August 2019 - tor-commits - lists.torproject.org

[translation/torbutton-securitylevelproperties_completed] Update translations for torbutton-securitylevelproperties_completed
by translation＠torproject.org 02 Aug '19

02 Aug '19

commit 3004f08dbc6363127052695d76d530ef5b4207f2 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Aug 2 13:50:09 2019 +0000 Update translations for torbutton-securitylevelproperties_completed --- ja/securitylevel.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ja/securitylevel.properties b/ja/securitylevel.properties index 9fc424374..292dbea82 100644 --- a/ja/securitylevel.properties +++ b/ja/securitylevel.properties @@ -9,7 +9,7 @@ securityLevel.safer.tooltip = セキュリティレベル：やや安全 securityLevel.safer.summary = ウェブサイトのしばしば危険である機能を無効化します。サイトによっては正常に動作しなくなります。 securityLevel.safer.description1 = HTTPS非対応のサイトで JavaScript が無効化されます。 securityLevel.safer.description2 = いくつかのフォントと数学記号が無効化されます。 -securityLevel.safer.description3 = Audio and video (HTML5 media), and WebGL are click-to-play. +securityLevel.safer.description3 = オーディオ、ビデオ(HTML5メディア)、WebGLはクリックすると再生されます。 securityLevel.safest.level = 最も安全 securityLevel.safest.tooltip = セキュリティレベル：最も安全 securityLevel.safest.summary = 静的なサイトと基本的なサービスに必要な機能だけを許可します。この変更は画像、メディア、スクリプトに影響します。

1 0

[translation/torbutton-securitylevelproperties] Update translations for torbutton-securitylevelproperties
by translation＠torproject.org 02 Aug '19

02 Aug '19

commit 37b95c0101ad40e1376d56908eaa978a3d66523b Author: Translation commit bot <translation(a)torproject.org> Date: Fri Aug 2 13:50:02 2019 +0000 Update translations for torbutton-securitylevelproperties --- ja/securitylevel.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ja/securitylevel.properties b/ja/securitylevel.properties index 9fc424374..292dbea82 100644 --- a/ja/securitylevel.properties +++ b/ja/securitylevel.properties @@ -9,7 +9,7 @@ securityLevel.safer.tooltip = セキュリティレベル：やや安全 securityLevel.safer.summary = ウェブサイトのしばしば危険である機能を無効化します。サイトによっては正常に動作しなくなります。 securityLevel.safer.description1 = HTTPS非対応のサイトで JavaScript が無効化されます。 securityLevel.safer.description2 = いくつかのフォントと数学記号が無効化されます。 -securityLevel.safer.description3 = Audio and video (HTML5 media), and WebGL are click-to-play. +securityLevel.safer.description3 = オーディオ、ビデオ(HTML5メディア)、WebGLはクリックすると再生されます。 securityLevel.safest.level = 最も安全 securityLevel.safest.tooltip = セキュリティレベル：最も安全 securityLevel.safest.summary = 静的なサイトと基本的なサービスに必要な機能だけを許可します。この変更は画像、メディア、スクリプトに影響します。

1 0

[translation/torbutton-torbuttondtd_completed] Update translations for torbutton-torbuttondtd_completed
by translation＠torproject.org 02 Aug '19

02 Aug '19

commit cfec4eeee4c1d6490e99a089774b02b5629a6d51 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Aug 2 13:49:26 2019 +0000 Update translations for torbutton-torbuttondtd_completed --- ja/torbutton.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ja/torbutton.dtd b/ja/torbutton.dtd index 3137fb041..0c1d43ab8 100644 --- a/ja/torbutton.dtd +++ b/ja/torbutton.dtd @@ -36,6 +36,6 @@ <!ENTITY torbutton.prefs.sec_js_disabled "すべてのサイトで JavaScript が無効化されます。"> <!ENTITY torbutton.prefs.sec_limit_typography "いくつかのフォントと数学記号が無効化されます。"> <!ENTITY torbutton.prefs.sec_limit_graphics_and_typography "いくつかのアイコン、数学記号および画像が無効化されます。"> -<!ENTITY torbutton.prefs.sec_click_to_play_media "Audio and video (HTML5 media), and WebGL are click-to-play."> +<!ENTITY torbutton.prefs.sec_click_to_play_media "オーディオ、ビデオ(HTML5メディア)、WebGLはクリックすると再生されます。"> <!ENTITY torbutton.circuit_display.title "Tor サーキット"> <!ENTITY torbutton.circuit_display.new_circuit "このサイトに新しいサーキットを使用する">

1 0

[translation/torbutton-torbuttondtd] Update translations for torbutton-torbuttondtd
by translation＠torproject.org 02 Aug '19

