Accéder au contenu principal

BYOPPP - Build Your Own Privacy Protection Proxy

Par
I have read a blog post, where you can build your own privacy proxy server built on Raspberry PI. The post got me thinking about how I can use this to protect my privacy on my Android phone, and also get rid of those annoying ads. 

Since I own a Samsung Galaxy S3 LTE with Android 4.3 (with a HW based Knox counter), rooting the phone now means you break Knox, and loose warranty. Past the point of no return ...

This means I have to solve this without root. Luckily newer Androids support VPN without rooting, but setting a mandatory system-wide proxy is still not possible without root. 
But thanks to some iptables magic and Privoxy, this is not a problem anymore :) 

The ingredients to build your own privacy protection proxy:
  • One (or more) cheap VPS server(s)
  • a decent VPN program
  • Privoxy
  • iptables

VPS server

To get the cheap VPS server, I recommend using Amazon EC2, but choose whatever you like. The micro instance is very cheap (or even free), and has totally enough resources for this task. I'm using the Ubuntu free tier now and it works like a charm. And last but not least Amazon has two-factor authentication! You can set up an Ubuntu server under 10 minutes. Use the AWS region nearest to you, e.g. I choose EU - Ireland.



VPN

For the VPN program, I recommend the free version of the OpenVPN AS (EDIT: be sure to use OpenVPN AS 2.0.6 or later, both on the server and the client). Easy to set-up quick start guide is here, GUI based configuration, and one-click client installer for Android, iOS, Windows, Linux, OSX. The Ubuntu installer packages are here.




The most important settings:

  • I prefer to use the TCP 443 and UDP 53 ports for my OpenVPN setup, and let the user guess why. 
  • For good performance, UDP is preferred over TCP. 
  • VPN mode is Layer 3 (routing/NAT).
  • Don't forget to allow the configured VPN ports in the AWS firewall (security groups). 


Other VPN settings:
  • Should VPN clients have access to private subnets (non-public networks on the server side)? - Yes
  • Should client Internet traffic be routed through the VPN? - Yes

Privoxy

The next component we have to install and configure is Privoxy. As usual, "apt-get install privoxy" just works. The next step is to configure privoxy via /etc/privoxy/config file, there are two options to change:
  • listen-address your.ip.add.ress:8118
  • accept-intercepted-requests 1
Beware not to allow everyone accessing your Privoxy server in the AWS EC2 security groups, be sure it is reachable only to VPN users!

After everything is set, start privoxy with "service privoxy start", and add it to the autostart "update-rc.d privoxy defaults".

Iptables

And the final step is to configure your iptables chain to forward every web traffic from the VPN clients to the Privoxy server:

iptables -t nat -A PREROUTING -s 5.5.0.0/16 -p tcp -m multiport --dports 80,8080,81 -j DNAT --to-destination your.ip.add.ress:8118

Optionally you can block access to all other ports as well, and what does not go through your Privoxy won't be reachable.
Based on your Linux distribution and preference, you might make this rule persistent.

Final test

Now you can connect to the VPN server from your Android device.
After logging in from a client, you get the following nice packages to install on your device:


After connecting, the final results can be seen in the following screenshots. And yes, there is a reason I chose Angry Birds as an example.

Angry Birds without Privoxy
Angry Birds with Privoxy
Stupid flashlight app with ad
Stupid flashlight app with Privoxy
Spoiler alert
If you are afraid of NSA tracking you, this post is not for you. If you want to achieve IP layer anonymity, this post is not for you. As long as you are the only one using that service, it should be trivial to see what could possibly go wrong with that.

Known issues
Whenever the Internet connection (Wifi, 3G) drops, the VPN connection drops as well, and your privacy is gone ...
Sites breaking your privacy through SSL can still do that as long as the domain is not in the Privoxy blacklist.

Additional recommendation
If you are using OSX or Windows, I can recommend Aviator to be used as your default browser. It is just great, give it a try!

PS: There are also some adblock apps removed from the official store which can block some ads, but you have to configure a proxy for every WiFi connection you use, and it is not working over 3G.



