by default your Tor logs to <a
1732) href="http://en.wikipedia.org/wiki/Standard_streams">"stdout"</a>
1733) at log-level notice. If you enable logs in your torrc file, they
1734) default to <code>/usr/local/var/log/tor/</code>.
Roger Dingledine import the logs faq entry

Roger Dingledine authored 13 years ago

1735) </li>
1736) </ul>
1737) 
1738) <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1739) To change your logging setup by hand, <a href="#torrc">edit your
1740) torrc</a>
Roger Dingledine revise #Logs entry. fix sev...

Roger Dingledine authored 13 years ago

1741) and find the section (near the top of the file) which contains the
1742) following line:
Roger Dingledine import the logs faq entry

Roger Dingledine authored 13 years ago

1743) </p>
1744) 
1745) <pre>
Roger Dingledine revise #Logs entry. fix sev...

Roger Dingledine authored 13 years ago

1746) \## Logs go to stdout at level "notice" unless redirected by something
1747) \## else, like one of the below lines.
Erinn Clark fix still-open <pre> and ho...

Erinn Clark authored 13 years ago

1748) </pre>
Roger Dingledine import the logs faq entry

Roger Dingledine authored 13 years ago

1749) 
1750) <p>
Roger Dingledine revise #Logs entry. fix sev...

Roger Dingledine authored 13 years ago

1751) For example, if you want Tor to send complete debug, info, notice, warn,
Roger Dingledine import the logs faq entry

Roger Dingledine authored 13 years ago

1752) and err level messages to a file, append the following line to the end
1753) of the section:
1754) </p>
1755) 
1756) <pre>
1757) Log debug file c:/program files/tor/debug.log
1758) </pre>
1759) 
1760) <p>
Roger Dingledine revise #Logs entry. fix sev...

Roger Dingledine authored 13 years ago

1761) Replace <code>c:/program files/tor/debug.log</code> with a directory
1762) and filename for your Tor log.
Roger Dingledine import the logs faq entry

Roger Dingledine authored 13 years ago

1763) </p>
1764) 
1765) <hr>
1766) 
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

1767) 
1768) <a id="LogLevel"></a>
1769) <h3><a class="anchor" href="#LogLevel">What log level should I use?</a></h3>
1770) 
1771) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1772) There are five log levels (also called "log severities") you might see in
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

1773) Tor's logs:
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

1774) </p>
1775) 
1776) <ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1777)     <li>"err": something bad just happened, and we can't recover. Tor will
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

1778)     exit.</li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1779)     <li>"warn": something bad happened, but we're still running. The bad
1780)     thing might be a bug in the code, some other Tor process doing something
1781)     unexpected, etc. The operator should examine the message and try to
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

1782)     correct the problem.</li>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

1783)     <li>"notice": something the operator will want to know about.</li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1784)     <li>"info": something happened (maybe bad, maybe ok), but there's
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

1785)     nothing you need to (or can) do about it.</li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1786)     <li>"debug": for everything louder than info. It is quite loud indeed.</li>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

1787) </ul>
1788) 
1789) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1790) Alas, some of the warn messages are hard for ordinary users to correct -- the
1791) developers are slowly making progress at making Tor automatically react
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

1792) correctly for each situation.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

1793) </p>
1794) 
1795) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1796) We recommend running at the default, which is "notice". You will hear about
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

1797) important things, and you won't hear about unimportant things.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

1798) </p>
1799) 
1800) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1801) Tor relays in particular should avoid logging at info or debug in normal
1802) operation, since they might end up recording sensitive information in
1803) their logs.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

1804) </p>
1805) 
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

1806) <hr>
1807) 
Roger Dingledine add back the faq entries th...

Roger Dingledine authored 13 years ago

1808) <a id="DoesntWork"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1809) <h3><a class="anchor" href="#DoesntWork">I installed Tor but it's not
1810) working.</a></h3>
Roger Dingledine add back the faq entries th...

Roger Dingledine authored 13 years ago

1811) 
1812) <p>
Roger Dingledine fix grammar in faq entry

Roger Dingledine authored 12 years ago

1813) Once you've got the Tor bundle up and running, the first question to
1814) ask is whether your Tor client is able to establish a circuit.
Roger Dingledine add back the faq entries th...

Roger Dingledine authored 13 years ago

1815) </p>
1816) 
1817) <p>If Tor can establish a circuit, the onion icon in
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1818) Vidalia will turn green (and if you're running Tor Browser Bundle, it
1819) will
1820) automatically launch a browser for you). You can also check in the
1821) Vidalia
Roger Dingledine add back the faq entries th...

Roger Dingledine authored 13 years ago

1822) Control Panel to make sure it says "Connected to the Tor
1823) network!" under Status. For those not using Vidalia, check your <a
Roger Dingledine revise #Logs entry. fix sev...

Roger Dingledine authored 13 years ago

1824) href="#Logs">Tor logs</a> for
Roger Dingledine add back the faq entries th...

Roger Dingledine authored 13 years ago

1825) a line saying that Tor "has successfully opened a circuit. Looks like
1826) client functionality is working."
1827) </p>
1828) 
1829) <p>
1830) If Tor can't establish a circuit, here are some hints:
1831) </p>
1832) 
1833) <ol>
1834) <li>Are you sure Tor is running? If you're using Vidalia, you may have
1835) to click on the onion and select "Start" to launch Tor.</li>
1836) <li>Check your system clock. If it's more than a few hours off, Tor will
Andrew Lewman attempt to address ticket 4...

Andrew Lewman authored 12 years ago

1837) refuse to build circuits. For Microsoft Windows users, synchronize your
1838) clock under the clock -&gt; Internet time tab. In addition, correct the
Roger Dingledine fix grammar in faq entry

Roger Dingledine authored 12 years ago

1839) day and date under the 'Date &amp; Time' Tab. Also make sure your time
1840) zone is correct.</li>
Andrew Lewman attempt to address ticket 4...

Andrew Lewman authored 12 years ago

1841) <li>Is your Internet connection <a href="#FirewallPorts">firewalled
1842) by port</a>, or do you normally need to use a <a
Matt Pagan Add 1 FAQ entry and cleaned...

Matt Pagan authored 10 years ago

1843) href="<#NeedToUseAProxy">proxy</a>?
Roger Dingledine add back the faq entries th...

Roger Dingledine authored 13 years ago

1844) </li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1845) <li>Are you running programs like Norton Internet Security or SELinux
1846) that
Roger Dingledine add back the faq entries th...

Roger Dingledine authored 13 years ago

1847) block certain connections, even though you don't realize they do? They
1848) could be preventing Tor from making network connections.</li>
1849) <li>Are you in China, or behind a restrictive corporate network firewall
1850) that blocks the public Tor relays? If so, you should learn about <a
Roger Dingledine and play the "where did tha...

Roger Dingledine authored 13 years ago

1851) href="<page docs/bridges>">Tor bridges</a>.</li>
Roger Dingledine revise #Logs entry. fix sev...

Roger Dingledine authored 13 years ago

1852) <li>Check your <a href="#Logs">Tor logs</a>. Do they give you any hints
1853) about what's going wrong?</li>
Roger Dingledine add back the faq entries th...

Roger Dingledine authored 13 years ago

1854) </ol>
1855) 
1856) <hr />
1857) 
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

1858) <a id="TorCrash"></a>
1859) <h3><a class="anchor" href="#TorCrash">My Tor keeps crashing.</a></h3>
1860) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1861)  We want to hear from you! There are supposed to be zero crash bugs in Tor.
1862)  This FAQ entry describes the best way for you to be helpful to us. But even
1863)  if you can't work out all the details, we still want to hear about it, so
1864)  we can help you track it down.
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

1865) </p>
1866) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1867) First, make sure you're using the latest version of Tor (either the latest
1868) stable or the latest development version).
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

1869) </p>
1870) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1871) Second, make sure your version of libevent is new enough. We recommend at
1872) least libevent 1.3a.
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

1873) </p>
1874) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1875) Third, see if there's already an entry for your bug in the <a
1876) href="https://bugs.torproject.org/">Tor bugtracker</a>. If so,
1877) check if there are any new details that you can add.
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

1878) </p>
1879) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1880) Fourth, is the crash repeatable? Can you cause the crash? Can
1881) you isolate some of the circumstances or config options that
1882) make it happen? How quickly or often does the bug show up?
1883) Can you check if it happens with other versions of Tor, for
1884) example the latest stable release?
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

1885) </p>
1886) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1887) Fifth, what sort of crash do you get?
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

1888) </p>
1889) <ul>
1890) <li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1891) Does your Tor log include an "assert failure"? If so, please
1892) tell us that line, since it helps us figure out what's going on.
1893) Tell us the previous couple of log messages as well, especially
1894) if they seem important.
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

1895) </li>
1896) <li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1897) If it says "Segmentation fault - core dumped" then you need to
1898) do a bit more to track it down. Look for a file like "core" or
1899) "tor.core" or "core.12345" in your current directory, or in your
1900) Data Directory. If it's there, run "gdb tor core" and then "bt",
1901) and include the output. If you can't find a core, run "ulimit -c
1902) unlimited", restart Tor, and try to make it crash again. (This core
1903) thing will only work on Unix -- alas, tracking down bugs on Windows
1904) is harder. If you're on Windows, can you get somebody to duplicate
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

1905) your bug on Unix?)
1906) </li>
1907) <li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1908) If Tor simply vanishes mysteriously, it probably is a segmentation
1909) fault but you're running Tor in the background (as a daemon) so you
1910) won't notice. Go look at the end of your log file, and look for a
1911) core file as above. If you don't find any good hints, you should
1912) consider running Tor in the foreground (from a shell) so you can
1913) see how it dies. Warning: if you switch to running Tor in the foreground,
1914) you might start using a different torrc file, with a different default
1915) Data Directory; see the <a href="#UpgradeOrMove">relay-upgrade FAQ entry</a>
1916) for details.
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

1917) </li>
1918) <li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1919) If it's still vanishing mysteriously, perhaps something else is killing it?
1920) Do you have resource limits (ulimits) configured that kill off processes
1921) sometimes? (This is especially common on OpenBSD.) On Linux, try running
1922) "dmesg" to see if the out-of-memory killer removed your process. (Tor will
1923) exit cleanly if it notices that it's run out of memory, but in some cases
1924) it might not have time to notice.) In very rare circumstances, hardware
1925) problems could also be the culprit.
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

1926) </li>
1927) </ul>
1928) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1929) Sixth, if the above ideas don't point out the bug, consider increasing your
1930) log level to "loglevel debug". You can look at the log-configuration FAQ
1931) entry for instructions on what to put in your torrc file. If it usually
1932) takes a long time for the crash to show up, you will want to reserve a whole
1933) lot of disk space for the debug log. Alternatively, you could just send
1934) debug-level logs to the screen (it's called "stdout" in the torrc), and then
1935) when it crashes you'll see the last couple of log lines it had printed.
1936) (Note that running with verbose logging like this will slow Tor down
1937) considerably, and note also that it's generally not a good idea security-wise
1938) to keep logs like this sitting around.)
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

1939) </p>
1940) 
1941) <hr />
1942) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1943)     <a id="ChooseEntryExit"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1944)     <h3><a class="anchor" href="#ChooseEntryExit">Can I control which
1945) nodes (or country) are used for entry/exit?</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

1946) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1947)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

1948)     Yes. You can set preferred entry and exit nodes as well as
1949)     inform Tor which nodes you do not want to use.
Roger Dingledine change links to the #torrc...

Roger Dingledine authored 13 years ago

1950)     The following options can be added to your config file <a
1951)     href="#torrc">"torrc"</a> or specified on the command line:
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1952)     </p>
1953)     <dl>
1954)       <dt><tt>EntryNodes $fingerprint,$fingerprint,...</tt></dt>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1955)         <dd>A list of preferred nodes to use for the first hop in the
1956) circuit, if possible.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1957)         </dd>
1958)       <dt><tt>ExitNodes $fingerprint,$fingerprint,...</tt></dt>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1959)         <dd>A list of preferred nodes to use for the last hop in the
1960) circuit, if possible.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1961)         </dd>
1962)       <dt><tt>ExcludeNodes $fingerprint,$fingerprint,...</tt></dt>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

1963)         <dd>A list of nodes to never use when building a circuit.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1964)         </dd>
1965)       <dt><tt>ExcludeExitNodes $fingerprint,$fingerprint,...</tt></dt>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

1966)         <dd>A list of nodes to never use when picking an exit.
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1967)             Nodes listed in <tt>ExcludeNodes</tt> are automatically in
1968) this list.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1969)         </dd>
1970)     </dl>
1971)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

1972)     <em>We recommend you do not use these</em>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1973)     &mdash; they are intended for testing and may disappear in future
1974) versions.
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

1975)     You get the best security that Tor can provide when you leave the
1976)     route selection to Tor; overriding the entry / exit nodes can mess
1977)     up your anonymity in ways we don't understand.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1978)     </p>
1979)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

1980)     Note also that not every circuit is used to deliver traffic outside of
1981)     the Tor network. It is normal to see non-exit circuits (such as those
1982)     used to connect to hidden services, those that do directory fetches,
1983)     those used for relay reachability self-tests, and so on) that end at
1984)     a non-exit node. To keep a node from being used entirely, see
1985)     <tt>ExcludeNodes</tt> and <tt>StrictNodes</tt> in the
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

1986)     <a href="<page docs/tor-manual>">manual</a>.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1987)     </p>
1988)     <p>
Andrew Lewman link to the a list of iso 3...

Andrew Lewman authored 12 years ago

1989)     Instead of <tt>$fingerprint</tt> you can also specify a <a
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1990) 
1991) href="https://secure.wikimedia.org/wikipedia/en/wiki/ISO_3166-1_alpha-2"
1992) >2
Moritz Bartl replaced outdated StrictExi...

Moritz Bartl authored 11 years ago

1993)     letter ISO3166 country code</a> in curly braces (for example <tt>{de}</tt>),
Sebastian Hahn Remove nicknames from websi...

Sebastian Hahn authored 9 years ago

1994)     or an ip address pattern (for example 255.254.0.0/8).
1995)     Make sure there are no spaces between the commas and the
Andrew Lewman link to the a list of iso 3...

Andrew Lewman authored 12 years ago

1996)     list items.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

1997)     </p>
1998)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

1999)     If you want to access a service directly through Tor's Socks
2000) interface
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2001)     (eg. using ssh via connect.c), another option is to set up an
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2002)     internal mapping in your configuration file using
2003) <tt>MapAddress</tt>.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2004)     See the manual page for details.
2005)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2006) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

2007)     <hr>
Roger Dingledine add back the faq entries th...

Roger Dingledine authored 13 years ago

2008) 
Roger Dingledine import, and correct the fal...

Roger Dingledine authored 13 years ago

2009) <a id="FirewallPorts"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2010) <h3><a class="anchor" href="#FirewallPorts">My firewall only allows a
2011) few outgoing ports.</a></h3>
Roger Dingledine import, and correct the fal...

Roger Dingledine authored 13 years ago

2012) 
2013) <p>
2014) If your firewall works by blocking ports, then you can tell Tor to only
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2015) use the ports that your firewall permits by adding "FascistFirewall 1"
2016) to
Roger Dingledine change links to the #torrc...

Roger Dingledine authored 13 years ago

2017) your <a href="<page docs/faq>#torrc">torrc
Roger Dingledine import, and correct the fal...

Roger Dingledine authored 13 years ago

2018) configuration file</a>, or by clicking "My firewall only lets me connect
2019) to certain ports" in Vidalia's Network Settings window.
2020) </p>
2021) 
2022) <p>
2023) By default, when you set this Tor assumes that your firewall allows only
2024) port 80 and port 443 (HTTP and HTTPS respectively). You can select a
2025) different set of ports with the FirewallPorts torrc option.
2026) </p>
2027) 
2028) <p>
2029) If you want to be more fine-grained with your controls, you can also
2030) use the ReachableAddresses config options, e.g.:
2031) </p>
2032) 
2033) <pre>
2034)   ReachableDirAddresses *:80
2035)   ReachableORAddresses *:443
2036) </pre>
2037) 
2038) <hr>
Roger Dingledine add back the faq entries th...

Roger Dingledine authored 13 years ago

2039) 
Matt Pagan Add 1 FAQ entry and cleaned...