02 Aug '19

commit 5a11c4a63eebf4e6fea4243e42cac8928667b7af Author: Translation commit bot <translation(a)torproject.org> Date: Fri Aug 2 13:49:19 2019 +0000 Update translations for torbutton-torbuttondtd --- ja/torbutton.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ja/torbutton.dtd b/ja/torbutton.dtd index 3137fb041..0c1d43ab8 100644 --- a/ja/torbutton.dtd +++ b/ja/torbutton.dtd @@ -36,6 +36,6 @@ <!ENTITY torbutton.prefs.sec_js_disabled "すべてのサイトで JavaScript が無効化されます。"> <!ENTITY torbutton.prefs.sec_limit_typography "いくつかのフォントと数学記号が無効化されます。"> <!ENTITY torbutton.prefs.sec_limit_graphics_and_typography "いくつかのアイコン、数学記号および画像が無効化されます。"> -<!ENTITY torbutton.prefs.sec_click_to_play_media "Audio and video (HTML5 media), and WebGL are click-to-play."> +<!ENTITY torbutton.prefs.sec_click_to_play_media "オーディオ、ビデオ(HTML5メディア)、WebGLはクリックすると再生されます。"> <!ENTITY torbutton.circuit_display.title "Tor サーキット"> <!ENTITY torbutton.circuit_display.new_circuit "このサイトに新しいサーキットを使用する">

1 0

[translation/https_everywhere] Update translations for https_everywhere
by translation＠torproject.org 02 Aug '19

02 Aug '19

commit ae1e8a850b76ec1728b63941e96523f7c6fb33ba Author: Translation commit bot <translation(a)torproject.org> Date: Fri Aug 2 13:46:12 2019 +0000 Update translations for https_everywhere --- ja/https-everywhere.dtd | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/ja/https-everywhere.dtd b/ja/https-everywhere.dtd index 658994820..e2679d949 100644 --- a/ja/https-everywhere.dtd +++ b/ja/https-everywhere.dtd @@ -7,14 +7,14 @@ <!ENTITY https-everywhere.menu.donate_eff_imperative "EFF に寄付する"> <!ENTITY https-everywhere.menu.observatory "ssl Observatoryの設定"> -<!ENTITY https-everywhere.menu.globalDisable "HTTPS Everywhereは無効されます"> -<!ENTITY https-everywhere.menu.globalEnable "HTTPS Everywhere is ON"> -<!ENTITY https-everywhere.menu.encryptAllSitesEligibleOn "「すべてのサイトを暗号化」は有効されます"> -<!ENTITY https-everywhere.menu.encryptAllSitesEligibleOff "Encrypt All Sites Eligible is OFF"> +<!ENTITY https-everywhere.menu.globalDisable "HTTPS Everywhereは無効です"> +<!ENTITY https-everywhere.menu.globalEnable "HTTPS Everywhereは有効です"> +<!ENTITY https-everywhere.menu.encryptAllSitesEligibleOn "「すべてのサイトを暗号化」は有効です"> +<!ENTITY https-everywhere.menu.encryptAllSitesEligibleOff "「すべてのサイトを暗号化」は無効です"> <!ENTITY https-everywhere.menu.httpNoWhereExplainedBlocked "非暗号化リクエストは現在ブロックされます"> -<!ENTITY https-everywhere.menu.httpNoWhereExplainedAllowed "Unencrypted requests are currently allowed"> +<!ENTITY https-everywhere.menu.httpNoWhereExplainedAllowed "非暗号化リクエストは現在許可されています"> <!ENTITY https-everywhere.menu.seeMore "さらに詳しく"> -<!ENTITY https-everywhere.menu.seeLess "See less"> +<!ENTITY https-everywhere.menu.seeLess "詳細を閉じる"> <!ENTITY https-everywhere.menu.httpNoWhereMore "このモードで非暗号化コンテンツとリクエストはブロックされます"> <!ENTITY https-everywhere.menu.showCounter "カウンターを表示"> <!ENTITY https-everywhere.menu.viewAllRules "すべてのルールを表示">

1 0

[translation/abouttor-homepage_completed] Update translations for abouttor-homepage_completed
by translation＠torproject.org 02 Aug '19

02 Aug '19

commit 731945823e9aa1798271f4c36ee47644d93bf0e7 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Aug 2 13:45:14 2019 +0000 Update translations for abouttor-homepage_completed --- ja/aboutTor.dtd | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ja/aboutTor.dtd b/ja/aboutTor.dtd index 339848eb2..e182bd78a 100644 --- a/ja/aboutTor.dtd +++ b/ja/aboutTor.dtd @@ -30,3 +30,6 @@ <!ENTITY aboutTor.newsletter.link_text "Torニュースにを申し込む。"> <!ENTITY aboutTor.donationBanner.line2e "Tor を強く保つ。"> <!ENTITY aboutTor.donationBanner.buttonA "今すぐ寄付"> + +<!ENTITY aboutTor.donationBanner3.line1 "毎月の寄付によりTorを強固に保ちましょう。"> +<!ENTITY aboutTor.donationBanner3.line2 "Become a Defender of Privacy today.">

