1 | 1 |
deleted file mode 100644 |
... | ... |
@@ -1,150 +0,0 @@ |
1 |
-## translation metadata |
|
2 |
-# Revision: $Revision$ |
|
3 |
-# Translation-Priority: 4-optional |
|
4 |
- |
|
5 |
-#include "head.wmi" TITLE="obfsproxy: Setting up an Obfsproxy Bridge on Debian/Ubuntu" CHARSET="UTF-8" |
|
6 |
- |
|
7 |
-<div id="content" class="clearfix"> |
|
8 |
- <div id="breadcrumbs"> |
|
9 |
- <a href="<page index>">Home » </a> |
|
10 |
- <a href="<page projects/projects>">Projects » </a> |
|
11 |
- <a href="<page projects/obfsproxy>">obfsproxy</a> |
|
12 |
- </div> |
|
13 |
- <div id="maincol"> |
|
14 |
- |
|
15 |
- <!-- PUT CONTENT AFTER THIS TAG --> |
|
16 |
- |
|
17 |
- <h1 id="instructions">Setting up an Obfsproxy Bridge on Debian/Ubuntu</h1> |
|
18 |
- |
|
19 |
- <img src="$(IMGROOT)/obfsproxy_diagram.png" alt="obfsproxy diagram"></a> |
|
20 |
- |
|
21 |
- <p> |
|
22 |
- <img width="7%" height="7%" style="float: left;" src="$(IMGROOT)/icon-Obfsproxy.jpg"> |
|
23 |
- <b> Hey! </b> |
|
24 |
- If you are <b>not</b> using Debian or Ubuntu, you better look |
|
25 |
- <a href="<page projects/obfsproxy-instructions>">at this other guide</a> |
|
26 |
- which sets up Obfsproxy from source. |
|
27 |
- </p> |
|
28 |
- <br><br> |
|
29 |
- |
|
30 |
- |
|
31 |
- <p> |
|
32 |
- This is a <b>Debian/Ubuntu</b> guide for installing the Python |
|
33 |
- version of obfsproxy. If you are still using the C version, we |
|
34 |
- recommend you to upgrade to the Python version! |
|
35 |
- </p> |
|
36 |
- |
|
37 |
- <h3>Step 0: Install a recent version of Tor (>= 0.2.4.1)</h3> |
|
38 |
- <br> |
|
39 |
- |
|
40 |
- <p> |
|
41 |
- Add the <a href="<page docs/debian>#ubuntu">official Tor |
|
42 |
- APT repository</a> and run the specified commands to install <code>tor</code> |
|
43 |
- and <code>deb.torproject.org-keyring</code>. You need <em>Tor 0.2.4.x</em> because |
|
44 |
- it knows how to automatically report your obfsproxy address to <a |
|
45 |
- href="https://bridges.torproject.org/?transport=obfs3">BridgeDB</a>. |
|
46 |
- </p> |
|
47 |
- |
|
48 |
- <h3>Step 1: Install obfsproxy</h3> |
|
49 |
- <br> |
|
50 |
- |
|
51 |
- <p> |
|
52 |
- Since you installed the Tor APT repository, installing obfsproxy is now a matter of running a command: |
|
53 |
- </p> |
|
54 |
- |
|
55 |
- <pre style="margin: 1.5em 0 1.5em 2em"> |
|
56 |
-\# apt-get install obfsproxy |
|
57 |
- </pre> |
|
58 |
- |
|
59 |
- <h3>Step 2: Configure Tor</h3> |
|
60 |
- <br> |
|
61 |
- |
|
62 |
- <p> |
|
63 |
- Edit your <i>/etc/tor/torrc</i> to add: |
|
64 |
- </p> |
|
65 |
- |
|
66 |
- <pre style="margin: 1.5em 0 1.5em 2em"> |
|
67 |
-SocksPort 0 |
|
68 |
-ORPort auto |
|
69 |
-BridgeRelay 1 |
|
70 |
-Exitpolicy reject *:* |
|
71 |
- |
|
72 |
-\## CHANGEME_1 -> provide a nickname for your bridge, can be anything you like |
|
73 |
-\#Nickname CHANGEME_1 |
|
74 |
-\## CHANGEME_2 -> provide some email address so we can contact you if there's a problem |
|
75 |
-\#ContactInfo CHANGEME_2 |
|
76 |
- |
|
77 |
-ServerTransportPlugin obfs3 exec /usr/bin/obfsproxy managed |
|
78 |
- </pre> |
|
79 |
- |
|
80 |
- <p> |
|
81 |
- Don't forget to uncomment and edit the <i>CHANGEME</i> fields! |
|
82 |
- </p> |
|
83 |
- |
|
84 |
- <h3>Step 3: Launch Tor and verify that it bootstraps</h3> |
|
85 |
- <br> |
|
86 |
- |
|
87 |
- <p> |
|
88 |
- Restart Tor to use the new configuration file. |
|
89 |
- (Preface with sudo if needed.) |
|
90 |
- </p> |
|
91 |
- |
|
92 |
- <pre style="margin: 1.5em 0 1.5em 2em"> |
|
93 |
-\# service tor restart |
|
94 |
- </pre> |
|
95 |
- |
|
96 |
- <p> |
|
97 |
- Now check <i>/var/log/tor/log</i> and you should see something |
|
98 |
- like this: |
|
99 |
- </p> |
|
100 |
- |
|
101 |
- <pre style="margin: 1.5em 0 1.5em 2em"> |
|
102 |
-Nov 05 16:40:45.000 [notice] We now have enough directory information to build circuits. |
|
103 |
