Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

How do you properly setup Tor on a Windows 7 box to guarantee that ALL connections will run through Tor?

share|improve this question
2  
You can't do that. If you routed all connections through Tor, that would mean you would also be routing Tor connections through Tor. That would cause your configuration to implode with infinite encapsulation. –  David Schwartz Jul 11 '12 at 5:46
    
Ultimately, I would recommend that you use things like tor browser bundle where it's designed to work with it. –  ewanm89 Jul 11 '12 at 11:44
add comment

2 Answers

up vote 4 down vote accepted

You should be able to to that with the Windows Firewall "with advanced functionality" (something like that), as this firewall knows about local processes: you can make per-program rules (a "program" here is actually just a file name, as for example C:\Window\explorer.exe).

So you should be able to:

  1. block all outgoing packets (for all protocols, not just TCP or UDP)
  2. allow everything only for the Tor program, defined by its file name (often C:\Program Files\Vidalia Bundle\Tor\tor.exe). For a working Tor relay, you must allow both outgoing (active open) and incoming (passive open) TCP connexions.
  3. A Tor exit node needs to do DNS resolution. You might need to unblock the Windows DNS resolver if it is a standalone process - or is the resolution done by each program?

Note:

  • I have not tested this configuration.
  • Before changing any firewall rule, make sure you understand Windows firewall UI and what the rule means.
  • Before making a block all rule, make sure you know how to reset the firewall to normal state (without turning it off, unless it is usually off).
  • With Windows you can have different "profiles" with different firewall configurations. Make sure Windows 7 does not automatically change active profile without user confirmation (as Windows Vista sometimes does).
share|improve this answer
    
+9001. If anyone test this let me know :D –  acidzombie24 Jul 13 '12 at 2:50
    
Can you provide more information about how to do this please. Thank you. –  Para Aug 22 '12 at 8:39
add comment

You cannot guarantee that all connections will route through Tor, no matter what operating system you are using. Tor cannot route UDP traffic and is only able to route TCP traffic.

For your TCP traffic you can simply follow the Documentation on the Tor Project Website

share|improve this answer
    
Does Tor not support UDP due to technical limitations or just to prevent people abusing by using it for DDOS with UDP packets? –  Dracs Jul 11 '12 at 7:43
    
@Dracs Both, there are many other difficult issues. See the FAQ: You should transport all IP packets, not just TCP packets. notably answer e: "Exit policies for arbitrary IP packets mean building a secure IDS. () Many potential abuse issues are resolved by the fact that Tor only transports valid TCP streams (as opposed to arbitrary IP including malformed packets and IP floods)," So this is really really difficult. –  curiousguy Jul 13 '12 at 3:13
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.