Matt Pagan authored 10 years ago

2040)     <a id="DefaultExitPorts"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2041)     <h3><a class="anchor" href="#DefaultExitPorts">Is there a list of default exit
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2042)     ports?</a></h3>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

2043)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2044) The default open ports are listed below but keep in mind that, any port or
2045) ports can be opened by the relay operator by configuring it in torrc or
2046) modifying the source code. But the default according to src/or/policies.c
2047) from the source code release tor-0.2.4.16-rc is:
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

2048)     </p>
2049)     <pre>
2050)   reject 0.0.0.0/8
2051)   reject 169.254.0.0/16
2052)   reject 127.0.0.0/8
2053)   reject 192.168.0.0/16
2054)   reject 10.0.0.0/8
2055)   reject 172.16.0.0/12
2056)   reject *:25
2057)   reject *:119
2058)   reject *:135-139
2059)   reject *:445
2060)   reject *:563
2061)   reject *:1214
2062)   reject *:4661-4666
2063)   reject *:6346-6429
2064)   reject *:6699
2065)   reject *:6881-6999
2066)   accept *:*
2067)     </pre>
2068)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2069)     A relay will block access to its own IP address, as well local network
2070)     IP addresses. A relay always blocks itself by default. This prevents
2071)     Tor users from accidentally accessing any of the exit operator's local
2072)     services.
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2073)     </p>
2074) 
2075)     <hr>
2076) 
Matt Pagan Fixed a couple typos

Matt Pagan authored 10 years ago

2077)     <a id="WarningsAboutSOCKSandDNSInformationLeaks"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2078)     <h3><a class="anchor" href="#WarningsAboutSOCKSandDNSInformationLeaks">I
2079)     keep seeing these warnings about SOCKS and DNS information leaks.
Matt Pagan Fixed a couple typos

Matt Pagan authored 10 years ago

2080)     Should I worry?</a></h3>
2081)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2082)     The warning is:
Matt Pagan Fixed a couple typos

Matt Pagan authored 10 years ago

2083)     </p>
2084)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2085)     Your application (using socks5 on port %d) is giving Tor only an IP
2086)     address. Applications that do DNS resolves themselves may leak
2087)     information. Consider using Socks4A (e.g. via Polipo or socat) instead.
Matt Pagan Fixed a couple typos

Matt Pagan authored 10 years ago

2088)     </p>
2089)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2090)     If you are running Tor to get anonymity, and you are worried about an
2091)     attacker who is even slightly clever, then yes, you should worry. Here's why.
Matt Pagan Fixed a couple typos

Matt Pagan authored 10 years ago

2092)     </p>
2093)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2094)     <b>The Problem.</b> When your applications connect to servers on the
2095)     Internet, they need to resolve hostnames that you can read (like
2096)     www.torproject.org) into IP addresses that the Internet can use (like
2097)     209.237.230.66). To do this, your application sends a request to a DNS
2098)     server, telling it the hostname it wants to resolve. The DNS server
2099)     replies by telling your application the IP address.
Matt Pagan Fixed a couple typos

Matt Pagan authored 10 years ago

2100)     </p>
2101)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2102)     Clearly, this is a bad idea if you plan to connect to the remote host
2103)     anonymously: when your application sends the request to the DNS server,
2104)     the DNS server (and anybody else who might be watching) can see what
2105)     hostname you are asking for. Even if your application then uses Tor to
2106)     connect to the IP anonymously, it will be pretty obvious that the user
2107)     making the anonymous connection is probably the same person who made
2108)     the DNS request.
Matt Pagan Fixed a couple typos

Matt Pagan authored 10 years ago

2109)     </p>
2110)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2111)     <b>Where SOCKS comes in.</b> Your application uses the SOCKS protocol
2112)     to connect to your local Tor client. There are 3 versions of SOCKS you
2113)     are likely to run into: SOCKS 4 (which only uses IP addresses), SOCKS 5
2114)     (which usually uses IP addresses in practice), and SOCKS 4a (which uses
2115)     hostnames).
Matt Pagan Fixed a couple typos

Matt Pagan authored 10 years ago

2116)     </p>
2117)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2118)     When your application uses SOCKS 4 or SOCKS 5 to give Tor an IP address,
2119)     Tor guesses that it 'probably' got the IP address non-anonymously from a
2120)     DNS server. That's why it gives you a warning message: you probably aren't
2121)     as anonymous as you think.
Matt Pagan Fixed a couple typos

Matt Pagan authored 10 years ago

2122)     </p>
2123)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2124)     <b>So what can I do?</b> We describe a few solutions below.
Matt Pagan Fixed a couple typos

Matt Pagan authored 10 years ago

2125)     </p>
2126)     <ul>
2127)     <li>If your application speaks SOCKS 4a, use it. </li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2128)     <li>If you only need one or two hosts, or you are good at programming,
2129)     you may be able to get a socks-based port-forwarder like socat to work
2130)     for you; see <a
2131)     href="https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO">the
Matt Pagan Fixed a couple typos

Matt Pagan authored 10 years ago

2132)     Torify HOWTO</a> for examples. </li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2133)     <li>Tor ships with a program called tor-resolve that can use the Tor
2134)     network to look up hostnames remotely; if you resolve hostnames to IPs
2135)     with tor-resolve, then pass the IPs to your applications, you'll be fine.
Matt Pagan Fixed a couple typos

Matt Pagan authored 10 years ago

2136)     (Tor will still give the warning, but now you know what it means.) </li>
2137) <!-- I'm not sure if this project is still maintained or not
2138) 
2139) <li>You can use TorDNS as a local DNS server to rectify the DNS leakage. See the Torify HOWTO for info on how to run particular applications anonymously. </li>
2140) !-->
2141)     </ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2142)     <p>If you think that you applied one of the solutions properly but still
2143)     experience DNS leaks please verify there is no third-party application
2144)     using DNS independently of Tor. Please see <a
2145)     href="#AmITotallyAnonymous">the FAQ entry on whether you're really
2146)     absolutely anonymous using Tor</a> for some examples.
Matt Pagan Fixed a couple typos

Matt Pagan authored 10 years ago

2147)     </p>
2148) 
2149)     <hr>
2150) 
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2151)     <a id="SocksAndDNS"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2152)     <h3><a class="anchor" href="#SocksAndDNS">How do I check if my application that uses
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2153)     SOCKS is leaking DNS requests?</a></h3>
2154) 
2155)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2156)     These are two steps you need to take here. The first is to make sure
2157)     that it's using the correct variant of the SOCKS protocol, and the
2158)     second is to make sure that there aren't other leaks.
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2159)     </p>
2160) 
2161)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2162)     Step one: add "TestSocks 1" to your torrc file, and then watch your
2163)     logs as you use your application. Tor will then log, for each SOCKS
2164)     connection, whether it was using a 'good' variant or a 'bad' one.
2165)     (If you want to automatically disable all 'bad' variants, set
2166)     "SafeSocks 1" in your <a href="#torrc">torrc</a> file.)
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2167)     </p>
2168) 
2169)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2170)     Step two: even if your application is using the correct variant of
2171)     the SOCKS protocol, there is still a risk that it could be leaking
2172)     DNS queries. This problem happens in Firefox extensions that resolve
2173)     the destination hostname themselves, for example to show you its IP
2174)     address, what country it's in, etc. These applications may use a safe
2175)     SOCKS variant when actually making connections, but they still do DNS
2176)     resolves locally. If you suspect your application might behave like
2177)     this, you should use a network sniffer like <a
2178)     href="https://www.wireshark.org/">Wireshark</a> and look for
2179)     suspicious outbound DNS requests. I'm afraid the details of how to look
2180)     for these problems are beyond the scope of a FAQ entry though -- find
2181)     a friend to help if you have problems.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

2182)     </p>
2183) 
2184)     <hr>
2185) 
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

2186)     <a id="RunningATorRelay"></a>
2187)     <h2><a class="anchor">Running a Tor relay:</a></h2>
2188) 
Matt Pagan Cleanup. Added two FAQ entr...

Matt Pagan authored 10 years ago

2189)     <a id="HowDoIDecide"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2190)     <h3><a class="anchor" href="#HowDoIDecide">How do I decide if I should
Matt Pagan Cleanup. Added two FAQ entr...

Matt Pagan authored 10 years ago

2191)     run a relay?</a></h3>
2192)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2193)     We're looking for people with reasonably reliable Internet connections,
Roger Dingledine suggest 250 kilobytes/s as...

Roger Dingledine authored 9 years ago

2194)     that have at least 250 kilobytes/second each way. If that's you, please
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2195)     consider <a href="https://www.torproject.org/docs/tor-relay-debian">helping
2196)     out</a>.
Matt Pagan Cleanup. Added two FAQ entr...

Matt Pagan authored 10 years ago

2197)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

2198) 
Matt Pagan Cleanup. Added two FAQ entr...

Matt Pagan authored 10 years ago

2199)     <hr>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

2200) 
Matt Pagan Cleanup. Added two FAQ entr...

Matt Pagan authored 10 years ago

2201)     <a id="WhyIsntMyRelayBeingUsedMore"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2202)     <h3><a class="anchor" href="#WhyIsntMyRelayBeingUsedMore">Why isn't my
Matt Pagan Cleanup. Added two FAQ entr...

Matt Pagan authored 10 years ago

2203)     relay being used more?</a></h3>
2204)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2205)     If your relay is relatively new then give it time. Tor decides which
2206)     relays it uses heuristically based on reports from Bandwidth
2207)     Authorities. These authorities take measurements of your relay's
2208)     capacity and, over time, directs more traffic there until it reaches
2209)     an optimal load. The lifecycle of a new relay is explained in more
Matt Pagan Cleanup. Added two FAQ entr...

Matt Pagan authored 10 years ago

2210)     depth in <a href="https://blog.torproject.org/blog/lifecycle-of-a-new-relay">
2211)     this blog post</a>.
2212)     </p>
2213)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2214)     If you've been running a relay for a while and still having issues
Matt Pagan Cleanup. Added two FAQ entr...

Matt Pagan authored 10 years ago

2215)     then try asking on the <a href=
2216)     "https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays/">
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2217)     tor-relays list</a>.
Matt Pagan Cleanup. Added two FAQ entr...

Matt Pagan authored 10 years ago

2218)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

2219) 
Matt Pagan Cleanup. Added two FAQ entr...

Matt Pagan authored 10 years ago

2220)     <hr>
2221) 
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2222)     <a id="IDontHaveAStaticIP"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2223)     <h3><a class="anchor" href="#IDontHaveAStaticIP">I don't have a static
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2224)     IP.</a></h3>
2225) 
2226)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2227)     Tor can handle relays with dynamic IP addresses just fine. Just leave
2228)     the "Address" line in your torrc blank, and Tor will guess.
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2229)     </p>
2230) 
2231)     <hr>
2232) 
2233)     <a id="PortscannedMore"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2234)     <h3><a class="anchor" href="#PortscannedMore">Why do I get portscanned
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2235)     more often when I run a Tor relay?</a></h3>
2236) 
2237)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2238)     If you allow exit connections, some services that people connect to
2239)     from your relay will connect back to collect more information about you.
2240)     For example, some IRC servers connect back to your identd port to record
2241)     which user made the connection. (This doesn't really work for them,
2242)     because Tor doesn't know this information, but they try anyway.) Also,
2243)     users exiting from you might attract the attention of other users on the
2244)     IRC server, website, etc. who want to know more about the host they're
2245)     relaying through.
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2246)     </p>
2247)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2248)     Another reason is that groups who scan for open proxies on the Internet
2249)     have learned that sometimes Tor relays expose their socks port to the
2250)     world. We recommend that you bind your socksport to local networks only.
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2251)     </p>
2252)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2253)     In any case, you need to keep up to date with your security. See this <a
2254)     href="https://trac.torproject.org/projects/tor/wiki/doc/OperationalSecurity">article
2255)     on operational security for Tor relays</a> for more suggestions.
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2256)     </p>
2257) 
2258)     <hr>
2259) 
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

2260)     <a id="HighCapacityConnection"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2261)     <h3><a class="anchor" href="#HighCapacityConnection">How can I get Tor to fully
Matt Pagan Added a missing anchor; Add...

Matt Pagan authored 10 years ago

2262)     make use of my high capacity connection?</a></h3>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

2263) 
Matt Pagan Added a missing anchor; Add...

Matt Pagan authored 10 years ago

2264)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2265)     See <a href="http://archives.seul.org/or/relays/Aug-2010/msg00034.html">this
Matt Pagan Added a missing anchor; Add...

Matt Pagan authored 10 years ago

2266)     tor-relays thread</a>.
2267)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

2268) 
2269)     <hr>
2270) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2271)     <a id="RelayFlexible"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2272)     <h3><a class="anchor" href="#RelayFlexible">How stable does my relay
2273) need to be?</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2274) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2275)     <p>
2276)     We aim to make setting up a Tor relay easy and convenient:
2277)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2278) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2279)     <ul>
2280)     <li>Tor has built-in support for <a
Matt Pagan Updated a FAQ link.

Matt Pagan authored 9 years ago

2281)     href="#BandwidthShaping">
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2282)     rate limiting</a>. Further, if you have a fast
2283)     link but want to limit the number of bytes per
2284)     day (or week or month) that you donate, check out the <a
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2285) 
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

2286) href="#LimitTotalBandwidth">
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2287) hibernation
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2288)     feature</a>.
2289)     </li>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2290)     <li>Each Tor relay has an <a href="#ExitPolicies">exit policy</a>
2291) that
2292)     specifies what sort of outbound connections are allowed or refused
2293) from
2294)     that relay. If you are uncomfortable allowing people to exit from
2295) your
2296)     relay, you can set it up to only allow connections to other Tor
2297) relays.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2298)     </li>
2299)     <li>It's fine if the relay goes offline sometimes. The directories
2300)     notice this quickly and stop advertising the relay. Just try to make
2301)     sure it's not too often, since connections using the relay when it
2302)     disconnects will break.
2303)     </li>
2304)     <li>We can handle relays with dynamic IPs just fine &mdash; simply
2305)     leave the Address config option blank, and Tor will try to guess.
2306)     </li>
2307)     <li>If your relay is behind a NAT and it doesn't know its public
2308)     IP (e.g. it has an IP of 192.168.x.y), you'll need to set up port
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2309)     forwarding. Forwarding TCP connections is system dependent but
Matt Pagan Add 1 FAQ entry and cleaned...

Matt Pagan authored 10 years ago

2310)     <a href="#BehindANAT">this FAQ entry</a>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2311)     offers some examples on how to do this.
2312)     </li>
2313)     <li>Your relay will passively estimate and advertise its recent
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2314)     bandwidth capacity, so high-bandwidth relays will attract more users
2315) than
2316)     low-bandwidth ones. Therefore having low-bandwidth relays is useful
2317) too.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2318)     </li>
2319)     </ul>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2320) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

2321)     <hr>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

2322) 
Lunar Add a FAQ entry about outgo...

Lunar authored 9 years ago

2323)     <a id="OutgoingFirewall"></a>
Lunar Remove duplication about ou...

Lunar authored 9 years ago

2324)     <h3><a class="anchor" href="#OutgoingFirewall">How should I configure
Matt Pagan Reworded the faq's no filte...

Matt Pagan authored 9 years ago

2325)     the outgoing filters on my relay?</a></h3>
Lunar Add a FAQ entry about outgo...

Lunar authored 9 years ago

2326) 
2327)     <p>
Matt Pagan Reworded the faq's no filte...

Matt Pagan authored 9 years ago

2328)     All <em>outgoing</em> connections must be allowed, so that each relay can 
2329)     communicate with every other relay.
Lunar Add a FAQ entry about outgo...

Lunar authored 9 years ago

2330)     </p>
2331)     <p>
Matt Pagan Reworded the faq's no filte...

Matt Pagan authored 9 years ago

2332)     In many jurisdictions, Tor relay operators are legally protected by the 
2333)     same <em>common carrier</em> regulations that prevent internet service 
2334)     providers from being held liable for third-party content that passes 
2335)     through their network. Exit relays that filter some traffic would 
2336)     likely forfeit those protections. 
Lunar Add a FAQ entry about outgo...

Lunar authored 9 years ago

2337)     </p>
2338)     <p>
Matt Pagan Reworded the faq's no filte...

Matt Pagan authored 9 years ago

2339)     Tor promotes free network access without interference. 
2340)     Exit relays must not filter the traffic 
2341)     that passes through them to the internet. 
2342)     Exit relays found to be filtering traffic will get the <a 
Lunar Add a FAQ entry about outgo...

Lunar authored 9 years ago

2343)     href="#WhatIsTheBadExitFlag">BadExit</a> flag once detected.
2344)     </p>
2345) 
2346)     <hr>
2347) 
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2348)     <a id="BandwidthShaping"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2349)     <h3><a class="anchor" href="#BandwidthShaping">What bandwidth shaping
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2350)     options are available to Tor relays?</a></h3>
2351) 
2352)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2353)     There are two options you can add to your torrc file:
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2354)     </p>
2355)     <ul>
2356)     <li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2357)     BandwidthRate is the maximum long-term bandwidth allowed (bytes per
Roger Dingledine raise the example bandwidth...

Roger Dingledine authored 9 years ago

2358)     second). For example, you might want to choose "BandwidthRate 10 MBytes"
2359)     for 10 megabytes per second (a fast connection), or "BandwidthRate 500
2360)     KBytes" for 500 kilobytes per second (a pretty good cable connection).
2361)     The minimum BandwidthRate setting is 20 kilobytes per second.
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2362)     </li>
2363)     <li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2364)     BandwidthBurst is a pool of bytes used to fulfill requests during
2365)     short periods of traffic above BandwidthRate but still keeps the
2366)     average over a long period to BandwidthRate. A low Rate but a high
2367)     Burst enforces a long-term average while still allowing more traffic
2368)     during peak times if the average hasn't been reached lately. For example,
Roger Dingledine raise the example bandwidth...

Roger Dingledine authored 9 years ago

2369)     if you choose "BandwidthBurst 500 KBytes" and also use that for your
2370)     BandwidthRate, then you will never use more than 500 kilobytes per second;
2371)     but if you choose a higher BandwidthBurst (like 5 MBytes), it will allow
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2372)     more bytes through until the pool is empty.
2373)     </li>
2374)     </ul>
2375)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2376)     If you have an asymmetric connection (upload less than download) such
2377)     as a cable modem, you should set BandwidthRate to less than your smaller
2378)     bandwidth (Usually that's the upload bandwidth). (Otherwise, you could
2379)     drop many packets during periods of maximum bandwidth usage -- you may
2380)     need to experiment with which values make your connection comfortable.)
2381)     Then set BandwidthBurst to the same as BandwidthRate.
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2382)     </p>
2383)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2384)     Linux-based Tor nodes have another option at their disposal: they can
2385)     prioritize Tor traffic below other traffic on their machine, so that
2386)     their own personal traffic is not impacted by Tor load. A <a
Roger Dingledine raise the example bandwidth...

