tor-webwml.git

1) ## translation metadata
2) # Revision: $Revision$

3) # Translation-Priority: 3-low

4) 

5) #include "head.wmi" TITLE="Tor: Linux/BSD/Unix Install Instructions"

6) 
7) <div class="center">
8) 
9) <div class="main-column">
10) 
11) <h1>Running the <a href="<page index>">Tor</a> client on Linux/BSD/Unix</h1>
12) <br />
13) 
14) <p>
15) <b>Note that these are the installation instructions for running a Tor
16) client. If you want to relay traffic for others to help the network grow
17) (please do), read the <a

18) href="<page docs/tor-doc-relay>">Configuring a relay</a> guide.</b>

19) </p>
20) 
21) <hr />
22) <a id="installing"></a>
23) <h2><a class="anchor" href="#installing">Step One: Download and Install Tor</a></h2>
24) <br />
25) 
26) <p>
27) The latest release of Tor can be found on the <a

28) href="<page download-unix>">download</a> page. We have packages for Debian,
29) Red Hat, Gentoo, *BSD, etc there too. If you're
30) using Ubuntu, don't use the default packages: use <a

31) href="<page docs/debian>#ubuntu">our deb repository</a> instead.

32) </p>
33) 
34) <p>If you're building from source, first install <a
35) href="http://www.monkey.org/~provos/libevent/">libevent</a>, and
36) make sure you have openssl and zlib (including the -devel packages if

37) applicable). Then run:<br />
38) <tt>tar xzf tor-<version-stable>.tar.gz; cd tor-<version-stable><br />
39) ./configure &amp;&amp; make</tt><br />
40) Now you can run tor as <tt>src/or/tor</tt>, or you can run <tt>make install</tt>

41) (as root if necessary) to install it into /usr/local/, and then you can
42) start it just by running <tt>tor</tt>.
43) </p>
44) 
45) <p>Tor comes configured as a client by default. It uses a built-in
46) default configuration file, and most people won't need to change any of
47) the settings. Tor is now installed.
48) </p>
49) 
50) <hr />
51) <a id="privoxy"></a>
52) <h2><a class="anchor" href="#privoxy">Step Two: Install Privoxy for Web Browsing</a></h2>
53) <br />
54) 
55) <p>After installing Tor, you need to configure your applications to use it.
56) </p>
57) 
58) <p>
59) The first step is to set up web browsing. Start by installing <a
60) href="http://www.privoxy.org/">Privoxy</a>: click on 'recent releases'
61) and pick your favorite package or install from source. Privoxy is a
62) filtering web proxy that integrates well with Tor.
63) </p>
64) 

65) <p>Once you've installed Privoxy (either from package or from source),

66) <b>you will need to configure Privoxy to use Tor</b>. You may find
67) <a
68) href="https://wiki.torproject.org/noreply/TheOnionRouter/PrivoxyConfig">this
69) sample Privoxy configuration</a> useful. Otherwise, you should configure
70) Privoxy by hand, using the directions that follow.
71) </p>

72) 

73) <p>

74) Open Privoxy's "config" file (look in /etc/privoxy/ or /usr/local/etc/)

75) and add the line <br />
76) <tt>forward-socks4a / 127.0.0.1:9050 .</tt><br />

77) to the top of the config file. <b>Don't forget to add the dot at the end of
78) the line.</b>

79) </p>
80) 

81) <p>

82) On some distributions, localhost is mapped to an IPv6 address, and some
83) programs might not be able to connect to Privoxy. If so, change the line

84) <br />

85) <tt>listen-address localhost:8118</tt><br />

86) so that it reads<br />
87) <tt>listen-address 127.0.0.1:8118</tt>

88) </p>
89) 

90) <p>Privoxy keeps a log file of everything passed through it.  In

91) order to stop this you will need to comment out three lines by inserting a

92) \# before the line. The three lines are:<br />
93) <tt>logfile logfile</tt><br />
94) and the line <br />
95) <tt>jarfile jarfile</tt><br />
96) and (on some systems) the line <br />
97) <tt>debug 1  # show each GET/POST/CONNECT request</tt><br />

98) </p>
99) 

100) <p>Depending on which default config file you have for Privoxy,
101) you may also need to turn off <tt>enable-remote-toggle</tt>,
102) <tt>enable-remote-http-toggle</tt>, and <tt>enable-edit-actions</tt>.
103) </p>
104) 