1 0

[translation/abouttor-homepage] Update translations for abouttor-homepage
by translation＠torproject.org 02 Aug '19

02 Aug '19

commit 9d4643bc28c9108561c594664a36856688ad3fb0 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Aug 2 13:45:06 2019 +0000 Update translations for abouttor-homepage --- ja/aboutTor.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ja/aboutTor.dtd b/ja/aboutTor.dtd index 5524169a9..e182bd78a 100644 --- a/ja/aboutTor.dtd +++ b/ja/aboutTor.dtd @@ -31,5 +31,5 @@ <!ENTITY aboutTor.donationBanner.line2e "Tor を強く保つ。"> <!ENTITY aboutTor.donationBanner.buttonA "今すぐ寄付"> -<!ENTITY aboutTor.donationBanner3.line1 "Automatic monthly donations keep Tor strong."> +<!ENTITY aboutTor.donationBanner3.line1 "毎月の寄付によりTorを強固に保ちましょう。"> <!ENTITY aboutTor.donationBanner3.line2 "Become a Defender of Privacy today.">

1 0

[tpo/staging] Add Craig Newmark Philanthropies to Sponsors
by pili＠torproject.org 02 Aug '19

02 Aug '19

commit a94f9d81bd7f67fa09c74ba951115cec495a3e9b Author: Pili Guerra <pili(a)piliguerra.com> Date: Fri Aug 2 14:28:58 2019 +0100 Add Craig Newmark Philanthropies to Sponsors --- .../images/sponsors/craig-newmark-philanthropies.png | Bin 0 -> 29629 bytes .../craig-newmark-philanthropies/contents.lr | 19 +++++++++++++++++++ 2 files changed, 19 insertions(+) diff --git a/assets/static/images/sponsors/craig-newmark-philanthropies.png b/assets/static/images/sponsors/craig-newmark-philanthropies.png new file mode 100644 index 0000000..76145b3 Binary files /dev/null and b/assets/static/images/sponsors/craig-newmark-philanthropies.png differ diff --git a/content/about/sponsors/craig-newmark-philanthropies/contents.lr b/content/about/sponsors/craig-newmark-philanthropies/contents.lr new file mode 100644 index 0000000..87b3312 --- /dev/null +++ b/content/about/sponsors/craig-newmark-philanthropies/contents.lr @@ -0,0 +1,19 @@ +_model: sponsor +--- +active: True +--- +time: 2019 +--- +name: Craig Newmark Philanthropies +--- +key: 16 +--- +logo: /static/images/sponsors/craig-newmark-philanthropies.png +--- +_hidden: yes +--- +link: https://craignewmarkphilanthropies.org/ +--- +description: + +Craig Newmark Philanthropies was created by craigslist founder Craig Newmark to support and connect people and drive broad civic engagement. The organization works to advance people and grassroots organizations that are getting stuff done in areas that include trustworthy journalism, voter protection, gender diversity in technology, and veterans and military families. The organization has provided Tor Project with an unrestricted gift.

1 0

[community/master] Remove speakers section
by pili＠torproject.org 02 Aug '19

02 Aug '19

commit 1750421baa9f214070c0ac4eb40c9f2b94772de5 Author: Pili Guerra <pili(a)piliguerra.com> Date: Fri Aug 2 10:58:12 2019 +0100 Remove speakers section --- content/outreach/contents.lr | 2 +- content/outreach/speakers/contents.lr | 19 ------------------- 2 files changed, 1 insertion(+), 20 deletions(-) diff --git a/content/outreach/contents.lr b/content/outreach/contents.lr index f18da38..40a16af 100644 --- a/content/outreach/contents.lr +++ b/content/outreach/contents.lr @@ -12,7 +12,7 @@ subtitle: Bring Tor materials to your next community event. --- cta: Tell the world about Tor --- -key: 3 +key: 2 --- html: outreach.html --- diff --git a/content/outreach/speakers/contents.lr b/content/outreach/speakers/contents.lr deleted file mode 100644 index 36e278d..0000000 --- a/content/outreach/speakers/contents.lr +++ /dev/null @@ -1,19 +0,0 @@ -section: outreach ---- -section_id: outreach ---- -color: primary ---- -_template: layout.html ---- -title: Speakers ---- -subtitle: Speakers ---- -key: 2 ---- -html: two-columns-page.html ---- -body: - -## Speakers