Roger Dingledine authored 9 years ago

2387)     href="https://gitweb.torproject.org/tor.git/blob/HEAD:/contrib/operator-tools/linux-tor-prio.sh">script
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2388)     to do this</a> can be found in the Tor source distribution's contrib
2389)     directory.
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2390)     </p>
2391)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2392)     Additionally, there are hibernation options where you can tell Tor to
2393)     only serve a certain amount of bandwidth per time period (such as 100
2394)     GB per month). These are covered in the <a
2395)     href="#LimitTotalBandwidth">hibernation entry</a> below.
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2396)     </p>
2397)     <p>
Roger Dingledine raise the example bandwidth...

Roger Dingledine authored 9 years ago

2398)     Note that BandwidthRate and BandwidthBurst are in <b>Bytes</b>, not Bits.
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2399)     </p>
2400) 
2401)     <hr>
2402) 
2403)     <a id="LimitTotalBandwidth"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2404)     <h3><a class="anchor" href="#LimitTotalBandwidth">How can I limit the
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2405)     total amount of bandwidth used by my Tor relay?</a></h3>
2406)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2407)     The accounting options in the torrc file allow you to specify the maximum
2408)     amount of bytes your relay uses for a time period.
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2409)     </p>
2410)     <pre>
2411)     AccountingStart day week month [day] HH:MM
2412)     </pre>
2413)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2414)     This specifies when the accounting should reset. For instance, to setup
2415)     a total amount of bytes served for a week (that resets every Wednesday
2416)     at 10:00am), you would use:
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2417)     </p>
2418)     <pre>
2419)     AccountingStart week 3 10:00
Roger Dingledine fix a confusing line in the...

Roger Dingledine authored 9 years ago

2420)     AccountingMax 500 GBytes
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2421)     </pre>
2422)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2423)     This specifies the maximum amount of data your relay will send during an
2424)     accounting period, and the maximum amount of data your relay will receive
2425)     during an account period. When the accounting period resets (from
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2426)     AccountingStart), then the counters for AccountingMax are reset to 0.
2427)     </p>
2428)     <p>
Roger Dingledine fix a confusing line in the...

Roger Dingledine authored 9 years ago

2429)     Example: Let's say you want to allow 50 GB of traffic every day in each
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2430)     direction and the accounting should reset at noon each day:
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2431)     </p>
2432)     <pre>
2433)     AccountingStart day 12:00
Roger Dingledine fix a confusing line in the...

Roger Dingledine authored 9 years ago

2434)     AccountingMax 50 GBytes
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2435)     </pre>
2436)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2437)     Note that your relay won't wake up exactly at the beginning of each
2438)     accounting period. It will keep track of how quickly it used its
2439)     quota in the last period, and choose a random point in the new interval
2440)     to wake up. This way we avoid having hundreds of relays working at the
2441)     beginning of each month but none still up by the end.
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2442)     </p>
2443)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2444)     If you have only a small amount of bandwidth to donate compared to your
2445)     connection speed, we recommend you use daily accounting, so you don't
2446)     end up using your entire monthly quota in the first day. Just divide
2447)     your monthly amount by 30. You might also consider rate limiting to
2448)     spread your usefulness over more of the day: if you want to offer X GB
Roger Dingledine raise the example bandwidth...

Roger Dingledine authored 9 years ago

2449)     in each direction, you could set your RelayBandwidthRate to 20*X KBytes.
Roger Dingledine fix a confusing line in the...

Roger Dingledine authored 9 years ago

2450)     For example,
Roger Dingledine raise the example bandwidth...

Roger Dingledine authored 9 years ago

2451)     if you have 50 GB to offer each way, you might set your RelayBandwidthRate to
Roger Dingledine fix a confusing line in the...

Roger Dingledine authored 9 years ago

2452)     1000 KBytes: this way your relay will always be useful for at least half of
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2453)     each day.
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2454)     </p>
Roger Dingledine raise the example bandwidth...

Roger Dingledine authored 9 years ago

2455)     <pre>
2456)     AccountingStart day 0:00
2457)     AccountingMax 50 GBytes
2458)     RelayBandwidthRate 1000 KBytes
2459)     RelayBandwidthBurst 5000 KBytes # allow higher bursts but maintain average
2460)     </pre>
Matt Pagan Added two new FAQ entries.

Matt Pagan authored 10 years ago

2461) 
2462)     <hr>
2463) 
2464)     <a id="RelayWritesMoreThanItReads"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2465)     <h3><a class="anchor" href="#RelayWritesMoreThanItReads">Why does my relay
Matt Pagan Cleanup.

Matt Pagan authored 10 years ago

2466)     write more bytes onto the network than it reads?</a></h3>
Matt Pagan Added two new FAQ entries.

Matt Pagan authored 10 years ago

2467) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2468)     <p>You're right, for the most part a byte into your Tor relay means a
Matt Pagan Added two new FAQ entries.

Matt Pagan authored 10 years ago

2469)     byte out, and vice versa. But there are a few exceptions:</p>
2470) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2471)     <p>If you open your DirPort, then Tor clients will ask you for a copy of
2472)     the directory. The request they make (an HTTP GET) is quite small, and the
2473)     response is sometimes quite large. This probably accounts for most of the
Matt Pagan Added two new FAQ entries.

Matt Pagan authored 10 years ago

2474)     difference between your "write" byte count and your "read" byte count.</p>
2475) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2476)     <p>Another minor exception shows up when you operate as an exit node, and
2477)     you read a few bytes from an exit connection (for example, an instant
2478)     messaging or ssh connection) and wrap it up into an entire 512 byte cell
Matt Pagan Added two new FAQ entries.

Matt Pagan authored 10 years ago

2479)     for transport through the Tor network.</p>
2480) 
2481)     <hr>
2482) 
2483)     <a id="Hibernation"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2484)     <h3><a class="anchor" href="#Hibernation">Why can I not browse anymore
Matt Pagan Cleanup.

Matt Pagan authored 10 years ago

2485)     after limiting bandwidth on my Tor relay?</a></h3>
Matt Pagan Added two new FAQ entries.

Matt Pagan authored 10 years ago

2486) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2487)     <p>The parameters assigned in the <a
2488)     href="#LimitTotalBandwidth">AccountingMax</a> and <a
2489)     href="#BandwidthShaping">BandwidthRate</a> apply to both client and
2490)     relay functions of the Tor process. Thus you may find that you are unable
2491)     to browse as soon as your Tor goes into hibernation, signaled by this
Matt Pagan Added two new FAQ entries.

Matt Pagan authored 10 years ago

2492)     entry in the log:</p>
2493) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2494)     <pre>Bandwidth soft limit reached; commencing hibernation. No new
Matt Pagan Added two new FAQ entries.

Matt Pagan authored 10 years ago

2495)     connections will be accepted</pre>
2496) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2497)     <p>The solution is to run two Tor processes - one relay and one client,
2498)     each with its own config. One way to do this (if you are starting from a
Matt Pagan Added two new FAQ entries.

Matt Pagan authored 10 years ago

2499)     working relay setup) is as follows:</p>
2500) 
2501)     <ul>
2502)         <li>In the relay Tor torrc file, simply set the SocksPort to 0.</li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2503)         <li>Create a new client torrc file from the torrc.sample and ensure
2504)         it uses a different log file from the relay. One naming convention
Matt Pagan Added two new FAQ entries.

Matt Pagan authored 10 years ago

2505)         may be torrc.client and torrc.relay.</li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2506)         <li>Modify the Tor client and relay startup scripts to include
Matt Pagan Added two new FAQ entries.

Matt Pagan authored 10 years ago

2507)         '-f /path/to/correct/torrc'.</li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2508)         <li>In Linux/BSD/OSX, changing the startup scripts to Tor.client
Matt Pagan Added two new FAQ entries.

Matt Pagan authored 10 years ago

2509)         and Tor.relay may make separation of configs easier.</li>
2510)     </ul>
2511) 
Matt Pagan +6 FAQ entries

Matt Pagan authored 10 years ago

2512)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2513) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2514)     <a id="ExitPolicies"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2515)     <h3><a class="anchor" href="#ExitPolicies">I'd run a relay, but I
2516) don't want to deal with abuse issues.</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2517) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2518)     <p>
2519)     Great. That's exactly why we implemented exit policies.
2520)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2521) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2522)     <p>
2523)     Each Tor relay has an exit policy that specifies what sort of
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2524)     outbound connections are allowed or refused from that relay. The
2525) exit
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2526)     policies are propagated to Tor clients via the directory, so clients
2527)     will automatically avoid picking exit relays that would refuse to
2528)     exit to their intended destination. This way each relay can decide
2529)     the services, hosts, and networks he wants to allow connections to,
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2530)     based on abuse potential and his own situation. Read the FAQ entry
2531) on
2532)     <a href="<page docs/faq-abuse>#TypicalAbuses">issues you might
2533) encounter</a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2534)     if you use the default exit policy, and then read Mike Perry's
Roger Dingledine fix another 404 from the fr...

Roger Dingledine authored 13 years ago

2535)     <a href="<blog>tips-running-exit-node-minimal-harassment">tips
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2536)     for running an exit node with minimal harassment</a>.
2537)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2538) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2539)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2540)     The default exit policy allows access to many popular services
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2541)     (e.g. web browsing), but <a
Matt Pagan Add 1 FAQ entry and cleaned...

Matt Pagan authored 10 years ago

2542) href="#DefaultExitPorts">restricts</a>
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2543)     some due to abuse potential (e.g. mail) and some since
2544)     the Tor network can't handle the load (e.g. default
2545)     file-sharing ports). You can change your exit policy
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2546)     using Vidalia's "Sharing" tab, or by manually editing your
Roger Dingledine change links to the #torrc...

Roger Dingledine authored 13 years ago

2547)     <a href="<page docs/faq>#torrc">torrc</a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2548)     file. If you want to avoid most if not all abuse potential, set it
2549) to
2550)     "reject *:*" (or un-check all the boxes in Vidalia). This setting
2551) means
2552)     that your relay will be used for relaying traffic inside the Tor
2553) network,
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2554)     but not for connections to external websites or other services.
2555)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2556) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2557)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2558)     If you do allow any exit connections, make sure name resolution
2559) works
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2560)     (that is, your computer can resolve Internet addresses correctly).
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2561)     If there are any resources that your computer can't reach (for
2562) example,
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2563)     you are behind a restrictive firewall or content filter), please
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2564)     explicitly reject them in your exit policy &mdash; otherwise Tor
2565) users
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2566)     will be impacted too.
2567)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2568) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

2569)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2570) 
Matt Pagan Applied Nick's patch.

Matt Pagan authored 10 years ago

2571)     <a id="BestOSForRelay"></a>
Matt Pagan Formatted the new FAQ entry...

Matt Pagan authored 10 years ago

2572)     <h3><a class="anchor" href="#BestOSForRelay">Why doesn't my Windows (or other OS) Tor relay run well?</h3></a>
Matt Pagan Applied Nick's patch.

Matt Pagan authored 10 years ago

2573) 
2574)     <p>
2575)     Tor relays work best on Linux, FreeBSD 5.x+, OS X Tiger or
2576)     later, and Windows Server 2003 or later.
2577)     </p>
2578) 
2579)     <p>You can probably get it working just fine on other operating
2580)     systems too, but note the following caveats:
2581)     </p>
2582) 
2583)     <ul>
2584)     <li>
2585)     Versions of Windows without the word "server" in their name
2586)     sometimes have problems. This is especially the case for Win98,
2587)     but it also happens in some cases for XP, especially if you don't
2588)     have much memory. The problem is that we don't use the networking
2589)     system calls in a very Windows-like way, so we run out of space in
2590)     a fixed-size memory space known as the non-page pool, and then
2591)     everything goes bad. The symptom is an assert error with the
2592)     message "No buffer space available [WSAENOBUFS ] [10055]".  <a
2593)     href="https://trac.torproject.org/projects/tor/wiki/doc/WindowsBufferProblems">You
2594)     can read more here.</a>
2595)     </li>
2596) 
2597)     <li>
2598)     Most developers who contribute to Tor work with Unix-like operating
2599)     systems. It would be great if more people with Windows experience help
2600)     out, so we can improve Tor's usability and stability in
2601)     Windows.
2602)     </li>
2603) 
2604)     <li>
2605)     More esoteric or archaic operating systems, like SunOS 5.9 or
2606)     Irix64, may have problems with some libevent methods (devpoll,
2607)     etc), probably due to bugs in libevent. If you experience crashes,
2608)     try setting the EVENT_NODEVPOLL or equivalent environment
2609)     variable.
2610)     </li>
2611)     </ul>
2612) 
2613)     <hr>
2614) 
Matt Pagan Why are Tor packages useful?

Matt Pagan authored 9 years ago

2615)     <a id="PackagedTor"></a>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

2616)     <h3><a class="anchor" href="#PackagedTor">Should I install Tor from my
Matt Pagan Why are Tor packages useful?

Matt Pagan authored 9 years ago

2617)     package manager, or build from source?</a></h3>
2618)     <p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

2619)     If you're using Debian or Ubuntu especially, there are a number of benefits
2620)     to installing Tor from the <a
Roger Dingledine fix link and grammar

Roger Dingledine authored 9 years ago

2621)     href="<page docs/debian>">Tor Project's repository</a>.
Matt Pagan Why are Tor packages useful?

Matt Pagan authored 9 years ago

2622)     </p>
2623)     <ul>
2624)       <li>
Roger Dingledine fix link and grammar

Roger Dingledine authored 9 years ago

2625)       Your ulimit -n gets set to 32768 &mdash; high enough for Tor to
2626)       keep open all the connections it needs.
Matt Pagan Why are Tor packages useful?

Matt Pagan authored 9 years ago

2627)       </li>
2628)       <li>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

2629)       A user profile is created just for Tor, so Tor doesn't need to run as
Matt Pagan Why are Tor packages useful?

Matt Pagan authored 9 years ago

2630)       root.
2631)       </li>
2632)       <li>
2633)       An init script is included so that Tor runs at boot.
2634)       </li>
2635)       <li>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

2636)       Tor runs with --verify-config, so that most problems with your
2637)       config file get caught.
Matt Pagan Why are Tor packages useful?

Matt Pagan authored 9 years ago

2638)       </li>
2639)       <li>
2640)       Tor can bind to low level ports, then drop privileges.
2641)       </li>
2642)     </ul>
2643) 
2644)     <hr>
2645) 
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

2646)     <a id="WhatIsTheBadExitFlag"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2647)     <h3><a class="anchor" href="#WhatIsTheBadExitFlag">What is the
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

2648)     BadExit flag?</a></h3>
2649) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2650)     <p>When an exit is misconfigured or malicious it's assigned the BadExit
2651)     flag. This tells Tor to avoid exiting through that relay. In effect,
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

2652)     relays with this flag become non-exits.</p>
2653) 
2654)     <hr>
2655) 
2656)     <a id="IGotTheBadExitFlagWhyDidThatHappen"></a>
2657)     <h3><a class="anchor" href="#IGotTheBadExitFlagWhyDidThatHappen">I got
2658)     the BadExit flag why did that happen?</a></h3>
2659) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2660)     <p>If you got this flag then we either discovered a problem or suspicious
2661)     activity coming from your exit and weren't able to contact you. The reason
2662)     for most flaggings are documented on the <a
2663)     href="https://trac.torproject.org/projects/tor/wiki/doc/badRelays">bad
2664)     relays wiki</a>. Please <a
Roger Dingledine make the faq work better on...

Roger Dingledine authored 10 years ago

2665)     href="<page about/contact>">contact us</a> so
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

2666)     we can sort out the issue.</p>
2667) 
2668)     <hr>
2669) 
2670)     <a id="MyRelayRecentlyGotTheGuardFlagAndTrafficDroppedByHalf"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2671)     <h3><a class="anchor" href="#MyRelayRecentlyGotTheGuardFlagAndTrafficDroppedByHalf">My
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

2672)     relay recently got the Guard flag and traffic dropped by half.</a></h3>
2673)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2674)     Since it's now a guard, clients are using it less in other positions, but
2675)     not many clients have rotated their existing guards out to use it as a
2676)     guard yet. Read more details in this <a
2677)     href="https://blog.torproject.org/blog/lifecycle-of-a-new-relay">blog
2678)     post</a> or in <a href="http://freehaven.net/anonbib/#wpes12-cogs">Changing
2679)     of the Guards: A Framework for Understanding and Improving Entry Guard
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

2680)     Selection in Tor</a>.
2681)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

2682) 
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

2683)     <hr>
2684) 
2685)     <a id="TorClientOnADifferentComputerThanMyApplications"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2686)     <h3><a class="anchor" href="#TorClientOnADifferentComputerThanMyApplications">I
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

2687)     want to run my Tor client on a different computer than my applications.
2688)     </a></h3>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

2689)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2690)     By default, your Tor client only listens for applications that
2691)     connect from localhost. Connections from other computers are
2692)     refused. If you want to torify applications on different computers
2693)     than the Tor client, you should edit your torrc to define
2694)     SocksListenAddress 0.0.0.0 and then restart (or hup) Tor. If you
2695)     want to get more advanced, you can configure your Tor client on a
2696)     firewall to bind to your internal IP but not your external IP.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

2697)     </p>
2698) 
2699)     <hr>
2700) 
2701)     <a id="ServerClient"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2702)     <h3><a class="anchor" href="#ServerClient">Can I install Tor on a
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2703)     central server, and have my clients connect to it?</a></h3>
2704)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2705)      Yes. Tor can be configured as a client or a relay on another
2706)      machine, and allow other machines to be able to connect to it
2707)      for anonymity. This is most useful in an environment where many
2708)      computers want a gateway of anonymity to the rest of the world.
2709)      However, be forwarned that with this configuration, anyone within
2710)      your private network (existing between you and the Tor
2711)      client/relay) can see what traffic you are sending in clear text.
2712)      The anonymity doesn't start until you get to the Tor relay.
2713)      Because of this, if you are the controller of your domain and you
2714)      know everything's locked down, you will be OK, but this configuration
2715)      may not be suitable for large private networks where security is
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2716)      key all around.
2717)     </p>
2718)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2719) Configuration is simple, editing your torrc file's SocksListenAddress
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2720) according to the following examples:
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

2721)     </p>
2722)     <pre>
Matt Pagan Cleaned up some existing FA...

