This book will show you how to setup all required systems and services to offer anonymous and secure Tor Hidden Services.
Firewall Setup
We will setup a firewall based on a FreeBSD minimum installation. This firewall will work on most old PC’s with 3 network interfaces or a virtual machine running on Top of VMWare, KVM or Virtual Box.
The Tor daemon will run on this firewall and handle the connections between the Tor Network and your Tor Hidden Services system.
The Firewall will block all traffic from your Tor systems to the clearnet without using the Tor Proxy. We also setup a DNS Proxy using the Tor Network to avoid DNS exploits.
This way, even your system offering the hidden services is fully hacked or compromised, all requests are running through the Tor Network and you are not unmasked because of it. Furthermore, the hacked system only knows its internal 10.x.x.x address and there is no way to find out the real IP address.
We will create a management network, able to access these systems only. Management network is operated on an internal IP range too. There is no way to access the clearnet. Management Network can use the Tor proxy if needed.
Firewall Setup
We will setup a firewall based on a FreeBSD minimum installation. This firewall will work on most old PC’s with 3 network interfaces or a virtual machine running on Top of VMWare, KVM or Virtual Box.
The Tor daemon will run on this firewall and handle the connections between the Tor Network and your Tor Hidden Services system.
The Firewall will block all traffic from your Tor systems to the clearnet without using the Tor Proxy. We also setup a DNS Proxy using the Tor Network to avoid DNS exploits.
This way, even your system offering the hidden services is fully hacked or compromised, all requests are running through the Tor Network and you are not unmasked because of it. Furthermore, the hacked system only knows its internal 10.x.x.x address and there is no way to find out the real IP address.
We will create a management network, able to access these systems only. Management network is operated on an internal IP range too. There is no way to access the clearnet. Management Network can use the Tor proxy if needed.
No comments:
Post a Comment