1 0

[community/staging] Update obfs4 instructions based on wiki version 65
by pili＠torproject.org 02 Aug '19

02 Aug '19

commit 95fdb76a9be931c0cc7df1e0bc03e693ece66fbf Author: gus <gus(a)torproject.org> Date: Tue Jul 30 05:50:20 2019 -0400 Update obfs4 instructions based on wiki version 65 --- .../bridge/centos-rhel-opensuse/contents.lr | 52 +++++++++++-------- .../bridge/debian-ubuntu/contents.lr | 58 ++++++++++++---------- .../technical-setup/bridge/docker/contents.lr | 38 ++++++++++++++ .../technical-setup/bridge/freebsd/contents.lr | 52 +++++++++++-------- .../technical-setup/bridge/openbsd/contents.lr | 45 ++++++++++------- .../bridge/post-install/contents.lr | 10 ++-- 6 files changed, 166 insertions(+), 89 deletions(-) diff --git a/content/relay-operations/technical-setup/bridge/centos-rhel-opensuse/contents.lr b/content/relay-operations/technical-setup/bridge/centos-rhel-opensuse/contents.lr index 5849e5a..541ec2b 100644 --- a/content/relay-operations/technical-setup/bridge/centos-rhel-opensuse/contents.lr +++ b/content/relay-operations/technical-setup/bridge/centos-rhel-opensuse/contents.lr @@ -4,7 +4,7 @@ title: CentOS / RHEL / OpenSUSE --- body: -# 1. Install tor and dependencies +### 1. Install tor and dependencies * Redhat / RHEL: @@ -19,7 +19,7 @@ yum install git golang tor zypper install tor go git ``` -# 2. Build obfs4proxy and move it into place. +### 2. Build obfs4proxy and move it into place. Heavily outdated versions of git can make `go get` fail, so try upgrading to a more recent git version if you're running into this problem. @@ -40,37 +40,46 @@ go get gitlab.com/yawning/obfs4.git/obfs4proxy sudo cp $GOPATH/bin/obfs4proxy /usr/local/bin/ ``` -# 3. Edit your Tor config file, usually located at `/etc/tor/torrc` and add the following lines: +### 3. Edit your Tor config file, usually located at `/etc/tor/torrc` and add the following lines: ``` -#Bridge config RunAsDaemon 1 -ORPort auto BridgeRelay 1 -ServerTransportPlugin obfs4 exec /usr/local/bin/obfs4proxy -# For a fixed obfs4 port (e.g. 34176), uncomment the following line. -#ServerTransportListenAddr obfs4 0.0.0.0:34176 -# Local communication port between Tor and obfs4. Always set this to "auto". "Ext" means -# "extended", not "external". Don't try to set a specific port number, nor listen on 0.0.0.0. + +# Replace "TODO" with a Tor port of your choice. This port must be externally +# reachable. Avoid port 9001 because it's commonly associated with Tor and +# censors may be scanning the Internet for this port. +ORPort TODO + +ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy + +# Replace "TODO" with an obfs4 port of your choice. This port must be +# externally reachable. Avoid port 9001 because it's commonly associated with +# Tor and censors may be scanning the Internet for this port. +ServerTransportListenAddr obfs4 0.0.0.0:TODO + +# Local communication port between Tor and obfs4. Always set this to "auto". +# "Ext" means "extended", not "external". Don't try to set a specific port +# number, nor listen on 0.0.0.0. ExtORPort auto -# Contact information that allows us to get in touch with you in case of -# critical updates or problems with your bridge. This is optional, so you -# don't have to provide an email address if you don't want to. +# Replace "<address(a)email.com>" with your email address so we can contact you if +# there are problems with your bridge. This is optional but encouraged. ContactInfo <address(a)email.com> -# Pick a nickname that you like for your bridge. + +# Pick a nickname that you like for your bridge. This is optional. Nickname PickANickname ``` -Don't forget to change the ContactInfo and Nickname options. + Don't forget to change the `ORPort`, `ServerTransportListenAddr`, `ContactInfo`, and `Nickname` options. -* Note that both Tor's OR port **and** its obfs4 port must be reachable. If your bridge is behind a firewall or NAT, make sure to open both ports. +* Note that both Tor's OR port and its obfs4 port must be reachable. If your bridge is behind a firewall or NAT, make sure to open both ports. You can use [our reachability test](https://bridges.torproject.org/scan/) to see if your obfs4 port is reachable from the Internet. -# 4. Restart tor +### 4. Restart tor `systemctl restart tor` -# 5. Monitor your logs (usually in your syslog) +### 5. Monitor your logs (usually in your syslog) To confirm your bridge is running with no issues, you should see something like this: @@ -84,9 +93,6 @@ To confirm your bridge is running with no issues, you should see something like [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor. ``` -Remember to open the random port associated with your bridge. You can find it in your tor log; in the above example it is 46396. To use a fixed port, uncomment the [ServerTransportListenAddr](https://www.torproject.org/docs/tor-manual.html.