-Nov 05 16:40:45.000 [notice] Bootstrapped 80%: Connecting to the Tor network. |
|
104 |
-Nov 05 16:40:46.000 [notice] Bootstrapped 85%: Finishing handshake with first hop. |
|
105 |
-Nov 05 16:40:46.000 [notice] Bootstrapped 90%: Establishing a Tor circuit. |
|
106 |
-Nov 05 16:40:48.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working. |
|
107 |
-Nov 05 16:40:48.000 [notice] Bootstrapped 100%: Done. |
|
108 |
- </pre> |
|
109 |
- |
|
110 |
- <p> |
|
111 |
- If Tor is earlier in the bootstrapping phase, wait until it gets to |
|
112 |
- 100%. |
|
113 |
- </p> |
|
114 |
- |
|
115 |
- <h3>Step 4: Set up port forwarding if needed</h3> |
|
116 |
- <br> |
|
117 |
- |
|
118 |
- <p> |
|
119 |
- If you're behind a NAT/firewall, you'll need to make your bridge |
|
120 |
- reachable from the outside world — both on the ORPort and |
|
121 |
- the obfsproxy ports. The ORPort is whatever you defined in step two |
|
122 |
- above. To find your obfsproxy ports, check your Tor logs for a line |
|
123 |
- similar to this one: |
|
124 |
- </p> |
|
125 |
- |
|
126 |
- <pre style="margin: 1.5em 0 1.5em 2em"> |
|
127 |
-Oct 05 20:00:41.000 [notice] Registered server transport 'obfs3' at '0.0.0.0:42000 |
|
128 |
- </pre> |
|
129 |
- |
|
130 |
- <p> |
|
131 |
- The last number in each line, in this case <i>26821</i> and |
|
132 |
- <i>42000</i>, is the TCP port number that you need to forward |
|
133 |
- through your firewall. (The ports are randomly chosen the first |
|
134 |
- time Tor starts, but Tor will cache and reuse the same number in |
|
135 |
- future runs.) If you want to change the number, use Tor |
|
136 |
- 0.2.4.7-alpha or later, and set something similar to |
|
137 |
- "ServerTransportListenAddr obfs3 0.0.0.0:26821" in your torrc. |
|
138 |
- </p> |
|
139 |
- |
|
140 |
- </div> |
|
141 |
- <!-- END MAINCOL --> |
|
142 |
- <div id = "sidecol"> |
|
143 |
-#include "side.wmi" |
|
144 |
-#include "info.wmi" |
|
145 |
- </div> |
|
146 |
- <!-- END SIDECOL --> |
|
147 |
-</div> |
|
148 |
-<!-- END CONTENT --> |
|
149 |
-#include <foot.wmi> |
|
150 |
- |
... | ... |
@@ -42,7 +42,7 @@ |
42 | 42 |
APT repository</a> and run the specified commands to install <code>tor</code> |
43 | 43 |
and <code>deb.torproject.org-keyring</code>. You need <em>Tor 0.2.4.x</em> because |
44 | 44 |
it knows how to automatically report your obfsproxy address to <a |
45 |
- href="https://bridges.torproject.org/?transport=obfs2">BridgeDB</a>. |
|
45 |
+ href="https://bridges.torproject.org/?transport=obfs3">BridgeDB</a>. |
|
46 | 46 |
</p> |
47 | 47 |
|
48 | 48 |
<h3>Step 1: Install obfsproxy</h3> |
... | ... |
@@ -124,7 +124,6 @@ Nov 05 16:40:48.000 [notice] Bootstrapped 100%: Done. |
124 | 124 |
</p> |
125 | 125 |
|
126 | 126 |
<pre style="margin: 1.5em 0 1.5em 2em"> |
127 |
-Oct 05 20:00:41.000 [notice] Registered server transport 'obfs2' at '0.0.0.0:26821 |
|
128 | 127 |
Oct 05 20:00:41.000 [notice] Registered server transport 'obfs3' at '0.0.0.0:42000 |
129 | 128 |
</pre> |
130 | 129 |
|
... | ... |
@@ -135,7 +134,7 @@ Oct 05 20:00:41.000 [notice] Registered server transport 'obfs3' at '0.0.0.0:420 |
135 | 134 |
time Tor starts, but Tor will cache and reuse the same number in |
136 | 135 |
future runs.) If you want to change the number, use Tor |
137 | 136 |
0.2.4.7-alpha or later, and set something similar to |
138 |
- "ServerTransportListenAddr obfs2 0.0.0.0:26821" in your torrc. |
|
137 |
+ "ServerTransportListenAddr obfs3 0.0.0.0:26821" in your torrc. |
|
139 | 138 |
</p> |
140 | 139 |
|
141 | 140 |
</div> |
... | ... |
@@ -74,7 +74,7 @@ Exitpolicy reject *:* |
74 | 74 |
\## CHANGEME_2 -> provide some email address so we can contact you if there's a problem |
75 | 75 |
\#ContactInfo CHANGEME_2 |
76 | 76 |
|
77 |
-ServerTransportPlugin obfs2,obfs3 exec /usr/bin/obfsproxy managed |
|
77 |
+ServerTransportPlugin obfs3 exec /usr/bin/obfsproxy managed |