Matt Pagan authored 10 years ago

2723) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2724)   #This provides local interface access only,
Matt Pagan Cleaned up some existing FA...

Matt Pagan authored 10 years ago

2725)   #needs SocksPort to be greater than 0
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2726)   SocksListenAddress 127.0.0.1
Matt Pagan Cleaned up some existing FA...

Matt Pagan authored 10 years ago

2727) 
2728)   #This provides access to Tor on a specified interface
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2729)   SocksListenAddress 192.168.x.x:9100
Matt Pagan Cleaned up some existing FA...

Matt Pagan authored 10 years ago

2730) 
2731)   #Accept from all interfaces
2732)   SocksListenAddress 0.0.0.0:9100
2733)    </pre>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

2734)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2735) You can state multiple listen addresses, in the case that you are
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2736) part of several networks or subnets.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

2737)     </p>
2738)     <pre>
2739)   SocksListenAddress 192.168.x.x:9100 #eth0
2740)   SocksListenAddress 10.x.x.x:9100 #eth1
2741)     </pre>
2742)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2743) After this, your clients on their respective networks/subnets would specify
2744) a socks proxy with the address and port you specified SocksListenAddress
2745) to be.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

2746)     </p>
2747)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2748) Please note that the SocksPort configuration option gives the port ONLY for
2749) localhost (127.0.0.1). When setting up your SocksListenAddress(es), you need
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2750) to give the port with the address, as shown above.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

2751)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2752) If you are interested in forcing all outgoing data through the central Tor
2753) client/relay, instead of the server only being an optional proxy, you may find
2754) the program iptables (for *nix) useful.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

2755)     </p>
2756) 
2757)     <hr>
2758) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2759)     <a id="RelayOrBridge"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2760)     <h3><a class="anchor" href="#RelayOrBridge">Should I be a normal
2761) relay or bridge relay?</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2762) 
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2763)     <p><a href="<page docs/bridges>">Bridge relays</a> (or "bridges" for
2764) short)
2765)     are <a href="<page docs/tor-doc-relay>">Tor relays</a> that aren't
Moritz Bartl China not the only country...

Moritz Bartl authored 11 years ago

2766)     listed in the public Tor directory.
Andrew Lewman don't tell users how to kil...

Andrew Lewman authored 11 years ago

2767)     That means that ISPs or governments trying to block access to the
Moritz Bartl China not the only country...

Moritz Bartl authored 11 years ago

2768)     Tor network can't simply block all bridges.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2769)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2770) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2771)     <p>Being a normal relay vs being a bridge relay is almost the same
2772)     configuration: it's just a matter of whether your relay is listed
Moritz Bartl China not the only country...

Moritz Bartl authored 11 years ago

2773)     publicly or not.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2774)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2775) 
Moritz Bartl China not the only country...

Moritz Bartl authored 11 years ago

2776)     <p>
Andrew Lewman don't tell users how to kil...

Andrew Lewman authored 11 years ago

2777)     So bridges are useful a) for Tor users in oppressive regimes,
Moritz Bartl China not the only country...

Moritz Bartl authored 11 years ago

2778)     and b) for people who want an extra layer of security
Roger Dingledine change our "should i be a r...

Roger Dingledine authored 12 years ago

2779)     because they're worried somebody will recognize that it's a public
2780)     Tor relay IP address they're contacting.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2781)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2782) 
Moritz Bartl China not the only country...

Moritz Bartl authored 11 years ago

2783)     <p>
2784)     Several countries, including China and Iran, have found ways to
Andrew Lewman don't tell users how to kil...

Andrew Lewman authored 11 years ago

2785)     detect and block connections to Tor bridges.
Moritz Bartl China not the only country...

Moritz Bartl authored 11 years ago

2786)     <a href="<page projects/obfsproxy>">Obfsproxy</a> bridges address
Andrew Lewman don't tell users how to kil...

Andrew Lewman authored 11 years ago

2787)     this by adding another layer of obfuscation.
Moritz Bartl China not the only country...

Moritz Bartl authored 11 years ago

2788)     </p>
2789) 
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2790)     <p>So should you run a normal relay or bridge relay? If you have
2791) lots
Moritz Bartl China not the only country...

Moritz Bartl authored 11 years ago

2792)     of bandwidth, you should definitely run a normal relay.
2793)     If you're willing
Roger Dingledine change our "should i be a r...

Roger Dingledine authored 12 years ago

2794)     to <a href="#ExitPolicies">be an exit</a>, you should definitely
2795)     run a normal relay, since we need more exits. If you can't be an
2796)     exit and only have a little bit of bandwidth, be a bridge. Thanks
2797)     for volunteering!
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

2798)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2799) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

2800)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

2801) 
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2802) <a id="UpgradeOrMove"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2803) <h3><a class="anchor" href="#UpgradeOrMove">I want to upgrade/move my relay.
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2804) How do I keep the same key?</a></h3>
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2805) 
2806) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2807)  When upgrading your Tor relay, or running it on a different computer,
Sebastian Hahn Remove nicknames from websi...

Sebastian Hahn authored 9 years ago

2808)  the important part is to keep the same identity key (stored in
2809)  "keys/secret_id_key" in your DataDirectory).
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2810) </p>
2811) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2812) This means that if you're upgrading your Tor relay and you keep the same
2813) torrc and the same DataDirectory, then the upgrade should just work and
2814) your relay will keep using the same key. If you need to pick a new
2815) DataDirectory, be sure to copy your old keys/secret_id_key over.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2816) </p>
2817) 
2818)     <hr>
2819) 
2820) <a id="NTService"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2821) <h3><a class="anchor" href="#NTService">How do I run my Tor relay as an NT
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2822) service?</a></h3>
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2823) 
2824) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2825)  You can run Tor as a service on all versions of Windows except Windows
2826)  95/98/ME. This way you can run a Tor relay without needing to always have
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2827)  Vidalia running.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2828) </p>
2829) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2830) If you've already configured your Tor to be a relay, please note that when
2831) you enable Tor as a service, it will use a different DatagDirectory, and
2832) thus will generate a different key. If you want to keep using the old key,
2833) see the Upgrading your Tor relay FAQ entry for how to restore the old
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2834) identity key.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2835) </p>
2836) <p>
2837) To install Tor as a service, you can simply run:
2838) </p>
2839) <pre>
2840) tor --service install
2841) </pre>
2842) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2843) A service called Tor Win32 Service will be installed and started. This
2844) service will also automatically start every time Windows boots, unless
2845) you change the Start-up type. An easy way to check the status of Tor,
2846) start or stop the service, and change the start-up type is by running
2847) services.msc and finding the Tor service in the list of currently
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2848) installed services.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2849) </p>
2850) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2851) Optionally, you can specify additional options for the Tor service using
2852) the -options argument. For example, if you want Tor to use C:\tor\torrc,
2853) instead of the default torrc, and open a control port on port 9151, you
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2854) would run:
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2855) </p>
2856) <pre>
2857) tor --service install -options -f C:\tor\torrc ControlPort 9151
2858) </pre>
2859) <p>
2860) You can also start or stop the Tor service from the command line by typing:
2861) </p>
2862) <pre>
2863)  tor --service start
2864) </pre>
2865) <p>
2866) or
2867) </p>
2868) <pre>
2869)  tor --service stop
2870) </pre>
2871) <p>
2872) To remove the Tor service, you can run the following command:
2873) </p>
2874) <pre>
2875) tor --service remove
2876) </pre>
2877) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2878) If you are running Tor as a service and you want to uninstall Tor entirely,
2879) be sure to run the service removal command (shown above) first before
2880) running the uninstaller from "Add/Remove Programs". The uninstaller is
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2881) currently not capable of removing the active service.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2882) </p>
2883) 
2884) <hr>
2885) 
2886) <a id="VirtualServer"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2887) <h3><a class="anchor" href="#VirtualServer">Can I run a Tor relay from my
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2888) virtual server account?</a></h3>
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2889) 
2890) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2891) Some ISPs are selling "vserver" accounts that provide what they call a
2892) virtual server -- you can't actually interact with the hardware, and
2893) they can artificially limit certain resources such as the number of file
2894) descriptors you can open at once. Competent vserver admins are able to
2895) configure your server to not hit these limits. For example, in SWSoft's
2896) Virtuozzo, investigate /proc/user_beancounters. Look for "failcnt" in
2897) tcpsndbuf, tcprecvbuf, numothersock, and othersockbuf. Ask for these to
Matt Pagan What do all these numbers i...

Matt Pagan authored 9 years ago

2898) be increased accordingly. Xen, Virtual Box and VMware virtual servers have no such limits normally.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2899) </p>
2900) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2901) If the vserver admin will not increase system limits another option is
2902) to reduce the memory allocated to the send and receive buffers on TCP
2903) connections Tor uses. An experimental feature to constrain socket buffers
2904) has recently been added. If your version of Tor supports it, set
2905) "ConstrainedSockets 1" in your configuration. See the tor man page for
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2906) additional details about this option.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2907) </p>
2908) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2909) Unfortunately, since Tor currently requires you to be able to connect to
2910) all the other Tor relays, we need you to be able to use at least 1024 file
2911) descriptors. This means we can't make use of Tor relays that are crippled
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2912) in this way.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2913) </p>
2914) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2915) We hope to fix this in the future, once we know how to build a Tor network
2916) with restricted topologies -- that is, where each node connects to only a
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2917) few other nodes. But this is still a long way off.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2918) </p>
2919) 
Matt Pagan Cleaned up some existing FA...

Matt Pagan authored 10 years ago

2920) <hr>
2921) 
Roger Dingledine fix the faq anchors that ha...

Roger Dingledine authored 13 years ago

2922) <a id="MultipleRelays"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

2923) <h3><a class="anchor" href="#MultipleRelays">I want to run more than one
2924) relay.</a></h3>
Roger Dingledine migrate the ManyRelays faq...

Roger Dingledine authored 13 years ago

2925) 
2926) <p>
2927) Great. If you want to run several relays to donate more to the network,
2928) we're happy with that. But please don't run more than a few dozen on
2929) the same network, since part of the goal of the Tor network is dispersal
2930) and diversity.
2931) </p>
2932) 
2933) <p>
2934) If you do decide to run more than one relay, please set the "MyFamily"
Roger Dingledine change links to the #torrc...

Roger Dingledine authored 13 years ago

2935) config option in the <a href="#torrc">torrc</a> of each relay, listing
2936) all the relays (comma-separated) that are under your control:
Roger Dingledine migrate the ManyRelays faq...

Roger Dingledine authored 13 years ago

2937) </p>
2938) 
2939) <pre>
2940)     MyFamily $fingerprint1,$fingerprint2,$fingerprint3
2941) </pre>
2942) 
2943) <p>
2944) where each fingerprint is the 40 character identity fingerprint (without
Sebastian Hahn Remove nicknames from websi...

Sebastian Hahn authored 9 years ago

2945) spaces).
Roger Dingledine migrate the ManyRelays faq...

Roger Dingledine authored 13 years ago

2946) </p>
2947) 
2948) <p>
2949) That way clients will know to avoid using more than one of your relays
2950) in a single circuit. You should set MyFamily if you have administrative
2951) control of the computers or of their network, even if they're not all in
2952) the same geographic location.
2953) </p>
2954) 
2955)     <hr>
2956) 
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2957)     <a id="WrongIP"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2958)     <h3><a class="anchor" href="#WrongIP">My relay is picking the wrong
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2959)     IP address.</a></h3>
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2960)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2961)  Tor guesses its IP address by asking the computer for its hostname, and
2962)  then resolving that hostname. Often people have old entries in their
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2963)  /etc/hosts file that point to old IP addresses.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2964)     </p>
2965)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2966) If that doesn't fix it, you should use the "Address" config option to
2967) specify the IP you want it to pick. If your computer is behind a NAT and
2968) it only has an internal IP address, see the following FAQ entry on <a
Matt Pagan Improved some links.

Matt Pagan authored 10 years ago

2969) href="#RelayFlexible">dynamic IP addresses</a>.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2970)     </p>
2971)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2972) Also, if you have many addresses, you might also want to set
2973) "OutboundBindAddress" so external connections come from the IP you intend
2974) to present to the world.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2975)     </p>
2976) 
2977)     <hr>
2978) 
2979)     <a id="BehindANAT"></a>
2980)     <h3><a class="anchor" href="#BehindANAT">I'm behind a NAT/Firewall.</a></h3>
2981) 
2982)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2983) See <a>http://portforward.com/</a> for directions on how to port forward with
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2984) your NAT/router device.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2985) </p>
2986) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2987) If your relay is running on a internal net you need to setup port forwarding.
2988) Forwarding TCP connections is system dependent but the firewalled-clients FAQ
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2989) entry offers some examples on how to do this.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2990) </p>
2991) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2992) Also, here's an example of how you would do this on GNU/Linux if you're using
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

2993) iptables:
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

2994) </p>
2995) <pre>
2996) /sbin/iptables -A INPUT -i eth0 -p tcp --destination-port 9001 -j ACCEPT
2997) </pre>
2998) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

2999) You may have to change "eth0" if you have a different external interface
3000) (the one connected to the Internet). Chances are you have only one (except
3001) the loopback) so it shouldn't be too hard to figure out.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

3002)     </p>
3003)     <hr>
3004) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3005)     <a id="RelayMemory"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3006)     <h3><a class="anchor" href="#RelayMemory">Why is my Tor relay using
3007) so much memory?</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3008) 
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3009)     <p>If your Tor relay is using more memory than you'd like, here are
3010) some
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3011)     tips for reducing its footprint:
3012)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3013) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3014)     <ol>
3015)     <li>If you're on Linux, you may be encountering memory fragmentation
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3016)     bugs in glibc's malloc implementation. That is, when Tor releases
3017) memory
3018)     back to the system, the pieces of memory are fragmented so they're
3019) hard
3020)     to reuse. The Tor tarball ships with OpenBSD's malloc
3021) implementation,
3022)     which doesn't have as many fragmentation bugs (but the tradeoff is
3023) higher
3024)     CPU load). You can tell Tor to use this malloc implementation
3025) instead:
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3026)     <tt>./configure --enable-openbsd-malloc</tt></li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3027) 
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3028)     <li>If you're running a fast relay, meaning you have many TLS
3029) connections
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3030)     open, you are probably losing a lot of memory to OpenSSL's internal
Roger Dingledine fix another broken link in...

Roger Dingledine authored 10 years ago

3031)     buffers (38KB+ per socket). We've patched OpenSSL to <a href="https://lists.torproject.org/pipermail/tor-dev/2008-June/001519.html">release
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3032)     unused buffer memory more aggressively</a>. If you update to OpenSSL
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3033)     1.0.0 or newer, Tor's build process will automatically recognize and
3034) use
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3035)     this feature.</li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3036) 
Matt Pagan Add 1 FAQ entry and cleaned...

Matt Pagan authored 10 years ago

3037) <!-- Nickm says he's not sure this is still accurate
3038) 
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

3039)     <li>If you're running on Solaris, OpenBSD, NetBSD, or
3040)     old FreeBSD, Tor is probably forking separate processes
3041)     rather than using threads. Consider switching to a <a
3042)     href="<wikifaq>#WhydoesntmyWindowsorotherOSTorrelayrunwell">better
3043)     operating system</a>.</li>
Matt Pagan Add 1 FAQ entry and cleaned...

Matt Pagan authored 10 years ago

3044) -->
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3045)     <li>If you still can't handle the memory load, consider reducing the
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3046)     amount of bandwidth your relay advertises. Advertising less
3047) bandwidth
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3048)     means you will attract fewer users, so your relay shouldn't grow
3049)     as large. See the <tt>MaxAdvertisedBandwidth</tt> option in the man
3050)     page.</li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3051) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3052)     </ol>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3053) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3054)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3055)     All of this said, fast Tor relays do use a lot of ram. It is not
3056) unusual
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3057)     for a fast exit relay to use 500-1000 MB of memory.
3058)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3059) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

3060)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3061) 
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

3062)     <a id="BetterAnonymity"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3063)     <h3><a class="anchor" href="#BetterAnonymity">Do I get better anonymity
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3064)     if I run a relay?</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3065) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3066)     <p>
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

3067) Yes, you do get better anonymity against some attacks.
3068)     </p>
3069)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3070) The simplest example is an attacker who owns a small number of Tor relays.
3071) He will see a connection from you, but he won't be able to know whether
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3072) the connection originated at your computer or was relayed from somebody else.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

3073)     </p>
3074)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3075) There are some cases where it doesn't seem to help: if an attacker can
3076) watch all of your incoming and outgoing traffic, then it's easy for him
3077) to learn which connections were relayed and which started at you. (In
3078) this case he still doesn't know your destinations unless he is watching
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3079) them too, but you're no better off than if you were an ordinary client.)
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

3080)     </p>
3081)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3082) There are also some downsides to running a Tor relay. First, while we
3083) only have a few hundred relays, the fact that you're running one might
3084) signal to an attacker that you place a high value on your anonymity.
3085) Second, there are some more esoteric attacks that are not as
3086) well-understood or well-tested that involve making use of the knowledge
3087) that you're running a relay -- for example, an attacker may be able to
3088) "observe" whether you're sending traffic even if he can't actually watch
3089) your network, by relaying traffic through your Tor relay and noticing
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3090) changes in traffic timing.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

3091)     </p>
3092)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3093) It is an open research question whether the benefits outweigh the risks.
3094) A lot of that depends on the attacks you are most worried about. For
3095) most users, we think it's a smart move.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3096)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3097) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

3098)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3099) 
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

3100)     <a id="FacingLegalTrouble"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3101)     <h3><a class="anchor" href="#FacingLegalTrouble">I'm facing legal
3102)     trouble. How do I prove that my server was a Tor relay at a given
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

3103)     time?</a></h3>
3104) 
3105)     <p><a href="https://exonerator.torproject.org/">
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3106)     Exonerator</a> is a web service that can check if an IP address was a
3107)     relay at a given time. We can also <a
Roger Dingledine make the faq work better on...

