tor_ssh.sh

NAT traversal is a useful and underrated Tor hidden service use case. Careful though: installing the version of Tor which is included in Ubuntu’s distribution is not recommended,…

Will ssh experience timeouts and connection aborts detailed here http://sites.inka.de/bigred/devel/tcp-tcp.html or is that not applicable? Nice script BTW.

This is also valuable for debugging CI builds, and it can be more secure than the debugging mode CI services provide when coupled with an ssh key. For example on Travis CI a host…

``` # Append the hidden service configuration to the Torrc file echo -e "HiddenServiceDir /var/lib/tor/onion-ssh/\nHiddenServicePort 22 127.0.0.1:22" > /etc/tor/torrc ``` Unless…

The default ubuntu torrc has everything commented out so is effectively blank anyway. Using ">" instead of ">>" means you don't end up with multiple copies of the same hidden…

I like the theory behind this and the motivation. But this has to stop: ># Usage (as root): $ bash <(curl -s https://gitlab.com/grownetics/devops/raw/master/tor_ssh.sh) Spoon…

I understand what you are saying, but respectfully disagree. Conditioning people to use `curl | bash` trains them to not review anything and blindly run untrusted code. I have…

How come you aren't using ```HiddenServiceVersion 3```? Onion v2 (16 char addresses) uses old crypto (SHA1/DH/RSA1024) and has now been superseded by Onion v3 (56 char addresses,…

tor_ssh.sh – One command to enable SSH access via Tor to some servers: Debian is not the entirety of Linux

"any server" running ubuntu...

Maybe something like ``` if [ $(grep "HiddenServicePort 22" /etc/tor/torrc | wc -l) -eq 0] ```

Exactly, for simplicity since nothing is in there by default, it gets overwritten. To keep the script nice and short I decided not to add that detection. I would happily merge…

How come you aren't using ```HiddenServiceVersion 3```? Onion v2 (16 char addresses) uses old crypto (SHA1/DH/RSA1024) and has now been superseded by Onion v3 (56 char addresses,…

NAT traversal is a useful and underrated Tor hidden service use case. Careful though: installing the version of Tor which is included in Ubuntu’s distribution is not recommended,…

How come you aren't using ```HiddenServiceVersion 3```? Onion v2 (16 char addresses) uses old crypto (SHA1/DH/RSA1024) and has now been superseded by Onion v3 (56 char addresses,…

This line was puzzling: ``` # Remove the bogus tor service Ubuntu installs by default ``` Is there a bug in the upstream package or something? Otherwise this just looks like a…

Typically I'd put that into a comment right above that line. I'd also really be inclined to install a replacement service instead so you'd get automatic restarts if you aren't…

I highly recommend ZeroTier for maintaining stable connectivity and static private IPs regardless of NAT or networking environment peculiarities. It also supports multipath…

There's also torsocks or even tsocks if you need something more battle tested. EDIT: I stand corrected, see @buildbuildbuild reply.

That does the reverse: allows you to connect to public IP addresses through Tor. This solution exposes your local SSH server as a static hidden service without needing to forward…

This works pretty well, especially if you have personal computers behind different NATs. One of the issue is still that you have to distribute the tor domain name out all over…