Jens Kubieziel commited on 2007-07-01 10:33:23
Zeige 1 geänderte Dateien mit 43 Einfügungen und 34 Löschungen.
... | ... |
@@ -30,9 +30,14 @@ website. |
30 | 30 |
<h2><a class="anchor" href="#zero">Step Zero: Get Tor and Privoxy working</a></h2> |
31 | 31 |
<br /> |
32 | 32 |
|
33 |
-<p>Before you start, you need to make sure 1) Tor is up and running, |
|
34 |
-2) Privoxy is up and running, 3) Privoxy is configured to point |
|
35 |
-to Tor, and 4) You actually set it up correctly.</p> |
|
33 |
+<p>Before you start, you need to make sure:</p> |
|
34 |
+<ol> |
|
35 |
+<li>Tor is up and running,</li> |
|
36 |
+<li>Privoxy is up and running,</li> |
|
37 |
+<li>Privoxy is configured to point to Tor and</lI> |
|
38 |
+<li>You actually set it up correctly.</li> |
|
39 |
+</ol> |
|
40 |
+ |
|
36 | 41 |
|
37 | 42 |
<p>Windows users should follow the <a |
38 | 43 |
href="<page docs/tor-doc-win32>">Windows |
... | ... |
@@ -72,8 +77,9 @@ it later) for an actual website. |
72 | 77 |
the command-line, by far the best way to go is to install <a |
73 | 78 |
href="http://www.acme.com/software/thttpd/">thttpd</a>. Just grab the |
74 | 79 |
latest tarball, untar it (it will create its own directory), and run |
75 |
-./configure && make. Then mkdir hidserv, cd hidserv, and run |
|
76 |
-"../thttpd -p 5222 -h localhost". It will give you back your prompt, |
|
80 |
+<kbd>./configure && make</kbd>. Then <kbd>mkdir hidserv; cd |
|
81 |
+hidserv</kbd>, and run |
|
82 |
+<kbd>../thttpd -p 5222 -h localhost</kbd>. It will give you back your prompt, |
|
77 | 83 |
and now you're running a webserver on port 5222. You can put files to |
78 | 84 |
serve in the hidserv directory. |
79 | 85 |
</p> |
... | ... |
@@ -120,14 +126,14 @@ look for the line</p> |
120 | 126 |
This section of the file consists of groups of lines, each representing |
121 | 127 |
one hidden service. Right now they are all commented out (the lines |
122 | 128 |
start with #), so hidden services are disabled. Each group of lines |
123 |
-consists of one HiddenServiceDir line, and one or more HiddenServicePort |
|
124 |
-lines:</p> |
|
129 |
+consists of one <var>HiddenServiceDir</var> line, and one or more |
|
130 |
+<var>HiddenServicePort</var> lines:</p> |
|
125 | 131 |
<ul> |
126 |
-<li><b>HiddenServiceDir</b> is a directory where Tor will store information |
|
132 |
+<li><var>HiddenServiceDir</var> is a directory where Tor will store information |
|
127 | 133 |
about that hidden service. In particular, Tor will create a file here named |
128 |
-<i>hostname</i> which will tell you the onion URL. You don't need to add any |
|
134 |
+<var>hostname</var> which will tell you the onion URL. You don't need to add any |
|
129 | 135 |
files to this directory.</li> |
130 |
-<li><b>HiddenServicePort</b> lets you specify a virtual port (that is, what |
|
136 |
+<li><var>HiddenServicePort</var> lets you specify a virtual port (that is, what |
|
131 | 137 |
port people accessing the hidden service will think they're using) and an |
132 | 138 |
IP address and port for redirecting connections to this virtual port.</li> |
133 | 139 |
</ul> |
... | ... |
@@ -140,7 +146,7 @@ HiddenServiceDir /Library/Tor/var/lib/tor/hidden_service/ |
140 | 146 |
HiddenServicePort 80 127.0.0.1:5222 |
141 | 147 |
</pre> |
142 | 148 |
|
143 |
-<p>You're going to want to change the HiddenServiceDir line, so it points |
|
149 |
+<p>You're going to want to change the <var>HiddenServiceDir</var> line, so it points |
|
144 | 150 |
to an actual directory that is readable/writeable by the user that will |
145 | 151 |
be running Tor. The above line should work if you're using the OS X Tor |
146 | 152 |
package. On Unix, try "/home/username/hidserv/" and fill in your own |
... | ... |
@@ -154,35 +160,38 @@ HiddenServicePort 80 127.0.0.1:5222 |
154 | 160 |
your Tor, and then start it again. |
155 | 161 |
</p> |
156 | 162 |
|
157 |
-<p>If Tor starts up again, great. Otherwise, something is wrong. Look |
|
158 |
-at your torrc for obvious mistakes like typos. Then double-check |
|
159 |
-that the directory you picked is writeable by you. If it's still |
|
160 |
-not working, you should look at the Tor logs for hints. (See <a |
|
163 |
+<p>If Tor starts up again, great. Otherwise, something is wrong. First look at |
|
164 |
