Petter Reinholdtsen: A Debian package for SMTP via Tor (aka SMTorP) using exim4

Machine/setup	Original tasksel	Optimised tasksel	Reduction
Latitude D505 Main+LTSP LXDE	64 min (07:46-08:50)	<44 min (11:27-12:11)	>20 min 18%
Latitude D505 Roaming LXDE	57 min (08:48-09:45)	34 min (07:43-08:17)	23 min 40%
Latitude D505 Minimal	22 min (10:37-10:59)	11 min (11:16-11:27)	11 min 50%
Thinkpad X200 Minimal	6 min (08:19-08:25)	4 min (08:04-08:08)	2 min 33%
Thinkpad X200 Roaming KDE	19 min (09:21-09:40)	15 min (10:25-10:40)	4 min 21%

Machine/setup

Original tasksel

Optimised tasksel

Reduction

Latitude D505 Main+LTSP LXDE

64 min (07:46-08:50)

<44 min (11:27-12:11)

>20 min 18%

Latitude D505 Roaming LXDE

57 min (08:48-09:45)

34 min (07:43-08:17)

23 min 40%

Latitude D505 Minimal

22 min (10:37-10:59)

11 min (11:16-11:27)

11 min 50%

Thinkpad X200 Minimal

6 min (08:19-08:25)

4 min (08:04-08:08)

2 min 33%

Thinkpad X200 Roaming KDE

19 min (09:21-09:40)

15 min (10:25-10:40)

4 min 21%

-#!/bin/sh -set -e -. /usr/share/debconf/confmodule -info() { - logger -t my-pkgsel "info: $*" -} -error() { - logger -t my-pkgsel "error: $*" -} -override_install() { - apt-install eatmydata || true - if [ -x /target/usr/bin/eatmydata ] ; then - for bin in dpkg apt-get aptitude tasksel ; do - file=/usr/bin/$bin - # Test that the file exist and have not been diverted already. - if [ -f /target$file ] ; then - info "diverting $file using eatmydata" - printf "#!/bin/sh\neatmydata $bin.distrib \"\$@\"\n" \ - > /target$file.edu - chmod 755 /target$file.edu - in-target dpkg-divert --package debian-edu-config \ - --rename --quiet --add $file - ln -sf ./$bin.edu /target$file - else - error "unable to divert $file, as it is missing." - fi - done - else - error "unable to find /usr/bin/eatmydata after installing the eatmydata pacage" - fi -} - -override_install -

-#! /bin/sh -e -. /usr/share/debconf/confmodule -error() { - logger -t my-finish-install "error: $@" -} -remove_install_override() { - for bin in dpkg apt-get aptitude tasksel ; do - file=/usr/bin/$bin - if [ -x /target$file.edu ] ; then - rm /target$file - in-target dpkg-divert --package debian-edu-config \ - --rename --quiet --remove $file - rm /target$file.edu - else - error "Missing divert for $file." - fi - done - sync # Flush file buffers before continuing -} - -remove_install_override -

@@ -1164,6 +1024,8 @@ tools/edu-eatmydata-install in the source package.

October (6)

November (1)

2013 @@ -1343,7 +1205,7 @@ tools/edu-eatmydata-install in the source package.

@@ -1355,7 +1217,7 @@ tools/edu-eatmydata-install in the source package.

@@ -1363,7 +1225,7 @@ tools/edu-eatmydata-install in the source package.

@@ -1395,7 +1257,7 @@ tools/edu-eatmydata-install in the source package.

@@ -1425,7 +1287,7 @@ tools/edu-eatmydata-install in the source package.

