[nycbug-talk] pfsense and tor

fastgoldfish at gmail.com fastgoldfish at gmail.com
Thu Jul 4 22:20:55 EDT 2013

I was referred to some more information about configuring
FreeBSD/pfSense for use with Tor, but most of it is over my head for


That was shared with me by idwer in Freenode's ##pfsense. It looks to
me that what is being described there is not merely a transparent
proxy, but instead actually a more thorough isolating proxy. The two
kinds are described here:


It looks like it's not so straightforward as I thought it would be.
Installing Tor on pfSense and setting up some trivial routing rules
isn't all there is to it, and it's a little out of my league for now.
When the proper pfSense package for Tor is available, the system
configuration prerequisites will already be handled. Then, maybe the
problem will be reduced to the simpler routing setup that I was
originally expecting.

I hope this info helps.

On Wed, Jul 3, 2013 at 3:49 AM, fastgoldfish at gmail.com
<fastgoldfish at gmail.com> wrote:
> I'm not in New York City, unfortunately. Can you email me directly
> about testing the pfSense package for Tor, if you prefer to discuss it
> off-list? I'd love to give it a spin.
> On Wed, Jul 3, 2013 at 3:26 AM, George Rosamond
> <george at ceetonetechnology.com> wrote:
>> fastgoldfish at gmail.com:
>>> It looks like the 8.1 version of FREEBSD packages contains an outdated
>>> version of Tor, so I just change my setenv to this to get the
>>> maintained 8.3 packages:
>>> setenv PACKAGESITE
>>> ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8.3-release/Latest/
>>> I installed Tor from that, and nothing bad happened.
>> (read both emails and replied to package versus port issue in that one).
>> Tor versions (whether stable or devel) aren't tied to any particular
>> FreeBSD version.  Using current versions of Tor on 7.x, 8.x, 9.x and
>> 10.x shouldn't matter.
>> So I picked this project up again the other day.
>> I can run Tor find on a pfSense box, no issues.
>> I have most of the XML configuration done.
>> At this point, I need to get it to install smoothly as a pfSense package.
>> Once I have it operational I can let people test but that will happen
>> offlist.
>> If you're in NYC, fastgoldfish, we can discuss more at the meeting tonight.
>> g
>> _______________________________________________
>> talk mailing list
>> talk at lists.nycbug.org
>> http://lists.nycbug.org/mailman/listinfo/talk

More information about the talk mailing list