Setting up JAP and Proxomitron

[Blackspear]

Anyone have simple step by step instruction on setting up JAP and Proxomitron?

I can get it to LOW anonymity, but not high, I'm not setting it up right with the correct ports or something.

I'm using Kye-U's filters.

Cheers ;D

[iceni60]

ive had proxomitron and JAP for awhile, but not used JAP. i just tried and i get low to fair anonimity with Dresden-Dresden. i dont really use JAP, but i think if you search through paranoid2000's posts you may find something.

[iceni60]

setup like this- open proxomitron and click proxy and enter 127.0.0.1:4001

[iceni60]

then check, use remote proxy

[Blackspear]

Thanks Icen, I'll try it and come back to you...

Cheers ;D

[iceni60]

im really sorry :-[ im not sure that that is the correct configuation, i just got my first popup with that config. edit sorry disregard this post as high-spirited bunkum

[iceni60]

seeing as no one has replied yet, i wanted to say that im 99% sure that the configuation given above is correct. But, Blackspear do you use firefox? because i have FF configured as below, do you have this config too?. i dont know anything about gopher servers. should that be configured too?

[Justhelping]

That looks correct.

Leave gopher alone, it doesn't matter, I seriously doubt you will be using it any time soon.

[Blackspear]

Many thanks Iceni60 and J.H. I managed to set it up, it is sooooooo SLOOOOW, so with this being the case have decided to give it a miss, thanks for all your help...

Cheers ;D

[Paranoid2000]

Check JAP's options - under Config/Miscellaneous there is the ability to check mix availability and you can switch to a faster mix if you find things too slow. However there are bandwidth limits on it - so the more who use it, the slower it gets.

[iceni60]

thanks, Justhelping and Paranoid :lurking:

[Dr. Know]

I noticed another setting in Proxo that deals with proxies. When you open Proxo click the "config button", click "HTTP tab", under "Proxy Protocol Settings" it says "Proxomitron's Proxy Port Number" (say that 10 times as fast as you can) and in the box it says "8080". Should this also be changed to 4001 to use it with JAP? Or should it just be left alone? Thanks.

[Paranoid2000]

Only Proxomitron's External Proxy Selector (click on the Proxy button) needs to be changed as per Iceni60's post above (post number 3) to work with JAP. The Proxy Port Number is which port Proxomitron will accept web browser requests on - you can change this from the default 8080 if you want (and update your browser settings accordingly) but I would suggest that there is little point in doing so.

[Dr. Know]

Thanks Paranoid for the help. :)

[getalive]

Yep, Proxo works quite nicely with JAP...

But I'm not able to make Proxo running with TOR Onion Routing v0.0.8.

Best I can go, firefox via Proxo-TOR gives me this message:
<<Tor is not an HTTP Proxy
It appears you have configured your web browser to use Tor as an HTTP Proxy. This is not correct: Tor provides a SOCKS proxy. Please configure your client accordingly.
See http://freehaven.net/tor/doc/tor-doc.html for more information. >>

If I fellow instructions given there for Privoxy and enter "forward-socks4a / localhost:9050 ." now I just receive:

<<Host Name Lookup Failed
The Proxomitron couldn't find the site named...
forward-socks4a
Check that the name is correct. If so, the site may have changed or may no longer exist.>>

My firewall have rules to allow TOR for tcp out 9001-9004 & 9030-9033, and Proxo-to-TOR for tcp out on localhost:9050.

Can Proxo be chained with a socks local proxy of this kind? If yes, how so?

Thanks

[Paranoid2000]

Proxomitron can only run with HTTP proxies so to use it with Tor, you would have to find that elusive beast known as an Http2Socks proxy to connect the two. I say elusive because although it gets mentioned a few times on Usenet and other forums, there does not seem to be a web page for such a utility. Maybe you'll have better luck finding it. :)

[getalive]

{QUOTE-> (...) you would have to find that elusive beast known as an Http2Socks proxy to connect the two. <-QUOTE}

A gentleman on another forum, and reading TOR papers, directed me to this freebee called SocksCap at
http://www.socks.permeo.com/Download/SocksCapDownload/index.asp

He called it a "socksifier" and told me that's a program I need to run in the background to intercept all Proxomitron traffic and redirects it to the TOR's socks port...