diff --git a/blog/index.rss b/blog/index.rss index 3b3c3bc599..1ad8c05fe6 100644 --- a/blog/index.rss +++ b/blog/index.rss @@ -6,6 +6,82 @@ http://people.skolelinux.org/pere/blog/ + + A Debian package for SMTP via Tor (aka SMTorP) using exim4 + http://people.skolelinux.org/pere/blog/A_Debian_package_for_SMTP_via_Tor__aka_SMTorP__using_exim4.html + http://people.skolelinux.org/pere/blog/A_Debian_package_for_SMTP_via_Tor__aka_SMTorP__using_exim4.html + Mon, 10 Nov 2014 13:40:00 +0100 + The right to communicate with your friends and family in private, +without anyone snooping, is a right every citicen have in a liberal +democracy. But this right is under serious attack these days. + +A while back it occurred to me that one way to make the dragnet +surveillance conducted by NSA, GCHQ, FRA and others (and confirmed by +the whisleblower Snowden) more expensive for Internet email, +is to deliver all email using SMTP via Tor. Such SMTP option would be +a nice addition to the FreedomBox project if we could send email +between FreedomBox machines without leaking metadata about the emails +to the people peeking on the wire. I +<a href="http://lists.alioth.debian.org/pipermail/freedombox-discuss/2014-October/006493.html">proposed +this on the FreedomBox project mailing list in October</a> and got a +lot of useful feedback and suggestions. It also became obvious to me +that this was not a novel idea, as the same idea was tested and +documented by Johannes Berg as early as 2006, and both +<a href="https://github.com/pagekite/Mailpile/wiki/SMTorP">the +Mailpile</a> and <a href="http://dee.su/cables">the Cables</a> systems +propose a similar method / protocol to pass emails between users. + +To implement such system one need to set up a Tor hidden service +providing the SMTP protocol on port 25, and use email addresses +looking like username@hidden-service-name.onion. With such addresses +the connections to port 25 on hidden-service-name.onion using Tor will +go to the correct SMTP server. To do this, one need to configure the +Tor daemon to provide the hidden service and the mail server to accept +emails for this .onion domain. To learn more about Exim configuration +in Debian and test the design provided by Johannes Berg in his FAQ, I +set out yesterday to create a Debian package for making it trivial to +set up such SMTP over Tor service based on Debian. Getting it to work +were fairly easy, and +<a href="https://github.com/petterreinholdtsen/exim4-smtorp">the +source code for the Debian package</a> is available from github. I +plan to move it into Debian if further testing prove this to be a +useful approach. + +If you want to test this, set up a blank Debian machine without any +mail system installed (or run <tt>apt-get purge exim4-config</tt> to +get rid of exim4). Install tor, clone the git repository mentioned +above, build the deb and install it on the machine. Next, run +<tt>/usr/lib/exim4-smtorp/setup-exim-hidden-service</tt> and follow +the instructions to get the service up and running. Restart tor and +exim when it is done, and test mail delivery using swaks like +this: + +<blockquote><pre> +torsocks swaks --server dutlqrrmjhtfa3vp.onion \ + --to fbx@dutlqrrmjhtfa3vp.onion +</pre></blockquote> + +This will test the SMTP delivery using tor. Replace the email +address with your own address to test your server. :) + +The setup procedure is still to complex, and I hope it can be made +easier and more automatic. Especially the tor setup need more work. +Also, the package include a tor-smtp tool written in C, but its task +should probably be rewritten in some script language to make the deb +architecture independent. It would probably also make the code easier +to review. The tor-smtp tool currently need to listen on a socket for +exim to talk to it and is started using xinetd. It would be better if +no daemon and no socket is needed. I suspect it is possible to get +exim to run a command line tool for delivery instead of talking to a +socket, and hope to figure out how in a future version of this +system. + +Until I wipe my test machine, I can be reached using the +<tt>fbx@dutlqrrmjhtfa3vp.onion</tt> mail address, deliverable over +SMTorP. :) + + + First Jessie based Debian Edu released (alpha0) http://people.skolelinux.org/pere/blog/First_Jessie_based_Debian_Edu_released__alpha0_.html @@ -844,221 +920,5 @@ dokumentasjon pÃ¥ vegvesenets REST-API. - - Speeding up the Debian installer using eatmydata and dpkg-divert - http://people.skolelinux.org/pere/blog/Speeding_up_the_Debian_installer_using_eatmydata_and_dpkg_divert.html - http://people.skolelinux.org/pere/blog/Speeding_up_the_Debian_installer_using_eatmydata_and_dpkg_divert.html - Tue, 16 Sep 2014 14:00:00 +0200 - The <a href="https://www.debian.org/">Debian</a> installer could be -a lot quicker. When we install more than 2000 packages in -<a href="http://www.skolelinux.org/">Skolelinux / Debian Edu</a> using -tasksel in the installer, unpacking the binary packages take forever. -A part of the slow I/O issue was discussed in -<a href="https://bugs.debian.org/613428">bug #613428</a> about too -much file system sync-ing done by dpkg, which is the package -responsible for unpacking the binary packages. Other parts (like code -executed by postinst scripts) might also sync to disk during -installation. All this sync-ing to disk do not really make sense to -me. If the machine crash half-way through, I start over, I do not try -to salvage the half installed system. So the failure sync-ing is -supposed to protect against, hardware or system crash, is not really -relevant while the installer is running. - -A few days ago, I thought of a way to get rid of all the file -system sync()-ing in a fairly non-intrusive way, without the need to -change the code in several packages. The idea is not new, but I have -not heard anyone propose the approach using dpkg-divert before. It -depend on the small and clever package -<a href="https://packages.qa.debian.org/eatmydata">eatmydata</a>, which -uses LD_PRELOAD to replace the system functions for syncing data to -disk with functions doing nothing, thus allowing programs to live -dangerous while speeding up disk I/O significantly. Instead of -modifying the implementation of dpkg, apt and tasksel (which are the -packages responsible for selecting, fetching and installing packages), -it occurred to me that we could just divert the programs away, replace -them with a simple shell wrapper calling -"eatmydata $program $@", to get the same effect. -Two days ago I decided to test the idea, and wrapped up a simple -implementation for the Debian Edu udeb. - -The effect was stunning. In my first test it reduced the running -time of the pkgsel step (installing tasks) from 64 to less than 44 -minutes (20 minutes shaved off the installation) on an old Dell -Latitude D505 machine. I am not quite sure what the optimised time -would have been, as I messed up the testing a bit, causing the debconf -priority to get low enough for two questions to pop up during -installation. As soon as I saw the questions I moved the installation -along, but do not know how long the question were holding up the -installation. I did some more measurements using Debian Edu Jessie, -and got these results. The time measured is the time stamp in -/var/log/syslog between the "pkgsel: starting tasksel" and the -"pkgsel: finishing up" lines, if you want to do the same measurement -yourself. In Debian Edu, the tasksel dialog do not show up, and the -timing thus do not depend on how quickly the user handle the tasksel -dialog. - -<table> - -<tr> -<th>Machine/setup</th> -<th>Original tasksel</th> -<th>Optimised tasksel</th> -<th>Reduction</th> -</tr> - -<tr> -<td>Latitude D505 Main+LTSP LXDE</td> -<td>64 min (07:46-08:50)</td> -<td><44 min (11:27-12:11)</td> -<td>>20 min 18%</td> -</tr> - -<tr> -<td>Latitude D505 Roaming LXDE</td> -<td>57 min (08:48-09:45)</td> -<td>34 min (07:43-08:17)</td> -<td>23 min 40%</td> -</tr> - -<tr> -<td>Latitude D505 Minimal</td> -<td>22 min (10:37-10:59)</td> -<td>11 min (11:16-11:27)</td> -<td>11 min 50%</td> -</tr> - -<tr> -<td>Thinkpad X200 Minimal</td> -<td>6 min (08:19-08:25)</td> -<td>4 min (08:04-08:08)</td> -<td>2 min 33%</td> -</tr> - -<tr> -<td>Thinkpad X200 Roaming KDE</td> -<td>19 min (09:21-09:40)</td> -<td>15 min (10:25-10:40)</td> -<td>4 min 21%</td> -</tr> - -</table> - -The test is done using a netinst ISO on a USB stick, so some of the -time is spent downloading packages. The connection to the Internet -was 100Mbit/s during testing, so downloading should not be a -significant factor in the measurement. Download typically took a few -seconds to a few minutes, depending on the amount of packages being -installed. - -The speedup is implemented by using two hooks in -<a href="https://www.debian.org/devel/debian-installer/">Debian -Installer</a>, the pre-pkgsel.d hook to set up the diverts, and the -finish-install.d hook to remove the divert at the end of the -installation. I picked the pre-pkgsel.d hook instead of the -post-base-installer.d hook because I test using an ISO without the -eatmydata package included, and the post-base-installer.d hook in -Debian Edu can only operate on packages included in the ISO. The -negative effect of this is that I am unable to activate this -optimization for the kernel installation step in d-i. If the code is -moved to the post-base-installer.d hook, the speedup would be larger -for the entire installation. - -I've implemented this in the -<a href="https://packages.qa.debian.org/debian-edu-install">debian-edu-install</a> -git repository, and plan to provide the optimization as part of the -Debian Edu installation. If you want to test this yourself, you can -create two files in the installer (or in an udeb). One shell script -need do go into /usr/lib/pre-pkgsel.d/, with content like this: - -<blockquote><pre> -#!/bin/sh -set -e -. /usr/share/debconf/confmodule -info() { - logger -t my-pkgsel "info: $*" -} -error() { - logger -t my-pkgsel "error: $*" -} -override_install() { - apt-install eatmydata || true - if [ -x /target/usr/bin/eatmydata ] ; then - for bin in dpkg apt-get aptitude tasksel ; do - file=/usr/bin/$bin - # Test that the file exist and have not been diverted already. - if [ -f /target$file ] ; then - info "diverting $file using eatmydata" - printf "#!/bin/sh\neatmydata $bin.distrib \"\$@\"\n" \ - > /target$file.edu - chmod 755 /target$file.edu - in-target dpkg-divert --package debian-edu-config \ - --rename --quiet --add $file - ln -sf ./$bin.edu /target$file - else - error "unable to divert $file, as it is missing." - fi - done - else - error "unable to find /usr/bin/eatmydata after installing the eatmydata pacage" - fi -} - -override_install -</pre></blockquote> - -To clean up, another shell script should go into -/usr/lib/finish-install.d/ with code like this: - -<blockquote><pre> -#! /bin/sh -e -. /usr/share/debconf/confmodule -error() { - logger -t my-finish-install "error: $@" -} -remove_install_override() { - for bin in dpkg apt-get aptitude tasksel ; do - file=/usr/bin/$bin - if [ -x /target$file.edu ] ; then - rm /target$file - in-target dpkg-divert --package debian-edu-config \ - --rename --quiet --remove $file - rm /target$file.edu - else - error "Missing divert for $file." - fi - done - sync # Flush file buffers before continuing -} - -remove_install_override -</pre></blockquote> - -In Debian Edu, I placed both code fragments in a separate script -edu-eatmydata-install and call it from the pre-pkgsel.d and -finish-install.d scripts. - -By now you might ask if this change should get into the normal -Debian installer too? I suspect it should, but am not sure the -current debian-installer coordinators find it useful enough. It also -depend on the side effects of the change. I'm not aware of any, but I -guess we will see if the change is safe after some more testing. -Perhaps there is some package in Debian depending on sync() and -fsync() having effect? Perhaps it should go into its own udeb, to -allow those of us wanting to enable it to do so without affecting -everyone. - -Update 2014-09-24: Since a few days ago, enabling this optimization -will break installation of all programs using gnutls because of -<a href="https://bugs.debian.org/702711">bug #702711</a>. An updated -eatmydata package in Debian will solve it. - -Update 2014-10-17: The bug mentioned above is fixed in testing and -the optimization work again. And I have discovered that the -dpkg-divert trick is not really needed and implemented a slightly -simpler approach as part of the debian-edu-install package. See -tools/edu-eatmydata-install in the source package. - - - diff --git a/blog/jXplorer__a_very_nice_LDAP_GUI.html b/blog/jXplorer__a_very_nice_LDAP_GUI.html index 3aa76ff07f..fb47e4c8f4 100644 --- a/blog/jXplorer__a_very_nice_LDAP_GUI.html +++ b/blog/jXplorer__a_very_nice_LDAP_GUI.html @@ -76,6 +76,8 @@ and remove the failing query. Nothing big, but very annoying.

