TOR: is it possible to use tor router only for blocked resources?

Started by mrpsycho, December 20, 2018, 02:29:25 PM

Previous topic - Next topic
Hello,

i'm trying to configure TOR to bypass blocks, that made our government (we are not allowed to use linkedin, slack and telegram, for example).

nowadays, i use additional VPS with openvpn + alias setting to route several services. 
but, now i learned about TOR, and i think it can help me.

i've downloaded package, turned it on, and created setup on local machine - added TOR as Socks Proxy - and i was able to access it.
With that - i found, that all traffic goes thru TOR, which slows down main connections.


Next i found setting "Fascist Mode", but i can't understand how it should work?

if i turn it on - nothing changes.


could you please point me where is my mistake?

Quote from: mrpsycho on December 20, 2018, 02:29:25 PM
Next i found setting "Fascist Mode", but i can't understand how it should work?

This is for some restricted environments where it cannot access other ports than 80 + 443 and no inbound connection is possible.

so, am i getting right, so there is no way to bypass TOR for services, that are blocked by government?



Quote from: mrpsycho on December 21, 2018, 10:08:15 AM
so, am i getting right, so there is no way to bypass TOR for services, that are blocked by government?
Hi,

I have the same problem, but with some sites that block Tor like Google (Recaptcha madness!).

Thats my solution:

I use the OPNsense Tor Plug-in as SOCKS Proxy, too.
Its really fast, faster than the Tor Browser itself.

I use it only with my Mozilla Firefox Browser (short: FF).

In FF I use this Plug-In: "FoxyProxy"
In FoxyProxy you can define the OPNSense TOR Socks Proxy and define Bypass Domains/URLs (called "Black" Patterns).
Works really good!
Here some screenshots of the FoxyProxy Plug-in configuration:
OS: OPNsense 18.7.9-amd64
HW: HP t620 PLUS Thin Client (F0U83EA) / AMD GX-420CA SOC with Radeon HD Graphics (4 cores) / 4GB RAM, INTEL i350-T4 1G Quad Port Ethernet Adapter (I350T4G2P20), WD Green SSD 120GB M.2 2280 SATA B-M-Key 6GBs (WDS120G2G0B)
Internet: 1und1 VDSL 50 Mbit
VoIP: 1und1 und Sipgate

ok... now i did it with alias table and NAT rules.

in that case users don't need to install additional software... and it is not hard to add new domain to the list.


ps. foxyproxy is nice, thanks!