BYOPPP - Build Your Own Privacy Protection Proxy

I have read a blog post, where you can build your own privacy proxy server built on Raspberry PI. The post got me thinking about how I can use this to protect my privacy on my Android phone, and also get rid of those annoying ads. 

Since I own a Samsung Galaxy S3 LTE with Android 4.3 (with a HW based Knox counter), rooting the phone now means you break Knox, and loose warranty. Past the point of no return ...

This means I have to solve this without root. Luckily newer Androids support VPN without rooting, but setting a mandatory system-wide proxy is still not possible without root. 

But thanks to some iptables magic and Privoxy, this is not a problem anymore :) 

The ingredients to build your own privacy protection proxy:

• One (or more) cheap VPS server(s)
• a decent VPN program
• Privoxy
• iptables

VPS server

To get the cheap VPS server, I recommend using Amazon EC2, but choose whatever you like. The micro instance is very cheap (or even free), and has totally enough resources for this task. I'm using the Ubuntu free tier now and it works like a charm. And last but not least Amazon has two-factor authentication! You can set up an Ubuntu server under 10 minutes. Use the AWS region nearest to you, e.g. I choose EU - Ireland.

VPN

For the VPN program, I recommend the free version of the OpenVPN AS (EDIT: be sure to use OpenVPN AS 2.0.6 or later, both on the server and the client). Easy to set-up quick start guide is here, GUI based configuration, and one-click client installer for Android, iOS, Windows, Linux, OSX. The Ubuntu installer packages are here.

The most important settings:

• I prefer to use the TCP 443 and UDP 53 ports for my OpenVPN setup, and let the user guess why. 
• For good performance, UDP is preferred over TCP. 
• VPN mode is Layer 3 (routing/NAT).
• Don't forget to allow the configured VPN ports in the AWS firewall (security groups). 

Other VPN settings:

• Should VPN clients have access to private subnets (non-public networks on the server side)? - Yes
• Should client Internet traffic be routed through the VPN? - Yes

Privoxy

The next component we have to install and configure is Privoxy. As usual, "apt-get install privoxy" just works. The next step is to configure privoxy via /etc/privoxy/config file, there are two options to change:

• listen-address your.ip.add.ress:8118
• accept-intercepted-requests 1

Beware not to allow everyone accessing your Privoxy server in the AWS EC2 security groups, be sure it is reachable only to VPN users!

After everything is set, start privoxy with "service privoxy start", and add it to the autostart "update-rc.d privoxy defaults".

Iptables

And the final step is to configure your iptables chain to forward every web traffic from the VPN clients to the Privoxy server:

iptables -t nat -A PREROUTING -s 5.5.0.0/16 -p tcp -m multiport --dports 80,8080,81 -j DNAT --to-destination your.ip.add.ress:8118 

Optionally you can block access to all other ports as well, and what does not go through your Privoxy won't be reachable.

Based on your Linux distribution and preference, you might make this rule persistent.

Final test

Now you can connect to the VPN server from your Android device.

After logging in from a client, you get the following nice packages to install on your device:

After connecting, the final results can be seen in the following screenshots. And yes, there is a reason I chose Angry Birds as an example.

Angry Birds without Privoxy

Angry Birds with Privoxy

Stupid flashlight app with ad

Stupid flashlight app with Privoxy

Spoiler alert

If you are afraid of NSA tracking you, this post is not for you. If you want to achieve IP layer anonymity, this post is not for you. As long as you are the only one using that service, it should be trivial to see what could possibly go wrong with that.

Known issues

Whenever the Internet connection (Wifi, 3G) drops, the VPN connection drops as well, and your privacy is gone ...

Sites breaking your privacy through SSL can still do that as long as the domain is not in the Privoxy blacklist.

Additional recommendation

If you are using OSX or Windows, I can recommend Aviator to be used as your default browser. It is just great, give it a try!

PS: There are also some adblock apps removed from the official store which can block some ads, but you have to configure a proxy for every WiFi connection you use, and it is not working over 3G.

