question about tor, privoxy & squid

paul_mat · 04-08-2006, 03:24 AM

hi there,

i'm just wondering if i setup squid to use privoxy as a cache_peer and then setup privoxy & tor to work together will i still get the same level of security offered with the privoxy tor setup?

mrclisdue · 04-08-2006, 06:09 AM

Code:

WARNING: [WWW] recent testing has shown that using Squid in conjunction with Tor
and Privoxy is a critical compromise to your privacy! Please read [WWW] this update for more details. Thank you.

    *

      Squid 2 can be compiled with, "--disable-internal-dns", and use 
an external dns client of your choice to prevent dns leaks. 
You could even disable dns lookups from squid entirely if you'd like. See squid documentation for more info.

from:

http://wiki.noreply.org/noreply/TheO...ter/SquidProxy

cheers,

gabsik · 04-08-2006, 01:36 PM

It's about a dns leaks while browsing but it dosn't affect you if you use firefox1.5 i cannot link you anyware but it's the thruth !!!!

mrclisdue · 04-08-2006, 05:57 PM

Quote:

Originally Posted by gabsik

It's about a dns leaks while browsing but it dosn't affect you if you use firefox1.5 i cannot link you anyware but it's the thruth !!!!

this was actually uncovered in deer park alpha and then incorporated into ff 1.5 - I know there was discussion and howto's on the ortalk mailing list, and I would expect that there would be discussion on the tor wiki, however these are the two lines I've changed in about:config regarding dns:

network.dns.disableIPv6 true
network.proxy.socks_remote_dns true

if I get around to checking into actual links and explanations in the next few days, or if someone specifically requests, I will post here.

cheers,

gabsik · 04-08-2006, 08:09 PM

nice one !

paul_mat · 04-08-2006, 08:15 PM

hi mrclisdue,

so what your saying to ms is i can setup tor, privoxy ans squid together as long as i add in those few lines?

network.dns.disableIPv6 true
network.proxy.socks_remote_dns true

but where do i put them?

mrclisdue · 04-08-2006, 09:22 PM

As per my first post, Squid must be compiled with "--disable-internal-dns", and/or disable dns lookups entirely through squid.

Secondly, I searched back through the ortalk mailing list, and it appears you must have FF 1.1x, then in about:config either find or add

network.proxy.socks_remote_dns

and set the value to true.

That info was found here:

Code:

http://archives.seul.org/or/talk/Aug-2005/msg00303.html

If you browse the same ortalk archives for Sept, 2005, you will see some discussion on squid and dns leaks.

There is also this tor wiki entry:

Code:

http://wiki.noreply.org/noreply/TheOnionRouter/SquidWarning

cheers,