Roger Dingledine authored 10 years ago

3108)     href="<page about/contact>">provide a signed
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

3109)     letter</a> if needed.</p>
3110) 
3111)     <hr>
3112) 
Roger Dingledine add faq entry about donatio...

Roger Dingledine authored 12 years ago

3113)     <a id="RelayDonations"></a>
Roger Dingledine change faq title

Roger Dingledine authored 12 years ago

3114)     <h3><a class="anchor" href="#RelayDonations">Can I donate for a
3115)     relay rather than run my own?</a></h3>
Roger Dingledine add faq entry about donatio...

Roger Dingledine authored 12 years ago

3116) 
3117)     <p>
Roger Dingledine touchups on the faq that ha...

Roger Dingledine authored 10 years ago

3118)     Sure! We recommend these non-profit charities that are happy to turn
Roger Dingledine add faq entry about donatio...

Roger Dingledine authored 12 years ago

3119)     your donations into better speed and anonymity for the Tor network:
3120)     </p>
3121)     <ul>
3122)     <li><a href="https://www.torservers.net/">torservers.net</a>
3123)     is a German charitable non-profit that runs a wide variety of
Roger Dingledine touchups on the faq that ha...

Roger Dingledine authored 10 years ago

3124)     exit relays worldwide. They also like donations of bandwidth from
3125)     ISPs.</li>
Roger Dingledine add faq entry about donatio...

Roger Dingledine authored 12 years ago

3126)     <li><a
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3127) href="https://www.noisebridge.net/wiki/Noisebridge_Tor">Noisebridge</a>
Roger Dingledine add faq entry about donatio...

Roger Dingledine authored 12 years ago

3128)     is a US-based 501(c)(3) non-profit that collects donations and turns
Roger Dingledine touchups on the faq that ha...

Roger Dingledine authored 10 years ago

3129)     them into more US-based exit relay capacity.</li>
3130)     <li><a href="https://nos-oignons.net/">Nos Oignons</a> is a French
3131)     charitable non-profit that runs fast exit relays in France.</li>
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

3132)     <li><a href="https://www.dfri.se/donera/?lang=en">DFRI</a> is a
3133)     Swedish non-profit running exit relays.</li>
Roger Dingledine add faq entry about donatio...

Roger Dingledine authored 12 years ago

3134)     </ul>
3135) 
3136)     <p>
3137)     These organizations are not the same as <a href="<page
3138)     donate/donate>">The Tor Project, Inc</a>, but we consider that a
Roger Dingledine four options no longer coun...

Roger Dingledine authored 9 years ago

3139)     good thing. They're run by nice people who are part of the
Roger Dingledine get rid of the "unnecessary...

Roger Dingledine authored 12 years ago

3140)     Tor community.
Roger Dingledine add faq entry about donatio...

Roger Dingledine authored 12 years ago

3141)     </p>
3142) 
3143)     <p>
3144)     Note that there can be a tradeoff here between anonymity and
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3145)     performance. The Tor network's anonymity comes in part from
3146) diversity,
Roger Dingledine add faq entry about donatio...

Roger Dingledine authored 12 years ago

3147)     so if you are in a position to run your own relay, you will be
Roger Dingledine two fixes from velope

Roger Dingledine authored 12 years ago

3148)     improving Tor's anonymity more than by donating. At the same time
3149)     though, economies
Roger Dingledine add faq entry about donatio...

Roger Dingledine authored 12 years ago

3150)     of scale for bandwidth mean that combining many small donations into
Roger Dingledine get rid of the "unnecessary...

Roger Dingledine authored 12 years ago

3151)     several larger relays is more efficient at improving network
Roger Dingledine add faq entry about donatio...

Roger Dingledine authored 12 years ago

3152)     performance. Improving anonymity and improving performance are both
3153)     worthwhile goals, so however you can help is great!
3154)     </p>
3155) 
3156)     <hr>
3157) 
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

3158) <a id="TorHiddenServices"></a>
3159) <h2><a class="anchor">Tor hidden services:</a></h2>
3160) 
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3161)     <a id="AccessHiddenServices"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3162)     <h3><a class="anchor" href="#AccessHiddenServices">How do I access
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3163)     hidden services?</a></h3>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3164) 
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3165)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3166)     Tor hidden services are named with a special top-level domain (TLD)
3167)     name in DNS: .onion. Since the .onion TLD is not recognized by the
3168)     official root DNS servers on the Internet, your application will not
3169)     get the response it needs to locate the service. Currently, the Tor
3170)     directory server provides this look-up service; and thus the look-up
3171)     request must get to the Tor network.
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3172)     </p>
3173) 
3174) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3175)  Therefore, your application <b>needs</b> to pass the .onion hostname to
3176)  Tor directly. You can't try to resolve it to an IP address, since there
3177)  <i>is</i> no corresponding IP address: the server is hidden, after all!
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3178) </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3179) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3180)     <p>
3181)     So, how do you make your application pass the hostname directly to Tor?
3182)     You can't use SOCKS 4, since SOCKS 4 proxies require an IP from the
3183)     client (a web browser is an example of a SOCKS client). Even though
3184)     SOCKS 5 can accept either an IP or a hostname, most applications
3185)     supporting SOCKS 5 try to resolve the name before passing it to the
3186)     SOCKS proxy. SOCKS 4a, however, always accepts a hostname: You'll need
3187)     to use SOCKS 4a.
3188)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3189) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3190)     <p>
3191)     Some applications, such as the browsers Mozilla Firefox and Apple's
3192)     Safari, support sending DNS queries to Tor's SOCKS 5 proxy. Most web
3193)     browsers don't support SOCKS 4a very well, though. The workaround is
3194)     to point your web browser at an HTTP proxy, and tell the HTTP proxy
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3195)     to speak to Tor with SOCKS 4a. We recommend Polipo as your HTTP proxy.
3196)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3197) 
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3198)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3199)     For applications that do not support HTTP proxy, and so cannot use
3200)     Polipo, <a href="http://www.freecap.ru/eng/">FreeCap</a> is an
3201)     alternative. When using FreeCap set proxy protocol  to SOCKS 5 and under
3202)     settings set DNS name resolving to remote. This
3203)     will allow you to use almost any program with Tor without leaking DNS
3204)     lookups and allow those same programs to access hidden services.
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3205)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3206) 
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3207)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3208)     See also the <a href="#SocksAndDNS">question on DNS</a>.
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3209)     </p>
3210) 
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3211)     <hr>
3212) 
3213)     <a id="ProvideAHiddenService"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3214)     <h3><a class="anchor" href="#ProvideAHiddenService">How do I provide a
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3215)     hidden service?</a></h3>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3216) 
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3217)     <p>
Roger Dingledine make the faq work better on...

Roger Dingledine authored 10 years ago

3218)     See the <a href="<page docs/tor-hidden-service>">
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3219)     official hidden service configuration instructions</a>.
3220)     </p>
3221) 
3222)     <hr>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3223) 
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

3224)     <a id="Development"></a>
3225)     <h2><a class="anchor">Development:</a></h2>
3226) 
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3227)     <a id="VersionNumbers"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3228)     <h3><a class="anchor" href="#VersionNumbers">What do these weird
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3229)     version numbers mean?</a></h3>
3230) 
3231)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3232)     Versions of Tor before 0.1.0 used a strange and hard-to-explain
Matt Pagan Added an FAQ entry relevant...

Matt Pagan authored 10 years ago

3233)     version scheme. Let's forget about those.
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3234)     </p>
3235)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3236)     Starting with 0.1.0, versions all look like this:
3237)     MAJOR.MINOR.MICRO(.PATCHLEVEL)(-TAG). The stuff in parenthesis is
3238)     optional. MAJOR, MINOR, MICRO, and PATCHLEVEL are all numbers. Only one
3239)     release is ever made with any given set of these version numbers. The
3240)     TAG lets you know how stable we think the release is: "alpha" is pretty
3241)     unstable; "rc" is a release candidate; and no tag at all means that we
3242)     have a final release. If the tag ends with "-cvs", you're looking at
3243)     a development snapshot that came after a given release.
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3244)     </p>
3245)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3246)     So for example, we might start a development branch with (say)
3247)     0.1.1.1-alpha. The patchlevel increments consistently as the status
3248)     tag changes, for example, as in: 0.1.1.2-alpha, 0.1.1.3-alpha,
3249)     0.1.1.4-rc, 0.1.1.5-rc, etc. Eventually, we would release 0.1.1.6.
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3250)     The next stable release would be 0.1.1.7.
3251)     </p>
3252)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3253)     Why do we do it like this? Because every release has a unique
3254)     version number, it is easy for tools like package manager to tell
3255)     which release is newer than another. The tag makes it easy for users
3256)     to tell how stable the release is likely to be.
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3257)     </p>
3258) 
3259)     <hr>
3260) 
3261)     <a id="PrivateTorNetwork"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3262)     <h3><a class="anchor" href="#PrivateTorNetwork">How do I set up my
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3263)     own private Tor network?</a></h3>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3264) 
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3265)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3266)     If you want to experiment locally with your own network, or you're
3267)     cut off from the Internet and want to be able to mess with Tor still,
3268)     then you may want to set up your own separate Tor network.
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3269)     </p>
3270)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3271)     To set up your own Tor network, you need to run your own authoritative
3272)     directory servers, and your clients and relays must be configured so
3273)     they know about your directory servers rather than the default public
3274)     ones.
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3275)     </p>
3276)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3277)     Apart from the somewhat tedious method of manually configuring a couple
3278)     of directory authorities, relays and clients there are two separate
3279)     tools that could help. One is Chutney, the other is Shadow.
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3280)     </p>
3281)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3282)     <a href="https://gitweb.torproject.org/chutney.git">Chutney</a> is a
3283)     tool for configuring, controlling and running tests on a
3284)     testing Tor network. It requires that you have Tor and Python (2.5 or
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3285)     later) installed on your system. You can use Chutney to create a testing
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3286)     network by generating Tor configuration files (torrc) and necssary keys
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3287)     (for the directory authorities). Then you can let Chutney start your Tor
3288)     authorities, relays and clients and wait for the network to bootstrap.
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3289)     Finally, you can have Chutney run tests on your network to see which
3290)     things work and which do not. Chutney is typically used for running a
3291)     testing network with about 10 instances of Tor. Every instance of Tor
3292)     binds to one or two ports on localhost (127.0.0.1) and all Tor
3293)     communication is done over the loopback interface. The <a
3294)     href="https://gitweb.torproject.org/chutney.git/blob/HEAD:/README">Chutney
3295)     README</a> is a good starting point for getting it up and running.
3296)     </p>
3297)     <p>
3298)     <a href="https://github.com/shadow/shadow">Shadow</a> is a network
3299)     simulator that can run Tor through its Scallion plug-in. Although
3300)     it's typically used for running load and performance tests on
3301)     substantially larger Tor test networks than what's feasible with
3302)     Chutney, it also makes for an excellent debugging tool since you can
3303)     run completely deterministic experiments. A large Shadow network is on
3304)     the size of thousands of instances of Tor, and you can run experiments
3305)     out of the box using one of Shadow's several included scallion experiment
3306)     configurations. Shadow can be run on any linux machine without root,
3307)     and can also run on EC2 using a pre-configured image. Also, Shadow
3308)     controls the time of the simulation with the effect that
3309)     time-consuming tests can be done more efficiently than in an
3310)     ordinary testing network. The <a
3311)     href="https://github.com/shadow/shadow/wiki">Shadow wiki</a> and
3312)     <a href="http://shadow.github.io/">Shadow website</a> are
3313)     good places to get started.
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3314)     </p>
3315) 
3316)     <hr>
3317) 
Matt Pagan Fixed an anchor

Matt Pagan authored 10 years ago

3318)     <a id="UseTorWithJava"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3319)     <h3><a class="anchor" href="#UseTorWithJava">How can I make my Java
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3320)     program use the Tor Network?</a></h3>
3321) 
3322)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3323)     The newest versions of Java now have SOCKS4/5 support built in.
3324)     Unfortunately, the SOCKS interface is not very well documented and
3325)     may still leak your DNS lookups. The safest way to use Tor is to
3326)     interface the SOCKS protocol directly or go through an application-level
3327)     proxy that speaks SOCKS4a. For an example and libraries that implement
3328)     the SOCKS4a connection, go to Joe Foley's TorLib in the <a
3329)     href="http://web.mit.edu/foley/www/TinFoil/">TinFoil Project</a>.
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3330)     </p>
3331) 
3332)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3333)     A fully Java implementation of the Tor client is now available as <a
3334)     href="http://www.subgraph.com/orchid.html">Orchid</a>. We still consider
3335)     Orchid to be experimental, so use with care.
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3336)     </p>
3337) 
3338)     <hr>
3339) 
3340) 
3341)     <a id="WhatIsLibevent"></a>
3342)     <h3><a class="anchor" href="#WhatIsLibevent">What is Libevent?</a></h3>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3343) 
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3344)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3345)     When you want to deal with a bunch of net connections at once, you
3346)     have a few options:
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3347)     </p>
3348)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3349)     One is multithreading: you have a separate micro-program inside the
3350)     main program for each net connection that reads and writes to the
3351)     connection as needed.This, performance-wise, sucks.
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3352)     </p>
3353)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3354)     Another is asynchronous network programming: you have a single main
3355)     program that finds out when various net connections are ready to
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3356)     read/write, and acts accordingly.
3357)     </p>
3358)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3359)     The problem is that the oldest ways to find out when net connections
3360)     are ready to read/write, suck. And the newest ways are finally fast,
3361)     but are not available on all platforms.
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3362)     </p>
3363)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3364)     This is where Libevent comes in and wraps all these ways to find
3365)     out whether net connections are ready to read/write, so that Tor
3366)     (and other programs) can use the fastest one that your platform
3367)     supports, but can still work on older platforms (these methods are
3368)     all different depending on the platorm) So Libevent presents a
3369)     consistent and fast interface to select, poll, kqueue, epoll,
3370)     /dev/poll, and windows select.
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3371)     </p>
3372)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3373)     However, On the the Win32 platform (by Microsoft) the only good
3374)     way to do fast IO on windows with hundreds of sockets is using
3375)     overlapped IO, which is grossly unlike every other BSD sockets
3376)     interface.
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3377)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3378)     <p>Libevent has <a href="http://www.monkey.org/~provos/libevent/">its
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3379)     own website</a>.
3380)     </p>
3381)     <hr>
3382) 
3383)     <a id="MyNewFeature"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3384)     <h3><a class="anchor" href="#MyNewFeature">What do I need to do to get
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3385)     a new feature into Tor?</a></h3>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3386) 
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3387)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3388)     For a new feature to go into Tor, it needs to be designed (explain what
3389)     you think Tor should do), argued to be secure (explain why it's better
3390)     or at least as good as what Tor does now), specified (explained at the
3391)     byte level at approximately the level of detail in tor-spec.txt), and
3392)     implemented (done in software).
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3393)     </p>
3394) 
3395)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3396)     You probably shouldn't count on other people doing all of these steps
3397)     for you: people who are skilled enough to do this stuff generally
Matt Pagan 6 new FAQ entires.