105) <p>You'll need to restart Privoxy for the changes to take effect.</p>
106) 
107) <hr />
108) <a id="using"></a>
109) <h2><a class="anchor" href="#using">Step Three: Configure your applications to use Tor</a></h2>
110) <br />
111) 
112) <p>After installing Tor and Privoxy, you need to configure your
113) applications to use them. The first step is to set up web browsing.</p>
114) 

115) <p>You should use Tor with Firefox and Torbutton, for best safety.
116) Simply install the <a

117) href="https://addons.mozilla.org/firefox/2275/">Torbutton

118) plugin</a>, restart your Firefox, and you're all set:
119) </p>

120) 

121) <img alt="Torbutton plugin for Firefox"
122) src="../img/screenshot-torbutton.png"
123) border="1">

124) 

125) <br />
126) 

127) <p>

128) If you plan to run Firefox on a different computer than Tor, see the <a

129) href="https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#SocksListenAddress">

130) FAQ

131) entry for running Tor on a different computer</a>.

132) </p>

133) 
134) <p>To Torify other applications that support HTTP proxies, just
135) point them at Privoxy (that is, localhost port 8118). To use SOCKS
136) directly (for instant messaging, Jabber, IRC, etc), you can point
137) your application directly at Tor (localhost port 9050), but see <a

138) href="https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#SOCKSAndDNS">this

139) FAQ entry</a> for why this may be dangerous. For applications
140) that support neither SOCKS nor HTTP, take a look at <a
141) href="http://tsocks.sourceforge.net/">tsocks</a> or <a

142) href="https://wiki.torproject.org/noreply/TheOnionRouter/TorifyHOWTO#socat">socat</a>.

143) </p>
144) 
145) <p>For information on how to Torify other applications, check out the

146) <a href="https://wiki.torproject.org/noreply/TheOnionRouter/TorifyHOWTO">Torify

147) HOWTO</a>.
148) </p>
149) 
150) <hr />
151) <a id="verify"></a>
152) <h2><a class="anchor" href="#verify">Step Four: Make sure it's working</a></h2>
153) <br />
154) 
155) <p>
156) Next, you should try using your browser with Tor and make

157) sure that your IP address is being anonymized. Click on

158) <a href="https://check.torproject.org/">the

159) Tor detector</a>
160) and see whether it thinks you're using Tor or not.
161) #<a href="http://ipchicken.com/">this site</a>
162) #to see what IP address it thinks you're using.

163) (If that site is down, see <a

164) href="https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#IsMyConnectionPrivate">this

165) FAQ entry</a> for more suggestions on how to test your Tor.)
166) </p>
167) 
168) <p>If you have a personal firewall that limits your computer's
169) ability to connect to itself (this includes something like SELinux on
170) Fedora Core 4), be sure to allow connections from
171) your local applications to Privoxy (local port 8118) and Tor (local port
172) 9050). If
173) your firewall blocks outgoing connections, punch a hole so
174) it can connect to at least TCP ports 80 and 443, and then see <a

175) href="https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#FirewalledClient">this

176) FAQ entry</a>.  If your SELinux config is not allowing tor or privoxy to
177) run correctly, create a file named booleans.local in the directory
178) /etc/selinux/targeted.  Edit this file in your favorite text editor and
179) insert "allow_ypbind=1".  Restart your machine for this change to take
180) effect.
181) </p>
182) 
183) <p>If it's still not working, look at <a

184) href="https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#ItDoesntWork">this

185) FAQ entry</a> for hints.</p>
186) 
187) <hr />
188) <a id="server"></a>

189) <a id="relay"></a>
190) <h2><a class="anchor" href="#relay">Step Five: Configure it as a relay</a></h2>

191) <br />
192) 
193) <p>The Tor network relies on volunteers to donate bandwidth. The more

194) people who run relays, the faster the Tor network will be. If you have

195) at least 20 kilobytes/s each way, please help out Tor by configuring your

196) Tor to be a relay too. We have many features that make Tor relays easy

197) and convenient, including rate limiting for bandwidth, exit policies so
198) you can limit your exposure to abuse complaints, and support for dynamic
199) IP addresses.</p>
200) 

201) <p>Having relays in many different places on the Internet is what

202) makes Tor users secure. <a

203) href="https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#RelayAnonymity">You

204) may also get stronger anonymity yourself</a>,
205) since remote sites can't know whether connections originated at your
206) computer or were relayed from others.</p>
207) 

208) <p>Read more at our <a href="<page docs/tor-doc-relay>">Configuring a relay</a>

209) guide.</p>
210) 
211) <hr />
212) 

213) <p>If you have suggestions for improving this document, please <a
214) href="<page contact>">send them to us</a>. Thanks!</p>