# TOR + 3.0.x

**URL:** <https://forum.gl-inet.com/t/tor-3-0-x/5032>\
**Category:** Router\
**Created:** [November 8, 2018, 10:19pm UTC](https://forum.gl-inet.com/t/tor-3-0-x/5032 "2018-11-08T22:19:13Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![kyson-lok](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/kyson-lok/32/185_2.png) [@kyson-lok](https://forum.gl-inet.com/u/kyson-lok)\
**Post date:** [November 9, 2018, 7:22am UTC](https://forum.gl-inet.com/t/tor-3-0-x/5032/2 "2018-11-09T07:22:55Z")

</div>

There isn't plan to add TOR on v3.0, but you can set it up by yourself.

## Install Tor ipk

```auto
opkg update
opkg install tor tor-geoip

```

## Tor Configuration

Clear existing torrc file via `echo '' > /etc/tor/torrc` and copy paste this configuration bellow to _/etc/tor/torrc_.

```auto
RunAsDaemon 1
AllowUnverifiedNodes middle,rendezvous
Log notice syslog
## Only run as a client, never a relay or exit
ClientOnly
PidFile /var/run/tor.pid
DataDirectory /var/lib/tor
User tor
SocksPort 9050
SocksPort 192.168.1.1:9050
AutomapHostsSuffixes .onion,.exit
AutomapHostsOnResolve 1
VirtualAddrNetworkIPv4 10.192.0.0/10
TransPort 192.168.1.1:9040
DNSPort 192.168.1.1:9053
ControlPort 9051

```

## Firewall Configuration

Append those lines to _/etc/config/firewall_.

```auto
config zone 'tor'
    option name 'tor'
    option network 'lan'
    option input 'REJECT'
    option output 'ACCEPT'
    option forward 'REJECT'
    option conntrack '1'
	
config rule
    option name 'Allow-Tor-DHCP'
    option src 'tor'
    option proto 'udp'
    option dest_port '67'
    option target 'ACCEPT'
    option family 'ipv4'

config rule
    option name 'Allow-Tor-DNS'
    option src 'tor'
    option proto 'udp'
    option dest_port '9053'
    option target 'ACCEPT'
    option family 'ipv4'

config rule
    option name 'Allow-Tor-Transparent'
    option src 'tor'
    option proto 'tcp'
    option dest_port '9040'
    option target 'ACCEPT'
    option family 'ipv4'

config rule
    option name 'Allow-Tor-SOCKS'
    option src 'tor'
    option proto 'tcp'
    option dest_port '9050'
    option target 'ACCEPT'
    option family 'ipv4'

```

Append those lines to _/etc/firewall.user_.

```auto
enable_transparent_tor() {

	ifname=br-lan

	# Allow direct access to the Tor daemon
	iptables -t nat -A PREROUTING -i $ifname -p tcp --dport 9050 -j ACCEPT

	# provide transparent routing for TCP and DNS
	iptables -t nat -A PREROUTING -i $ifname -p udp --dport 53 -j REDIRECT --to-ports 9053
	iptables -t nat -A PREROUTING -i $ifname -p tcp --syn -j REDIRECT --to-ports 9040
}

enable_transparent_tor

```

## Start Tor

We have to edit Tor init script, _/etc/init.d/tor_ to successfully start tor at every boot. Add those lines before **procd\_open\_instance**.

```auto
lan_ip=$(uci get network.lan.ipaddr)
[-n "$lan_ip"] && sed -i "s/192.168\..*\..*:/$lan_ip:/g" /etc/tor/torrc

```

All things done. Let's start tor.

```auto
/etc/init.d/tor restart

```

## Verify tor

Visti [http://check.torproject.org/](http://check.torproject.org/) to see if you are in Tor network. Please not, when you are using tor, the router’s UI is not accessible as well. But you can ssh to the router.

---

_[View the full topic](https://forum.gl-inet.com/t/tor-3-0-x/5032)._