[tor-bugs] #2370 [Torouter]: Torouter basic Web UI for OpenWRT

[Tor Bug Tracker & Wiki]

#2370: Torouter basic Web UI for OpenWRT
-------------------------------+--------------------------------------------
 Reporter:  cyphunk            |          Owner:  ioerror
     Type:  enhancement        |         Status:  new    
 Priority:  normal             |      Milestone:         
Component:  Torouter           |        Version:         
 Keywords:  openwrt, torouter  |         Parent:         
   Points:                     |   Actualpoints:         
-------------------------------+--------------------------------------------

Comment(by fermenthor):

 Replying to [comment:8 soma]:
 > * put the advanced firewall rules (thinking of policy routing) for tor
 in /etc/firewall.tor and include that file via /etc/config/firewall.
 Simple rules (like opening ports and stuff) should directly go to
 /etc/config/firewall.
 That is how it works except the script is /etc/tor/firewall.sh and all tor
 rules are in there - otherwise we need to specify certain options twice
 (ex. firewall: allow OR port, tor: bind OR port) which might be okay.

 > * imo it would be good to split these packages
 >  ** make tor package on openwrt run with a config from /etc/config/tor.
 Using a init-script for that sounds good to me. Patches for that should go
 to openwrt directly
 > ** make an optional package luci-app-tor which will let the user do the
 settings in the gui. When finished, send it to the luci-devs to be
 included in the official luci repo
 That's how other applications are set up so I agree this would be
 consistent.

 Replying to [comment:9 soma]:
 > Found a bug (#2765) while playing with it, but its unrelated to your
 packages.
 Frankly, I did not pay attention to aliases. I've fixed this by binding
 the DNS port only on the primary IP of the interface instead of 0.0.0.0.
 This makes the address translation work correctly.

 >  * log output should be configurable and per default be "warning syslog"
 Added to the luci torrc page. All you have to do for a new option is to
 add an entry in torrc.lua. Someone with a lot of time on their hands
 should add all the possible tor options.

 >  * restart of the services at applying in the webinterface doesn't work
 for me
 Works here. Do you have a correct tor entry in /etc/config/ucitrack ? It
 should have been added by postinst.

 >  * use tabs for the tor config in basics (especially if you plan to add
 more expert options). For a really nice example have a look at the olsr
 admin pages or dnsmasq page.
 This will definitely be useful when we add all possible tor options to the
 torrc page and split it into client|relay|dir|etc

 I've updated the files today.
 Thanks for testing!

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2370#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online