Route all internet traffic through Tor

I would like to route all my internet traffic through the Tor network. I used to use Whonix, but it's a tad to slow and inconvenient for my taste (although safer). So I would like to know where to start, because the official Tor project itself doesn't seem to provide an easy way for this. My operating system is "Arch Linux".

There are a lot of router configurations that can force everything through Tor. That's what you're looking for and Whonix is just a convenient way to do that on one system.

For your programs that support SOCKS5 proxies, point them to 127.0.0.1:9050 and for other things you can launch them with the torify command. For example type "torify mumble" to start mumble. Doing things this way also prevents DNS leaks (I think) while the SOCKS5 proxy method may not. Here are some ideas: proxy pacman through tor, use the Tor browser, use Ricochet for messaging, and use TorBirdy in Thunderbird for email.

>>5670 well, those are some clear tips. :) thanks

>>5670 The "torify" command is awesome.

>There are a lot of router configurations that can force everything through Tor. That's what you're looking for and Whonix is just a convenient way to do that on one system Could you specify? Is there a specific OS for this that you download onto your router?

Tails is another option, I haven't tried whonix, so I'm not sure how it compares. I've always noticed a little lag when using tor

>>5685 Yes tor is significantly slower compared to running around naked on the internet. It's always a trade off security vs convenience.

>OP here This thread seems kind of dead, so I thought I'd turn it a bit into a tor general. QUESTION: After the recent tor update, where we switched to Firefox 60 my useragent wasn't spoofed anymore although the "general.useragent.override" was present in the about:config page. Sooooooooo... what now?

>>5825 how to fix still being discussed https://trac.torproject.org/projects/tor/ticket/26146 a lot of other annoying bugs with the switch too

>>5661 https://trac.torproject.org/projects/tor/wiki/doc/BlockingNonTorTraffic can do it through iptables op (substitute the owner for your tor owner)

>>5837 FF 60 just flat out lags so badly on my BSD install that it's unusable. I hate that the Tor browser has also upgraded, but I guess they had no choice - having the support of an active Firefox development is a great thing to have, something you can't have if you're using an old version.

>>5674 torify was depreciated I think. The command now just starts torsocks... Just a heads up

>>5838 Wouldn't it be a good idea to exclude your local LAN from these rules? If you only allow Tor traffic then how are you going to connect to your router or anything on your LAN? (Unless this configuration is on a router/firewall).

>>5675 Asus-wrt merlin has an EZ single click setting to turn this on or off

Obviously tails configures traffic routes on the OS level. How would you do that on Arch Linux?

>>5825 Friendly reminder that Tor Browser can't be trusted. https://www.zdnet.com/article/exploit-vendor-drops-tor-browser-zero-day-on-twitter/ >0day was shared with our government customers https://zerodium.com/tor.html

>>5878 >This Tor Browser exploit was acquired by Zerodium many months ago as a zero-day and was shared with our government customers. this is pretty fuarrrked up!!!

>>5878 Friendly reminder that all software has bugs. >Zerodium's Tor zero-day basically allows malicious code to run inside the Tor Browser by bypassing NoScript's script-blocking ability. Also find a better source next time. It's a miracle this journalist manages to turn on his computer all by himself in the morning.

>>5880 Have you seen the PoC? It's so simple and basic. This hole was called "a bugdoor" for a reason. It's enough for me to get paranoid about using TBB without additional protections.

>>5882 >It's enough for me to get paranoid about using TBB without additional protections. It was a bug in NoScript nothing to do with Tor or Tor Browser. The bug allows Javascript to run regardless of the NoScript settings, which is what browsers are designed to do safely in the first place. It's not the end of the world, it's just a bottom tier media outlet making hay and a security company basking in the publicity.

Kovri and Monero will come soon enough.

>>5878 Given its nature, would umatrix be vulnerable to this as well?

>>5918 umatrix prevents web requests for javascript. I believe it uses the same mechanism as NoScript to block inline JS. I may be wrong.

>Whonix, but it's a tad to slow and inconvenient for my taste Tor is slow and inconveinient so that's to be expected. Just use Whonix, it's the safest option.

>>5962 I'm sure he meant that Whonix itself is slow. I haven't used it, but I think Whonix on Qubes is supposed to be fast.

https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy inb4 replies about transparent proxy possibly leaking due to having it setup wrong.