[guardian-dev] Tethering with Tor transparent proxy

[Daniel Bryg]

Hi,

I hear there are issues with this, so I've decided to see if I could
get it to work. Here are the steps.

1. Add these two lines to torrc to open ports on all interfaces
TransListenAddress 0.0.0.0
DNSListenAddress 0.0.0.0

2. Add these rules to catch all the tethered traffic
iptables -t nat -A PREROUTING -i usb0 -p udp --dport 53 -j REDIRECT
--to-ports 5400
iptables -t nat -A PREROUTING -i usb0 -p tcp -j REDIRECT --to-ports 9040

3. Make sure that the FORWARD chain is not leaking other traffic.

Notes:
- Change usb0 to wl0.1 in the above rules to proxy the Wifi hotspot traffic
- listening on all interfaces may create a security risk, so consider
changing the addresses in torrc or block incoming traffic with
iptables.
- you need root access
- tested on Nexus One, CyanogenMod-7.0.3-N1

D>