Matt Pagan authored 10 years ago

3398)     have their own favorite feature requests.
3399)     </p>
3400) 
3401)     <hr>
3402) 
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

3403)     <a id="AnonymityAndSecurity"></a>
3404)     <h2><a class="anchor">Anonymity And Security:</a></h2>
3405) 
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3406)     <a id="WhatProtectionsDoesTorProvide"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3407)     <h3><a class="anchor" href="#WhatProtectionsDoesTorProvide">What
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3408)     protections does Tor provide?</a></h3>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3409) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3410)     <p>
3411)     Internet communication is based on a store-and-forward model that
3412)     can be understood in analogy to postal mail: Data is transmitted in
3413)     blocks called IP datagrams or packets. Every packet includes a source
3414)     IP address (of the sender) and a destination IP address (of the
3415)     receiver), just as ordinary letters contain postal addresses of sender
3416)     and receiver. The way from sender to receiver involves multiple hops of
3417)     routers, where each router inspects the destination IP address and
3418)     forwards the packet closer to its destination. Thus, every router
3419)     between sender and receiver learns that the sender is communicating
3420)     with the receiver. In particular, your local ISP is in the position to
3421)     build a complete profile of your Internet usage. In addition, every
3422)     server in the Internet that can see any of the packets can profile your
3423)     behaviour.
3424)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3425) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3426)     <p>
3427)     The aim of Tor is to improve your privacy by sending your traffic through
3428)     a series of proxies. Your communication is encrypted in multiple layers
3429)     and routed via multiple hops through the Tor network to the final
3430)     receiver. More details on this process can be found in the <a
3431)     href="https://www.torproject.org/about/overview">Tor overview</a>.
3432)     Note that all your local ISP can observe now is that you are
3433)     communicating with Tor nodes. Similarly, servers in the Internet just
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3434)     see that they are being contacted by Tor nodes.
3435)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3436) 
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3437)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3438)     Generally speaking, Tor aims to solve three privacy problems:
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3439)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3440) 
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3441)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3442)     First, Tor prevents websites and other services from learning
3443)     your location, which they can use to build databases about your
3444)     habits and interests. With Tor, your Internet connections don't
3445)     give you away by default -- now you can have the ability to choose,
3446)     for each connection, how much information to reveal.
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3447)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3448) 
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3449)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3450)     Second, Tor prevents people watching your traffic locally (such as
3451)     your ISP) from learning what information you're fetching and where
3452)     you're fetching it from. It also stops them from deciding what you're
3453)     allowed to learn and publish -- if you can get to any part of the Tor
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3454)     network, you can reach any site on the Internet.
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3455)     </p>
3456) 
3457)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3458)     Third, Tor routes your connection through more than one Tor relay
3459)     so no single relay can learn what you're up to. Because these relays
3460)     are run by different individuals or organizations, distributing trust
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3461)     provides more security than the old <a href="#Torisdifferent">one hop proxy
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3462)     </a> approach.
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3463)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3464) 
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3465)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3466)     Note, however, that there are situations where Tor fails to solve these
3467)     privacy problems entirely: see the entry below on <a
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3468)     href="#AttacksOnOnionRouting">remaining attacks</a>.
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3469)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3470) 
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3471)     <hr>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3472) 
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3473)     <a id="CanExitNodesEavesdrop"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3474)     <h3><a class="anchor" href="#CanExitNodesEavesdrop">Can exit nodes eavesdrop
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3475)     on communications? Isn't that bad?</a></h3>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3476) 
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3477)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3478)     Yes, the guy running the exit node can read the bytes that come in and
3479)     out there. Tor anonymizes the origin of your traffic, and it makes sure
3480)     to encrypt everything inside the Tor network, but it does not magically
3481)     encrypt all traffic throughout the Internet.
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3482)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3483) 
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3484)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3485)     This is why you should always use end-to-end encryption such as SSL for
3486)     sensitive Internet connections. (The corollary to this answer is that if
3487)     you are worried about somebody intercepting your traffic and you're
3488)     *not* using end-to-end encryption at the application layer, then something
3489)     has already gone wrong and you shouldn't be thinking that Tor is the problem.)
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3490)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3491) 
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3492)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3493)     Tor does provide a partial solution in a very specific situation, though.
3494)     When you make a connection to a destination that also runs a Tor relay,
3495)     Tor will automatically extend your circuit so you exit from that circuit.
3496)     So for example if Indymedia ran a Tor relay on the same IP address as
3497)     their website, people using Tor to get to the Indymedia website would
3498)     automatically exit from their Tor relay, thus getting *better* encryption
3499)     and authentication properties than just browsing there the normal way.
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3500)     </p>
3501) 
3502)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3503)     We'd like to make it still work even if the service is nearby the Tor
3504)     relay but not on the same IP address. But there are a variety of
3505)     technical problems we need to overcome first (the main one being "how
3506)     does the Tor client learn which relays are associated with which
3507)     websites in a decentralized yet non-gamable way?").
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3508)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3509) 
Matt Pagan Added 4 faq entries: My Tor...

Matt Pagan authored 10 years ago

3510)     <hr>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3511) 
Matt Pagan Added three FAQ entries; fi...

Matt Pagan authored 10 years ago

3512)     <a id="AmITotallyAnonymous"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3513)     <h3><a class="anchor" href="#AmITotallyAnonymous">So I'm totally anonymous
Matt Pagan Added three FAQ entries; fi...

Matt Pagan authored 10 years ago

3514)     if I use Tor?</a></h3>
3515) 
3516)     <p>
3517)     <b>No.</b>
3518)     </p>
3519)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3520)     First, Tor protects the network communications. It separates where you
3521)     are from where you are going on the Internet. What content and data you
3522)     transmit over Tor is controlled by you. If you login to Google or
3523)     Facebook via Tor, the local ISP or network provider doesn't know you
3524)     are visiting Google or Facebook. Google and Facebook don't know where
3525)     you are in the world. However, since you have logged into their sites,
3526)     they know who you are. If you don't want to share information, you are
3527)     in control.
3528)     </p>
3529) 
3530)     <p>
3531)     Second, active content, such as Java, Javascript, Adobe Flash, Adobe
3532)     Shockwave, QuickTime, RealAudio, ActiveX controls, and VBScript, are
3533)     binary applications. These binary applications run as your user account
3534)     with your permissions in your operating system. This means these
3535)     applications can access anything that your user account can access. Some
3536)     of these technologies, such as Java and Adobe Flash for instance, run in
3537)     what is known as a virtual machine. This virtual machine may have the
3538)     ability to ignore your configured proxy settings, and therefore bypass
3539)     Tor and share information directly to other sites on the Internet. The
3540)     virtual machine may be able to store data, such as cookies, completely
3541)     separate from your browser or operating system data stores. Therefore,
Matt Pagan Added three FAQ entries; fi...

Matt Pagan authored 10 years ago

3542)     these technologies must be disabled in your browser to use Tor safely.
3543)     </p>
3544)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3545)     That's where the <a
Roger Dingledine make the faq work better on...

Roger Dingledine authored 10 years ago

3546)     href="<page projects/torbrowser>">Tor Browser
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3547)     Bundle</a> comes in. We produce a web browser that is preconfigured to
3548)     help you control the risks to your privacy and anonymity while browsing
3549)     the Internet. Not only are the above technologies disabled to prevent
3550)     identity leaks, the Tor Browser also includes browser extensions like
Matt Pagan Added three FAQ entries; fi...

Matt Pagan authored 10 years ago

3551)     NoScript and Torbutton, as well as patches to the Firefox source
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3552)     code. The full design of the Tor Browser can be read <a
3553)     href="https://www.torproject.org/projects/torbrowser/design/">here</a>.
3554)     In designing a safe, secure solution for browsing the web with Tor,
3555)     we've discovered that configuring <a href="#TBBOtherBrowser">other
Matt Pagan Other Vidalia and Tor Brows...

Matt Pagan authored 10 years ago

3556)     browsers</a> to use Tor is unsafe.
Matt Pagan Added three FAQ entries; fi...

Matt Pagan authored 10 years ago

3557)     </p>
3558) 
3559)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3560)     Alternatively, you may find a Live CD or USB operating system more to
3561)     your liking. The Tails team has created an <a
3562)     href="https://tails.boum.org/">entire bootable operating system</a>
3563)     configured for anonymity and privacy on the Internet.
Matt Pagan Added three FAQ entries; fi...

Matt Pagan authored 10 years ago

3564)     </p>
3565) 
3566)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3567)     Tor is a work in progress. There is still <a
3568)     href="https://www.torproject.org/getinvolved/volunteer">plenty of work
3569)     left to do</a> for a strong, secure, and complete solution.
Matt Pagan Added three FAQ entries; fi...

Matt Pagan authored 10 years ago

3570)     </p>
3571) 
3572)     <hr>
3573) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3574)     <a id="KeyManagement"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3575)     <h3><a class="anchor" href="#KeyManagement">Tell me about all the
3576) keys Tor uses.</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3577) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3578)     <p>
3579)     Tor uses a variety of different keys, with three goals in mind: 1)
3580)     encryption to ensure privacy of data within the Tor network, 2)
3581)     authentication so clients know they're
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3582)     talking to the relays they meant to talk to, and 3) signatures to
3583) make
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3584)     sure all clients know the same set of relays.
3585)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3586) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3587)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3588)     <b>Encryption</b>: first, all connections in Tor use TLS link
3589) encryption,
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3590)     so observers can't look inside to see which circuit a given cell is
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3591)     intended for. Further, the Tor client establishes an ephemeral
3592) encryption
Roger Dingledine explain that the authentica...

Roger Dingledine authored 12 years ago

3593)     key with each relay in the circuit; these extra layers of encryption
3594)     mean that only the exit relay can read
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3595)     the cells. Both sides discard the circuit key when the circuit ends,
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3596)     so logging traffic and then breaking into the relay to discover the
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3597)     key won't work.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3598)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3599) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3600)     <p>
3601)     <b>Authentication</b>:
3602)     Every Tor relay has a public decryption key called the "onion key".
Roger Dingledine explain that the authentica...

Roger Dingledine authored 12 years ago

3603)     Each relay rotates its onion key once a week.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3604)     When the Tor client establishes circuits, at each step it <a
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3605) 
3606) href="<svnprojects>design-paper/tor-design.html#subsec:circuits">demands
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3607)     that the Tor relay prove knowledge of its onion key</a>. That way
3608)     the first node in the path can't just spoof the rest of the path.
Roger Dingledine explain that the authentica...

Roger Dingledine authored 12 years ago

3609)     Because the Tor client chooses the path, it can make sure to get
3610)     Tor's "distributed trust" property: no single relay in the path can
3611)     know about both the client and what the client is doing.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3612)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3613) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3614)     <p>
3615)     <b>Coordination</b>:
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3616)     How do clients know what the relays are, and how do they know that
3617) they
3618)     have the right keys for them? Each relay has a long-term public
3619) signing
3620)     key called the "identity key". Each directory authority additionally
3621) has a
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3622)     "directory signing key". The directory authorities <a
Sebastian Hahn Fix links that broke due to...

Sebastian Hahn authored 13 years ago

3623)     href="<specblob>dir-spec.txt">provide a signed list</a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3624)     of all the known relays, and in that list are a set of certificates
3625) from
3626)     each relay (self-signed by their identity key) specifying their
3627) keys,
3628)     locations, exit policies, and so on. So unless the adversary can
3629) control
Roger Dingledine explain that the authentica...

Roger Dingledine authored 12 years ago

3630)     a majority of the directory authorities (as of 2012 there are 8
Roger Dingledine specify there are 8 dir auths

Roger Dingledine authored 12 years ago

3631)     directory authorities), he can't trick the Tor client into using
3632)     other Tor relays.
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3633)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3634) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3635)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3636)     How do clients know what the directory authorities are? The Tor
3637) software
3638)     comes with a built-in list of location and public key for each
3639) directory
3640)     authority. So the only way to trick users into using a fake Tor
3641) network
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3642)     is to give them a specially modified version of the software.
3643)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3644) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3645)     <p>
3646)     How do users know they've got the right software? When we distribute
3647)     the source code or a package, we digitally sign it with <a
3648)     href="http://www.gnupg.org/">GNU Privacy Guard</a>. See the <a
3649)     href="<page docs/verifying-signatures>">instructions
3650)     on how to check Tor's signatures</a>.
3651)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3652) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3653)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3654)     In order to be certain that it's really signed by us, you need to
3655) have
3656)     met us in person and gotten a copy of our GPG key fingerprint, or
3657) you
3658)     need to know somebody who has. If you're concerned about an attack
3659) on
3660)     this level, we recommend you get involved with the security
3661) community
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3662)     and start meeting people.
3663)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3664) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

3665)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3666) 
Roger Dingledine import EntryGuards faq entry

Roger Dingledine authored 13 years ago

3667) <a id="EntryGuards"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3668) <h3><a class="anchor" href="#EntryGuards">What are Entry
3669) Guards?</a></h3>
Roger Dingledine import EntryGuards faq entry

Roger Dingledine authored 13 years ago

3670) 
3671) <p>
3672) Tor (like all current practical low-latency anonymity designs) fails
3673) when the attacker can see both ends of the communications channel. For
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3674) example, suppose the attacker controls or watches the Tor relay you
3675) choose
3676) to enter the network, and also controls or watches the website you
3677) visit. In
Roger Dingledine import EntryGuards faq entry

Roger Dingledine authored 13 years ago

3678) this case, the research community knows no practical low-latency design
3679) that can reliably stop the attacker from correlating volume and timing
3680) information on the two sides.
3681) </p>
3682) 
3683) <p>
3684) So, what should we do? Suppose the attacker controls, or can observe,
Roger Dingledine cleanup on the EntryGuards...

Roger Dingledine authored 13 years ago

3685) <i>C</i> relays. Suppose there are <i>N</i> relays total. If you select
3686) new entry and exit relays each time you use the network, the attacker
3687) will be able to correlate all traffic you send with probability
3688) <i>(c/n)<sup>2</sup></i>. But profiling is, for most users, as bad
3689) as being traced all the time: they want to do something often without
3690) an attacker noticing, and the attacker noticing once is as bad as the
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3691) attacker noticing more often. Thus, choosing many random entries and
3692) exits
Roger Dingledine cleanup on the EntryGuards...

Roger Dingledine authored 13 years ago

3693) gives the user no chance of escaping profiling by this kind of attacker.
Roger Dingledine import EntryGuards faq entry

Roger Dingledine authored 13 years ago

3694) </p>
3695) 
3696) <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3697) The solution is "entry guards": each Tor client selects a few relays at
3698) random
Roger Dingledine cleanup on the EntryGuards...

Roger Dingledine authored 13 years ago

3699) to use as entry points, and uses only those relays for her first hop. If
3700) those relays are not controlled or observed, the attacker can't win,
3701) ever, and the user is secure. If those relays <i>are</i> observed or
3702) controlled by the attacker, the attacker sees a larger <i>fraction</i>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3703) of the user's traffic &mdash; but still the user is no more profiled
3704) than
Roger Dingledine cleanup on the EntryGuards...

Roger Dingledine authored 13 years ago

3705) before. Thus, the user has some chance (on the order of <i>(n-c)/n</i>)
3706) of avoiding profiling, whereas she had none before.
Roger Dingledine import EntryGuards faq entry

Roger Dingledine authored 13 years ago

3707) </p>
3708) 
3709) <p>
Roger Dingledine cleanup on the EntryGuards...

Roger Dingledine authored 13 years ago

3710) You can read more at <a href="http://freehaven.net/anonbib/#wright02">An
3711) Analysis of the Degradation of Anonymous Protocols</a>, <a
3712) href="http://freehaven.net/anonbib/#wright03">Defending Anonymous
3713) Communication Against Passive Logging Attacks</a>, and especially
3714) <a href="http://freehaven.net/anonbib/#hs-attack06">Locating Hidden
3715) Servers</a>.
Roger Dingledine import EntryGuards faq entry

Roger Dingledine authored 13 years ago

3716) </p>
3717) 
3718) <p>
3719) Restricting your entry nodes may also help against attackers who want
3720) to run a few Tor nodes and easily enumerate all of the Tor user IP
3721) addresses. (Even though they can't learn what destinations the users
3722) are talking to, they still might be able to do bad things with just a
Roger Dingledine cleanup on the EntryGuards...

Roger Dingledine authored 13 years ago

3723) list of users.) However, that feature won't really become useful until
3724) we move to a "directory guard" design as well.
Roger Dingledine import EntryGuards faq entry

Roger Dingledine authored 13 years ago

3725) </p>
3726) 
3727)     <hr>
3728) 
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

3729)     <a id="ChangePaths"></a>
3730)     <h3><a class="anchor" href="#ChangePaths">How often does Tor change its paths?</a></h3>
3731)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3732)      Tor will reuse the same circuit for new TCP streams for 10 minutes,
3733)      as long as the circuit is working fine. (If the circuit fails, Tor
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3734)      will switch to a new circuit immediately.)
3735)     </p>
3736)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3737) But note that a single TCP stream (e.g. a long IRC connection) will stay on
3738) the same circuit forever -- we don't rotate individual streams from one
3739) circuit to the next. Otherwise an adversary with a partial view of the
3740) network would be given many chances over time to link you to your
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3741) destination, rather than just one chance.
3742)     </p>
3743) 
3744)     <hr>
3745) 
3746)     <a id="CellSize"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3747)     <h3><a class="anchor" href="#CellSize">Tor uses hundreds of bytes for
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3748)     every IRC line. I can't afford that!</a></h3>
3749)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3750)      Tor sends data in chunks of 512 bytes (called "cells"), to make it
3751)      harder for intermediaries to guess exactly how many bytes you're
3752)      communicating at each step. This is unlikely to change in the near
3753)      future -- if this increased bandwidth use is prohibitive for you, I'm
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3754)      afraid Tor is not useful for you right now.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

3755)     </p>
3756)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3757) The actual content of these fixed size cells is
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3758) <a href="https://gitweb.torproject.org/torspec.git/blob/HEAD:/tor-spec.txt">
3759) documented in the main Tor spec</a>, section 3.
3760)     </p>
3761)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3762) We have been considering one day adding two classes of cells -- maybe a 64
3763) byte cell and a 1024 byte cell. This would allow less overhead for
3764) interactive streams while still allowing good throughput for bulk streams.
3765) But since we want to do a lot of work on quality-of-service and better
3766) queuing approaches first, you shouldn't expect this change anytime soon
3767) (if ever). However if you are keen, there are a couple of
Roger Dingledine make the faq work better on...

Roger Dingledine authored 10 years ago

3768) <a href="<page getinvolved/volunteer>#Research">
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3769) research ideas</a> that may involve changing the cell size.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

3770)     </p>
3771) 
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3772)     <hr>
3773) 
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

3774)     <a id="OutboundConnections"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3775)     <h3><a class="anchor" href="#OutboundConnections">Why does netstat show
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3776)     these outbound connections?</a></h3>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

3777)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3778)     Because that's how Tor works. It holds open a handful of connections
3779)     so there will be one available when you need one.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

3780)     </p>
3781) 
3782)     <hr>
3783) 
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

3784)     <a id="PowerfulBlockers"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3785)     <h3><a class="anchor" href="#PowerfulBlockers">What about powerful blocking
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3786)     mechanisms?</a></h3>
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

3787)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3788)  An adversary with a great deal of manpower and money, and severe
3789)  real-world penalties to discourage people from trying to evade detection,
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3790)  is a difficult test for an anonymity and anti-censorship system.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

3791)     </p>
3792)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3793) The original Tor design was easy to block if the attacker controls Alice's
3794) connection to the Tor network --- by blocking the directory authorities, by
3795) blocking all the relay IP addresses in the directory, or by filtering based
3796) on the fingerprint of the Tor TLS handshake. After seeing these attacks and
3797) others first-hand, more effort was put into researching new circumvention
3798) techniques. Pluggable transports are protocols designed to allow users behind
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3799) government firewalls to access the Tor network.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

3800)     </p>
3801)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3802) We've made quite a bit of progress on this problem lately. You can read more
Roger Dingledine make the faq work better on...

