tor-webwml.git

1) ## translation metadata
2) # Revision: $Revision$
3) 

4) #include "head.wmi" TITLE="Linux/BSD/Unix Install Instructions"

5) 
6) <div class="center">
7) 
8) <div class="main-column">
9) 
10) <h1>Running the <a href="<page index>">Tor</a> client on Linux/BSD/Unix</h1>
11) <br />
12) 
13) <p>
14) <b>Note that these are the installation instructions for running a Tor
15) client. If you want to relay traffic for others to help the network grow
16) (please do), read the <a

17) href="<page docs/tor-doc-server>">Configuring a server</a> guide.</b>

18) </p>
19) 
20) <hr />
21) <a id="installing"></a>
22) <h2><a class="anchor" href="#installing">Step One: Download and Install Tor</a></h2>
23) <br />
24) 
25) <p>
26) The latest release of Tor can be found on the <a
27) href="<page download>">download</a> page. We have packages for Debian,
28) Red Hat, Gentoo, *BSD, etc there too.
29) </p>
30) 
31) <p>If you're building from source, first install <a
32) href="http://www.monkey.org/~provos/libevent/">libevent</a>, and
33) make sure you have openssl and zlib (including the -devel packages if
34) applicable). Then Run <tt>tar xzf tor-0.1.0.15.tar.gz;
35) cd tor-0.1.0.15</tt>. Then <tt>./configure &amp;&amp; make</tt>. Now you
36) can run tor as <tt>src/or/tor</tt>, or you can run <tt>make install</tt>
37) (as root if necessary) to install it into /usr/local/, and then you can
38) start it just by running <tt>tor</tt>.
39) </p>
40) 
41) <p>Tor comes configured as a client by default. It uses a built-in
42) default configuration file, and most people won't need to change any of
43) the settings. Tor is now installed.
44) </p>
45) 
46) <hr />
47) <a id="privoxy"></a>
48) <h2><a class="anchor" href="#privoxy">Step Two: Install Privoxy for Web Browsing</a></h2>
49) <br />
50) 
51) <p>After installing Tor, you need to configure your applications to use it.
52) </p>
53) 
54) <p>
55) The first step is to set up web browsing. Start by installing <a
56) href="http://www.privoxy.org/">Privoxy</a>: click on 'recent releases'
57) and pick your favorite package or install from source. Privoxy is a
58) filtering web proxy that integrates well with Tor.
59) </p>
60) 

61) <p>Once you've installed Privoxy (either from package or from source),
62) <b>you will need to configure Privoxy to use Tor</b>.

63) Open Privoxy's "config" file (look in /etc/privoxy/ or /usr/local/etc/)
64) and add the line <br>
65) <tt>forward-socks4a / localhost:9050 .</tt><br>
66) to the top of the config file. Don't forget to add the dot at the end.
67) </p>
68) 
69) <p>Privoxy keeps a log file of everything passed through it.  In
70) order to stop this you will need to comment out two lines by inserting a

71) \# before the line. The two lines are:<br>

72) <tt>logfile logfile</tt><br>
73) and the line <br>
74) <tt>jarfile jarfile</tt><br>
75) </p>
76) 
77) <p>You'll need to restart Privoxy for the changes to take effect.</p>
78) 
79) <hr />
80) <a id="using"></a>
81) <h2><a class="anchor" href="#using">Step Three: Configure your applications to use Tor</a></h2>
82) <br />
83) 
84) <p>After installing Tor and Privoxy, you need to configure your
85) applications to use them. The first step is to set up web browsing.</p>
86) 
87) <p>If you're using Firefox (we recommend it), check out our <a

88) href="<page docs/tor-switchproxy>">Tor SwitchProxy howto</a> to set up

89) a plugin that makes it easy to switch between using Tor and using a
90) direct connection.</p>
91) 

92) <p>Otherwise, you need to manually configure your browser's proxy
93) settings.

94) In Mozilla, this is in Edit|Preferences|Advanced|Proxies.
95) In Opera 7.5x it's Tools|Preferences|Network|Proxy servers.