|
78 | 78 |
</pre> |
79 | 79 |
|
80 | 80 |
<p> |
... | ... |
@@ -22,7 +22,7 @@ |
22 | 22 |
<img width="7%" height="7%" style="float: left;" src="$(IMGROOT)/icon-Obfsproxy.jpg"> |
23 | 23 |
<b> Hey! </b> |
24 | 24 |
If you are <b>not</b> using Debian or Ubuntu, you better look |
25 |
- <a href="../projects/obfsproxy-instructions.html.en">at this other guide</a> |
|
25 |
+ <a href="<page projects/obfsproxy-instructions>">at this other guide</a> |
|
26 | 26 |
which sets up Obfsproxy from source. |
27 | 27 |
</p> |
28 | 28 |
<br><br> |
... | ... |
@@ -34,11 +34,11 @@ |
34 | 34 |
recommend you to upgrade to the Python version! |
35 | 35 |
</p> |
36 | 36 |
|
37 |
- <h3>Step 0: Move to the development version of Tor</h3> |
|
37 |
+ <h3>Step 0: Install a recent version of Tor (>= 0.2.4.1)</h3> |
|
38 | 38 |
<br> |
39 | 39 |
|
40 | 40 |
<p> |
41 |
- Add the <a href="<page docs/debian>#development">development Tor |
|
41 |
+ Add the <a href="<page docs/debian>#ubuntu">official Tor |
|
42 | 42 |
APT repository</a> and run the specified commands to install <code>tor</code> |
43 | 43 |
and <code>deb.torproject.org-keyring</code>. You need <em>Tor 0.2.4.x</em> because |
44 | 44 |
it knows how to automatically report your obfsproxy address to <a |
... | ... |
@@ -30,7 +30,7 @@ |
30 | 30 |
|
31 | 31 |
<p> |
32 | 32 |
This is a <b>Debian/Ubuntu</b> guide for installing the Python |
33 |
- version of obfsproxy. If you still have the C version, we |
|
33 |
+ version of obfsproxy. If you are still using the C version, we |
|
34 | 34 |
recommend you to upgrade to the Python version! |
35 | 35 |
</p> |
36 | 36 |
|
... | ... |
@@ -46,6 +46,11 @@ |
46 | 46 |
</p> |
47 | 47 |
|
48 | 48 |
<h3>Step 1: Install obfsproxy</h3> |
49 |
+ <br> |
|
50 |
+ |
|
51 |
+ <p> |
|
52 |
+ Since you installed the Tor APT repository, installing obfsproxy is now a matter of running a command: |
|
53 |
+ </p> |
|
49 | 54 |
|
50 | 55 |
<pre style="margin: 1.5em 0 1.5em 2em"> |
51 | 56 |
\# apt-get install obfsproxy |
... | ... |
@@ -19,7 +19,19 @@ |
19 | 19 |
<img src="$(IMGROOT)/obfsproxy_diagram.png" alt="obfsproxy diagram"></a> |
20 | 20 |
|
21 | 21 |
<p> |
22 |
- This guide will help you set up an obfuscated bridge on a Debian/Ubuntu system. |
|
22 |
+ <img width="7%" height="7%" style="float: left;" src="$(IMGROOT)/icon-Obfsproxy.jpg"> |
|
23 |
+ <b> Hey! </b> |
|
24 |
+ If you are <b>not</b> using Debian or Ubuntu, you better look |
|
25 |
+ <a href="../projects/obfsproxy-instructions.html.en">at this other guide</a> |
|
26 |
+ which sets up Obfsproxy from source. |
|
27 |
+ </p> |
|
28 |
+ <br><br> |
|
29 |
+ |
|
30 |
+ |
|
31 |
+ <p> |
|
32 |
+ This is a <b>Debian/Ubuntu</b> guide for installing the Python |
|
33 |
+ version of obfsproxy. If you still have the C version, we |
|
34 |
+ recommend you to upgrade to the Python version! |
|
23 | 35 |
</p> |
24 | 36 |
|
25 | 37 |
<h3>Step 0: Move to the development version of Tor</h3> |
... | ... |
@@ -27,27 +39,18 @@ |
27 | 39 |
|
28 | 40 |
<p> |
29 | 41 |
Add the <a href="<page docs/debian>#development">development Tor |
30 |
- APT repository</a> and run the specified commands to install tor |
|
31 |
- and deb.torproject.org-keyring. You need Tor 0.2.4.x because |
|
42 |
+ APT repository</a> and run the specified commands to install <code>tor</code> |
|
43 |
+ and <code>deb.torproject.org-keyring</code>. You need <em>Tor 0.2.4.x</em> because |
|
32 | 44 |
it knows how to automatically report your obfsproxy address to <a |
33 | 45 |
href="https://bridges.torproject.org/?transport=obfs2">BridgeDB</a>. |
34 | 46 |
</p> |
35 | 47 |
|
36 | 48 |
<h3>Step 1: Install obfsproxy</h3> |
37 |
- <br> |
|
38 | 49 |
|
39 | 50 |
<pre style="margin: 1.5em 0 1.5em 2em"> |
40 | 51 |
\# apt-get install obfsproxy |
41 | 52 |
</pre> |
42 | 53 |
|
43 |
- <p> |
|
44 |
- Obfsproxy requires libevent2. If your distribution |