More articles

1. Blackhat Hacker Tools
2. Hacking Tools
3. Bluetooth Hacking Tools Kali
4. Pentest Tools Url Fuzzer
5. Game Hacking
6. Ethical Hacker Tools
7. Black Hat Hacker Tools
8. Hack App
9. Hack Tools Pc
10. Hacker Tools For Pc
11. Hack Tool Apk No Root
12. Hacking Tools For Pc
13. Tools 4 Hack
14. Hacker Tools Apk
15. Hacking Tools For Beginners
16. New Hacker Tools
17. Pentest Tools List
18. Best Hacking Tools 2020
19. Hack Tool Apk
20. Best Hacking Tools 2019
21. Hacking Tools Github
22. Hackers Toolbox
23. Wifi Hacker Tools For Windows
24. Termux Hacking Tools 2019
25. Hack Tools For Pc
26. Hack Apps
27. Hacker Tools 2019
28. Hacking Tools 2020
29. Pentest Tools Android
30. Tools Used For Hacking
31. Game Hacking
32. Best Hacking Tools 2020
33. Top Pentest Tools
34. Growth Hacker Tools
35. Termux Hacking Tools 2019
36. Tools Used For Hacking
37. Hack Website Online Tool
38. Hacker Techniques Tools And Incident Handling
39. What Is Hacking Tools
40. Growth Hacker Tools
41. Growth Hacker Tools
42. Hack Tools
43. Hack App
44. Hacking Tools Name
45. Hacking Tools For Pc
46. Kik Hack Tools
47. Hacking Tools For Games
48. Hacker Security Tools
49. Hackers Toolbox
50. Free Pentest Tools For Windows
51. Hacking App
52. Hacking Tools 2020
53. Tools For Hacker
54. New Hacker Tools
55. Tools 4 Hack
56. Pentest Tools Kali Linux
57. Hack Tools Download
58. Pentest Tools Port Scanner
59. Hack Tools For Mac
60. Hacker Tools For Mac
61. Hack Tools Pc
62. How To Make Hacking Tools
63. Free Pentest Tools For Windows
64. New Hack Tools
65. Wifi Hacker Tools For Windows
66. Hacking Tools Software
67. Hacker Tools Github
68. Hacker Tools Github
69. Pentest Tools Website Vulnerability
70. Black Hat Hacker Tools
71. Growth Hacker Tools
72. Easy Hack Tools
73. Hacker
74. Nsa Hacker Tools
75. Hack And Tools
76. Hacker Tool Kit
77. Hacker Tools Hardware
78. Hack Website Online Tool
79. Hacker Security Tools
80. Pentest Tools Nmap
81. Hacker Tools 2020
82. Best Hacking Tools 2019
83. Hacker Tools For Ios
84. Hacking Tools For Windows
85. Pentest Tools Open Source
86. Pentest Tools Windows
87. How To Hack
88. Hacking Tools Free Download
89. Bluetooth Hacking Tools Kali
90. Hacking Tools Hardware
91. Pentest Tools Framework
92. Pentest Tools Find Subdomains
93. Hacker Tools Linux
94. Hack Website Online Tool
95. Hacker Tools 2020
96. Hacking Tools Pc
97. Hacking Tools For Pc
98. Pentest Tools Download
99. Pentest Tools List
100. Hacking Tools Windows
101. What Are Hacking Tools
102. Hacker Tools 2019
103. Hack Rom Tools
104. Hacker Tool Kit
105. Nsa Hack Tools Download
106. Pentest Tools Url Fuzzer
107. Pentest Box Tools Download
108. Hack Tools Download
109. Hack Tools 2019
110. Usb Pentest Tools
111. Hack Tools 2019
112. Hack Tools Mac
113. Hacker Security Tools
114. Hacker Tools Apk
115. Hacking Tools For Windows Free Download
116. What Are Hacking Tools
117. Pentest Tools Nmap
118. Hacker Tools Mac
119. Hacker Hardware Tools
120. Hacker Tools Apk Download
121. Easy Hack Tools
122. Pentest Tools Android
123. Hacker Tools Apk
124. Pentest Tools Website
125. Hack And Tools
126. Best Pentesting Tools 2018
127. Hack Apps
128. Hacker Tools
129. Pentest Tools Kali Linux
130. Hacker Hardware Tools
131. Pentest Tools For Mac
132. Pentest Tools Bluekeep
133. Hacking Tools 2019
134. Hack Rom Tools
135. Pentest Tools For Android
136. Pentest Recon Tools
137. Hack Tools For Mac
138. Hacker Security Tools
139. Best Hacking Tools 2019
140. Hack Tool Apk
141. Pentest Reporting Tools
142. Nsa Hacker Tools
143. Hack And Tools
144. Pentest Tools Website
145. Pentest Tools Nmap
146. Game Hacking
147. Hack App
148. Hack Tools Online
149. Pentest Tools Tcp Port Scanner
150. Hackrf Tools
151. Hacker Tools Free
152. Usb Pentest Tools