October (6)

November (1)

2013 @@ -255,7 +257,7 @@ and remove the failing query. Nothing big, but very annoying.

@@ -267,7 +269,7 @@ and remove the failing query. Nothing big, but very annoying.

@@ -275,7 +277,7 @@ and remove the failing query. Nothing big, but very annoying.

@@ -307,7 +309,7 @@ and remove the failing query. Nothing big, but very annoying.

@@ -337,7 +339,7 @@ and remove the failing query. Nothing big, but very annoying.

diff --git a/blog/listadmin__the_quick_way_to_moderate_mailman_lists___nice_free_software.html b/blog/listadmin__the_quick_way_to_moderate_mailman_lists___nice_free_software.html index 28e29d39e7..18c5a9e683 100644 --- a/blog/listadmin__the_quick_way_to_moderate_mailman_lists___nice_free_software.html +++ b/blog/listadmin__the_quick_way_to_moderate_mailman_lists___nice_free_software.html @@ -145,6 +145,8 @@ sure why.

October (6)

November (1)

2013 @@ -324,7 +326,7 @@ sure why.

@@ -336,7 +338,7 @@ sure why.

@@ -344,7 +346,7 @@ sure why.

@@ -376,7 +378,7 @@ sure why.

@@ -406,7 +408,7 @@ sure why.

diff --git a/blog/sitemap.xml b/blog/sitemap.xml index 2a61af1553..6089e88f02 100644 --- a/blog/sitemap.xml +++ b/blog/sitemap.xml @@ -100,6 +100,11 @@ 0.50 weekly + + http://people.skolelinux.org/pere/blog/A_Debian_package_for_SMTP_via_Tor__aka_SMTorP__using_exim4.html + 0.50 + weekly + http://people.skolelinux.org/pere/blog/A_fist_full_of_non_anonymous_Bitcoins.html 0.50 diff --git a/blog/systemd__an_interesting_alternative_to_upstart.html b/blog/systemd__an_interesting_alternative_to_upstart.html index 16fa89caca..609d66879b 100644 --- a/blog/systemd__an_interesting_alternative_to_upstart.html +++ b/blog/systemd__an_interesting_alternative_to_upstart.html @@ -94,6 +94,8 @@ with parallel booting enabled by default.