|
45 |
- (e.g. Debian squeeze) doesn't include it, |
|
46 |
- you can get the libevent-2.0 package from the <a |
|
47 |
- href="http://backports-master.debian.org/Instructions/">backports</a> |
|
48 |
- repository. |
|
49 |
- </p> |
|
50 |
- |
|
51 | 54 |
<h3>Step 2: Configure Tor</h3> |
52 | 55 |
<br> |
53 | 56 |
|
... | ... |
@@ -66,7 +69,7 @@ Exitpolicy reject *:* |
66 | 69 |
\## CHANGEME_2 -> provide some email address so we can contact you if there's a problem |
67 | 70 |
\#ContactInfo CHANGEME_2 |
68 | 71 |
|
69 |
-ServerTransportPlugin obfs2 exec /usr/bin/obfsproxy --managed |
|
72 |
+ServerTransportPlugin obfs2,obfs3 exec /usr/bin/obfsproxy managed |
|
70 | 73 |
</pre> |
71 | 74 |
|
72 | 75 |
<p> |
... | ... |
@@ -82,7 +85,7 @@ ServerTransportPlugin obfs2 exec /usr/bin/obfsproxy --managed |
82 | 85 |
</p> |
83 | 86 |
|
84 | 87 |
<pre style="margin: 1.5em 0 1.5em 2em"> |
85 |
-service tor restart |
|
88 |
+\# service tor restart |
|
86 | 89 |
</pre> |
87 | 90 |
|
88 | 91 |
<p> |
... | ... |
@@ -110,22 +113,24 @@ Nov 05 16:40:48.000 [notice] Bootstrapped 100%: Done. |
110 | 113 |
<p> |
111 | 114 |
If you're behind a NAT/firewall, you'll need to make your bridge |
112 | 115 |
reachable from the outside world — both on the ORPort and |
113 |
- the obfsproxy port. The ORPort is whatever you defined in step two |
|
114 |
- above. To find your obfsproxy port, check your Tor logs for a line |
|
116 |
+ the obfsproxy ports. The ORPort is whatever you defined in step two |
|
117 |
+ above. To find your obfsproxy ports, check your Tor logs for a line |
|
115 | 118 |
similar to this one: |
116 | 119 |
</p> |
117 | 120 |
|
118 | 121 |
<pre style="margin: 1.5em 0 1.5em 2em"> |
119 | 122 |
Oct 05 20:00:41.000 [notice] Registered server transport 'obfs2' at '0.0.0.0:26821 |
123 |
+Oct 05 20:00:41.000 [notice] Registered server transport 'obfs3' at '0.0.0.0:42000 |
|
120 | 124 |
</pre> |
121 | 125 |
|
122 | 126 |
<p> |
123 |
- The last number, in this case <i>26821</i>, is the TCP port number |
|
124 |
- that you need to forward through your firewall. (This port is randomly |
|
125 |
- chosen the first time Tor starts, but Tor will cache and reuse the |
|
126 |
- same number in future runs.) If you want to change the number, use |
|
127 |
- Tor 0.2.4.7-alpha or later, and set "ServerTransportListenAddr obfs2 |
|
128 |
- 0.0.0.0:26821" in your torrc. |
|
127 |
+ The last number in each line, in this case <i>26821</i> and |
|
128 |
+ <i>42000</i>, is the TCP port number that you need to forward |
|
129 |
+ through your firewall. (The ports are randomly chosen the first |
|
130 |
+ time Tor starts, but Tor will cache and reuse the same number in |
|
131 |
+ future runs.) If you want to change the number, use Tor |
|
132 |
+ 0.2.4.7-alpha or later, and set something similar to |
|
133 |
+ "ServerTransportListenAddr obfs2 0.0.0.0:26821" in your torrc. |
|
129 | 134 |
</p> |
130 | 135 |
|
131 | 136 |
</div> |
... | ... |
@@ -123,9 +123,9 @@ Oct 05 20:00:41.000 [notice] Registered server transport 'obfs2' at '0.0.0.0:268 |
123 | 123 |
The last number, in this case <i>26821</i>, is the TCP port number |
124 | 124 |
that you need to forward through your firewall. (This port is randomly |
125 | 125 |
chosen the first time Tor starts, but Tor will cache and reuse the |
126 |
- same number in future runs.) If you want to change the number, |
|
127 |
- stop Tor, edit /var/lib/tor/state to change the number in the |
|
128 |
- "TransportProxy obfs2" line, and then restart Tor. |
|
126 |
+ same number in future runs.) If you want to change the number, use |
|
127 |
+ Tor 0.2.4.7-alpha or later, and set "ServerTransportListenAddr obfs2 |
|
128 |
+ 0.0.0.0:26821" in your torrc. |
|
129 | 129 |
</p> |
130 | 130 |
|
131 | 131 |
</div> |
... | ... |
@@ -28,7 +28,7 @@ |
28 | 28 |
<p> |
29 | 29 |
