Silk Road forums

Discussion => Security => Topic started by: lokiju on May 03, 2013, 02:27 am

Title: old computer for proxy-is this good for security?
Post by: lokiju on May 03, 2013, 02:27 am
I got an old computer that I put lunbuntu (lightweight Ubuntu) on. I have another NIC card I could put in. I fool with computers but I'm not a tech guy. Would a proxy computer than went between my usual computer and the internet (and router) be a security help? Any body got a URL or something on how to do it?
The 'new' old computer is 'sterile' now, no names on it or anything.
Title: Re: old computer for proxy-is this good for security?
Post by: lukeuser on May 03, 2013, 04:13 am
I got an old computer that I put lunbuntu (lightweight Ubuntu) on. I have another NIC card I could put in. I fool with computers but I'm not a tech guy. Would a proxy computer than went between my usual computer and the internet (and router) be a security help? Any body got a URL or something on how to do it?
The 'new' old computer is 'sterile' now, no names on it or anything.

I'm not a computer expert either, but that sounds like a fair idea. It would prevent the possibility of your real IP address being leaked, since your computer will only have the proxy IP. And it will make it impossible for non-proxy connections to be made. I don't think this would be terribly difficult to do.

In terms of a guide, I remember finding this when I was looking for something else once https://code.google.com/p/badvpn/wiki/tun2socks
If you wanted to connect to tor on your proxy computer, you could look at the 'Using with Tor' section. It's talking about using a virtual machine, but you could simple adapt it so it instead uses another connected computer, this shouldn't be too difficult.
Title: Re: old computer for proxy-is this good for security?
Post by: astor on May 03, 2013, 04:38 am
lokiju, what you are describing is called an anonymizing middle box, and it's pretty much the safest setup you can have, because even if someone / malware roots your main computer, they would not be able to find your IP address.

Here is some info on how to do it.

https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy#AnonymizingMiddlebox
Title: Re: old computer for proxy-is this good for security?
Post by: leaf on May 03, 2013, 04:58 am
lokiju, what you are describing is called an anonymizing middle box, and it's pretty much the safest setup you can have, because even if someone / malware roots your main computer, they would not be able to find your IP address.

Its true, this is best option possible.  You can hard force all traffic through Tor by middle boxing. 
Title: Re: old computer for proxy-is this good for security?
Post by: lukeuser on May 03, 2013, 05:35 am
lokiju, what you are describing is called an anonymizing middle box, and it's pretty much the safest setup you can have, because even if someone / malware roots your main computer, they would not be able to find your IP address.

Here is some info on how to do it.

https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy#AnonymizingMiddlebox

That's obviously the proper way to do it, the guide I linked to doesn't actually isolate the computer from the real IP like this does...