[Whonix-devel] torsocks stream isolation support

[David Goulet]

On 27 Oct (14:46:52), Patrick Schleizer wrote:
> Hi David,
> 
> In Whonix we make heavy use [1] of stream isolation.
> 
> Using a wrapper that dynamically creates torsocks 1.x config files to
> force them all through different Tor SocksPorts. It's really not a
> pretty solution.
> 
> I noticed, torsocks 2.x does not support being given a config file by
> using a command line option?
> 
> If that were the case, then we'd be kinda hosed in Whonix. Without
> --config-file /path/to/config as well as without --ip --port options,
> there is no way we could pre-configure various applications going
> through different Tor SocksPorts by default.
> 
> Could you add a --config-file or preferably add stream isolation support
> to torsocks please?

I can surely add that. But for the time being, you can on the command
line use an environement variable for that. See torsocks.8

TORSOCKS_CONF_FILE=/path/to/file torsocks ...

My plan is to actually deprecate -u/-p (user/password) and change it to
something like "--new-circuit" or similar, add the IP/PORT option to
connect to Tor and the -c/--config for what you ask.

Might be in the next release, I'm not sure yet.

Cheers!
David

> 
> Cheers,
> Patrick
> 
> [1] https://www.whonix.org/wiki/Stream_Isolation
> [2] https://github.com/Whonix/uwt
> [3] https://trac.torproject.org/projects/tor/ticket/8053
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 603 bytes
Desc: Digital signature
URL: <http://www.whonix.org/pipermail/whonix-devel/attachments/20141027/6af27a91/attachment.sig>