Add the <a href="<page docs/debian>#development">development Tor |
30 | 30 |
APT repository</a> and run the specified commands to install tor |
31 |
- and deb.torproject.org-keyring. You need Tor 0.2.4.x Tor because |
|
31 |
+ and deb.torproject.org-keyring. You need Tor 0.2.4.x because |
|
32 | 32 |
it knows how to automatically report your obfsproxy address to <a |
33 | 33 |
href="https://bridges.torproject.org/?transport=obfs2">BridgeDB</a>. |
34 | 34 |
</p> |
... | ... |
@@ -62,7 +62,7 @@ BridgeRelay 1 |
62 | 62 |
Exitpolicy reject *:* |
63 | 63 |
|
64 | 64 |
\## CHANGEME_1 -> provide a nickname for your bridge, can be anything you like |
65 |
-Nickname CHANGEME_1 |
|
65 |
+\#Nickname CHANGEME_1 |
|
66 | 66 |
\## CHANGEME_2 -> provide some email address so we can contact you if there's a problem |
67 | 67 |
\#ContactInfo CHANGEME_2 |
68 | 68 |
|
... | ... |
@@ -70,7 +70,7 @@ ServerTransportPlugin obfs2 exec /usr/bin/obfsproxy --managed |
70 | 70 |
</pre> |
71 | 71 |
|
72 | 72 |
<p> |
73 |
- Don't forget to edit the <i>CHANGEME</i> fields! |
|
73 |
+ Don't forget to uncomment and edit the <i>CHANGEME</i> fields! |
|
74 | 74 |
</p> |
75 | 75 |
|
76 | 76 |
<h3>Step 3: Launch Tor and verify that it bootstraps</h3> |
... | ... |
@@ -100,7 +100,7 @@ Nov 05 16:40:48.000 [notice] Bootstrapped 100%: Done. |
100 | 100 |
</pre> |
101 | 101 |
|
102 | 102 |
<p> |
103 |
- If Tor is earlier in the bootstrapping phase, wait till it gets to |
|
103 |
+ If Tor is earlier in the bootstrapping phase, wait until it gets to |
|
104 | 104 |
100%. |
105 | 105 |
</p> |
106 | 106 |
|
... | ... |
@@ -123,7 +123,9 @@ Oct 05 20:00:41.000 [notice] Registered server transport 'obfs2' at '0.0.0.0:268 |
123 | 123 |
The last number, in this case <i>26821</i>, is the TCP port number |
124 | 124 |
that you need to forward through your firewall. (This port is randomly |
125 | 125 |
chosen the first time Tor starts, but Tor will cache and reuse the |
126 |
- same number in future runs.) |
|
126 |
+ same number in future runs.) If you want to change the number, |
|
127 |
+ stop Tor, edit /var/lib/tor/state to change the number in the |
|
128 |
+ "TransportProxy obfs2" line, and then restart Tor. |
|
127 | 129 |
</p> |
128 | 130 |
|
129 | 131 |
</div> |
... | ... |
@@ -41,9 +41,10 @@ |
41 | 41 |
</pre> |
42 | 42 |
|
43 | 43 |
<p> |
44 |
- Obfsproxy requires libevent2. If your distribution (e.g. Debian |
|
45 |
- squeeze) doesn't include it, you can get it from the <a |
|
46 |
- href="http://packages.debian.org/search?keywords=libevent-2.0-5">backports</a> |
|
44 |
+ Obfsproxy requires libevent2. If your distribution |
|
45 |
+ (e.g. Debian squeeze) doesn't include it, |
|
46 |
+ you can get the libevent-2.0 package from the <a |
|
47 |
+ href="http://backports-master.debian.org/Instructions/">backports</a> |
|
47 | 48 |
repository. |
48 | 49 |
</p> |
49 | 50 |
|
... | ... |
@@ -2,7 +2,7 @@ |
2 | 2 |
# Revision: $Revision$ |
3 | 3 |
# Translation-Priority: 4-optional |
4 | 4 |
|
5 |
-#include "head.wmi" TITLE="obfsproxy: Installation instructions" CHARSET="UTF-8" |
|
5 |
+#include "head.wmi" TITLE="obfsproxy: Setting up an Obfsproxy Bridge on Debian/Ubuntu" CHARSET="UTF-8" |
|
6 | 6 |
|
7 | 7 |
<div id="content" class="clearfix"> |
8 | 8 |
<div id="breadcrumbs"> |
... | ... |
@@ -14,65 +14,55 @@ |
14 | 14 |
|
15 | 15 |
<!-- PUT CONTENT AFTER THIS TAG --> |
16 | 16 |
|
17 |
- <h1 id="instructions">Obfsproxy Bridge Instructions on Debian/Ubuntu</h1> |
|
17 |
+ <h1 id="instructions">Setting up an Obfsproxy Bridge on Debian/Ubuntu</h1> |
|
18 | 18 |
|
19 | 19 |
<img src="$(IMGROOT)/obfsproxy_diagram.png" alt="obfsproxy diagram"></a> |
20 | 20 |
|
21 | 21 |
<p> |
22 |
- This guide will help you setup an obfuscated bridge on a Debian/Ubuntu system. |
|
22 |
+ This guide will help you set up an obfuscated bridge on a Debian/Ubuntu system. |
|
23 | 23 |
