Eventually, there is a need to access the Internet with an extra layer of privacy. What would one do?<\/p>\n
Confirm your current public IP with the following commands. The first is an HTTP (TCP) request, the second checks whether your IP is a Tor exit node, and the third is a DNS (UDP) resolution request:<\/p>\n
curl ip.me\r\ncurl -s https:\/\/check.torproject.org\/api\/ip | jq -r '.IsTor'\r\ndig +short myip.opendns.com @resolver1.opendns.com<\/pre>\nNote:<\/strong> The first command reveals your real public IP, the second returns true or false depending on whether your IP is a Tor exit node, and the third returns your public IP via a UDP DNS query.<\/p>\n
\nINSTALLING TOR TUNNEL<\/strong><\/p>\n
TorTunnel<\/strong> is a shell script that tunnels TCP and DNS traffic through the Tor network [Link<\/a>]. It does not provide access to the dark web (.onion addresses), and does not support ICMP or UDP.<\/p>\n
This script routes all system traffic through Tor and was designed and tested on Ubuntu 24.04 LTS, removing the need to configure SOCKS per application or use
proxychains<\/code>.<\/p>\nsudo apt update && sudo apt upgrade -y\r\ngit clone https:\/\/github.com\/davift\/TorTunnel.git\r\ncd TorTunnel\r\nsudo .\/tortunnel.sh<\/pre>\nIt must be run with
sudo<\/code>:<\/p>\nUsage: tortunnel [--backup] [--install|--start] [--restore|--stop] [--refresh] [interface]\r\n\r\nRequired:\r\n --backup backup the original system's configuration before installation\r\n --install, --start make changes to the system's configuration and start tunneling\r\n --restore, --stop restore the backup with original system's configuration\r\n --refresh request Tor to acquire a new connection\r\n\r\nOptional:\r\n interface defines what LAN interface to accept traffic on (requires --start)<\/pre>\nThe TorTunnel arguments:<\/p>\n
\n
- –backup<\/strong>\n
\n
- Back up the original configuration before making any changes.<\/li>\n<\/ul>\n<\/li>\n
- –start<\/strong>\n
\n
- Start tunneling all traffic through Tor.<\/li>\n<\/ul>\n<\/li>\n
- –stop<\/strong>\n
\n
- Stop tunneling traffic and restore the previous configuration.<\/li>\n<\/ul>\n<\/li>\n
- –refresh<\/strong>\n
\n
- Restart the Tor service and establish new circuits.<\/li>\n<\/ul>\n<\/li>\n
- interface (e.g. eth0)<\/strong>\n
\n
- Optionally, tunnel traffic from a specific network interface, including inbound requests.<\/li>\n
- With this option, all other hosts on a LAN can have their traffic transparently routed through Tor.<\/li>\n
- Consider also installing a DHCP service to automatically configure client network interfaces on that segment.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
Why use TorTunnel?<\/strong><\/p>\n
During penetration testing, it is often useful to appear as though you are coming from many different locations around the world, making traffic harder to track or block.<\/p>\n
TorTunnel can be installed in a system container (LXC) and works with scripts and automation without any modifications.<\/p>\n
\nSTARTING AND TESTING<\/strong><\/p>\n
sudo .\/tortunnel.sh --backup\r\nsudo .\/tortunnel.sh --start<\/pre>\nOn a desktop environment, verify your connection using BrowserLeaks<\/strong> [Link<\/a>] and DNS Leak Test<\/strong> [Link<\/a>].<\/p>\n
From a terminal, repeat the HTTP and DNS tests:<\/p>\n
curl ip.me\r\ncurl -s https:\/\/check.torproject.org\/api\/ip | jq -r '.IsTor'\r\ndig +short myip.opendns.com @resolver1.opendns.com<\/pre>\nNote:<\/strong> The first command will return the apparent IP, not your real one. The second will confirm you are using the Tor network. The third may return no output, since Tor does not route UDP traffic.<\/p>\n
\nBONUS<\/strong><\/p>\n
Cloudflare offers a way to resolve DNS through the Tor network [Link<\/a>]. It creates a local SOCKS proxy that sends DNS requests over HTTPS (TCP) via Tor. Worth checking out!<\/p>\n
\nREAD MORE<\/strong><\/p>\n
Learn how to Set Up a Tor Node [Link<\/a>].<\/p>\n
Read about Tor Snowflake Against Internet Censorship [Link<\/a>].<\/p>\n
Deploy Whonix Gateway on Proxmox [Link<\/a>].<\/p>\n
Set up your own OpenVPN Server [Link<\/a>].<\/p>\n