OPNsense Forum

English Forums => 25.7, 25.10 Series => Topic started by: House Of Cards on November 27, 2025, 07:55:21 PM

Title: Please Help, Experimenting With TOR Configuration
Post by: House Of Cards on November 27, 2025, 07:55:21 PM
Happy thanksgiving,

I've been wanting to mess with TOR for a while, but always get frustrated trying to set it up.  No matter what, it just never seems to work no matter what guide I follow, and I'm hoping someone can steer me to what I'm doing wrong.

Right now I have the TOR plugin installed, service is running, and the configuration for the plugin is listening on the LAN interface.  The transparent proxy is enabled, port 9040, DNS port 9053.

There is a VLAN called TOR as opt4 vlan01 with a static IP set of 172.16.200.1.

I created NAT port forward rules in the screenshot, and there are matching rules showing in the LAN rules.
Screenshot_20251127_134450.png

I'm probably just completely turned around on this, and trying to follow online guides, most of which are written for people with more understanding, and many are likely completely outdated.  Can someone point me to what is wrong here?  If I enable these rules, web pages don't open, they just time out.

Thanks!



Title: Re: Please Help, Experimenting With TOR Configuration
Post by: Kets_One on November 28, 2025, 01:50:57 PM
You are trying to reroute any LAN traffic to 172.16.200.1 but using the same desination port.
Are you sure this is correct? Is the TOR plugin listening on these ports?
Title: Re: Please Help, Experimenting With TOR Configuration
Post by: House Of Cards on November 29, 2025, 04:24:53 AM
Screenshot_20251128_221950.png

Should all my redirect rules point to that port, (HTTP, HTTPS)?  I feel like I might have tried that.

EDIT:  I changed the DNS rule to 9053, and the HTTP/S rules to 9040.  Same behavior.  I have another port forward rule for DNS lower in the rules list for those devices that try to bypass my hardwired DNS, but that shouldn't be blocking anything from the TOR rules, as they are on top in the Port Forward rules.