Onion Hidden Service to GL GUI

Routers
1

I'm hoping to achieve remote access to my GL-iNET GL-X3000 router over tor. Ideally to either the GL-iNET GUI, or the LUCI GUI.

In attempt to get closer to that goal however, I just tried to follow the instructions on the OpenWRT website for SSL over tor.

I tried both methods presented: editing the tor-hs config file, and setting it up from the command line.

There are some discrepancies in the instructions provided on that page, namely:

  • the name sshd is used in the config file instructions, but ssh is used in the command line instructions
  • option Enabled=false in the config file instructions, but option Enabled="1" (true) in the command instructions, and
  • list PublicLocalPort '2222;22'' in the config file instructions, but '22;22'` in the command line instructions.

I ended up trying them all, and got the same error when I restarted the tor-hs service:

tail_conf 
Info. Updating tor configuration
uci: Invalid argument
Command failed: Not found

The directory /hidden_service/ssh gets added to /etc/tor, but there is no hostname file contained.

I then tried to follow these instructions by Informtic for a minimal tor hidden service on OpenWRT, but modify them so they are for SSH rather than accessing a storage drive (which I think is the intent of the instructions). To do so, I:

  • ignored the fstab portion
  • left out option home '/storage/tor in the suggested amendments to the uhttpd config
  • appended everything in the suggested torrc config modifications to the bottom of the existing torrc config, but changed the HiddenServicePort to that of the command line instructions on the OpenWRT page (22 127.0.0.1:22). Also tried 2222 127.0.0.2:22 (per the config file instructions on the OpenWRT page)

When I do this and restart uhttpd and tor... nothing happens. There is no hostname file in /etc/tor/hidden_service/hostname.

Any help would be greatly appreciate - even if just to get SSH remote access over tor working, but better yet, access to the GL or LUCI GUI! Thanks

2

Hi @brightside!

First of all take a look on this thread: Critical Problem Notification for GL-MT2500/GL-X3000/GL-XE3000

I think, this is because in GL GUI you didn't enable remote access. Try to enable it.

To get hostname and key you can use workaround. Generate ones on your PC and then use SCP to put it on router.

But maybe @bruce from support can help better.

Unfortunately, XE3000 don't support OP24 firmware, so it is hard to implement something custom without workarounds

3

Hello,

Sorry, we may difficult to support this third-party plugin, please consult with the developer, no one here knows how to use the plugin than developer.

If you require to use remote GUI or SSH services, you might consider using GL GoodCloud platform.