How setup TOR only for .onion domains?

[BelarusOK]

Hello peoples!

Please help me setup my router for work TOR with only .ONION domains? And only with my list domains?
I no see "Rules for routing client traffic through the tunnel" such as VPN-Client.

And why there is all traffic through TOR? Without prescription of a proxy/socks?

Thanks in advance!

Asuswrt-Merlin 384.6 / RT-AC5300

 

[BelarusOK]

I can use Addon for Mozilla = FoxyProxy Standart.
Сhoose Socks5 IP : Port and write URL Patterns = *.onion/* and other domains.

But how on a router create necessary IP : Port without sending all traffic?
I have Telnet/SSH and entware.

 

[BelarusOK]

Friends, there is no decision?

 

[waeking]

I would love something like this as well. I have not looked very far into this. Perhaps there is a way using dnsmasq or nginx (proxy). I wish I could help more.

 

[bitmonster]

Whitelist to a secure browser is your best option and just block everything else on the client.

 

[BelarusOK]

I have found some instruction, now it is necessary to choose from it GitHub:

1. Connect to ASUS SSH.
2. Execute:

cd /opt
opkg update
opkg install mc
opkg install tor
cat /dev/null > /opt/etc/tor/torrc

3. Open for edit:

mcedit /opt/etc/tor/torrc

User admin
PidFile /opt/var/run/tor.pid
DataDirectory /opt/var/lib/tor
ExcludeExitNodes {RU},{UA},{AM},{KG}
StrictNodes 1
#SocksPort 127.0.0.1:9050 # Локальный Socks прокси
VirtualAddrNetwork 10.254.0.0/16 # Виртуальные адреса для .onion ресурсов
AutomapHostsOnResolve 1
TransPort 192.168.1.1:9040 # Адрес LAN интерфейса
TransPort 127.0.0.1:9040
DNSPort 127.0.0.1:9053

Further I need your help. It is necessary for me that I on the computer could specify Socks : Port = 192.168.1.1 : 9050 or 9150 for the necessary websites.

 

[BelarusOK]

Solved

ASUS RT-AC5300 | Merlin 384.6
entware

1. Connect via SSH.
2. Execute:

opkg update
opkg install tor

3. Via WinSCP go to /opt/etc/tor/torrc
4. We add at the beginning: SOCKSPort 192.168.1.1:9050
5. Start TOR

tor

6. Setup addon FoxyProxy Standart for browsers: Chrome / Mozilla
7. Go to addon and add new Socks5: 192.168.1.1 9050
Check this Send DNS through SOCKS5 proxy? ON
8. Save and go to setup Patterns, example:
White list
ONION | *.onion
Check TOR | *check.torproject.org
Check IP| *whoer.net
Rutor| *rutor.info
9. Include function: Use Unabled Proxies By Patterns and Priority
10. Testing - open any website from our list or onion, everything works! Nice!

 

[waeking]

That is great! I have been searching for a way to use onion address' without the need for a browser extension. I haven't had a chance to implement anything yet. However, I believe this is possible by adding a few lines to /jffs/configs/dnsmasq.conf.add and using some documentation from here https://trac.torproject.org/projects/tor/wiki/doc/LinuxDNSresolverForOnions

 

[bitmonster]

Be mindful that you may lose anonymity by using this set up.

You can also use the onion.to service if caught in a pinch.

Sent from my SM-G965F using Tapatalk

 

[Fitz Mutch]

If you do this, the FBI will come.