Roger Dingledine commited on 2007-04-23 22:52:04
Zeige 1 geänderte Dateien mit 63 Einfügungen und 79 Löschungen.
| ... | ... |
@@ -12,7 +12,7 @@ |
| 12 | 12 |
|
| 13 | 13 |
<p>Tor allows clients and servers to offer hidden services. That is, |
| 14 | 14 |
you can offer a web server, SSH server, etc., without revealing your |
| 15 |
-IP to its users. In fact, because you don't use any public address, |
|
| 15 |
+IP address to its users. In fact, because you don't use any public address, |
|
| 16 | 16 |
you can run a hidden service from behind your firewall. |
| 17 | 17 |
</p> |
| 18 | 18 |
|
| ... | ... |
@@ -50,23 +50,66 @@ It will typically take 10-60 seconds to load |
| 50 | 50 |
immediately and your browser pops up an alert saying that |
| 51 | 51 |
"www.6sxoyfb3h2nvok2d.onion could not be found, please check the name and |
| 52 | 52 |
try again" then you haven't configured Tor and Privoxy correctly; see <a |
| 53 |
-href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#ItDoesntWork">this |
|
| 54 |
-FAQ entry</a> for some help. |
|
| 53 |
+href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#ItDoesntWork">the |
|
| 54 |
+it-doesn't-work FAQ entry</a> for some help. |
|
| 55 | 55 |
</p> |
| 56 | 56 |
|
| 57 | 57 |
<hr /> |
| 58 | 58 |
<a id="one"></a> |
| 59 |
-<h2><a class="anchor" href="#one">Step One: Configure an example hidden service</a></h2> |
|
| 59 |
+<h2><a class="anchor" href="#one">Step One: Install a web server locally</a></h2> |
|
| 60 | 60 |
<br /> |
| 61 | 61 |
|
| 62 |
-<p>In this step, you're going to configure a hidden service that points |
|
| 63 |
-to www.google.com. This way we can make sure you have this step |
|
| 64 |
-working before we start thinking about setting up a web server locally. |
|
| 62 |
+<p>First, you need to set up a web server locally. Setting up a web |
|
| 63 |
+server can be tricky, |
|
| 64 |
+so we're just going to go over a few basics here. If you get stuck |
|
| 65 |
+or want to do more, find a friend who can help you. We recommend you |
|
| 66 |
+install a new separate web server for your hidden service, since even |
|
| 67 |
+if you already have one installed, you may be using it (or want to use |
|
| 68 |
+it later) for an actual website. |
|
| 69 |
+</p> |
|
| 70 |
+ |
|
| 71 |
+<p>If you're on Unix or OS X and you're comfortable with |
|
| 72 |
+the command-line, by far the best way to go is to install <a |
|
| 73 |
+href="http://www.acme.com/software/thttpd/">thttpd</a>. Just grab the |
|
| 74 |
+latest tarball, untar it (it will create its own directory), and run |
|
| 75 |
+./configure && make. Then mkdir hidserv, cd hidserv, and run |
|
| 76 |
+"../thttpd -p 5222 -h localhost". It will give you back your prompt, |
|
| 77 |
+and now you're running a webserver on port 5222. You can put files to |
|
| 78 |
+serve in the hidserv directory. |
|
| 79 |
+</p> |
|
| 80 |
+ |
|
| 81 |
+<p>If you're on Windows, you might pick <a |
|
| 82 |
+href="http://savant.sourceforge.net/">Savant</a> or <a |
|
| 83 |
+href="http://httpd.apache.org/">Apache</a>, and be sure to configure it |
|
| 84 |
+to bind only to localhost. You should also figure out what port you're |
|
| 85 |
+listening on, because you'll use it below. |
|
| 86 |
+</p> |
|
| 87 |
+ |
|
| 88 |
+<p>(The reason we bind the web server only to localhost is to make |
|
| 89 |
+sure it isn't publically accessible. If people could get to it directly, |
|
| 90 |
+they could confirm that your computer is the one offering the hidden |
|
| 91 |
+service.) |
|
| 92 |
+</p> |
|
| 93 |
+ |
|
| 94 |
+<p>Once you've got your web server set up, make sure it works: open your |
|
| 95 |
+browser and go to <a |
|
| 96 |
+href="http://localhost:5222/">http://localhost:5222/</a>, where 5222 is |
|
| 97 |