October (6)

November (1)

2013 @@ -273,7 +275,7 @@ with parallel booting enabled by default.

@@ -285,7 +287,7 @@ with parallel booting enabled by default.

@@ -293,7 +295,7 @@ with parallel booting enabled by default.

@@ -325,7 +327,7 @@ with parallel booting enabled by default.

@@ -355,7 +357,7 @@ with parallel booting enabled by default.

diff --git a/blog/tags/3d-printer/index.html b/blog/tags/3d-printer/index.html index 7564d9c9eb..b99aae2b96 100644 --- a/blog/tags/3d-printer/index.html +++ b/blog/tags/3d-printer/index.html @@ -626,6 +626,8 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

October (6)

November (1)

2013 @@ -805,7 +807,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -817,7 +819,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -825,7 +827,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -857,7 +859,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -887,7 +889,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

diff --git a/blog/tags/amiga/index.html b/blog/tags/amiga/index.html index ed48b7e35c..85726ef61c 100644 --- a/blog/tags/amiga/index.html +++ b/blog/tags/amiga/index.html @@ -80,6 +80,8 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

October (6)

November (1)

2013 @@ -259,7 +261,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

@@ -271,7 +273,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

@@ -279,7 +281,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

@@ -311,7 +313,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

@@ -341,7 +343,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

diff --git a/blog/tags/aros/index.html b/blog/tags/aros/index.html index f0061bc63b..4fbb3b50b5 100644 --- a/blog/tags/aros/index.html +++ b/blog/tags/aros/index.html @@ -80,6 +80,8 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

October (6)

November (1)

2013 @@ -259,7 +261,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

@@ -271,7 +273,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

@@ -279,7 +281,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

@@ -311,7 +313,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

@@ -341,7 +343,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

diff --git a/blog/tags/bankid/index.html b/blog/tags/bankid/index.html index ae73ac2d17..6d98e7cd3a 100644 --- a/blog/tags/bankid/index.html +++ b/blog/tags/bankid/index.html @@ -486,6 +486,8 @@ til BankID-modellen.

October (6)

November (1)

2013 @@ -665,7 +667,7 @@ til BankID-modellen.

@@ -677,7 +679,7 @@ til BankID-modellen.

@@ -685,7 +687,7 @@ til BankID-modellen.

@@ -717,7 +719,7 @@ til BankID-modellen.

@@ -747,7 +749,7 @@ til BankID-modellen.

diff --git a/blog/tags/bitcoin/index.html b/blog/tags/bitcoin/index.html index 5f66f71831..6194065751 100644 --- a/blog/tags/bitcoin/index.html +++ b/blog/tags/bitcoin/index.html @@ -607,6 +607,8 @@ donations to the address

October (6)

November (1)

2013 @@ -786,7 +788,7 @@ donations to the address

@@ -798,7 +800,7 @@ donations to the address

@@ -806,7 +808,7 @@ donations to the address

@@ -838,7 +840,7 @@ donations to the address

@@ -868,7 +870,7 @@ donations to the address

diff --git a/blog/tags/bootsystem/index.html b/blog/tags/bootsystem/index.html index 1327e7b4db..3082f4865d 100644 --- a/blog/tags/bootsystem/index.html +++ b/blog/tags/bootsystem/index.html @@ -1118,6 +1118,8 @@ insserv'. Will need to test if that work. :)

October (6)

November (1)

2013 @@ -1297,7 +1299,7 @@ insserv'. Will need to test if that work. :)

@@ -1309,7 +1311,7 @@ insserv'. Will need to test if that work. :)

@@ -1317,7 +1319,7 @@ insserv'. Will need to test if that work. :)

@@ -1349,7 +1351,7 @@ insserv'. Will need to test if that work. :)

@@ -1379,7 +1381,7 @@ insserv'. Will need to test if that work. :)

diff --git a/blog/tags/bsa/index.html b/blog/tags/bsa/index.html index 47a268c98e..0edf766a46 100644 --- a/blog/tags/bsa/index.html +++ b/blog/tags/bsa/index.html @@ -168,6 +168,8 @@ pÃ¥ Slashdot.

October (6)

November (1)

2013 @@ -347,7 +349,7 @@ pÃ¥ Slashdot.

@@ -359,7 +361,7 @@ pÃ¥ Slashdot.

@@ -367,7 +369,7 @@ pÃ¥ Slashdot.

@@ -399,7 +401,7 @@ pÃ¥ Slashdot.

@@ -429,7 +431,7 @@ pÃ¥ Slashdot.

diff --git a/blog/tags/chrpath/index.html b/blog/tags/chrpath/index.html index b789f898de..99bf786e4e 100644 --- a/blog/tags/chrpath/index.html +++ b/blog/tags/chrpath/index.html @@ -175,6 +175,8 @@ include a testsuite check.

October (6)

November (1)

2013 @@ -354,7 +356,7 @@ include a testsuite check.

@@ -366,7 +368,7 @@ include a testsuite check.

@@ -374,7 +376,7 @@ include a testsuite check.

@@ -406,7 +408,7 @@ include a testsuite check.