Roger Dingledine authored 10 years ago

3803) details on the <a href="<page docs/pluggable-transports>">
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3804) pluggable transports page</a>. You may also be interested in
3805) <a href="https://www.youtube.com/watch?v=GwMr8Xl7JMQ">Roger and Jake's talk at
3806) 28C3</a>, or <a href="https://www.youtube.com/watch?v=JZg1nqs793M">Runa's
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3807) talk at 44con</a>.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

3808)     </p>
3809) 
3810)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3811) 
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

3812)     <a id="RemotePhysicalDeviceFingerprinting"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3813)     <h3><a class="anchor" href="#RemotePhysicalDeviceFingerprinting">Does Tor
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3814)     resist "remote physical device fingerprinting"?</a></h3>
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

3815)     <p>
3816)  Yes, we resist all of these attacks as far as we know.
3817)     </p>
3818)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3819) These attacks come from examining characteristics of the IP headers or TCP
3820) headers and looking for information leaks based on individual hardware
3821) signatures. One example is the
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

3822) <a href="http://www.caida.org/outreach/papers/2005/fingerprinting/">
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3823) Oakland 2005 paper</a> that lets you learn if two packet streams originated
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3824) from the same hardware, but only if you can see the original TCP timestamps.
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

3825) </p>
3826) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3827) Tor transports TCP streams, not IP packets, so we end up automatically
3828) scrubbing a lot of the potential information leaks. Because Tor relays use
3829) their own (new) IP and TCP headers at each hop, this information isn't
3830) relayed from hop to hop. Of course, this also means that we're limited in
3831) the protocols we can transport (only correctly-formed TCP, not all IP like
3832) ZKS's Freedom network could) -- but maybe that's a good thing at this stage.
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3833) </p>
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

3834) 
3835)     <hr>
3836) 
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

3837)     <a id="IsTorLikeAVPN"></a>
3838)     <h3><a class="anchor" href="#IsTorLikeAVPN">Is Tor like a VPN?</a></h3>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3839) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3840)     <p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3841)     <b>Do not use a VPN as an <a href="http://www.nbcnews.com/news/investigations/war-anonymous-british-spies-attacked-hackers-snowden-docs-show-n21361">anonymity solution</a>.</b>
3842)     If you're looking for a trusted entry into the Tor network, or if you want
Matt Pagan Combined the two FAQ entrie...

Matt Pagan authored 10 years ago

3843)     to obscure the fact that you're using Tor, <a
3844)     href="https://www.torproject.org/docs/bridges#RunningABridge">setting up
3845)     a private server as a bridge</a> works quite well.
3846)     </p>
3847) 
3848)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3849)     VPNs encrypt the traffic between the user and the VPN provider,
3850)     and they can act as a proxy between a user and an online destination.
3851)     However, VPNs have a single point of failure: the VPN provider.
3852)     A technically proficient attacker or a number of employees could
3853)     retrieve the full identity information associated with a VPN user.
3854)     It is also possible to use coercion or other means to convince a
3855)     VPN provider to reveal their users' identities. Identities can be
3856)     discovered by following a money trail (using Bitcoin does not solve
3857)     this problem because Bitcoin is not anonymous), or by persuading the
3858)     VPN provider to hand over logs. Even
3859)     if a VPN provider says they don't keep logs, users have to take their
3860)     word for it---and trust that the VPN provider won't buckle to outside
3861)     pressures that might want them to start keeping logs.
3862)     </p>
3863) 
3864)     <p>
3865)     When you use a VPN, websites can still build up a persistent profile of
3866)     your usage over time. Even though sites you visit won't automatically
3867)     get your originating IP address, they still know how to profile you
3868)     based on your browsing history.
3869)     </p>
3870) 
3871)     <p>
3872)     When you use Tor the IP address you connect to changes at most every 10
3873)     minutes, and often more frequently than that. This makes it extremely
3874)     dificult for websites to create any sort of persistent profile of Tor
3875)     users (assuming you did not <a
Roger Dingledine make the faq work better on...

Roger Dingledine authored 10 years ago

3876)     href="<page download/download>#warning">identify
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3877)     yourself in other ways</a>). No one Tor relay can know enough
3878)     information to compromise any Tor user because of Tor's <a
Roger Dingledine make the faq work better on...

Roger Dingledine authored 10 years ago

3879)     href="<page about/overview>#thesolution">encrypted
Matt Pagan Created a new FAQ entry abo...

Matt Pagan authored 10 years ago

3880)     three-hop circuit</a> design.
3881)     </p>
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

3882) 
3883)     <hr>
3884) 
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

3885)     <a id="Proxychains"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3886)     <h3><a class="anchor" href="#Proxychains">Aren't 10 proxies
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

3887)     (proxychains) better than Tor with only 3 hops?</a></h3>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3888) 
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

3889)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3890)     Proxychains is a program that sends your traffic through a series of
3891)     open web proxies that you supply before sending it on to your final
3892)     destination. <a href="#KeyManagement">Unlike Tor</a>, proxychains
3893)     does not encrypt the connections between each proxy server. An open proxy
3894)     that wanted to monitor your connection could see all the other proxy
3895)     servers you wanted to use between itself and your final destination,
3896)     as well as the IP address that proxy hop received traffic from.
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

3897)     </p>
3898)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3899)     Because the <a
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

3900)     href="https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=tor-spec.txt">
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3901)     Tor protocol</a> requires encrypted relay-to-relay connections, not
3902)     even a misbehaving relay can see the entire path of any Tor user.
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

3903)     </p>
3904)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3905)     While Tor relays are run by volunteers and checked periodically for
3906)     suspicious behavior, many open proxies that can be found with a search
3907)     engine are compromised machines, misconfigured private proxies
3908)     not intended for public use, or honeypots set up to exploit users.
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

3909)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3910) 
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

3911)     <hr>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

3912) 
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

3913) 
Matt Pagan Added more FAQ entries

Matt Pagan authored 10 years ago

3914) <a id="AttacksOnOnionRouting"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3915)     <h3><a class="anchor" href="#AttacksOnOnionRouting">What attacks remain
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3916)     against onion routing?</a></h3>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

3917)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3918) As mentioned above, it is possible for an observer who can view both you and
3919) either the destination website or your Tor exit node to correlate timings of
3920) your traffic as it enters the Tor network and also as it exits. Tor does not
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3921) defend against such a threat model.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

3922)     </p>
3923)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3924) In a more limited sense, note that if a censor or law enforcement agency has
3925) the ability to obtain specific observation of parts of the network, it is
3926) possible for them to verify a suspicion that you talk regularly to your friend
3927) by observing traffic at both ends and correlating the timing of only that
3928) traffic. Again, this is only useful to verify that parties already suspected
3929) of communicating with one another are doing so. In most countries, the
3930) suspicion required to obtain a warrant already carries more weight than
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

3931) timing correlation would provide.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

3932)     </p>
3933)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3934) Furthermore, since Tor reuses circuits for multiple TCP connections, it is
3935) possible to associate non anonymous and anonymous traffic at a given exit
3936) node, so be careful about what applications you run concurrently over Tor.
3937) Perhaps even run separate Tor clients for these applications.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

3938)     </p>
3939) 
3940)     <hr>
3941) 
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

3942)     <a id="LearnMoreAboutAnonymity"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3943)     <h3><a class="anchor" href="#LearnMoreAboutAnonymity">Where can I
Matt Pagan Added 6 FAQ entries from th...

Matt Pagan authored 10 years ago

3944)     learn more about anonymity?</a></h3>
3945) 
3946)     <p>
3947)     <a href="http://freehaven.net/anonbib/topic.html#Anonymous_20communication">Read these papers</a> (especially the ones in boxes) to get up to speed on anonymous communication systems.
3948)     </p>
3949) 
3950)     <hr>
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

3951) 
3952)     <a id="AlternateDesigns"></a>
3953)     <h2><a class="anchor">Alternate designs:</a></h2>
3954) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3955)     <a id="EverybodyARelay"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3956)     <h3><a class="anchor" href="#EverybodyARelay">You should make every
3957) Tor user be a relay.</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3958) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3959)     <p>
3960)     Requiring every Tor user to be a relay would help with scaling the
Roger Dingledine wtf, most of the links from...

Roger Dingledine authored 13 years ago

3961)     network to handle all our users, and <a
Matt Pagan Add 1 FAQ entry and cleaned...

Matt Pagan authored 10 years ago

3962)     href="#BetterAnonymity">running a Tor
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3963)     relay may help your anonymity</a>. However, many Tor users cannot be
3964) good
3965)     relays &mdash; for example, some Tor clients operate from behind
3966) restrictive
3967)     firewalls, connect via modem, or otherwise aren't in a position
3968) where they
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3969)     can relay traffic. Providing service to these clients is a critical
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3970)     part of providing effective anonymity for everyone, since many Tor
3971) users
3972)     are subject to these or similar constraints and including these
3973) clients
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3974)     increases the size of the anonymity set.
3975)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3976) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3977)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3978)     That said, we do want to encourage Tor users to run relays, so what
3979) we
3980)     really want to do is simplify the process of setting up and
3981) maintaining
3982)     a relay. We've made a lot of progress with easy configuration in the
3983) past
3984)     few years: Vidalia has an easy relay configuration interface, and
3985) supports
3986)     uPnP too. Tor is good at automatically detecting whether it's
3987) reachable and
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3988)     how much bandwidth it can offer.
3989)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3990) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3991)     <p>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

3992)     There are five steps we need to address before we can do this
3993) though:
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3994)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

3995) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

3996)     <p>
3997)     First, we need to make Tor stable as a relay on all common
3998)     operating systems. The main remaining platform is Windows,
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

3999)     and we're mostly there. See Section 4.1 of <a
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

4000)     href="https://www.torproject.org/press/2008-12-19-roadmap-press-release"
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

4001) >our
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

4002)     development roadmap</a>.
4003)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

4004) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

4005)     <p>
4006)     Second, we still need to get better at automatically estimating
4007)     the right amount of bandwidth to allow. See item #7 on the
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

4008)     <a href="<page getinvolved/volunteer>#Research">research section of
4009) the
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

4010)     volunteer page</a>: "Tor doesn't work very well when relays
4011)     have asymmetric bandwidth (e.g. cable or DSL)". It might be that <a
Roger Dingledine revise TransportIPnotTCP an...

Roger Dingledine authored 13 years ago

4012)     href="<page docs/faq>#TransportIPnotTCP">switching
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

4013)     to UDP transport</a> is the simplest answer here &mdash; which alas
4014) is
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

4015)     not a very simple answer at all.
4016)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

4017) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

4018)     <p>
4019)     Third, we need to work on scalability, both of the network (how to
4020)     stop requiring that all Tor relays be able to connect to all Tor
4021)     relays) and of the directory (how to stop requiring that all Tor
4022)     users know about all Tor relays). Changes like this can have large
4023)     impact on potential and actual anonymity. See Section 5 of the <a
4024)     href="<svnprojects>design-paper/challenges.pdf">Challenges</a> paper
4025)     for details. Again, UDP transport would help here.
4026)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

4027) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

4028)     <p>
4029)     Fourth, we need to better understand the risks from
4030)     letting the attacker send traffic through your relay while
4031)     you're also initiating your own anonymized traffic. <a
4032)     href="http://freehaven.net/anonbib/#back01">Three</a> <a
4033)     href="http://freehaven.net/anonbib/#clog-the-queue">different</a>
4034)     <a href="http://freehaven.net/anonbib/#torta05">research</a> papers
4035)     describe ways to identify the relays in a circuit by running traffic
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

4036)     through candidate relays and looking for dips in the traffic while
4037) the
4038)     circuit is active. These clogging attacks are not that scary in the
4039) Tor
4040)     context so long as relays are never clients too. But if we're trying
4041) to
4042)     encourage more clients to turn on relay functionality too (whether
4043) as
4044)     <a href="<page docs/bridges>">bridge relays</a> or as normal
4045) relays), then
4046)     we need to understand this threat better and learn how to mitigate
4047) it.
4048)     </p>
4049) 
4050)     <p>
4051)     Fifth, we might need some sort of incentive scheme to encourage
4052) people
4053)     to relay traffic for others, and/or to become exit nodes. Here are
4054) our
Roger Dingledine fix another 404 from the fr...

Roger Dingledine authored 13 years ago

4055)     <a href="<blog>two-incentive-designs-tor">current
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

4056)     thoughts on Tor incentives</a>.
4057)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

4058) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

4059)     <p>
4060)     Please help on all of these!
4061)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

4062) 
Roger Dingledine import TransportIPnotTCP fa...

Roger Dingledine authored 13 years ago

4063) <hr>
4064) 
4065) <a id="TransportIPnotTCP"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

4066) <h3><a class="anchor" href="#TransportIPnotTCP">You should transport all
4067) IP packets, not just TCP packets.</a></h3>
Roger Dingledine import TransportIPnotTCP fa...

Roger Dingledine authored 13 years ago

4068) 
4069) <p>
Roger Dingledine revise TransportIPnotTCP an...

Roger Dingledine authored 13 years ago

4070) This would be handy, because it would make Tor better able to handle
4071) new protocols like VoIP, it could solve the whole need to socksify
4072) applications, and it would solve the fact that exit relays need to
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

4073) allocate a lot of file descriptors to hold open all the exit
4074) connections.
Roger Dingledine import TransportIPnotTCP fa...

Roger Dingledine authored 13 years ago

4075) </p>
4076) 
4077) <p>
Roger Dingledine revise TransportIPnotTCP an...

Roger Dingledine authored 13 years ago

4078) We're heading in this direction: see <a
4079) href="https://trac.torproject.org/projects/tor/ticket/1855">this trac
4080) ticket</a> for directions we should investigate. Some of the hard
4081) problems are:
Roger Dingledine import TransportIPnotTCP fa...

Roger Dingledine authored 13 years ago

4082) </p>
4083) 
Runa A. Sandvik updated translations for th...

Runa A. Sandvik authored 13 years ago

4084) <ol>
Roger Dingledine revise TransportIPnotTCP an...

Roger Dingledine authored 13 years ago

4085) <li>IP packets reveal OS characteristics. We would still need to do
4086) IP-level packet normalization, to stop things like TCP fingerprinting
4087) attacks. Given the diversity and complexity of TCP stacks, along with <a
Matt Pagan Add 1 FAQ entry and cleaned...

Matt Pagan authored 10 years ago

4088) href="#RemotePhysicalDeviceFingerprinting">device
Roger Dingledine revise TransportIPnotTCP an...

Roger Dingledine authored 13 years ago

4089) fingerprinting attacks</a>, it looks like our best bet is shipping our
4090) own user-space TCP stack.
Roger Dingledine import TransportIPnotTCP fa...

Roger Dingledine authored 13 years ago

4091) </li>
Roger Dingledine revise TransportIPnotTCP an...

Roger Dingledine authored 13 years ago

4092) <li>Application-level streams still need scrubbing. We will still need
4093) user-side applications like Torbutton. So it won't become just a matter
4094) of capturing packets and anonymizing them at the IP layer.
Roger Dingledine import TransportIPnotTCP fa...

Roger Dingledine authored 13 years ago

4095) </li>
4096) <li>Certain protocols will still leak information. For example, we must
4097) rewrite DNS requests so they are delivered to an unlinkable DNS server
4098) rather than the DNS server at a user's ISP; thus, we must understand
4099) the protocols we are transporting.
4100) </li>
4101) <li><a
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

4102) href="http://crypto.stanford.edu/~nagendra/projects/dtls/dtls.html">DTLS
4103) </a>
Roger Dingledine revise TransportIPnotTCP an...

Roger Dingledine authored 13 years ago

4104) (datagram TLS) basically has no users, and IPsec sure is big. Once we've
4105) picked a transport mechanism, we need to design a new end-to-end Tor
4106) protocol for avoiding tagging attacks and other potential anonymity and
4107) integrity issues now that we allow drops, resends, et cetera.
Roger Dingledine import TransportIPnotTCP fa...

Roger Dingledine authored 13 years ago

4108) </li>
4109) <li>Exit policies for arbitrary IP packets mean building a secure
4110) IDS. Our node operators tell us that exit policies are one of the main
4111) reasons they're willing to run Tor. Adding an Intrusion Detection System
4112) to handle exit policies would increase the security complexity of Tor,
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

4113) and would likely not work anyway, as evidenced by the entire field of
4114) IDS
Roger Dingledine import TransportIPnotTCP fa...

Roger Dingledine authored 13 years ago

4115) and counter-IDS papers. Many potential abuse issues are resolved by the
4116) fact that Tor only transports valid TCP streams (as opposed to arbitrary
4117) IP including malformed packets and IP floods), so exit policies become
4118) even <i>more</i> important as we become able to transport IP packets. We
4119) also need to compactly describe exit policies in the Tor directory,
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

4120) so clients can predict which nodes will allow their packets to exit
4121) &mdash;
Roger Dingledine import TransportIPnotTCP fa...

Roger Dingledine authored 13 years ago

4122) and clients need to predict all the packets they will want to send in
4123) a session before picking their exit node!
4124) </li>
Roger Dingledine revise TransportIPnotTCP an...

Roger Dingledine authored 13 years ago

4125) <li>The Tor-internal name spaces would need to be redesigned. We support
4126) hidden service ".onion" addresses by intercepting the addresses when
4127) they are passed to the Tor client. Doing so at the IP level will require
4128) a more complex interface between Tor and the local DNS resolver.
Roger Dingledine import TransportIPnotTCP fa...