+your logfiles for hints. It will print some warnings or error messages. That |
|
165 |
+should give you an idea what went wrong. Typically there are typos in the torrc |
|
166 |
+or wrong directory permissions (See <a |
|
161 | 167 |
href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#Logs">the |
162 | 168 |
logging FAQ entry</a> if you don't know how to enable or find your |
163 | 169 |
log file.) |
164 | 170 |
</p> |
165 | 171 |
|
166 |
-<p>When Tor starts, it will automatically create the HiddenServiceDir |
|
167 |
-that you specified (if necessary), and it will create two files there. |
|
168 |
-First, it will generate a new |
|
169 |
-public/private keypair for your hidden service, and write it into a |
|
170 |
-file called "private_key". Don't share this key with others -- if you |
|
171 |
-do they will be able to impersonate your hidden service. |
|
172 |
-</p> |
|
173 |
- |
|
174 |
-<p>The other file it will create is called "hostname". This contains |
|
172 |
+<p>When Tor starts, it will automatically create the <var>HiddenServiceDir</var> |
|
173 |
+that you specified (if necessary), and it will create two files there.</p> |
|
174 |
+ |
|
175 |
+<dl> |
|
176 |
+<dt><var>private_key</var></dt> |
|
177 |
+<dd>First, Tor will generate a new public/private keypair for your hidden |
|
178 |
+service. It is written into a file called "private_key". Don't share this key |
|
179 |
+with others -- if you do they will be able to impersonate your hidden |
|
180 |
+service.</dd> |
|
181 |
+<dt><var>hostname</var><dt> |
|
182 |
+<dd>The other file Tor will create is called "hostname". This contains |
|
175 | 183 |
a short summary of your public key -- it will look something like |
176 | 184 |
<tt>6sxoyfb3h2nvok2d.onion</tt>. This is the public name for your service, |
177 | 185 |
and you can tell it to people, publish it on websites, put it on business |
178 |
-cards, etc. (If Tor runs as a different user than you, for example on |
|
186 |
+cards, etc.</dd> |
|
187 |
+ |
|
188 |
+<p>If Tor runs as a different user than you, for example on |
|
179 | 189 |
OS X, Debian, or Red Hat, then you may need to become root to be able |
180 |
-to view these files.) |
|
181 |
-</p> |
|
190 |
+to view these files.</p> |
|
182 | 191 |
|
183 | 192 |
<p>Now that you've restarted Tor, it is busy picking introduction points |
184 |
-in the Tor network, and generating what's called a "hidden service |
|
185 |
-descriptor", which is a signed list of introduction points along with |
|
193 |
+in the Tor network, and generating a <em>hidden service |
|
194 |
+descriptor</em>. This is a signed list of introduction points along with |
|
186 | 195 |
the service's full public key. It anonymously publishes this descriptor |
187 | 196 |
to the directory servers, and other people anonymously fetch it from the |
188 | 197 |
directory servers when they're trying to access your service. |
... | ... |
@@ -200,7 +209,7 @@ with it until it works. |
200 | 209 |
<br /> |
201 | 210 |
|
202 | 211 |
<p>If you plan to keep your service available for a long time, you might |
203 |
-want to make a backup copy of the private_key file somewhere. |
|
212 |
+want to make a backup copy of the <var>private_key</var> file somewhere. |
|
204 | 213 |
</p> |
205 | 214 |
|
206 | 215 |
<p>We avoided recommending Apache above, a) because many people might |
... | ... |
@@ -214,11 +223,11 @@ using it as a hidden service? Savant probably has these problems too. |
214 | 223 |
</p> |
215 | 224 |
|
216 | 225 |
<p>If you want to forward multiple virtual ports for a single hidden |
217 |
-service, just add more HiddenServicePort lines. |
|
226 |
+service, just add more <var>HiddenServicePort</var> lines. |
|
218 | 227 |
If you want to run multiple hidden services from the same Tor |
219 |
-client, just add another HiddenServiceDir line. All the following |
|
220 |
-HiddenServicePort lines refer to this HiddenServiceDir line, until |
|
221 |
-you add another HiddenServiceDir line: |
|
228 |
+client, just add another <var>HiddenServiceDir</var> line. All the following |
|
229 |
+<var>HiddenServicePort</var> lines refer to this <var>HiddenServiceDir</var> line, until |
|
230 |
+you add another <var>HiddenServiceDir</var> line: |
|
222 | 231 |
</p> |
223 | 232 |
|
224 | 233 |
<pre> |
225 | 234 |