Could it fit the bill here?

Well, looks to me I'm just seeking an art to complexicate my internet day trips :)

getalive

[getalive]

Hi again,

Oups, the one that I saw mentioned in TOR docs is not the same one.

It's "tsocks" downloadable at
http://tsocks.sourceforge.net/about.php

[Paranoid2000]

SocksCap might do the trick - but there's no substitute for experimentation! Tsocks looks to be Linux-only however (it amends the LD_PRELOAD variable to replace the standard connect() function with its own).

Tor does look like an interesting option - I've stayed clear of it up till now since the only Windows client available was an older version with known bugs but I notice that it's been updated to 0.0.8. If anyone else is interested, Tor's home page is at http://www.freehaven.net/tor/.

[getalive]

{QUOTE-> SocksCap might do the trick - but there's no substitute for experimentation! <-QUOTE}

well, yah, a bit tricky, as you say, and there's not a lot of good docs for SocksCap floating online, it seems!

I find those 2 good Socksifying tutorials there:

http://www.proxyblind.org/phpBB2/cms_view_article.php?aid=20 (How-to with screenshots)

http://www.proxyblind.org/phpBB2/cms_view_article.php?aid=32 (Video)

you'll have you to register first.

Any help you can give will be apreciated :)

--
getalive

[AJohn]

I thought that TOR was designed to only be used with SOCKS? I have FireFox setup to use TOR for SOCKS, but would there be a point in also setting up Proxomitron to do so?

[Paranoid2000]

{QUOTE-> ...would there be a point in also setting up Proxomitron to do so? <-QUOTE}Proxomitron offers unrivalled web filtering (allowing you to rewrite web pages if you so choose). It can therefore remove any HTML which may compromise privacy or anonymity (for instance, using Javascript to set cookies or query which sites you visited previously).

A search on Proxomitron here or a visit to the Proxomitron site (www.proxomitron.info) or forum (http://asp.flaaten.dk/proxo/) should provide plenty of information on its capabilities.

[AJohn]

I have been using Proxomitron and love it. I use JD's config set and it works great. I was asking if there was a point to make Proxomitron go through Tor first?

[AJohn]

I think I have everything setup how I want it and it seems to be working great.

I used SocksCap to make Proxomitron connect through Tor.
Proxomitron is setup to connect through Jap.
My browser is setup to use Proxomitron for http/https and Tor for Socks.

So if I am correct this is how my current setup works:

Tor-->Jap-->Proxomitron

Is there a point in having my browser setup for Tor on Socks since Proxomitron goes through Tor?

Any comments/ideas?

[Paranoid2000]

For more complete privacy protection, you would want to use both a filter (like Proxomitron or Privoxy) and an anonymiser (like Tor or JAP). If you were to configure your browser to use Proxomitron and Proxomitron to then use Tor, this would (if you could "SOCKSify" Proxomitron first) provide such a situation.

If you are talking about having your browser using Tor and Tor then going through Proxomitron then, even if it did appear to work, Proxomitron could do no filtering since all it would see is encrypted traffic.

As for the Tor->Proxomitron->JAP setup you describe, your Tor client can only work if allowed to route traffic through other Tor nodes. Since you are instead routing it to JAP, I would suspect that your Tor client is doing nothing and that you are only gaining anonymity via JAP (try accessing a Tor-specific URL like the Hidden Wiki at http://6sxoyfb3h2nvok2d.onion/ to test - this should only be accessible via Tor).

[AJohn]

Paranoid, I think you have misunderstood me again.

I am currently running Proxomitron, Tor, and Jap and they seem to be all working through each other.

I am using SocksCap to "SOCKSify" Proxomitron through Tor. In the Proxomitron proxy settings it is connecting through JAP. So I believe right now all my http/https is going through Tor, then Proxomitron then JAP.

What I am unsure of is if I need to setup my browser to use Tor for Socks, or if using Tor with Proxomitron (http/https) should cancel this out. Did i explain a little better this time?