Roger Dingledine authored 13 years ago

4129) </li>
Roger Dingledine import the "you should hide...

Roger Dingledine authored 12 years ago

4130) </ol>
4131) 
4132) <hr>
4133) 
4134) <a id="HideExits"></a>
4135) <h3><a class="anchor" href="#HideExits">You should hide the list of Tor
4136) relays, so people can't block the exits.</a></h3>
4137) 
4138) <p>
4139) There are a few reasons we don't:
4140) </p>
4141) 
4142) <ol>
4143) <li>We can't help but make the information available, since Tor clients
4144) need to use it to pick their paths. So if the "blockers" want it, they
4145) can get it anyway. Further, even if we didn't tell clients about the
4146) list of relays directly, somebody could still make a lot of connections
4147) through Tor to a test site and build a list of the addresses they see.
4148) </li>
4149) 
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

4150) <li>If people want to block us, we believe that they should be allowed
4151) to
Roger Dingledine import the "you should hide...

Roger Dingledine authored 12 years ago

4152) do so.  Obviously, we would prefer for everybody to allow Tor users to
4153) connect to them, but people have the right to decide who their services
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

4154) should allow connections from, and if they want to block anonymous
4155) users,
Roger Dingledine import the "you should hide...

Roger Dingledine authored 12 years ago

4156) they can.
4157) </li>
4158) 
4159) <li>Being blockable also has tactical advantages: it may be a persuasive
Roger Dingledine add a link to the 'banning...

Roger Dingledine authored 12 years ago

4160) response to website maintainers who feel threatened by Tor. Giving them
4161) the option may inspire them to <a href="<page docs/faq-abuse>#Bans">stop
4162) and think</a> about whether they really want to eliminate private access
4163) to their system, and if not, what other options they might have. The
4164) time they might otherwise have spent blocking Tor, they may instead
4165) spend rethinking their overall approach to privacy and anonymity.
Roger Dingledine import the "you should hide...

Roger Dingledine authored 12 years ago

4166) </li>
Roger Dingledine import TransportIPnotTCP fa...

Roger Dingledine authored 13 years ago

4167) </ol>
4168) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

4169)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

4170) 
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4171) <a id="ChoosePathLength"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4172) <h3><a class="anchor" href="#ChoosePathLength">You should let people choose
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

4173) their path length.</a></h3>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4174) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4175)  Right now the path length is hard-coded at 3 plus the number of nodes in
4176)  your path that are sensitive. That is, in normal cases it's 3, but for
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

4177)  example if you're accessing a hidden service or a ".exit" address it could be 4.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4178) </p>
4179) <p>
Roger Dingledine more updates on the 'change...

Roger Dingledine authored 9 years ago

4180)  We don't want to encourage people to use paths longer than this &mdash; it
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4181)  increases load on the network without (as far as we can tell) providing
Roger Dingledine fix broken link

Roger Dingledine authored 9 years ago

4182)  any more security. Remember that
4183) <a href="https://svn.torproject.org/svn/projects/design-paper/tor-design.html#subsec:threat-model">the
4184) best way to attack Tor is to attack the endpoints and ignore the middle
Matt Pagan More than 3 hops can harm a...

Matt Pagan authored 9 years ago

4185)  of the path</a>.
Roger Dingledine more updates on the 'change...

Roger Dingledine authored 9 years ago

4186)  Also, using paths longer than 3 could harm anonymity, first because
4187)  it makes <a href="http://freehaven.net/anonbib/#ccs07-doa">"denial of
4188)  security"</a> attacks easier, and second because it could act as an
4189)  identifier if only a few people do it ("Oh, there's that person who
4190)  changed her path length again").
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4191) </p>
4192) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4193)  And we don't want to encourage people to use paths of length 1 either.
Roger Dingledine more updates on the 'change...

Roger Dingledine authored 9 years ago

4194)  Currently there is no reason to suspect that investigating a single
4195)  relay will yield user-destination pairs, but if many people are using
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4196)  only a single hop, we make it more likely that attackers will seize or
Roger Dingledine more updates on the 'change...

Roger Dingledine authored 9 years ago

4197)  break into relays in hopes of tracing users.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4198) </p>
4199) <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4200)  Now, there is a good argument for making the number of hops in a path
4201)  unpredictable. For example, somebody who happens to control the last
4202)  two hops in your path still doesn't know who you are, but they know
4203)  for sure which entry node you used. Choosing path length from, say,
4204)  a geometric distribution will turn this into a statistical attack,
4205)  which seems to be an improvement. On the other hand, a longer path
Roger Dingledine more updates on the 'change...

Roger Dingledine authored 9 years ago

4206)  length is bad for usability, and without further protections it seems
4207)  likely that an adversary can estimate your path length anyway. We're
4208)  not sure of the right trade-offs here. Please write a research paper
4209)  that tells us what to do.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4210) </p>
4211) 
4212)     <hr>
4213) 
4214) <a id="SplitEachConnection"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4215)     <h3><a class="anchor" href="#SplitEachConnection">You should split
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

4216)     each connection over many paths.</a></h3>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4217) 
4218)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4219)  We don't currently think this is a good idea. You see, the attacks we're
4220)  worried about are at the endpoints: the adversary watches Alice (or the
4221)  first hop in the path) and Bob (or the last hop in the path) and learns
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

4222)  that they are communicating.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4223)     </p>
4224)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4225) If we make the assumption that timing attacks work well on even a few packets
4226) end-to-end, then having *more* possible ways for the adversary to observe the
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

4227) connection seems to hurt anonymity, not help it.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4228)     </p>
4229)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4230) Now, it's possible that we could make ourselves more resistant to end-to-end
4231) attacks with a little bit of padding and by making each circuit send and
4232) receive a fixed number of cells. This approach is more well-understood in
4233) the context of high-latency systems. See e.g.
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

4234) <a href="http://freehaven.net/anonbib/#pet05-serjantov">
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4235) Message Splitting Against the Partial Adversary by Andrei Serjantov and
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

4236) Steven J. Murdoch</a>.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4237)     </p>
4238)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4239) But since we don't currently understand what network and padding
4240) parameters, if any, could provide increased end-to-end security, our
4241) current strategy is to minimize the number of places that the adversary
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

4242) could possibly see.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4243)     </p>
4244) 
4245)     <hr>
4246) 
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

4247)     <a id="MigrateApplicationStreamsAcrossCircuits"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4248)     <h3><a class="anchor" href="#MigrateApplicationStreamsAcrossCircuits">You
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

4249)     should migrate application streams across circuits.</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4250)     <p>This would be great for two reasons. First, if a circuit breaks, we
4251)     would be able to shift its active streams onto a new circuit, so they
4252)     don't have to break. Second, it is conceivable that we could get
4253)     increased security against certain attacks by migrating streams
4254)     periodically, since leaving a stream on a given circuit for many hours
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

4255)     might make it more vulnerable to certain adversaries.</p>
4256) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4257)     <p>There are two problems though. First, Tor would need a much more
4258)     bulky protocol. Right now each end of the Tor circuit just sends the
4259)     cells, and lets TCP provide the in-order guaranteed delivery. If we
4260)     can move streams across circuits, though, we would need to add queues
4261)     at each end of the circuit, add sequence numbers so we can send and
4262)     receive acknowledgements for cells, and so forth. These changes would
4263)     increase the complexity of the Tor protocol considerably. Which leads
4264)     to the second problem: if the exit node goes away, there's nothing we
4265)     can do to save the TCP connection. Circuits are typically three hops
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

4266)     long, so in about a third of the cases we just lose.</p>
4267) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4268)     <p>Thus our current answer is that since we can only improve things by
4269)     at best 2/3, it's not worth the added code and complexity. If somebody
4270)     writes a protocol specification for it and it turns out to be pretty
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

4271)     simple, we'd love to add it.</p>
4272) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4273)     <p>But there are still some approaches we can take to improve the
4274)     reliability of streams. The main approach we have now is to specify
4275)     that streams using certain application ports prefer circuits to be
4276)     made up of stable nodes. These ports are specified in the "LongLivedPorts"
Matt Pagan Added two new FAQ entries.

Matt Pagan authored 10 years ago

4277)     <a href="#torrc">torrc</a> option, and they default to</p>
4278)     <pre>21,22,706,1863,5050,5190,5222,5223,6667,6697,8300</pre>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4279)     <p>The definition of "stable" is an open research question, since we
4280)     can only guess future stability based on past performance. Right now
4281)     we judge that a node is stable if it advertises that it has been up
4282)     for more than a day. Down the road we plan to refine this so it takes into
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

4283)     account the average stability of the other nodes in the Tor network.</p>
4284) 
4285)     <hr>
4286) 
4287)     <a id="LetTheNetworkPickThePath"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4288)     <h3><a class="anchor" href="#LetTheNetworkPickThePath">You should
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

4289)     let the network pick the path, not the client</a></h3>
4290) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4291)     <p>No. You cannot trust the network to pick the path for relays could
4292)     collude and route you through their colluding friends. This would give
Matt Pagan Added 3 FAQ entires and mis...

Matt Pagan authored 10 years ago

4293)     an adversary the ability to watch all of your traffic end to end.</p>
4294) 
4295)     <hr>
4296) 
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4297)     <a id="UnallocatedNetBlocks"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4298)     <h3><a class="anchor" href="#UnallocatedNetBlocks">Your default exit
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

4299)     policy should block unallocated net blocks too.</a></h3>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4300) 
4301)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4302)  No, it shouldn't. The default exit policy blocks certain private net blocks,
4303)  like 10.0.0.0/8, because they might actively be in use by Tor relays and we
4304)  don't want to cause any surprises by bridging to internal networks. Some
4305)  overzealous firewall configs suggest that you also block all the parts of
4306)  the Internet that IANA has not currently allocated. First, this turns into
4307)  a problem for them when those addresses *are* allocated. Second, why should
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

4308)  we default-reject something that might one day be useful?
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4309)     </p>
4310)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4311) Tor's default exit policy is chosen to be flexible and useful in the future:
4312) we allow everything except the specific addresses and ports that we
4313) anticipate will lead to problems.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4314)     </p>
4315) 
4316)     <hr>
4317) 
4318)     <a id="BlockWebsites"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4319)     <h3><a class="anchor" href="#BlockWebsites">Exit policies should be
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

4320)     able to block websites, not just IP addresses.</a></h3>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4321) 
4322)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4323)  It would be nice to let relay operators say things like "reject
4324)  www.slashdot.org" in their exit policies, rather than requiring
4325)  them to learn all the IP address space that could be covered by the site
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

4326)  (and then also blocking other sites at those IP addresses).
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4327)     </p>
4328)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4329) There are two problems, though. First, users could still get around these
4330) blocks. For example, they could request the IP address rather than the
4331) hostname when they exit from the Tor network. This means operators would
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

4332) still need to learn all the IP addresses for the destinations in question.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4333)     </p>
4334)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4335) The second problem is that it would allow remote attackers to censor
4336) arbitrary sites. For example, if a Tor operator blocks www1.slashdot.org,
4337) and then some attacker poisons the Tor relay's DNS or otherwise changes
4338) that hostname to resolve to the IP address for a major news site, then
4339) suddenly that Tor relay is blocking the news site.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4340)     </p>
4341) 
4342)     <hr>
4343) 
4344)     <a id="BlockContent"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4345)     <h3><a class="anchor" href="#BlockContent">You should change Tor to
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

4346)     prevent users from posting certain content.</a></h3>
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4347) 
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4348)     <p> Tor only transports data, it does not inspect the contents of the
4349)     connections which are sent over it. In general it's a very hard problem
4350)     for a computer to determine what is objectionable content with good true
4351)     positive/false positive rates and we are not interested in addressing
Matt Pagan Continued cleanup; Added 5...

Matt Pagan authored 10 years ago

4352)     this problem.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4353)     </p>
4354)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4355) Further, and more importantly, which definition of "certain content" could we
4356) use? Every choice would lead to a quagmire of conflicting personal morals. The
4357) only solution is to have no opinion.
Matt Pagan Corrected the FAQ entry 'Wh...

Matt Pagan authored 10 years ago

4358)     </p>
4359) 
4360)     <hr>
4361) 
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4362)     <a id="SendPadding"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4363)     <h3><a class="anchor" href="#SendPadding">You should send padding so it's
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4364)     more secure.</a></h3>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

4365) 
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4366)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4367)     Like all anonymous communication networks that are fast enough for web
4368)     browsing, Tor is vulnerable to statistical "traffic confirmation"
4369)     attacks, where the adversary watches traffic at both ends of a circuit
4370)     and confirms his guess that they're communicating. It would be really
4371)     nice if we could use cover traffic to confuse this attack. But there
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4372)     are three problems here:
4373)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

4374) 
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4375)     <ul>
4376)     <li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4377)     Cover traffic is really expensive. And *every* user needs to be doing
4378)     it. This adds up to a lot of extra bandwidth cost for our volunteer
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4379)     operators, and they're already pushed to the limit.
4380)     </li>
4381)     <li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4382)     You'd need to always be sending traffic, meaning you'd need to always
4383)     be online. Otherwise, you'd need to be sending end-to-end cover
4384)     traffic -- not just to the first hop, but all the way to your final
4385)     destination -- to prevent the adversary from correlating presence of
4386)     traffic at the destination to times when you're online. What does it
4387)     mean to send cover traffic to -- and from -- a web server? That is not
4388)     supported in most protocols.
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4389)     </li>
4390)     <li>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4391)     Even if you *could* send full end-to-end padding between all users and
4392)     all destinations all the time, you're *still* vulnerable to active
4393)     attacks that block the padding for a short time at one end and look for
4394)     patterns later in the path.
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4395)     </li>
4396)     </ul>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

4397) 
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4398)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4399)     In short, for a system like Tor that aims to be fast, we don't see any
4400)     use for padding, and it would definitely be a serious usability problem.
4401)     We hope that one day somebody will prove us wrong, but we are not
4402)     optimistic.
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4403)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

4404) 
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4405)     <hr>
4406) 
4407)     <a id="Steganography"></a>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4408)     <h3><a class="anchor" href="#Steganography">You should use steganography to hide Tor
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4409)     traffic.</a></h3>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

4410) 
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4411)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4412)     Many people suggest that we should use steganography to make it hard
4413)     to notice Tor connections on the Internet. There are a few problems
4414)     with this idea though:
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4415)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

4416) 
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4417)     <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4418)     First, in the current network topology, the Tor relays list <a
4419)     href="#HideExits">is public</a> and can be accessed by attackers.
4420)     An attacker who wants to detect or block anonymous users could
4421)     always just notice <b>any connection</b> to or from a Tor relay's
4422)     IP address.
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4423)     </p>
Roger Dingledine get rid of trailing whitespace

Roger Dingledine authored 9 years ago

4424) 
Matt Pagan Cleanup; added FAQ entries.

Matt Pagan authored 10 years ago

4425)     <hr>
4426) 
Matt Pagan Added subheads to the FAQ p...

Matt Pagan authored 10 years ago

4427)     <a id="Abuse"></a>
4428)     <h2><a class="anchor">Abuse:</a></h2>
4429) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

4430)     <a id="Criminals"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

4431)     <h3><a class="anchor" href="#Criminals">Doesn't Tor enable criminals
4432) to do bad things?</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

4433) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

4434)     <p>
4435)     For the answer to this question and others, please see our <a
4436)     href="<page docs/faq-abuse>">Tor Abuse FAQ</a>.
4437)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

4438) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

4439)     <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

4440) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

4441)     <a id="RespondISP"></a>
Andrew Lewman clean up the faq, address t...

Andrew Lewman authored 11 years ago

4442)     <h3><a class="anchor" href="#RespondISP">How do I respond to my ISP
4443) about my exit relay?</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

4444) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

4445)     <p>
4446)     A collection of templates for successfully responding to ISPs is <a
Karsten Loesing Update wiki links

Karsten Loesing authored 12 years ago

4447)     href="<wiki>doc/TorAbuseTemplates">collected
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

4448)     here</a>.
4449)     </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

4450) 
Sebastian Hahn We decided to go with HTML...

Sebastian Hahn authored 13 years ago

4451)     <hr>
Andrew Lewman migration some questions fr...

Andrew Lewman authored 13 years ago

4452) 
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

4453)    <a id="HelpPoliceOrLawyers"></a>
4454)    <h3><a class="anchor" href="#HelpPoliceOrLawyers">I have questions about
4455)    a Tor IP address for a legal case.</a></h3>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4456) 
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

4457)    <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4458)    Please read the <a
4459)    href="https://www.torproject.org/eff/tor-legal-faq">legal FAQ written
4460)    by EFF lawyers</a>. There's a growing <a
4461)    href="https://blog.torproject.org/blog/start-tor-legal-support-directory">legal
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

4462)    directory</a> of people who may be able to help you.
4463)    </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4464) 
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

4465)    <p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4466)    If you need to check if a certain IP address was acting as a Tor exit
4467)    node at a certain date and time, you can use the <a
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

4468)    href="https://exonerator.torproject.org/">ExoneraTor tool</a> to query the
4469)    historic Tor relay lists and get an answer.
4470)    </p>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4471) 
Matt Pagan Made loose information abou...

Matt Pagan authored 10 years ago

4472)    <hr>
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 10 years ago

4473) 
Andrew Lewman first cut of the new, shiny...

Andrew Lewman authored 13 years ago

4474)   </div>
4475)   <!-- END MAINCOL -->
4476)   <div id = "sidecol">
4477) #include "side.wmi"
4478) #include "info.wmi"
4479)   </div>
4480)   <!-- END SIDECOL -->
4481) </div>
4482) <!-- END CONTENT -->
Roger Dingledine get rid of trailing whitesp...

Roger Dingledine authored 13 years ago

4483) #include <foot.wmi>