GitHub - quantumcore/anonsurf-arch: A port of ParrotSec's stealth and anonsurf modules to Arch Linux · GitHub
/" data-turbo-transient="true" />
Skip to content
Search/
Sign in<br>Sign upAppearance settings
You signed in with another tab or window. Reload to refresh your session.<br>You signed out in another tab or window. Reload to refresh your session.<br>You switched accounts on another tab or window. Reload to refresh your session.
Dismiss alert
{{ message }}
quantumcore
anonsurf-arch
Public
Notifications<br>You must be signed in to change notification settings
Fork
Star
main
BranchesTags
Go to file
CodeOpen more actions menu
Folders and files<br>NameNameLast commit message<br>Last commit date<br>Latest commit
History<br>4 Commits<br>4 Commits
.github/workflows
.github/workflows
.gitignore
.gitignore
LICENSE
LICENSE
PKGBUILD
PKGBUILD
README.md
README.md
anonsurf
anonsurf
anonsurf.install
anonsurf.install
installer.sh
installer.sh
netcap.conf
netcap.conf
onion.pac
onion.pac
pandora
pandora
pandora.service
pandora.service
torrc.anon
torrc.anon
View all files
Repository files navigation
anonsurf
Anonymize the entire system under TOR using a transparent iptables proxy, and<br>wipe the RAM on shutdown with pandora.
anonsurf routes all system traffic through TOR via iptables and also lets you<br>start/stop i2p. pandora overwrites the RAM on shutdown as a cold boot attack<br>mitigation.
This is an Arch Linux native package:
systemd service management (systemctl)
Tor runs under the unprivileged tor user; iptables rules match on its UID
/etc/tor/torrc is swapped at runtime (start/stop) and always restored —<br>your regular Tor configuration is never permanently modified
/etc/resolv.conf is handled symlink-safe (works with systemd-resolved)
packaged as a PKGBUILD for makepkg
Original Project from here, ported to Arch Linux.
Installation
./installer.sh
The installer pulls the official-repo dependencies (tor, iptables, curl,<br>psmisc, procps-ng), AUR dependencies, then builds and installs this package.<br>Run it as a normal user with sudo (makepkg refuses to run as root).
Optional flags:
--with-i2p — also install i2p-bin from the AUR for starti2p/stopi2p
--with-bleachbit — also install bleachbit for cache cleaning
Or build it manually:
makepkg -si
Optional dependencies (AUR):
Package<br>Usage
secure-delete<br>sdmem, required by pandora (RAM wipe)
i2p-bin<br>I2P network support (anonsurf starti2p)
bleachbit<br>Cache cleaning on anonsurf start/stop
Usage
anonsurf
anonsurf {start|stop|restart|change|status|debug}
start — Route the whole system through Tor via iptables. Waits for Tor to<br>finish bootstrapping before reporting success.
stop — Restore the original iptables, DNS, IPv6 and Tor settings.
restart — Combines stop and start.
change — Signal Tor (SIGHUP) to pick a new circuit/identity.
status — Check whether AnonSurf is working properly.
myip — Show your current (Tor) exit IP address (risky).
debug — Dump diagnostics (iptables rules, Tor state, sockets, resolv.conf).
I2P related features:
anonsurf starti2p # start i2p services<br>anonsurf stopi2p # stop i2p services
NOTE: run it as root (sudo anonsurf start). While anonymous, only the tor<br>user may reach the network directly.
pandora
Pandora is enabled as a systemd unit (pandora.service) and automatically<br>wipes the RAM on shutdown. It can also be run manually:
pandora bomb
NOTE: this clears the entire system cache, including active SSH tunnels or<br>sessions. To stop the auto-wipe on shutdown:<br>systemctl disable pandora.service
Troubleshooting
The anonsurf Tor profile listens on TransPort 9040, SocksPort 9050 and<br>DNSPort 53 — see /etc/tor/torrc.anon. If Tor cannot bind port 53 (a<br>privileged port) as the tor user, the shipped systemd drop-in<br>(tor.service.d/netcap.conf) grants CAP_NET_BIND_SERVICE.
IPv6 is disabled during the anonymous session via<br>/etc/sysctl.d/98-anonsurf.conf and re-enabled on stop.
If something does not work while anonymous, run sudo anonsurf debug and<br>check that Tor has bootstrapped (Bootstrapped 100%) and is listening on<br>ports 53, 9040 and 9050.
License
GPLv3 — see LICENSE.
About<br>A port of ParrotSec's stealth and anonsurf modules to Arch Linux<br>Resources<br>Readme<br>GPL-3.0 license<br>Activity<br>Stars<br>0 stars<br>Watchers<br>0 watching<br>Forks<br>0 forks<br>Report repository
Releases
Packages
Contributors
Languages
You can’t perform that action at this time.