</p> |
24 | 24 |
|
25 |
- <h3>Step 0: Add Tor repositories to APT</h3> |
|
25 |
+ <h3>Step 0: Move to the development version of Tor</h3> |
|
26 | 26 |
<br> |
27 | 27 |
|
28 | 28 |
<p> |
29 |
- You need |
|
30 |
- to <a href="https://www.torproject.org/docs/debian#development">install |
|
31 |
- the experimental official Tor Project APT repositories</a>, |
|
32 |
- because a fresh version of Tor (0.2.4.x) is required (Older |
|
33 |
- versions of Tor don't report their bridge addresses to BridgeDB). |
|
29 |
+ Add the <a href="<page docs/debian>#development">development Tor |
|
30 |
+ APT repository</a> and run the specified commands to install tor |
|
31 |
+ and deb.torproject.org-keyring. You need Tor 0.2.4.x Tor because |
|
32 |
+ it knows how to automatically report your obfsproxy address to <a |
|
33 |
+ href="https://bridges.torproject.org/?transport=obfs2">BridgeDB</a>. |
|
34 | 34 |
</p> |
35 | 35 |
|
36 |
- <h3>Step 1: Install Tor and obfsproxy</h3> |
|
36 |
+ <h3>Step 1: Install obfsproxy</h3> |
|
37 | 37 |
<br> |
38 | 38 |
|
39 |
- <p> |
|
40 |
- Now install tor and obfsproxy: |
|
41 |
- </p> |
|
42 |
- |
|
43 | 39 |
<pre style="margin: 1.5em 0 1.5em 2em"> |
44 |
-\# apt-get update |
|
45 |
-\# apt-get install obfsproxy tor |
|
40 |
+\# apt-get install obfsproxy |
|
46 | 41 |
</pre> |
47 | 42 |
|
48 | 43 |
<p> |
49 |
- Note that obfsproxy requires |
|
50 |
- libevent2 and your distribution (e.g. Debian stable) might not |
|
51 |
- have it in its repos. You can |
|
52 |
- <a href="https://trac.torproject.org/projects/tor/ticket/5009#comment:9">try |
|
53 |
- our experimental backport libevent2 debs</a>, |
|
54 |
- or <a href="https://trac.torproject.org/projects/tor/ticket/5009#comment:17">build |
|
55 |
- libevent2 from source</a>. |
|
44 |
+ Obfsproxy requires libevent2. If your distribution (e.g. Debian |
|
45 |
+ squeeze) doesn't include it, you can get it from the <a |
|
46 |
+ href="http://packages.debian.org/search?keywords=libevent-2.0-5">backports</a> |
|
47 |
+ repository. |
|
56 | 48 |
</p> |
57 | 49 |
|
58 |
- <h3>Step 2: Set up Tor</h3> |
|
50 |
+ <h3>Step 2: Configure Tor</h3> |
|
59 | 51 |
<br> |
60 | 52 |
|
61 | 53 |
<p> |
62 |
- You will need an appropriate |
|
63 |
- Tor <a href="<page docs/faq>#torrc">configuration file</a> |
|
64 |
- (usually at <i>/etc/tor/torrc</i>): |
|
54 |
+ Edit your <i>/etc/tor/torrc</i> to add: |
|
65 | 55 |
</p> |
66 | 56 |
|
67 | 57 |
<pre style="margin: 1.5em 0 1.5em 2em"> |
68 | 58 |
SocksPort 0 |
69 |
-ORPort auto |
|
59 |
+ORPort 443 # or some other port if you already run a webserver/skype |
|
70 | 60 |
BridgeRelay 1 |
71 | 61 |
Exitpolicy reject *:* |
72 | 62 |
|
73 |
-\## CHANGEME_1 -> provide a nickname for your bridge, can be anything you like. |
|
63 |
+\## CHANGEME_1 -> provide a nickname for your bridge, can be anything you like |
|
74 | 64 |
Nickname CHANGEME_1 |
75 |
-\## CHANGEME_2 -> If you want others to be able to contact you uncomment this line and put your GPG fingerprint for example. |
|
65 |
+\## CHANGEME_2 -> provide some email address so we can contact you if there's a problem |
|
76 | 66 |
\#ContactInfo CHANGEME_2 |
77 | 67 |
|
78 | 68 |
ServerTransportPlugin obfs2 exec /usr/bin/obfsproxy --managed |
... | ... |
@@ -82,11 +72,12 @@ ServerTransportPlugin obfs2 exec /usr/bin/obfsproxy --managed |
82 | 72 |
Don't forget to edit the <i>CHANGEME</i> fields! |
83 | 73 |
</p> |
84 | 74 |
|
85 |
- <h3>Step 3: Launch Tor and verify that it works</h3> |
|
75 |
+ <h3>Step 3: Launch Tor and verify that it bootstraps</h3> |
|
86 | 76 |
<br> |
87 | 77 |
|
88 | 78 |
<p> |
89 |
- Restart Tor for the the new configuration file to be in effect: |
|
79 |
+ Restart Tor to use the new configuration file. |
|
80 |
+ (Preface with sudo if needed.) |
|
90 | 81 |
</p> |
91 | 82 |
|
92 | 83 |
<pre style="margin: 1.5em 0 1.5em 2em"> |
... | ... |