… option in your torrc. You can use [our reachability test](https://bridges.torproject.org/scan/) to see if your obfs4 port is reachable from the Internet. - - --- html: two-columns-page.html --- @@ -99,3 +105,7 @@ color: primary subtitle: How to deploy obfs4proxy Bridge on CentOS / RHEL / OpenSUSE --- _template: layout.html +--- +section: bridge +--- +section_id: bridge diff --git a/content/relay-operations/technical-setup/bridge/debian-ubuntu/contents.lr b/content/relay-operations/technical-setup/bridge/debian-ubuntu/contents.lr index 8900995..019503e 100644 --- a/content/relay-operations/technical-setup/bridge/debian-ubuntu/contents.lr +++ b/content/relay-operations/technical-setup/bridge/debian-ubuntu/contents.lr @@ -4,57 +4,67 @@ title: Debian / Ubuntu --- body: -# 1. Install Tor +### 1. Install Tor Get the latest version of Tor. If you're on Debian stable, `sudo apt-get install tor` should give you the latest stable version of Tor. -* Note:''' Ubuntu users need to get it from Tor repository. Please see [Download instructions for Ubuntu](https://www.torproject.org/docs/debian.html.en#ubuntu). +* Note: **Ubuntu users need to get it from Tor repository. Please see** [Download instructions for Ubuntu](https://www.torproject.org/docs/debian.html.en#ubuntu). -# 2. Install obfs4proxy +### 2. Install obfs4proxy -On [Debian](https://packages.debian.org/search?keywords=obfs4proxy), the `obfs4proxy` package is available in sid, buster, and stretch. On [https://packages.ubuntu.com/search?keywords=obfs4proxy Ubuntu], bionic, cosmic, disco, and eoan have the package. If you're running any of them, `sudo apt-get install obfs4proxy` should work. +On [Debian](https://packages.debian.org/search?keywords=obfs4proxy), the `obfs4proxy` package is available in sid, buster, and stretch. On [Ubuntu](https://packages.ubuntu.com/search?keywords=obfs4proxy), bionic, cosmic, disco, and eoan have the package. If you're running any of them, `sudo apt-get install obfs4proxy` should work. If not, you can [build it from source](https://gitlab.com/yawning/obfs4#installation). -# 3. Edit your Tor config file, usually located at `/etc/tor/torrc` and add the following lines: + +### 3. Edit your Tor config file, usually located at `/etc/tor/torrc` and add the following lines: ``` -#Bridge config RunAsDaemon 1 -ORPort auto BridgeRelay 1 + +# Replace "TODO" with a Tor port of your choice. This port must be externally +# reachable. Avoid port 9001 because it's commonly associated with Tor and +# censors may be scanning the Internet for this port. +ORPort TODO + ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy -# For a fixed obfs4 port (e.g. 34176), uncomment the following line. -#ServerTransportListenAddr obfs4 0.0.0.0:34176 -# Local communication port between Tor and obfs4. Always set this to "auto". "Ext" means -# "extended", not "external". Don't try to set a specific port number, nor listen on 0.0.0.0. + +# Replace "TODO" with an obfs4 port of your choice. This port must be +# externally reachable. Avoid port 9001 because it's commonly associated with +# Tor and censors may be scanning the Internet for this port. +ServerTransportListenAddr obfs4 0.0.0.0:TODO + +# Local communication port between Tor and obfs4. Always set this to "auto". +# "Ext" means "extended", not "external". Don't try to set a specific port +# number, nor listen on 0.0.0.0. ExtORPort auto -# Contact information that allows us to get in touch with you in case of -# critical updates or problems with your bridge. This is optional, so you -# don't have to provide an email address if you don't want to. +# Replace "<address(a)email.com>" with your email address so we can contact you if +# there are problems with your bridge. This is optional but encouraged. ContactInfo <address(a)email.com> -# Pick a nickname that you like for your bridge. + +# Pick a nickname that you like for your bridge. This is optional. Nickname PickANickname ``` -Don't forget to change the ContactInfo and Nickname options. + + Don't forget to change the `ORPort`, `ServerTransportListenAddr`, `ContactInfo`, and `Nickname` options. * If you decide to use a fixed obfs4 port smaller than 1024 (for example 80 or 443), you will need to give obfs4 `CAP_NET_BIND_SERVICE` capabilities to bind the port with a non-root user: -``` -sudo setcap cap_net_bind_service=+ep /usr/bin/obfs4proxy -``` + +`sudo setcap cap_net_bind_service=+ep /usr/bin/obfs4proxy` * Under Debian, you will also need to set `NoNewPrivileges=no` in `/lib/systemd/system/tor(a)default.service` and `/lib/systemd/system/tor@.service` and then run `systemctl daemon-reload`. [bug #18356](https://trac.torproject.org/projects/tor/ticket/18356) -* Note that both Tor's OR port **and** its obfs4 port must be reachable. If your bridge is behind a firewall or NAT, make sure to open both ports. +* Note that both Tor's OR port and its obfs4 port must be reachable. If your bridge is behind a firewall or NAT, make sure to open both ports. You can use [our reachability test](https://bridges.torproject.org/scan/) to see if your obfs4 port is reachable from the Internet. -# 4. Restart tor +### 4. Restart tor `systemctl restart tor` -# 5. Monitor your logs +### 5. Monitor your logs To confirm your bridge is running with no issues, you should see something like this (usually in `/var/log/tor/log` or `/var/log/syslog`): @@ -68,10 +78,6 @@ To confirm your bridge is running with no issues, you should see something like [notice] Now checking whether ORPort <redacted>:9001 is reachable... (this may take up to 20 minutes -- look for log messages indicating success) [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor. ``` - -Remember to open the random port associated with your bridge. You can find it in your tor log; in the above example it is 46396. To use a fixed port, uncomment the [ServerTransportListenAddr](https://www.torproject.org/docs/tor-manual.html.… option in your torrc. You can use [our reachability test](https://bridges.torproject.org/scan/) to see if your obfs4 port is reachable from the Internet. - - --- key: 1 --- diff --git a/content/relay-operations/technical-setup/bridge/docker/contents.lr b/content/relay-operations/technical-setup/bridge/docker/contents.lr new file mode 100644 index 0000000..2353ea2 --- /dev/null +++ b/content/relay-operations/technical-setup/bridge/docker/contents.lr @@ -0,0 +1,38 @@ +_model: page +--- +title: Docker +--- +body: + +We are maintaining a docker container that allows you to quickly set up an obfs4 bridge. First, fetch the container: + +`docker pull phwinter/obfs4-bridge:0.1` + +Now, it's time to run the container. You have two options: + + * We maintain a script that automatically determines a free OR and obfs4 port for you. The script only requires your email address as argument: + +``` + $ curl https://dip.torproject.org/anti-censorship/docker-obfs4-bridge/raw/master/d… > deploy-container.sh + $ bash deploy-container.sh address(a)email.com +``` + + * If you would rather provide your own ports, run the following command and replace XXX with your OR port, YYY with your obfs4 port, and address(a)email.com with your email address. Don't forget the semicolon after the environment variables. + +``` + OR_PORT=XXX PT_PORT=YYY EMAIL=address(a)email.com; \ + docker run -d \ + -e "OR_PORT=$OR_PORT" -e "PT_PORT=$PT_PORT" -e "EMAIL=$EMAIL" \ + -p "$OR_PORT":"$OR_PORT" -p "$PT_PORT":"$PT_PORT" \ + phwinter/obfs4-bridge:0.1 +``` + +That's it! Your container should now be bootstrapping your new obfs4 Tor bridge. +--- +html: two-columns-page.html +--- +key: 5 +--- +section: Bridge +--- +section_id: bridge diff --git a/content/relay-operations/technical-setup/bridge/freebsd/contents.lr b/content/relay-operations/technical-setup/bridge/freebsd/contents.lr index 01adcd2..7363451 100644 --- a/content/relay-operations/technical-setup/bridge/freebsd/contents.lr +++ b/content/relay-operations/technical-setup/bridge/freebsd/contents.lr @@ -8,55 +8,64 @@ key: 3 --- body: -# 1. Install packages +### 1. Install packages ``` pkg install obfs4proxy-tor tor ca_root_nss ``` -# 2. Edit your Tor config file, usually located at `/usr/local/etc/tor` and add the following lines +### 2. Edit your Tor config file, usually located at `/usr/local/etc/tor` and add the following lines ``` -#Bridge config RunAsDaemon 1 -ORPort auto BridgeRelay 1 -ServerTransportPlugin obfs4 exec /usr/local/bin/obfs4proxy -# For a fixed obfs4 port (e.g. 34176), uncomment the following line. -#ServerTransportListenAddr obfs4 0.0.0.0:34176 -# Local communication port between Tor and obfs4. Always set this to "auto". "Ext" means -# "extended", not "external". Don't try to set a specific port number, nor listen on 0.0.0.0. + +# Replace "TODO" with a Tor port of your choice. This port must be externally +# reachable. Avoid port 9001 because it's commonly associated with Tor and +# censors may be scanning the Internet for this port. +ORPort TODO + +ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy + +# Replace "TODO" with an obfs4 port of your choice. This port must be +# externally reachable. Avoid port 9001 because it's commonly associated with +# Tor and censors may be scanning the Internet for this