Arch Linux

ezzetabi

Member

Registered: 2006-08-27

Posts: 947

Tor transparent proxy... what I am missing? [solved]

Out of curiosity I tried tor and following this tutorial to use it easily with any application.

https://trac.torproject.org/projects/to … arentProxy

In particular I liked the idea of a special user whose application works via tor and
so I started iptables with:

iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner anonymous -m tcp -j REDIRECT --to-ports 9040
iptables -t nat -A OUTPUT -p udp -m owner --uid-owner anonymous -m udp --dport 53 -j REDIRECT --to-ports 53
iptables -t filter -A OUTPUT -p tcp -m owner --uid-owner anonymous -m tcp --dport 9040 -j ACCEPT
iptables -t filter -A OUTPUT -p udp -m owner --uid-owner anonymous -m udp --dport 53 -j ACCEPT
iptables -t filter -A OUTPUT -m owner --uid-owner anonymous -j DROP

And tried starting firefox with the special user... It does not work, it appears a page stating:
``Tor is not an HTML proxy, it is a SOCKS proxy''

And it is absolutely reasonable, but what is the point of the whole TransparentProxy thing then?
Is there a way to ensure that all the tcp connections are sent via tor?

Thanks

Last edited by ezzetabi (2012-07-16 17:04:19)

Strike0

Member

From: Germany

Registered: 2011-09-05

Posts: 1,489

Re: Tor transparent proxy... what I am missing? [solved]

Did you also do the necessary changes for transparent proxying to torrc and (for testing) resolv.conf?

ezzetabi

Member

Registered: 2006-08-27

Posts: 947

Re: Tor transparent proxy... what I am missing? [solved]

resolv.conf (check)
torrc (OOOPSSS...)

Thanks, I missed that bit... However it explains why the iptables rules send traffic to port 9040 instead of default 9050...