@@ -436,7 +438,7 @@ include a testsuite check.

diff --git a/blog/tags/debian edu/index.html b/blog/tags/debian edu/index.html index e0a3b2885d..e5958d8370 100644 --- a/blog/tags/debian edu/index.html +++ b/blog/tags/debian edu/index.html @@ -14210,6 +14210,8 @@ be the only one fitting our needs. :/

October (6)

November (1)

2013 @@ -14389,7 +14391,7 @@ be the only one fitting our needs. :/

@@ -14401,7 +14403,7 @@ be the only one fitting our needs. :/

@@ -14409,7 +14411,7 @@ be the only one fitting our needs. :/

@@ -14441,7 +14443,7 @@ be the only one fitting our needs. :/

@@ -14471,7 +14473,7 @@ be the only one fitting our needs. :/

diff --git a/blog/tags/debian/debian.rss b/blog/tags/debian/debian.rss index 07b5392123..6f22630210 100644 --- a/blog/tags/debian/debian.rss +++ b/blog/tags/debian/debian.rss @@ -6,6 +6,82 @@ http://people.skolelinux.org/pere/blog/ + + A Debian package for SMTP via Tor (aka SMTorP) using exim4 + http://people.skolelinux.org/pere/blog/A_Debian_package_for_SMTP_via_Tor__aka_SMTorP__using_exim4.html + http://people.skolelinux.org/pere/blog/A_Debian_package_for_SMTP_via_Tor__aka_SMTorP__using_exim4.html + Mon, 10 Nov 2014 13:40:00 +0100 + The right to communicate with your friends and family in private, +without anyone snooping, is a right every citicen have in a liberal +democracy. But this right is under serious attack these days. + +A while back it occurred to me that one way to make the dragnet +surveillance conducted by NSA, GCHQ, FRA and others (and confirmed by +the whisleblower Snowden) more expensive for Internet email, +is to deliver all email using SMTP via Tor. Such SMTP option would be +a nice addition to the FreedomBox project if we could send email +between FreedomBox machines without leaking metadata about the emails +to the people peeking on the wire. I +<a href="http://lists.alioth.debian.org/pipermail/freedombox-discuss/2014-October/006493.html">proposed +this on the FreedomBox project mailing list in October</a> and got a +lot of useful feedback and suggestions. It also became obvious to me +that this was not a novel idea, as the same idea was tested and +documented by Johannes Berg as early as 2006, and both +<a href="https://github.com/pagekite/Mailpile/wiki/SMTorP">the +Mailpile</a> and <a href="http://dee.su/cables">the Cables</a> systems +propose a similar method / protocol to pass emails between users. + +To implement such system one need to set up a Tor hidden service +providing the SMTP protocol on port 25, and use email addresses +looking like username@hidden-service-name.onion. With such addresses +the connections to port 25 on hidden-service-name.onion using Tor will +go to the correct SMTP server. To do this, one need to configure the +Tor daemon to provide the hidden service and the mail server to accept +emails for this .onion domain. To learn more about Exim configuration +in Debian and test the design provided by Johannes Berg in his FAQ, I +set out yesterday to create a Debian package for making it trivial to +set up such SMTP over Tor service based on Debian. Getting it to work +were fairly easy, and +<a href="https://github.com/petterreinholdtsen/exim4-smtorp">the +source code for the Debian package</a> is available from github. I +plan to move it into Debian if further testing prove this to be a +useful approach. + +If you want to test this, set up a blank Debian machine without any +mail system installed (or run <tt>apt-get purge exim4-config</tt> to +get rid of exim4). Install tor, clone the git repository mentioned +above, build the deb and install it on the machine. Next, run +<tt>/usr/lib/exim4-smtorp/setup-exim-hidden-service</tt> and follow +the instructions to get the service up and running. Restart tor and +exim when it is done, and test mail delivery using swaks like +this: + +<blockquote><pre> +torsocks swaks --server dutlqrrmjhtfa3vp.onion \ + --to fbx@dutlqrrmjhtfa3vp.onion +</pre></blockquote> + +This will test the SMTP delivery using tor. Replace the email +address with your own address to test your server. :) + +The setup procedure is still to complex, and I hope it can be made +easier and more automatic. Especially the tor setup need more work. +Also, the package include a tor-smtp tool written in C, but its task +should probably be rewritten in some script language to make the deb +architecture independent. It would probably also make the code easier +to review. The tor-smtp tool currently need to listen on a socket for +exim to talk to it and is started using xinetd. It would be better if +no daemon and no socket is needed. I suspect it is possible to get +exim to run a command line tool for delivery instead of talking to a +socket, and hope to figure out how in a future version of this +system. + +Until I wipe my test machine, I can be reached using the +<tt>fbx@dutlqrrmjhtfa3vp.onion</tt> mail address, deliverable over +SMTorP. :) + + + listadmin, the quick way to moderate mailman lists - nice free software http://people.skolelinux.org/pere/blog/listadmin__the_quick_way_to_moderate_mailman_lists___nice_free_software.html diff --git a/blog/tags/debian/index.html b/blog/tags/debian/index.html index 9680976299..83a2839baa 100644 --- a/blog/tags/debian/index.html +++ b/blog/tags/debian/index.html @@ -20,6 +20,94 @@

Entries tagged "debian".

+ A Debian package for SMTP via Tor (aka SMTorP) using exim4 +

+ 10th November 2014 +

The right to communicate with your friends and family in private, +without anyone snooping, is a right every citicen have in a liberal +democracy. But this right is under serious attack these days.

+ +

A while back it occurred to me that one way to make the dragnet +surveillance conducted by NSA, GCHQ, FRA and others (and confirmed by +the whisleblower Snowden) more expensive for Internet email, +is to deliver all email using SMTP via Tor. Such SMTP option would be +a nice addition to the FreedomBox project if we could send email +between FreedomBox machines without leaking metadata about the emails +to the people peeking on the wire. I +proposed +this on the FreedomBox project mailing list in October and got a +lot of useful feedback and suggestions. It also became obvious to me +that this was not a novel idea, as the same idea was tested and +documented by Johannes Berg as early as 2006, and both +the +Mailpile and the Cables systems +propose a similar method / protocol to pass emails between users.

+ +

To implement such system one need to set up a Tor hidden service +providing the SMTP protocol on port 25, and use email addresses +looking like username@hidden-service-name.onion. With such addresses +the connections to port 25 on hidden-service-name.onion using Tor will +go to the correct SMTP server. To do this, one need to configure the +Tor daemon to provide the hidden service and the mail server to accept +emails for this .onion domain. To learn more about Exim configuration +in Debian and test the design provided by Johannes Berg in his FAQ, I +set out yesterday to create a Debian package for making it trivial to +set up such SMTP over Tor service based on Debian. Getting it to work +were fairly easy, and +the +source code for the Debian package is available from github. I +plan to move it into Debian if further testing prove this to be a +useful approach.