96) You should fill in "localhost"
97) and "8118" to point the top four protocols to Privoxy, as shown here. (Even
98) though Privoxy doesn't support FTP and Gopher, <a
99) href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#FtpProxy">you
100) should set them up anyway</a>.) You should also fill out the socks              proxy entry to point directly to Tor ("localhost", "9050", and socks5)
101) to cover protocols besides the first four. Then click "OK".</p>

102) 
103) <p>Using privoxy is <strong>necessary</strong> because <a
104) href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#SOCKSAndDNS">browsers
105) leak your DNS requests when they use a SOCKS proxy directly</a>, which
106) is bad for your anonymity. Privoxy also removes certain dangerous
107) headers from your web requests, and blocks obnoxious ad sites like
108) Doubleclick.</p>
109) 
110) <p>To Torify other applications that support HTTP proxies, just
111) point them at Privoxy (that is, localhost port 8118). To use SOCKS
112) directly (for instant messaging, Jabber, IRC, etc), you can point
113) your application directly at Tor (localhost port 9050), but see <a
114) href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#SOCKSAndDNS">this
115) FAQ entry</a> for why this may be dangerous. For applications
116) that support neither SOCKS nor HTTP, take a look at <a
117) href="http://tsocks.sourceforge.net/">tsocks</a> or <a
118) href="http://wiki.noreply.org/noreply/TheOnionRouter/TorifyHOWTO#socat">socat</a>.
119) </p>
120) 
121) <p>For information on how to Torify other applications, check out the
122) <a href="http://wiki.noreply.org/wiki/TheOnionRouter/TorifyHOWTO">Torify
123) HOWTO</a>.
124) </p>
125) 
126) <hr />
127) <a id="verify"></a>
128) <h2><a class="anchor" href="#verify">Step Four: Make sure it's working</a></h2>
129) <br />
130) 
131) <p>
132) Next, you should try using your browser with Tor and make
133) sure that your IP address is being anonymized. Click on the <a
134) href="http://serifos.eecs.harvard.edu/cgi-bin/ipaddr.pl?tor=1">Tor
135) detector</a> and see whether it thinks you're using Tor or not.
136) (If that site is down, see <a
137) href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#IsMyConnectionPrivate">this
138) FAQ entry</a> for more suggestions on how to test your Tor.)
139) </p>
140) 
141) <p>If you have a personal firewall that limits your computer's
142) ability to connect to itself (this includes something like SELinux on
143) Fedora Core 4), be sure to allow connections from
144) your local applications to Privoxy (local port 8118) and Tor (local port
145) 9050). If
146) your firewall blocks outgoing connections, punch a hole so
147) it can connect to at least TCP ports 80 and 443, and then see <a
148) href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#FirewalledClient">this
149) FAQ entry</a>.  If your SELinux config is not allowing tor or privoxy to
150) run correctly, create a file named booleans.local in the directory
151) /etc/selinux/targeted.  Edit this file in your favorite text editor and
152) insert "allow_ypbind=1".  Restart your machine for this change to take
153) effect.
154) </p>
155) 
156) <p>If it's still not working, look at <a
157) href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#ItDoesntWork">this
158) FAQ entry</a> for hints.</p>
159) 
160) <hr />
161) <a id="server"></a>
162) <h2><a class="anchor" href="#server">Step Five: Configure it as a server</a></h2>
163) <br />
164) 
165) <p>The Tor network relies on volunteers to donate bandwidth. The more
166) people who run servers, the faster the Tor network will be. If you have
167) at least 20 kilobytes/s each way, please help out Tor by configuring your
168) Tor to be a server too. We have many features that make Tor servers easy
169) and convenient, including rate limiting for bandwidth, exit policies so
170) you can limit your exposure to abuse complaints, and support for dynamic
171) IP addresses.</p>
172) 
173) <p>Having servers in many different places on the Internet is what
174) makes Tor users secure. <a
175) href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#ServerAnonymity">You
176) may also get stronger anonymity yourself</a>,
177) since remote sites can't know whether connections originated at your
178) computer or were relayed from others.</p>
179) 

180) <p>Read more at our <a href="<page docs/tor-doc-server>">Configuring a server</a>