I am using this setup as I am posting this and Proxomitron is working great. JAPs eyes are blinking so I know everything is going through JAP. Proxomitron is socksified to use TOR so I know everything is going through TOR before Proxomitron or JAP.

[Paranoid2000]

Proxomitron can only be connected to one proxy at a time - if is connecting via JAP, it cannot be connecting via Tor also. The JAP client will only route traffic to one of the JAP mixes, the Tor client has to route traffic via a Tor node to be effective so neither of these can use the other.

While you may be able to route traffic between your browser and Proxomitron via Tor (is this what you mean by "SOCKSifying Proxomitron"?), this would be utterly pointless since, by looping back, you are gaining no anonymity whatsoever (it would be comparable to trying to cover your tracks by using several cars to drive from your front to your back door). By doing this, you would only be adding excess traffic to the Tor network.{QUOTE-> So I believe right now all my http/https is going through Tor, then Jap then Proxomitron. <-QUOTE}As I mentioned previously, Proxomitron cannot filter encrypted traffic. It sounds as if, at best, you have your browser sending traffic out to Tor which encrypts it, decrypts it and sends it back to Proxomitron. This offers no benefit over having your brower sending it's requests to Proxomitron directly.

As for checking JAP, you should open the JAP client window and check that the amount of data increases as you request and receive web pages. For Tor, try the Tor-specific link I listed above.

[AJohn]

OK Paranoid I think I understand it all a little better now. I am wondering if this could work:

Use SocksCap to use Tor with Proxomitron THEN use hummingbird socks (simular to sockscap) to use Tor with JAP?

Only reason I am trying to do this is so the JAP servers cannot see my IP.

I finally understand that by using SocksCap to use Tor with Proxomitron it goes in this order:

Proxomitron-->Tor

Also I could never get that onion link to work, but Tor does hide my IP when I use it alone or with Proxomitron.

[Paranoid2000]

The only way to connect to a JAP mix is with a JAP client so the only method of "hiding" your IP address from JAP while using it would be to run the JAP client on a remote machine and use that as a proxy.

The only way to chain Tor and JAP together would be to run a Tor server that used the JAP client to redirect traffic through JAP. Since both projects' source code is available, it should be possible to amalgamate the two but the benefits may not be worth the effort.

It should be noted that only the first server in a JAP mix is aware of your address so using a multi-server mix (i.e. anything other than Dresden-Dresden) would make tracking impractical for most purposes (i.e. only law enforcement and 3-letter agencies with a penchant for black helicopters are likely to have the resources).

[AJohn]

Ok thanks for the info Paranoid :D
I was hoping that I could filter my http/https with Tor before sending the information to the JAP client. I guess the only way possible wouldn't be worth it.

Also I got http://6sxoyfb3h2nvok2d.onion/tor/ to work now.

[AJohn]

getalive, if you are still having trouble setting Tor up with Proxomitron just download SocksCap (http://www.permeo.com/) and set it up as shown in the screen shots below:

[AJohn]

Make sure not to use the remote proxy setting in Proxomitron.

[AJohn]

Good read on Tor:

http://www.wired.com/news/privacy/0,1848,64464,00.html

[Paranoid2000]

{QUOTE-> ...It sounds as if, at best, you have your browser sending traffic out to Tor which encrypts it, decrypts it and sends it back to Proxomitron. This offers no benefit over having your brower sending it's requests to Proxomitron directly. <-QUOTE}Having spent some time running Tor (and SocksCap) I'd like to correct the above statement. A browser (or an HTTP proxy like Proxomitron) can either be set up via proxy settings to use JAP only or via SocksCap to use Tor only.

[AJohn]

{QUOTE-> Having spent some time running Tor (and SocksCap) I'd like to correct the above statement. A browser (or an HTTP proxy like Proxomitron) can either be set up via proxy settings to use JAP only or via SocksCap to use Tor only. <-QUOTE}

Yeah I found that out the hard way. When trying to use all of them together Tor said it wouldnt send data to 5090 in its log window.