+ +

If you want to test this, set up a blank Debian machine without any +mail system installed (or run apt-get purge exim4-config to +get rid of exim4). Install tor, clone the git repository mentioned +above, build the deb and install it on the machine. Next, run +/usr/lib/exim4-smtorp/setup-exim-hidden-service and follow +the instructions to get the service up and running. Restart tor and +exim when it is done, and test mail delivery using swaks like +this:

+ +

+torsocks swaks --server dutlqrrmjhtfa3vp.onion \
+  --to fbx@dutlqrrmjhtfa3vp.onion
+

+ +

This will test the SMTP delivery using tor. Replace the email +address with your own address to test your server. :)

+ +

The setup procedure is still to complex, and I hope it can be made +easier and more automatic. Especially the tor setup need more work. +Also, the package include a tor-smtp tool written in C, but its task +should probably be rewritten in some script language to make the deb +architecture independent. It would probably also make the code easier +to review. The tor-smtp tool currently need to listen on a socket for +exim to talk to it and is started using xinetd. It would be better if +no daemon and no socket is needed. I suspect it is possible to get +exim to run a command line tool for delivery instead of talking to a +socket, and hope to figure out how in a future version of this +system.

+ +

Until I wipe my test machine, I can be reached using the +fbx@dutlqrrmjhtfa3vp.onion mail address, deliverable over +SMTorP. :)

+ +

+ + + Tags: debian, english, freedombox, personvern, surveillance. + + +

listadmin, the quick way to moderate mailman lists - nice free software @@ -8859,6 +8947,8 @@ be the only one fitting our needs. :/

October (6)

November (1)

2013 @@ -9038,7 +9128,7 @@ be the only one fitting our needs. :/

@@ -9050,7 +9140,7 @@ be the only one fitting our needs. :/

@@ -9058,7 +9148,7 @@ be the only one fitting our needs. :/

@@ -9090,7 +9180,7 @@ be the only one fitting our needs. :/

@@ -9120,7 +9210,7 @@ be the only one fitting our needs. :/

diff --git a/blog/tags/digistan/index.html b/blog/tags/digistan/index.html index b248b500c7..e23d985014 100644 --- a/blog/tags/digistan/index.html +++ b/blog/tags/digistan/index.html @@ -1267,6 +1267,8 @@ produkter basert pÃ¥ standarden.

October (6)

November (1)

2013 @@ -1446,7 +1448,7 @@ produkter basert pÃ¥ standarden.

@@ -1458,7 +1460,7 @@ produkter basert pÃ¥ standarden.

@@ -1466,7 +1468,7 @@ produkter basert pÃ¥ standarden.

@@ -1498,7 +1500,7 @@ produkter basert pÃ¥ standarden.

@@ -1528,7 +1530,7 @@ produkter basert pÃ¥ standarden.

diff --git a/blog/tags/dld/index.html b/blog/tags/dld/index.html index dc7a2e51a8..a0decc2a9b 100644 --- a/blog/tags/dld/index.html +++ b/blog/tags/dld/index.html @@ -1408,6 +1408,8 @@ fÃ¥r snart se om det stemmer.

October (6)

November (1)

2013 @@ -1587,7 +1589,7 @@ fÃ¥r snart se om det stemmer.

@@ -1599,7 +1601,7 @@ fÃ¥r snart se om det stemmer.

@@ -1607,7 +1609,7 @@ fÃ¥r snart se om det stemmer.

@@ -1639,7 +1641,7 @@ fÃ¥r snart se om det stemmer.

@@ -1669,7 +1671,7 @@ fÃ¥r snart se om det stemmer.

diff --git a/blog/tags/docbook/index.html b/blog/tags/docbook/index.html index db04bc14bb..a4ba120dba 100644 --- a/blog/tags/docbook/index.html +++ b/blog/tags/docbook/index.html @@ -956,6 +956,8 @@ slik at du kan oppdatere direkte.

October (6)

November (1)

2013 @@ -1135,7 +1137,7 @@ slik at du kan oppdatere direkte.

@@ -1147,7 +1149,7 @@ slik at du kan oppdatere direkte.

@@ -1155,7 +1157,7 @@ slik at du kan oppdatere direkte.

@@ -1187,7 +1189,7 @@ slik at du kan oppdatere direkte.

@@ -1217,7 +1219,7 @@ slik at du kan oppdatere direkte.

diff --git a/blog/tags/drivstoffpriser/index.html b/blog/tags/drivstoffpriser/index.html index 1398048be1..4b3db6163e 100644 --- a/blog/tags/drivstoffpriser/index.html +++ b/blog/tags/drivstoffpriser/index.html @@ -509,6 +509,8 @@ en liste med stasjoner pÃ¥ samme format som PriserVedStasjoner.

October (6)

November (1)

2013 @@ -688,7 +690,7 @@ en liste med stasjoner pÃ¥ samme format som PriserVedStasjoner.

@@ -700,7 +702,7 @@ en liste med stasjoner pÃ¥ samme format som PriserVedStasjoner.

@@ -708,7 +710,7 @@ en liste med stasjoner pÃ¥ samme format som PriserVedStasjoner.

@@ -740,7 +742,7 @@ en liste med stasjoner pÃ¥ samme format som PriserVedStasjoner.