@@ -112,10 +103,16 @@ Nov 05 16:40:48.000 [notice] Bootstrapped 100%: Done. |
112 | 103 |
100%. |
113 | 104 |
</p> |
114 | 105 |
|
106 |
+ <h3>Step 4: Set up port forwarding if needed</h3> |
|
107 |
+ <br> |
|
108 |
+ |
|
115 | 109 |
<p> |
116 |
- Now you need to find the address on which obfsproxy is |
|
117 |
- listening. To do this, check your Tor logs for a line similar to |
|
118 |
- this one: |
|
110 |
+ If you're behind a NAT/firewall, you'll need to make your bridge |
|
111 |
+ reachable from the outside world — both on the ORPort and |
|
112 |
+ the obfsproxy port. The ORPort is whatever you defined in step two |
|
113 |
+ above. To find your obfsproxy port, check your Tor logs for a line |
|
114 |
+ similar to this one: |
|
115 |
+ </p> |
|
119 | 116 |
|
120 | 117 |
<pre style="margin: 1.5em 0 1.5em 2em"> |
121 | 118 |
Oct 05 20:00:41.000 [notice] Registered server transport 'obfs2' at '0.0.0.0:26821 |
... | ... |
@@ -123,17 +120,9 @@ Oct 05 20:00:41.000 [notice] Registered server transport 'obfs2' at '0.0.0.0:268 |
123 | 120 |
|
124 | 121 |
<p> |
125 | 122 |
The last number, in this case <i>26821</i>, is the TCP port number |
126 |
- that your clients should point their obfsproxy to. So for example, |
|
127 |
- if your public IP is 1.2.3.4, your clients should put <i>Bridge |
|
128 |
- obfs2 1.2.3.4:26821</i> in their configuration file. |
|
129 |
- </pre> |
|
130 |
- </p> |
|
131 |
- |
|
132 |
- <p> |
|
133 |
- <img width="7%" height="7%" style="float: left;" src="$(IMGROOT)/icon-Obfsproxy.jpg"> |
|
134 |
- <b>Don't forget!</b> If you are behind a NAT, you should <b>port |
|
135 |
- forward</b> the port that obfsproxy is listening on. In the |
|
136 |
- example above you would have to forward port <i>26821</i>. |
|
123 |
+ that you need to forward through your firewall. (This port is randomly |
|
124 |
+ chosen the first time Tor starts, but Tor will cache and reuse the |
|
125 |
+ same number in future runs.) |
|
137 | 126 |
</p> |
138 | 127 |
|
139 | 128 |
</div> |
1 | 1 |
new file mode 100644 |
... | ... |
@@ -0,0 +1,149 @@ |
1 |
+## translation metadata |
|
2 |
+# Revision: $Revision$ |
|
3 |
+# Translation-Priority: 4-optional |
|
4 |
+ |
|
5 |
+#include "head.wmi" TITLE="obfsproxy: Installation instructions" CHARSET="UTF-8" |
|
6 |
+ |
|
7 |
+<div id="content" class="clearfix"> |
|
8 |
+ <div id="breadcrumbs"> |
|
9 |
+ <a href="<page index>">Home » </a> |
|
10 |
+ <a href="<page projects/projects>">Projects » </a> |
|
11 |
+ <a href="<page projects/obfsproxy>">obfsproxy</a> |
|
12 |
+ </div> |
|
13 |
+ <div id="maincol"> |
|
14 |
+ |
|
15 |
+ <!-- PUT CONTENT AFTER THIS TAG --> |
|
16 |
+ |
|
17 |
+ <h1 id="instructions">Obfsproxy Bridge Instructions on Debian/Ubuntu</h1> |
|
18 |
+ |
|
19 |
+ <img src="$(IMGROOT)/obfsproxy_diagram.png" alt="obfsproxy diagram"></a> |
|
20 |
+ |
|
21 |
+ <p> |
|
22 |
+ This guide will help you setup an obfuscated bridge on a Debian/Ubuntu system. |
|
23 |
+ </p> |
|
24 |
+ |
|
25 |
+ <h3>Step 0: Add Tor repositories to APT</h3> |
|
26 |
+ <br> |
|
27 |
+ |
|
28 |
+ <p> |
|
29 |
+ You need |
|
30 |
+ to <a href="https://www.torproject.org/docs/debian#development">install |
|
31 |
+ the experimental official Tor Project APT repositories</a>, |
|
32 |
+ because a fresh version of Tor (0.2.4.x) is required (Older |
|
33 |
+ versions of Tor don't report their bridge addresses to BridgeDB). |
|
34 |
+ </p> |
|
35 |
+ |
|
36 |
+ <h3>Step 1: Install Tor and obfsproxy</h3> |
|
37 |
+ <br> |
|
38 |
+ |
|
39 |
+ <p> |
|
40 |
+ Now install tor and obfsproxy: |
|
41 |
+ </p> |
|
42 |
+ |
|
43 |
+ <pre style="margin: 1.5em 0 1.5em 2em"> |
|
44 |
+\# apt-get update |
|
45 |
+\# apt-get install obfsproxy tor |
|
46 |
+ </pre> |
|
47 |
+ |
|
48 |
+ <p> |
|
49 |
+ Note that obfsproxy requires |
|
50 |
+ libevent2 and your distribution (e.g. Debian stable) might not |