[Paranoid2000]

It is apparently possible to chain Tor and JAP together but not currently practical. See the DNSkong-Privoxy-JAP (https://sourceforge.net/forum/forum.php?thread_id=1186098&forum_id=333031) thread for more information.

[Corrupted]

Bringing this back up :)

Right now I have Firefox set up with a manual proxy at "localhost" at 8080. I also have proxomitron set up with 127.0.0.1:4001 (which I believe makes it go through JAP. A few questions...

1) I believe Firefox is now going through Proxo first with that setup. (when I bring up the browser, my ZA Firewall asks if Proxo can access the internet). But how? Does Proxo automatically position itself after the browser

2) I read somewhere that only JAP should access the Internet. If so, how do I set it up so that my firewall doesn't ask for Proxy to access it (I thought 127.0.0.1:4001 will put Proxy through JAP)

3) How do you increase anonymity in JAP? Mine typically says "fair"

Thanks

[Paranoid2000]

1) Yes - your browser proxy setting causes it to send all requests to Proxomitron (which by default listens on port 8080).

2) Block your browser from accessing the Internet - allow it to access Proxomitron (address 127.0.0.1, port 8080 only). Similarly, allow Proxomitron to access JAP only (address 127.0.0.1, port 4001).

3) You can't - directly. It depends on how many others are using JAP - more users = greater anonymity but slower speed (more people sharing the same network bandwidth).

[Corrupted]

{QUOTE-> 1) Yes - your browser proxy setting causes it to send all requests to Proxomitron (which by default listens on port 8080).

2) Block your browser from accessing the Internet - allow it to access Proxomitron (address 127.0.0.1, port 8080 only). Similarly, allow Proxomitron to access JAP only (address 127.0.0.1, port 4001).

3) You can't - directly. It depends on how many others are using JAP - more users = greater anonymity but slower speed (more people sharing the same network bandwidth). <-QUOTE}

Thanks Paranoid...however I'm confused on something

Right now I'm running ZA (Free SW) and when I used to launch Firefox it would ask if I wanted to access the Internet. Now when I launch Firefox, only Proxo would ask permission to access the INternet. However, if I decline, then I cannot get online. You say I should deny Proxo access to the Internet? If so, I guess I need to figure out how to have Proxo only access JAP in Zone Alarm. Thanks.

[AJohn]

Allow your browser to only contact 127.0.0.1 (localhost)
This way then you goto a site that uses Java to find your IP by connecting directly to you, it will not connect and not be able to identify you.

[confoozed]

I'm having the same problem as Corrupted. I would like to know if you found a solution.

I'm also using Zone Alarm, and trying to connect to Jap with browser & Proxomitron. I can connect browser to Jap excluding Proxo and get fair anonymity.

When I try configure all three, browser is set to local host:8080, proxo's port is set at 8080 with remote proxy checked and set at local host:4002 and Jap at 4002, (Jap won't connect to 4001 as that port is being used by another process). Jap doesn't need firewall permission (I assume) and connects through the Java Runtime.

My problem is that my browser won't connect to Proxo with firewall permission accepted or blocked, (ZA is set to stealth mode). I assume I need to make firewall rules to make this work. My knowledge of such is nil. My ZA expires tommorrow so I may try Kerio, Lookn'Stop or Jetico.

Anyway, enough (assuming). Can anyone help?

[Paranoid2000]

JAP (or at least the Java Runtime javaw.exe) will need permission to run as a server in ZoneAlarm (as will Proxomitron) since it is accepting incoming network traffic (either from your browser or Proxomitron).

However Proxomitron's proxy test should have failed with JAP (giving a "503 Service Unavailable" error) so if you did not receive this, you may have another program using port 4002 instead of JAP.

[confoozed]

Thanks for your help Paranoid. Last night my ZA wasn't allowing javaw.exe to listen to TCP port 4002 and I wasn't sure why. I followed your instructions, got the 503 service error and all is working hunky dory.

I am a bit reticent giving server status, but as I'm going to have to give up ZA today, it will give me a chance to learn more about rule based firewalls.

I've seen some good tutorials in here on the particular firewalls I'd like to try, so will have to do some reading and re-reading.

Thanks again for a speedy reply.