@@ -770,7 +772,7 @@ en liste med stasjoner pÃ¥ samme format som PriserVedStasjoner.

diff --git a/blog/tags/english/english.rss b/blog/tags/english/english.rss index b4d9030149..ee7e8a2c86 100644 --- a/blog/tags/english/english.rss +++ b/blog/tags/english/english.rss @@ -6,6 +6,82 @@ http://people.skolelinux.org/pere/blog/ + + A Debian package for SMTP via Tor (aka SMTorP) using exim4 + http://people.skolelinux.org/pere/blog/A_Debian_package_for_SMTP_via_Tor__aka_SMTorP__using_exim4.html + http://people.skolelinux.org/pere/blog/A_Debian_package_for_SMTP_via_Tor__aka_SMTorP__using_exim4.html + Mon, 10 Nov 2014 13:40:00 +0100 + The right to communicate with your friends and family in private, +without anyone snooping, is a right every citicen have in a liberal +democracy. But this right is under serious attack these days. + +A while back it occurred to me that one way to make the dragnet +surveillance conducted by NSA, GCHQ, FRA and others (and confirmed by +the whisleblower Snowden) more expensive for Internet email, +is to deliver all email using SMTP via Tor. Such SMTP option would be +a nice addition to the FreedomBox project if we could send email +between FreedomBox machines without leaking metadata about the emails +to the people peeking on the wire. I +<a href="http://lists.alioth.debian.org/pipermail/freedombox-discuss/2014-October/006493.html">proposed +this on the FreedomBox project mailing list in October</a> and got a +lot of useful feedback and suggestions. It also became obvious to me +that this was not a novel idea, as the same idea was tested and +documented by Johannes Berg as early as 2006, and both +<a href="https://github.com/pagekite/Mailpile/wiki/SMTorP">the +Mailpile</a> and <a href="http://dee.su/cables">the Cables</a> systems +propose a similar method / protocol to pass emails between users. + +To implement such system one need to set up a Tor hidden service +providing the SMTP protocol on port 25, and use email addresses +looking like username@hidden-service-name.onion. With such addresses +the connections to port 25 on hidden-service-name.onion using Tor will +go to the correct SMTP server. To do this, one need to configure the +Tor daemon to provide the hidden service and the mail server to accept +emails for this .onion domain. To learn more about Exim configuration +in Debian and test the design provided by Johannes Berg in his FAQ, I +set out yesterday to create a Debian package for making it trivial to +set up such SMTP over Tor service based on Debian. Getting it to work +were fairly easy, and +<a href="https://github.com/petterreinholdtsen/exim4-smtorp">the +source code for the Debian package</a> is available from github. I +plan to move it into Debian if further testing prove this to be a +useful approach. + +If you want to test this, set up a blank Debian machine without any +mail system installed (or run <tt>apt-get purge exim4-config</tt> to +get rid of exim4). Install tor, clone the git repository mentioned +above, build the deb and install it on the machine. Next, run +<tt>/usr/lib/exim4-smtorp/setup-exim-hidden-service</tt> and follow +the instructions to get the service up and running. Restart tor and +exim when it is done, and test mail delivery using swaks like +this: + +<blockquote><pre> +torsocks swaks --server dutlqrrmjhtfa3vp.onion \ + --to fbx@dutlqrrmjhtfa3vp.onion +</pre></blockquote> + +This will test the SMTP delivery using tor. Replace the email +address with your own address to test your server. :) + +The setup procedure is still to complex, and I hope it can be made +easier and more automatic. Especially the tor setup need more work. +Also, the package include a tor-smtp tool written in C, but its task +should probably be rewritten in some script language to make the deb +architecture independent. It would probably also make the code easier +to review. The tor-smtp tool currently need to listen on a socket for +exim to talk to it and is started using xinetd. It would be better if +no daemon and no socket is needed. I suspect it is possible to get +exim to run a command line tool for delivery instead of talking to a +socket, and hope to figure out how in a future version of this +system. + +Until I wipe my test machine, I can be reached using the +<tt>fbx@dutlqrrmjhtfa3vp.onion</tt> mail address, deliverable over +SMTorP. :) + + + First Jessie based Debian Edu released (alpha0) http://people.skolelinux.org/pere/blog/First_Jessie_based_Debian_Edu_released__alpha0_.html diff --git a/blog/tags/english/index.html b/blog/tags/english/index.html index 339d859917..286899bb47 100644 --- a/blog/tags/english/index.html +++ b/blog/tags/english/index.html @@ -20,6 +20,94 @@

Entries tagged "english".

+ A Debian package for SMTP via Tor (aka SMTorP) using exim4 +

+ 10th November 2014 +

The right to communicate with your friends and family in private, +without anyone snooping, is a right every citicen have in a liberal +democracy. But this right is under serious attack these days.

+ +

+torsocks swaks --server dutlqrrmjhtfa3vp.onion \
+  --to fbx@dutlqrrmjhtfa3vp.onion
+

+ +

This will test the SMTP delivery using tor. Replace the email +address with your own address to test your server. :)

+ +

Until I wipe my test machine, I can be reached using the +fbx@dutlqrrmjhtfa3vp.onion mail address, deliverable over +SMTorP. :)

+ +

+ + + Tags: debian, english, freedombox, personvern, surveillance. + + +

First Jessie based Debian Edu released (alpha0) @@ -21383,6 +21471,8 @@ be the only one fitting our needs. :/

October (6)

November (1)

2013 @@ -21562,7 +21652,7 @@ be the only one fitting our needs. :/

@@ -21574,7 +21664,7 @@ be the only one fitting our needs. :/

@@ -21582,7 +21672,7 @@ be the only one fitting our needs. :/

@@ -21614,7 +21704,7 @@ be the only one fitting our needs. :/

@@ -21644,7 +21734,7 @@ be the only one fitting our needs. :/

diff --git a/blog/tags/fiksgatami/index.html b/blog/tags/fiksgatami/index.html index a677919051..ba0be58773 100644 --- a/blog/tags/fiksgatami/index.html +++ b/blog/tags/fiksgatami/index.html @@ -1283,6 +1283,8 @@ med dem. Dette blir bra.

October (6)

November (1)

2013 @@ -1462,7 +1464,7 @@ med dem. Dette blir bra.

@@ -1474,7 +1476,7 @@ med dem. Dette blir bra.

@@ -1482,7 +1484,7 @@ med dem. Dette blir bra.

@@ -1514,7 +1516,7 @@ med dem. Dette blir bra.

@@ -1544,7 +1546,7 @@ med dem. Dette blir bra.

diff --git a/blog/tags/fildeling/index.html b/blog/tags/fildeling/index.html index 298232f1bd..b3a6fd4fee 100644 --- a/blog/tags/fildeling/index.html +++ b/blog/tags/fildeling/index.html @@ -653,6 +653,8 @@ og fildeling av slike filer er fullt ut lovlig.

