使用树莓派搭建Tor节点，实现科学上网

时间：2016-07-07 来源：freebuf 作者：Roy_Chen 条评论

r4H免费翻墙网

4.6：接下来就是对Tor进行配置（离成功越来越近了，欣喜！）：修改/etc/tor/torrc：r4H免费翻墙网

SocksPort 9050
SocksListenAddress 192.168.10.1:9050    # 树莓派IP
ClientOnly 1
VirtualAddrNetwork 10.192.0.0/10
DNSPort 53
DNSListenAddress 192.168.10.1
AutomapHostsOnResolve 1
AutomapHostsSuffixes .onion,.exit
TransPort 9040
TransListenAddress 192.168.10.1
Log notice file /var/log/tor/notices.log　　# log日志路径
RunAsDaemon 1
ClientTransportPlugin obfs3 exec /usr/local/bin/obfsproxy managed　　　　　　　　# obfsproxy路径
UseBridges 1
Bridge obfs3 37.187.65.72:35304 E47EC8C02C116B77D04738FA2E7B427F241A0164  #刚刚获取的网桥
Bridge obfs3 194.132.209.8:57356 B43A8BDE049073CA7AA7D3D46A7F97A93042DF35
Bridge obfs3 23.252.105.31:3443 CDAE9FD7710761D1914182F62B1B47F2FBF1FDE1

4.7:添加iptables规则r4H免费翻墙网

sudo iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 22 -j REDIRECT --to-ports 22 sudo iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 19999 -j REDIRECT --to-ports 19999 sudo iptables -t nat -A PREROUTING -i eth0 -p udp --dport 53 -j REDIRECT --to-ports 53 sudo iptables -t nat -A PREROUTING -i eth0 -p tcp --syn -j REDIRECT --to-ports 9040

为了让上面的规则在开始时自动添加，执行：
# sh -c “iptables-save > /etc/iptables.ipv4.nat”
第一条命令为22端口开一个特例，这样SSH才能连上树莓派。
第二条命令为19999端口开一个特例，这样netdata才能连上树莓派。
第三条命令将所有DNS（端口号53）请求转发到配置文件torrc中的DNSPort中
第四条命令将所有TCP流量转发到配置文件torrc中的TransPort中r4H免费翻墙网

4.8：启动tor客户端进程：
# service tor start
在/var/log/tor/notices.log中查看tor启动情况，正常的是：r4H免费翻墙网

Apr 13 13:32:46.000 [notice] Bootstrapped 5%: Connecting to directory server
Apr 13 13:32:46.000 [warn] We were supposed to connect to bridge ’162.217.177.95:18869′ using pluggable transport ‘obfs4′, but we can’t find a pluggable transport proxy supporting ‘obfs4′. This can happen if you haven’t provided a ClientTransportPlugin line, or if your pluggable transport proxy stopped running.
Apr 13 13:32:47.000 [notice] Bootstrapped 10%: Finishing handshake with directory server
Apr 13 13:32:57.000 [notice] Bootstrapped 15%: Establishing an encrypted directory connection
Apr 13 13:32:58.000 [notice] Bootstrapped 20%: Asking for networkstatus consensus
Apr 13 13:32:58.000 [notice] Bootstrapped 25%: Loading networkstatus consensus
Apr 13 13:33:22.000 [notice] Bootstrapped 80%: Connecting to the Tor network
Apr 13 13:33:23.000 [notice] Bootstrapped 90%: Establishing a Tor circuit
Apr 13 13:33:28.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.
Apr 13 13:33:28.000 [notice] Bootstrapped 100%: Doner4H免费翻墙网

r4H免费翻墙网