TorWall icon indicating copy to clipboard operation
TorWall copied to clipboard

Trying to make Tallow work with bridges

Open waokdalf opened this issue 2 years ago • 7 comments

Hello.

This is the only one open source product that exists. I really appreciate these sorts of things. And I try to use it with no success. Please help to set up. Maybe it will be helpfull for others too.

I use virtualbox virual maschine with windows 10.

For obvious reasons Tallow did not work out of the box and I replaced tor.exe along with the libraries with the latest version of tor 11.5

My torrc configuration:

# Tallow default torrc file.

GeoIPFile "geoip"
GeoIPv6File "geoip6"

ClientTransportPlugin snowflake exec snowflake-client.exe

UseBridges 1


Bridge snowflake 192.0.2.3:1 url=https://snowflake-broker.torproject.net.global.prod.fastly.net/ front=cdn.sstatic.net ice=stun:stun.voip.blackberry.com:3478,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478

I have no idea what the Bridge snowflake string should be, but I found a template like this somewhere. After start Tallow we can see this (attachments) 1 2 3 4 1 4 2 4 3 4 5 6

I also tried to use obfs4proxy.exe with the standard fresh bridges. The result was about the same - it does not work. If anything, I can add screenshots for obfs4proxy or the necessary logs.

waokdalf avatar Jul 21 '22 12:07 waokdalf

++ good point, we need an option for adding bridges btw, I'm not sure if this works but install the tor browser, then set the bridge option as snowflake. you will get a bridge then copy/paste it into your config file and run it again.

let me know if it works!

psparsa avatar Oct 11 '22 06:10 psparsa

++ good point, we need an option for adding bridges btw, I'm not sure if this works but install the tor browser, then set the bridge option as snowflake. you will get a bridge then copy/paste it into your config file and run it again.

let me know if it works!

I checked, it didn't work.

I also tried updating not only obfs4proxy.exe, snowflake-client.exe, but also tor.exe in the Tallow folder. I think this needs some changes from @basil00

`Tallow default torrc file.

GeoIPFile "geoip" GeoIPv6File "geoip6"

ClientTransportPlugin snowflake exec snowflake-client.exe

UseBridges 1

Bridge snowflake 192.0.2.3:1 2B280B23E1107BB62ABFC40DDCC8824814F80A72`

tor1

waokdalf avatar Oct 15 '22 15:10 waokdalf

I think obfs4proxy.exe and snowflake-client.exe trying to connect via WinDivert instead direct, which leads to self-circuit. Let's see at main.c: redirect_whitelist_init(pi.dwProcessId); - passes the PID of the Tor process to the WinDviert filter (in redirect.c) to be ignored. But it doesn't know anything about child processes started by Tor. This is (in theory) easy to fix, but I'm too lazy to install MinGW. Maybe later, maybe never, maybe it won't work.

GFOXSH avatar Dec 28 '22 08:12 GFOXSH

OK, some little update: Tallow brokes all loopback connections. So tor.exe cant connect to obfs4proxy.exe and snowflake-client.exe. Idea to allow all connections from there PIDs is unsuccessful. Possibly a fundamental problem in WinDivert.

GFOXSH avatar Dec 29 '22 19:12 GFOXSH

Localhost can be unlocked by change traffic.divert rule true to ip.DstAddr != 127.0.0.1 and ip.SrcAddr != 127.0.0.1 Trying to whitelist obsf4proxy.exe by search process PID then adding it to if (addr.Socket.ProcessId == tor_pid) is succesful, rules is works, but traffic don't goes.

GFOXSH avatar Dec 30 '22 09:12 GFOXSH

OK, I just use Proxifier instead Tallow. It was a great program, but now it doesn't work.

GFOXSH avatar Dec 30 '22 17:12 GFOXSH

OK, I just use Proxifier instead Tallow. It was a great program, but now it doesn't work.

I think we should not say like that. Proxifier is proprietary closed source software. I think any, even raw and non-working open source software deserves 10 times more respect than even a working and most convenient product with closed source code.

I express great respect to the author for the work done and a modest hope that the work was not in vain and someone will bring it to completion.

waokdalf avatar Jan 10 '23 11:01 waokdalf