+the port that you picked above. Then try putting a file in the main html |
|
| 98 |
+directory, and make sure it shows up when you access the site. |
|
| 99 |
+</p> |
|
| 100 |
+ |
|
| 101 |
+<hr /> |
|
| 102 |
+<a id="two"></a> |
|
| 103 |
+<h2><a class="anchor" href="#two">Step Two: Configure your hidden service</a></h2> |
|
| 104 |
+<br /> |
|
| 105 |
+ |
|
| 106 |
+<p>Next, you need to configure your hidden service to point to your |
|
| 107 |
+local web server. |
|
| 65 | 108 |
</p> |
| 66 | 109 |
|
| 67 | 110 |
<p>First, open your torrc file in your favorite text editor. (See <a |
| 68 |
-href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#torrc">this |
|
| 69 |
-FAQ entry</a> to learn what this means.) Go to the middle section and |
|
| 111 |
+href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#torrc">the |
|
| 112 |
+torrc FAQ entry</a> to learn what this means.) Go to the middle section and |
|
| 70 | 113 |
look for the line</p> |
| 71 | 114 |
|
| 72 | 115 |
<pre> |
| ... | ... |
@@ -89,13 +132,12 @@ port people accessing the hidden service will think they're using) and an |
| 89 | 132 |
IP address and port for redirecting connections to this virtual port.</li> |
| 90 | 133 |
</ul> |
| 91 | 134 |
|
| 92 |
-<p>In this example, we're going to set up a hidden service that points to |
|
| 93 |
-Google. So add the following lines to your torrc: |
|
| 135 |
+<p>Add the following lines to your torrc: |
|
| 94 | 136 |
</p> |
| 95 | 137 |
|
| 96 | 138 |
<pre> |
| 97 | 139 |
HiddenServiceDir /Library/Tor/var/lib/tor/hidden_service/ |
| 98 |
-HiddenServicePort 80 www.google.com:80 |
|
| 140 |
+HiddenServicePort 80 127.0.0.1:5222 |
|
| 99 | 141 |
</pre> |
| 100 | 142 |
|
| 101 | 143 |
<p>You're going to want to change the HiddenServiceDir line, so it points |
| ... | ... |
@@ -105,21 +147,20 @@ package. On Unix, try "/home/username/hidserv/" and fill in your own |
| 105 | 147 |
username in place of "username". On Windows you might pick:</p> |
| 106 | 148 |
<pre> |
| 107 | 149 |
HiddenServiceDir C:\Documents and Settings\username\Application Data\hidden_service\\ |
| 108 |
-HiddenServicePort 80 www.google.com:80 |
|
| 150 |
+HiddenServicePort 80 127.0.0.1:5222 |
|
| 109 | 151 |
</pre> |
| 110 | 152 |
|
| 111 | 153 |
<p>Now save the torrc, shut down |
| 112 |
-your Tor, and then start it again. (See <a |
|
| 113 |
-href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#Restarting">this |
|
| 114 |
-FAQ entry</a> for tips on restarting Tor.) |
|
| 154 |
+your Tor, and then start it again. |
|
| 115 | 155 |
</p> |
| 116 | 156 |
|
| 117 | 157 |
<p>If Tor starts up again, great. Otherwise, something is wrong. Look |
| 118 | 158 |
at your torrc for obvious mistakes like typos. Then double-check |
| 119 | 159 |
that the directory you picked is writeable by you. If it's still |
| 120 | 160 |
not working, you should look at the Tor logs for hints. (See <a |
| 121 |
-href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#Logs">this |
|
| 122 |
-FAQ entry</a> if you don't know how to enable or find your log file.) |
|
| 161 |
+href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#Logs">the |
|
| 162 |
+logging FAQ entry</a> if you don't know how to enable or find your |
|
| 163 |
+log file.) |
|
| 123 | 164 |
</p> |
| 124 | 165 |
|
| 125 | 166 |
<p>When Tor starts, it will automatically create the HiddenServiceDir |
| ... | ... |
@@ -148,71 +189,14 @@ directory servers when they're trying to access your service. |
| 148 | 189 |
</p> |
| 149 | 190 |
|
| 150 | 191 |
<p>Try it now: paste the contents of the hostname file into your web |
| 151 |
-browser. If it works, you'll get the google frontpage, but the URL in your |
|
| 152 |
-browser's window will be your hidden service hostname. If it doesn't work, |
|
| 153 |