More articles


  1. Blackhat Hacker Tools
  2. Hacking Tools
  3. Bluetooth Hacking Tools Kali
  4. Pentest Tools Url Fuzzer
  5. Game Hacking
  6. Ethical Hacker Tools
  7. Black Hat Hacker Tools
  8. Hack App
  9. Hack Tools Pc
  10. Hacker Tools For Pc
  11. Hack Tool Apk No Root
  12. Hacking Tools For Pc
  13. Tools 4 Hack
  14. Hacker Tools Apk
  15. Hacking Tools For Beginners
  16. New Hacker Tools
  17. Pentest Tools List
  18. Best Hacking Tools 2020
  19. Hack Tool Apk
  20. Best Hacking Tools 2019
  21. Hacking Tools Github
  22. Hackers Toolbox
  23. Wifi Hacker Tools For Windows
  24. Termux Hacking Tools 2019
  25. Hack Tools For Pc
  26. Hack Apps
  27. Hacker Tools 2019
  28. Hacking Tools 2020
  29. Pentest Tools Android
  30. Tools Used For Hacking
  31. Game Hacking
  32. Best Hacking Tools 2020
  33. Top Pentest Tools
  34. Growth Hacker Tools
  35. Termux Hacking Tools 2019
  36. Tools Used For Hacking
  37. Hack Website Online Tool
  38. Hacker Techniques Tools And Incident Handling
  39. What Is Hacking Tools
  40. Growth Hacker Tools
  41. Growth Hacker Tools
  42. Hack Tools
  43. Hack App
  44. Hacking Tools Name
  45. Hacking Tools For Pc
  46. Kik Hack Tools
  47. Hacking Tools For Games
  48. Hacker Security Tools
  49. Hackers Toolbox
  50. Free Pentest Tools For Windows
  51. Hacking App
  52. Hacking Tools 2020
  53. Tools For Hacker
  54. New Hacker Tools
  55. Tools 4 Hack
  56. Pentest Tools Kali Linux
  57. Hack Tools Download
  58. Pentest Tools Port Scanner
  59. Hack Tools For Mac
  60. Hacker Tools For Mac
  61. Hack Tools Pc
  62. How To Make Hacking Tools
  63. Free Pentest Tools For Windows
  64. New Hack Tools
  65. Wifi Hacker Tools For Windows
  66. Hacking Tools Software
  67. Hacker Tools Github
  68. Hacker Tools Github
  69. Pentest Tools Website Vulnerability
  70. Black Hat Hacker Tools
  71. Growth Hacker Tools
  72. Easy Hack Tools
  73. Hacker
  74. Nsa Hacker Tools
  75. Hack And Tools
  76. Hacker Tool Kit
  77. Hacker Tools Hardware
  78. Hack Website Online Tool
  79. Hacker Security Tools
  80. Pentest Tools Nmap
  81. Hacker Tools 2020
  82. Best Hacking Tools 2019
  83. Hacker Tools For Ios
  84. Hacking Tools For Windows
  85. Pentest Tools Open Source
  86. Pentest Tools Windows
  87. How To Hack
  88. Hacking Tools Free Download
  89. Bluetooth Hacking Tools Kali
  90. Hacking Tools Hardware
  91. Pentest Tools Framework
  92. Pentest Tools Find Subdomains
  93. Hacker Tools Linux
  94. Hack Website Online Tool
  95. Hacker Tools 2020
  96. Hacking Tools Pc
  97. Hacking Tools For Pc
  98. Pentest Tools Download
  99. Pentest Tools List
  100. Hacking Tools Windows
  101. What Are Hacking Tools
  102. Hacker Tools 2019
  103. Hack Rom Tools
  104. Hacker Tool Kit
  105. Nsa Hack Tools Download
  106. Pentest Tools Url Fuzzer
  107. Pentest Box Tools Download
  108. Hack Tools Download
  109. Hack Tools 2019
  110. Usb Pentest Tools
  111. Hack Tools 2019
  112. Hack Tools Mac
  113. Hacker Security Tools
  114. Hacker Tools Apk
  115. Hacking Tools For Windows Free Download
  116. What Are Hacking Tools
  117. Pentest Tools Nmap
  118. Hacker Tools Mac
  119. Hacker Hardware Tools
  120. Hacker Tools Apk Download
  121. Easy Hack Tools
  122. Pentest Tools Android
  123. Hacker Tools Apk
  124. Pentest Tools Website
  125. Hack And Tools
  126. Best Pentesting Tools 2018
  127. Hack Apps
  128. Hacker Tools
  129. Pentest Tools Kali Linux
  130. Hacker Hardware Tools
  131. Pentest Tools For Mac
  132. Pentest Tools Bluekeep
  133. Hacking Tools 2019
  134. Hack Rom Tools
  135. Pentest Tools For Android
  136. Pentest Recon Tools
  137. Hack Tools For Mac
  138. Hacker Security Tools
  139. Best Hacking Tools 2019
  140. Hack Tool Apk
  141. Pentest Reporting Tools
  142. Nsa Hacker Tools
  143. Hack And Tools
  144. Pentest Tools Website
  145. Pentest Tools Nmap
  146. Game Hacking
  147. Hack App
  148. Hack Tools Online
  149. Pentest Tools Tcp Port Scanner
  150. Hackrf Tools
  151. Hacker Tools Free
  152. Usb Pentest Tools

Commentaires

Enregistrer un commentaire

Posts les plus consultés de ce blog

آفرینک | تماشای آنلاین انیمیشن و کارتون

Par
https://afarinak.com/tags/%D8%A7%D9%86%DB%8C%D9%85%DB%8C%D8%B4%D9%86-%D9%87%D8%A7%DB%8C-%D8%A8%D8%B1%D9%86%D8%AF%D9%87-%D8%A7%D8%B3%DA%A9%D8%A7%D8%B1/ https://afarinak.com/tags/%D9%BE%D8%B1%D9%81%D8%B1%D9%88%D8%B4%D8%AA%D8%B1%DB%8C%D9%86-%D8%A7%D9%86%DB%8C%D9%85%DB%8C%D8%B4%D9%86-%D9%87%D8%A7%DB%8C-2016/ https://afarinak.com/tags/best-animated-movies-2017/ https://tidano.com/ https://funibo.com/ http://www.aparat.com/afarinak https://t.me/joinchat/AAAAAD67ZyQn7_qBcGjPgw https://www.instagram.com/afarinak_com/ https://twitter.com/afarinak
Enregistrer un commentaire
Lire la suite

Go Macro Bars

Par
Go Macro Energy Bars - In fact, brown rice syrup weighs more than a lot of the opposite ingredients in these bars. So regardless that the bars comprise more oats and nuts by quantity, brown rice syrup must be listed first because it weighs more. As a side observe, I like firms that give again to society. I used to be given the opportunity to strive their three new bar flavors (despatched to me by GoMacro). It was also shocking, since these bars usually are not as candy as many other bars in the marketplace. Plus, a portion of the proceeds from their Everlasting Joy Bars goes towards feeding the homeless. It appears that evidently by regulation substances have to be listed so as of weight, and brown rice syrup could be very dense. And GoMacro selects one taste every quarter to highlight as their "Give Back Bar." They donate 10% of the gross sales of that bar to a non-revenue group. Nevertheless, I was concerned that brown rice syrup is the first ingredient in most o...
Enregistrer un commentaire
Lire la suite