|
51 |
+ have it in its repos. You can |
|
52 |
+ <a href="https://trac.torproject.org/projects/tor/ticket/5009#comment:9">try |
|
53 |
+ our experimental backport libevent2 debs</a>, |
|
54 |
+ or <a href="https://trac.torproject.org/projects/tor/ticket/5009#comment:17">build |
|
55 |
+ libevent2 from source</a>. |
|
56 |
+ </p> |
|
57 |
+ |
|
58 |
+ <h3>Step 2: Set up Tor</h3> |
|
59 |
+ <br> |
|
60 |
+ |
|
61 |
+ <p> |
|
62 |
+ You will need an appropriate |
|
63 |
+ Tor <a href="<page docs/faq>#torrc">configuration file</a> |
|
64 |
+ (usually at <i>/etc/tor/torrc</i>): |
|
65 |
+ </p> |
|
66 |
+ |
|
67 |
+ <pre style="margin: 1.5em 0 1.5em 2em"> |
|
68 |
+SocksPort 0 |
|
69 |
+ORPort auto |
|
70 |
+BridgeRelay 1 |
|
71 |
+Exitpolicy reject *:* |
|
72 |
+ |
|
73 |
+\## CHANGEME_1 -> provide a nickname for your bridge, can be anything you like. |
|
74 |
+Nickname CHANGEME_1 |
|
75 |
+\## CHANGEME_2 -> If you want others to be able to contact you uncomment this line and put your GPG fingerprint for example. |
|
76 |
+\#ContactInfo CHANGEME_2 |
|
77 |
+ |
|
78 |
+ServerTransportPlugin obfs2 exec /usr/bin/obfsproxy --managed |
|
79 |
+ </pre> |
|
80 |
+ |
|
81 |
+ <p> |
|
82 |
+ Don't forget to edit the <i>CHANGEME</i> fields! |
|
83 |
+ </p> |
|
84 |
+ |
|
85 |
+ <h3>Step 3: Launch Tor and verify that it works</h3> |
|
86 |
+ <br> |
|
87 |
+ |
|
88 |
+ <p> |
|
89 |
+ Restart Tor for the the new configuration file to be in effect: |
|
90 |
+ </p> |
|
91 |
+ |
|
92 |
+ <pre style="margin: 1.5em 0 1.5em 2em"> |
|
93 |
+service tor restart |
|
94 |
+ </pre> |
|
95 |
+ |
|
96 |
+ <p> |
|
97 |
+ Now check <i>/var/log/tor/log</i> and you should see something |
|
98 |
+ like this: |
|
99 |
+ </p> |
|
100 |
+ |
|
101 |
+ <pre style="margin: 1.5em 0 1.5em 2em"> |
|
102 |
+Nov 05 16:40:45.000 [notice] We now have enough directory information to build circuits. |
|
103 |
+Nov 05 16:40:45.000 [notice] Bootstrapped 80%: Connecting to the Tor network. |
|
104 |
+Nov 05 16:40:46.000 [notice] Bootstrapped 85%: Finishing handshake with first hop. |
|
105 |
+Nov 05 16:40:46.000 [notice] Bootstrapped 90%: Establishing a Tor circuit. |
|
106 |
+Nov 05 16:40:48.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working. |
|
107 |
+Nov 05 16:40:48.000 [notice] Bootstrapped 100%: Done. |
|
108 |
+ </pre> |
|
109 |
+ |
|
110 |
+ <p> |
|
111 |
+ If Tor is earlier in the bootstrapping phase, wait till it gets to |
|
112 |
+ 100%. |
|
113 |
+ </p> |
|
114 |
+ |
|
115 |
+ <p> |
|
116 |
+ Now you need to find the address on which obfsproxy is |
|
117 |
+ listening. To do this, check your Tor logs for a line similar to |
|
118 |
+ this one: |
|
119 |
+ |
|
120 |
+ <pre style="margin: 1.5em 0 1.5em 2em"> |
|
121 |
+Oct 05 20:00:41.000 [notice] Registered server transport 'obfs2' at '0.0.0.0:26821 |
|
122 |
+ </pre> |
|
123 |
+ |
|
124 |
+ <p> |
|
125 |
+ The last number, in this case <i>26821</i>, is the TCP port number |
|
126 |
+ that your clients should point their obfsproxy to. So for example, |
|
127 |
+ if your public IP is 1.2.3.4, your clients should put <i>Bridge |
|
128 |
+ obfs2 1.2.3.4:26821</i> in their configuration file. |
|
129 |
+ </pre> |
|
130 |
+ </p> |
|
131 |
+ |
|
132 |
+ <p> |
|
133 |
+ <img width="7%" height="7%" style="float: left;" src="$(IMGROOT)/icon-Obfsproxy.jpg"> |
|
134 |
+ <b>Don't forget!</b> If you are behind a NAT, you should <b>port |
|
135 |
+ forward</b> the port that obfsproxy is listening on. In the |
|
136 |
+ example above you would have to forward port <i>26821</i>. |
|
137 |
+ </p> |
|
138 |
+ |
|
139 |
+ </div> |
|
140 |
+ <!-- END MAINCOL --> |
|
141 |
+ <div id = "sidecol"> |
|
142 |
+#include "side.wmi" |
|
143 |
+#include "info.wmi" |
|
144 |
+ </div> |
|
145 |
+ <!-- END SIDECOL --> |
|
146 |
+</div> |
|
147 |
+<!-- END CONTENT --> |
|
148 |
+#include <foot.wmi> |
|
149 |
+ |