[tor-talk] How to force redirect each application through separate SocksPorts? (preventing identity correlation)

Fabian Keil freebsd-listen at fabiankeil.de
Mon Jun 11 16:41:49 UTC 2012


<proper at secure-mail.biz> wrote:

> Many applications, such as wget, apt-get, gpg, etc. do not speak socks,
> are unlikely to speak socks anytime soon, but support http.
> 
> Privoxy or polipo are of no help. They provides only one http port, with
> the one big drawback: all http connections will be presses through the
> same SocksPort (identity correlation [1]).

That's incorrect. Privoxy can change the forwarding settings based on tags:
http://www.privoxy.org/user-manual/actions-file.html#CLIENT-HEADER-TAGGER

And while polipo currently can't do that, you could simply provide each
client with its own polipo instance and have each instance forward
to a different SocksPort.

BTW, if you don't need wget's webscraping support you could
replace it with curl which has proper socks support.

Fabian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 196 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20120611/f7661f0d/attachment.pgp>


More information about the tor-talk mailing list