port. +ServerTransportListenAddr obfs4 0.0.0.0:TODO + +# Local communication port between Tor and obfs4. Always set this to "auto". +# "Ext" means "extended", not "external". Don't try to set a specific port +# number, nor listen on 0.0.0.0. ExtORPort auto -# Contact information that allows us to get in touch with you in case of -# critical updates or problems with your bridge. This is optional, so you -# don't have to provide an email address if you don't want to. +# Replace "<address(a)email.com>" with your email address so we can contact you if +# there are problems with your bridge. This is optional but encouraged. ContactInfo <address(a)email.com> -# Pick a nickname that you like for your bridge. + +# Pick a nickname that you like for your bridge. This is optional. Nickname PickANickname Log notice file /var/log/tor/notices.log ``` -Don't forget to change the ContactInfo and Nickname options. +Don't forget to change the `ORPort`, `ServerTransportListenAddr`, `ContactInfo`, and `Nickname` options. -* Note that both Tor's OR port **and** its obfs4 port must be reachable. If your bridge is behind a firewall or NAT, make sure to open both ports. +* Note that both Tor's OR port and its obfs4 port must be reachable. If your bridge is behind a firewall or NAT, make sure to open both ports. You can use [our reachability test](https://bridges.torproject.org/scan/) to see if your obfs4 port is reachable from the Internet. -# 3. Ensure that the `random_id` sysctl setting is enabled: +### 3. Ensure that the `random_id` sysctl setting is enabled: ``` echo "net.inet.ip.random_id=1" >> /etc/sysctl.conf sysctl net.inet.ip.random_id=1 ``` -# 4. Start the tor daemon and make sure it starts at boot: +### 4. Start the tor daemon and make sure it starts at boot: ``` sysrc tor_enable=YES service tor start ``` -# 5. Monitor your logs +### 5. Monitor your logs To confirm your bridge is running with no issues, you should see something like this in `/var/log/tor/notices.log`: @@ -70,9 +79,8 @@ To confirm your bridge is running with no issues, you should see something like [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor. ``` -Remember to open the random port associated with your bridge. You can find it in your tor log; in the above example it is 46396. To use a fixed port, uncomment the [ ServerTransportListenAddr](https://www.torproject.org/docs/tor-manual.html.… option in your torrc. You can use[our reachability test] (https://bridges.torproject.org/scan/) to see if your obfs4 port is reachable from the Internet. -# 6. To get the fastest package updates, switch from the "quarterly" package repo to the "latest" repo. +### 6. To get the fastest package updates, switch from the "quarterly" package repo to the "latest" repo. Create the following folder: @@ -96,3 +104,7 @@ FreeBSDlatest: { --- subtitle: How to deploy obfs4proxy Bridge on FreeBSD +--- +section: Bridge +--- +section_id: bridge diff --git a/content/relay-operations/technical-setup/bridge/openbsd/contents.lr b/content/relay-operations/technical-setup/bridge/openbsd/contents.lr index ae682d9..637f94a 100644 --- a/content/relay-operations/technical-setup/bridge/openbsd/contents.lr +++ b/content/relay-operations/technical-setup/bridge/openbsd/contents.lr @@ -8,32 +8,41 @@ key: 4 --- body: -# 1. Install packages +### 1. Install packages ``` pkg_add tor obfs4proxy ``` -# 2. Edit your Tor config file +### 2. Edit your Tor config file Usually located at `/etc/tor/torrc`, add the following lines: ``` -#Bridge config RunAsDaemon 1 -ORPort auto BridgeRelay 1 -ServerTransportPlugin obfs4 exec /usr/local/bin/obfs4proxy -# For a fixed obfs4 port (e.g. 34176), uncomment the following line. -#ServerTransportListenAddr obfs4 0.0.0.0:34176 -# Local communication port between Tor and obfs4. Always set this to "auto". "Ext" means -# "extended", not "external". Don't try to set a specific port number, nor listen on 0.0.0.0. + +# Replace "TODO" with a Tor port of your choice. This port must be externally +# reachable. Avoid port 9001 because it's commonly associated with Tor and +# censors may be scanning the Internet for this port. +ORPort TODO + +ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy + +# Replace "TODO" with an obfs4 port of your choice. This port must be +# externally reachable. Avoid port 9001 because it's commonly associated with +# Tor and censors may be scanning the Internet for this port. +ServerTransportListenAddr obfs4 0.0.0.0:TODO + +# Local communication port between Tor and obfs4. Always set this to "auto". +# "Ext" means "extended", not "external". Don't try to set a specific port +# number, nor listen on 0.0.0.0. ExtORPort auto -# Contact information that