THIS GIST WON'T BE UPDATED ANY MORE (24/10/18)
Follow the progress of this project here 3os.org Raspberry Pi 3 TOR Access Point Router Project
Network: Router RJ45 <--> Ethernet Port on Raspberry <--> TOR <--> Raspberry WIFI AC <--> WIFI CLIENT
# -- Download Rasbian Strech Lite from: https://www.raspberrypi.org/downloads/raspbian/
# -- Burn Image to SD-Card.
# -- Boot Raspberry Pi 3.
sudo apt-get update && sudo apt-get upgrade && sudo apt-get install git
sudo raspi-config
# -- Change User Password
# -- Enable SSH In Interface Options
sudo reboot
# SSH TO Raspberry Pi 3
git clone https://github.com/unixabg/RPI-Wireless-Hotspot.git
cd RPI-Wireless-Hotspot
sudo ./install
# -- "Y" to agree to terms
# -- "Y" to use preconfigured DNS
# -- "Y" to use Unblock-Us DNS servers
# -- "N" for WiFi defaults
# -- Type in a new WiFi password (it will be checked)
# -- Type in a new SSID
# -- Type in your desired WiFi channel (1, 6, 11)
# -- Type "N" when asked - "Are you using a rtl871x chipset?" --
# -- Type "N" for chromecast support (unless you plan to use a chromecast w/RasTor)
sudo reboot
sudo apt-get update && sudo apt-get upgrade
# -- Connect to Your new SSID with a Phone and check if you have full Internet Connection.
sudo apt-get install tor
sudo nano /etc/tor/torrc
# -- Add the following just below the first set of comments:
Log notice file /var/log/tor/notices.log
VirtualAddrNetwork 10.192.0.0/10
AutomapHostsSuffixes .onion,.exit
AutomapHostsOnResolve 1
TransPort 9040
TransListenAddress 192.168.42.1
DNSPort 53
DNSListenAddress 192.168.42.1
# -- iptable routes:
sudo iptables -F && sudo iptables -t nat -F
sudo iptables -t nat -A PREROUTING -i wlan0 -p udp --dport 53 -j REDIRECT --to-ports 53
sudo iptables -t nat -A PREROUTING -i wlan0 -p tcp --syn -j REDIRECT --to-ports 9040
# -- Check your routes:
sudo iptables -t nat -L
# -- if all routs looks like about:
sudo sh -c "iptables-save > /etc/iptables.ipv4.nat"
# -- Create log file:
sudo touch /var/log/tor/notices.log
sudo chown debian-tor /var/log/tor/notices.log && sudo chmod 644 /var/log/tor/notices.log
# -- Start TOR:
sudo service tor start
# -- Check to see if the service is running:
sudo service tor status
# -- Run TOR Service at Boot:
sudo update-rc.d tor enable
sudo reboot
# -- Test for TOR service is running after reboot, connect to the WIFI.
# -- DONE -- #
# -- Optional: Install Monit Service to reload Tor Serivce if Down
sudo apt-get install monit
sudo nano /etc/monit/monitrc
# -- add those lines to the end of the config:
check process gdm with pidfile /var/run/tor/tor.pid
start program = "/etc/init.d/tor start"
stop program = "/etc/init.d/tor stop"
# -- realod and add Monit to startup
sudo monit reload
sudo update-rc.d monit enable
Hi fire1ce,
I have installed your setup to make my raspberry pi into a tor router. It works fine.
Now I want to route all my network trough openvpn over tor.
I installed openvpn and connected my own openvpn server. whenever I connect to openvpn, I can't access internet. When I stop the openvpn client, everything turns back working.
I think that some changes have to be done on Iptables or what else. I don't have enough knowledge :)
Can you help me for achieving my goal?
best regards