-look in your logs for some hints, and keep playing with it until it works. |
|
| 154 |
-</p> |
|
| 155 |
- |
|
| 156 |
-<hr /> |
|
| 157 |
-<a id="two"></a> |
|
| 158 |
-<h2><a class="anchor" href="#two">Step Two: Now install a web server locally</a></h2> |
|
| 159 |
-<br /> |
|
| 160 |
- |
|
| 161 |
-<p>Now that you have hidden services working on Tor, you need to |
|
| 162 |
-set up your web server locally. Setting up a web server is tricky, |
|
| 163 |
-so we're just going to go over a few basics here. If you get stuck |
|
| 164 |
-or want to do more, find a friend who can help you. We recommend you |
|
| 165 |
-install a new separate web server for your hidden service, since even |
|
| 166 |
-if you already have one installed, you may be using it (or want to use |
|
| 167 |
-it later) for an actual website. |
|
| 168 |
-</p> |
|
| 169 |
- |
|
| 170 |
-<p>If you're on Unix or OS X and you're comfortable with |
|
| 171 |
-the command-line, by far the best way to go is to install <a |
|
| 172 |
-href="http://www.acme.com/software/thttpd/">thttpd</a>. Just grab the |
|
| 173 |
-latest tarball, untar it (it will create its own directory), and run |
|
| 174 |
-./configure && make. Then mkdir hidserv, cd hidserv, and run |
|
| 175 |
-"../thttpd -p 5222 -h localhost". It will give you back your prompt, |
|
| 176 |
-and now you're running a webserver on port 5222. You can put files to |
|
| 177 |
-serve in the hidserv directory. |
|
| 178 |
-</p> |
|
| 179 |
- |
|
| 180 |
-<p>If you're on Windows, you might pick <a |
|
| 181 |
-href="http://savant.sourceforge.net/">Savant</a> or <a |
|
| 182 |
-href="http://httpd.apache.org/">Apache</a>, and be sure to configure it |
|
| 183 |
-to bind only to localhost. You should also figure out what port you're |
|
| 184 |
-listening on, because you'll use it below. |
|
| 185 |
-</p> |
|
| 186 |
- |
|
| 187 |
-<p>(The reason we bind the web server only to localhost is to make |
|
| 188 |
-sure it isn't publically accessible. If people could get to it directly, |
|
| 189 |
-they could confirm that your computer is the one offering the hidden |
|
| 190 |
-service.) |
|
| 191 |
-</p> |
|
| 192 |
- |
|
| 193 |
-<p>Once you've got your web server set up, make sure it works: open your |
|
| 194 |
-browser and go to <a |
|
| 195 |
-href="http://localhost:5222/">http://localhost:5222/</a>, where 5222 is |
|
| 196 |
-the port that you picked above. Then try putting a file in the main html |
|
| 197 |
-directory, and make sure it shows up when you access the site. |
|
| 192 |
+browser. If it works, you'll get the html page you set up in step one. |
|
| 193 |
+If it doesn't work, look in your logs for some hints, and keep playing |
|
| 194 |
+with it until it works. |
|
| 198 | 195 |
</p> |
| 199 | 196 |
|
| 200 | 197 |
<hr /> |
| 201 | 198 |
<a id="three"></a> |
| 202 |
-<h2><a class="anchor" href="#three">Step Three: Connect your web server to your hidden service</a></h2> |
|
| 203 |
-<br /> |
|
| 204 |
- |
|
| 205 |
-<p>This part is very simple. Open up your torrc again, and change the |
|
| 206 |
-HiddenServicePort line from "www.google.com:80" to "localhost:5222". |
|
| 207 |
-Then <a |
|
| 208 |
-href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#Restarting">restart |
|
| 209 |
-Tor</a>. Make sure that it's working by reloading your hidden |
|
| 210 |
-service hostname in your browser. |
|
| 211 |
-</p> |
|
| 212 |
- |
|
| 213 |
-<hr /> |
|
| 214 |
-<a id="four"></a> |
|
| 215 |
-<h2><a class="anchor" href="#four">Step Four: More advanced tips</a></h2> |
|
| 199 |
+<h2><a class="anchor" href="#three">Step Three: More advanced tips</a></h2> |
|
| 216 | 200 |
<br /> |
| 217 | 201 |
|
| 218 | 202 |
<p>If you plan to keep your service available for a long time, you might |
| 219 | 203 |