allows us to get in touch with you in case of -# critical updates or problems with your bridge. This is optional, so you -# don't have to provide an email address if you don't want to. +# Replace "<address(a)email.com>" with your email address so we can contact you if +# there are problems with your bridge. This is optional but encouraged. ContactInfo <address(a)email.com> -# Pick a nickname that you like for your bridge. + +# Pick a nickname that you like for your bridge. This is optional. Nickname PickANickname Log notice file /var/log/tor/notices.log @@ -41,17 +50,17 @@ Log notice file /var/log/tor/notices.log User _tor ``` -Don't forget to change the ContactInfo and Nickname options. +Don't forget to change the `ORPort`, `ServerTransportListenAddr`, `ContactInfo`, and `Nickname` options. -Note that both Tor's OR port and its obfs4 port must be reachable. If your bridge is behind a firewall or NAT, make sure to open both ports. +* Note that both Tor's OR port and its obfs4 port must be reachable. If your bridge is behind a firewall or NAT, make sure to open both ports. You can use [our reachability test](https://bridges.torproject.org/scan/) to see if your obfs4 port is reachable from the Internet. -# 3. Start the tor daemon and make sure it starts at boot: +### 3. Start the tor daemon and make sure it starts at boot: ``` rcctl enable tor rcctl start tor ``` -# 4. Monitor your logs +### 4. Monitor your logs To confirm your bridge is running with no issues, you should see something like this (`/var/log/tor/notices.log`): @@ -64,8 +73,6 @@ To confirm your bridge is running with no issues, you should see something like [notice] Now checking whether ORPort <redacted>:9001 is reachable... (this may take up to 20 minutes -- look for log messages indicating success) [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor. ``` - -Remember to open the random port associated with your bridge. You can find it in your tor log; in the above example it is 46396. To use a fixed port, uncomment the [ServerTransportListenAddr](https://www.torproject.org/docs/tor-manual.html.… option in your torrc. You can use [our reachability test](https://bridges.torproject.org/scan/) to see if your obfs4 port is reachable from the Internet. --- subtitle: How to deploy obfs4proxy Bridge on OpenBSD --- diff --git a/content/relay-operations/technical-setup/bridge/post-install/contents.lr b/content/relay-operations/technical-setup/bridge/post-install/contents.lr index e7f19cd..37b168f 100644 --- a/content/relay-operations/technical-setup/bridge/post-install/contents.lr +++ b/content/relay-operations/technical-setup/bridge/post-install/contents.lr @@ -4,19 +4,23 @@ title: Post-install --- body: -Congrats! If you get to this point, it means that your obfs4 bridge is running and is being distributed by BridgeDB to censored users. If you want to connect to your bridge manually, you will need to know the bridge's obfs4 certificate. See the file `/var/lib/tor/pt_state/obfs4_bridgeline.txt` and paste the entire bridge line into Tor Browser: +Congrats! + +If you get to this point, it means that your obfs4 bridge is running and is being distributed by BridgeDB to censored users. Note that it can take several days or weeks to see a consistent set of users, so don't get discouraged if you don't see user connections right away. + +If you want to connect to your bridge manually, you will need to know the bridge's obfs4 certificate. See the file `/var/lib/tor/pt_state/obfs4_bridgeline.txt` and paste the entire bridge line into Tor Browser: ``` Bridge obfs4 <IP ADDRESS>:<PORT> <FINGERPRINT> cert=<CERTIFICATE> iat-mode=0 ``` -You'll need to replace `<IP ADDRESS>`, `<PORT>`, and `<FINGERPRINT>` with the actual values, which you can find in the tor log. Make sure to use `<FINGERPRINT>`, not `<HASHED FINGERPRINT>`; and that `<PORT>` is the one from the log line `Registered server transport 'obfs4'`, not the one from the line `Now checking whether ORPort ... is reachable`. +You'll need to replace `<IP ADDRESS>`, `<PORT>`, and `<FINGERPRINT>` with the actual values, which you can find in the tor log. Make sure to use `<FINGERPRINT>`, not `<HASHED FINGERPRINT>`; and that `<PORT>` is the obfs4 port you chose - and not the OR port. Finally, you can monitor your obfs4 bridge's usage on [Relay Search](https://metrics.torproject.org/rs.html#search). Just enter your bridge's `<HASHED FINGERPRINT>` in the form and click "Search". After having set up the bridge, it takes approximately three hours for the bridge to show up in Relay Search. --- html: two-columns-page.html --- -key: 5 +key: 6 --- subtitle: How to find your Bridge in Relay Search and connect manually

1 0