edu4rdshl/tor-router
1
0
Fork 0
mirror of https://github.com/edu4rdshl/tor-router.git synced 2026-07-17 23:24:48 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update script.

Browse source 
Fix #11
This commit is contained in:
Eduard Tolosa 2024-01-17 19:03:07 -05:00
parent 290d0b1e29
commit 5b79c1ce49
2 changed files with 20 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

17
files/tor-router
View file

@ -11,10 +11,9 @@ start)
echo "$RULES exists. Either delete it, or stop tor-router first."
exit 1
else
iptables-save >$RULES
# Executable file to create rules for transparent proxy
# Destinations you do not want routed through Tor
NON_TOR="192.168.1.0/24 192.168.0.0/24"
NON_TOR="192.168.1.0/24 192.168.0.0/24 10.0.0.0/8"
# the UID Tor runs as, actually only support for Debian, ArchLinux and Fedora as been added.
if command -v pacman >/dev/null; then
TOR_UID=$(id -u tor)
@ -37,16 +36,19 @@ start)
echo "You need to install the iptables package."
exit 1
else
# Only save the rules when we are sure that everything is working
iptables-save >$RULES
iptables -F
iptables -t nat -F
iptables -t nat -A OUTPUT -m owner --uid-owner "$TOR_UID" -j RETURN
iptables -t nat -A OUTPUT -p udp --dport 53 -j REDIRECT --to-ports 5353
iptables -t nat -A OUTPUT -p udp --dport 53 -j REDIRECT --to-ports 6669
for NET in $NON_TOR 127.0.0.0/9 127.128.0.0/10; do
iptables -t nat -A OUTPUT -d "$NET" -j RETURN
done
iptables -t nat -A OUTPUT -p tcp --syn -j REDIRECT --to-ports $TRANS_PORT
iptables -t nat -A OUTPUT -p udp -j REDIRECT --to-ports $TRANS_PORT
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
for NET in $NON_TOR 127.0.0.0/8; do
@ -54,14 +56,14 @@ start)
done
iptables -A OUTPUT -m owner --uid-owner "$TOR_UID" -j ACCEPT
iptables -A OUTPUT -j ACCEPT
fi
fi
;;
stop)
if test -f "$RULES"; then
echo "Restoring previous rules from $RULES"
iptables -t nat -F
iptables -F
iptables-restore <"$RULES"
rm "$RULES"
else
@ -69,9 +71,10 @@ stop)
exit
fi
;;
restart)
stop
sleep 2
sleep 1
start
;;
*)

10
install.sh
View file

@ -1,4 +1,4 @@
#!/bin/sh
#!/bin/bash
# Script that automate the procces for setting up TOR as a tranparent proxy
# Autor: Edu4rdSHL @edu4rdshl
@ -23,19 +23,17 @@ if command -v tor >/dev/null && command -v systemctl > /dev/null ; then
echo -e "\nMaking a backup of your torrc file, if you have problems with the new configuration, delete $torconfig and move $torconfigbackup to $torconfig"
cp "$torconfig" "$torconfigbackup"
echo -e "\nConfiguring the torrc file to use TOR as a transparent proxy..."
echo -e "\n# Seting up TOR transparent proxy for tor-router\nVirtualAddrNetwork 10.192.0.0/10\nAutomapHostsOnResolve 1\nTransPort 9040\nDNSPort 5353" >> "$torconfig"
echo -e "\n# Seting up TOR transparent proxy for tor-router\nVirtualAddrNetwork 10.192.0.0/10\nAutomapHostsOnResolve 1\nTransPort 9040\nDNSPort 6669" >>"$torconfig"
echo -e "\nCreating, enabling and starting the service file tor transparent proxy..."
cp "$executablerules" "/usr/bin/"
chmod +x "/usr/bin/tor-router"
cp "$servicefile" "/etc/systemd/system/"
systemctl enable tor-router.service && systemctl start tor-router.service
echo -e "\nEnabling and restarting the TOR daemon using systemctl..."
systemctl enable tor && systemctl restart tor
if [ "$?" == 0 ] ; then
if systemctl enable tor && systemctl restart tor; then
echo -e "Checking if all are working..."
if command -v curl >/dev/null; then
curl https://check.torproject.org/ | grep "Congratulations."
if [ "$?" == 0 ] ; then
if curl https://check.torproject.org/ | grep "Congratulations."; then
echo -e "\nAll is OK, from now on all your network traffic is under the TOR Network, look for your IP addres in your browser."
exit
fi