October (6)

November (1)

2013 @@ -832,7 +834,7 @@ og fildeling av slike filer er fullt ut lovlig.

@@ -844,7 +846,7 @@ og fildeling av slike filer er fullt ut lovlig.

@@ -852,7 +854,7 @@ og fildeling av slike filer er fullt ut lovlig.

@@ -884,7 +886,7 @@ og fildeling av slike filer er fullt ut lovlig.

@@ -914,7 +916,7 @@ og fildeling av slike filer er fullt ut lovlig.

diff --git a/blog/tags/freeculture/index.html b/blog/tags/freeculture/index.html index b34666582d..65c65de1b8 100644 --- a/blog/tags/freeculture/index.html +++ b/blog/tags/freeculture/index.html @@ -953,6 +953,8 @@ slik at du kan oppdatere direkte.

October (6)

November (1)

2013 @@ -1132,7 +1134,7 @@ slik at du kan oppdatere direkte.

@@ -1144,7 +1146,7 @@ slik at du kan oppdatere direkte.

@@ -1152,7 +1154,7 @@ slik at du kan oppdatere direkte.

@@ -1184,7 +1186,7 @@ slik at du kan oppdatere direkte.

@@ -1214,7 +1216,7 @@ slik at du kan oppdatere direkte.

diff --git a/blog/tags/freedombox/freedombox.rss b/blog/tags/freedombox/freedombox.rss index fec5db2458..3a6f6222da 100644 --- a/blog/tags/freedombox/freedombox.rss +++ b/blog/tags/freedombox/freedombox.rss @@ -6,6 +6,82 @@ http://people.skolelinux.org/pere/blog/ + + A Debian package for SMTP via Tor (aka SMTorP) using exim4 + http://people.skolelinux.org/pere/blog/A_Debian_package_for_SMTP_via_Tor__aka_SMTorP__using_exim4.html + http://people.skolelinux.org/pere/blog/A_Debian_package_for_SMTP_via_Tor__aka_SMTorP__using_exim4.html + Mon, 10 Nov 2014 13:40:00 +0100 + The right to communicate with your friends and family in private, +without anyone snooping, is a right every citicen have in a liberal +democracy. But this right is under serious attack these days. + +A while back it occurred to me that one way to make the dragnet +surveillance conducted by NSA, GCHQ, FRA and others (and confirmed by +the whisleblower Snowden) more expensive for Internet email, +is to deliver all email using SMTP via Tor. Such SMTP option would be +a nice addition to the FreedomBox project if we could send email +between FreedomBox machines without leaking metadata about the emails +to the people peeking on the wire. I +<a href="http://lists.alioth.debian.org/pipermail/freedombox-discuss/2014-October/006493.html">proposed +this on the FreedomBox project mailing list in October</a> and got a +lot of useful feedback and suggestions. It also became obvious to me +that this was not a novel idea, as the same idea was tested and +documented by Johannes Berg as early as 2006, and both +<a href="https://github.com/pagekite/Mailpile/wiki/SMTorP">the +Mailpile</a> and <a href="http://dee.su/cables">the Cables</a> systems +propose a similar method / protocol to pass emails between users. + +To implement such system one need to set up a Tor hidden service +providing the SMTP protocol on port 25, and use email addresses +looking like username@hidden-service-name.onion. With such addresses +the connections to port 25 on hidden-service-name.onion using Tor will +go to the correct SMTP server. To do this, one need to configure the +Tor daemon to provide the hidden service and the mail server to accept +emails for this .onion domain. To learn more about Exim configuration +in Debian and test the design provided by Johannes Berg in his FAQ, I +set out yesterday to create a Debian package for making it trivial to +set up such SMTP over Tor service based on Debian. Getting it to work +were fairly easy, and +<a href="https://github.com/petterreinholdtsen/exim4-smtorp">the +source code for the Debian package</a> is available from github. I +plan to move it into Debian if further testing prove this to be a +useful approach. + +If you want to test this, set up a blank Debian machine without any +mail system installed (or run <tt>apt-get purge exim4-config</tt> to +get rid of exim4). Install tor, clone the git repository mentioned +above, build the deb and install it on the machine. Next, run +<tt>/usr/lib/exim4-smtorp/setup-exim-hidden-service</tt> and follow +the instructions to get the service up and running. Restart tor and +exim when it is done, and test mail delivery using swaks like +this: + +<blockquote><pre> +torsocks swaks --server dutlqrrmjhtfa3vp.onion \ + --to fbx@dutlqrrmjhtfa3vp.onion +</pre></blockquote> + +This will test the SMTP delivery using tor. Replace the email +address with your own address to test your server. :) + +The setup procedure is still to complex, and I hope it can be made +easier and more automatic. Especially the tor setup need more work. +Also, the package include a tor-smtp tool written in C, but its task +should probably be rewritten in some script language to make the deb +architecture independent. It would probably also make the code easier +to review. The tor-smtp tool currently need to listen on a socket for +exim to talk to it and is started using xinetd. It would be better if +no daemon and no socket is needed. I suspect it is possible to get +exim to run a command line tool for delivery instead of talking to a +socket, and hope to figure out how in a future version of this +system. + +Until I wipe my test machine, I can be reached using the +<tt>fbx@dutlqrrmjhtfa3vp.onion</tt> mail address, deliverable over +SMTorP. :) + + + FreedomBox milestone - all packages now in Debian Sid http://people.skolelinux.org/pere/blog/FreedomBox_milestone___all_packages_now_in_Debian_Sid.html diff --git a/blog/tags/freedombox/index.html b/blog/tags/freedombox/index.html index 5e286fc367..ef63066009 100644 --- a/blog/tags/freedombox/index.html +++ b/blog/tags/freedombox/index.html @@ -20,6 +20,94 @@

Entries tagged "freedombox".

+ A Debian package for SMTP via Tor (aka SMTorP) using exim4 +

+ 10th November 2014 +

The right to communicate with your friends and family in private, +without anyone snooping, is a right every citicen have in a liberal +democracy. But this right is under serious attack these days.

+ +

+torsocks swaks --server dutlqrrmjhtfa3vp.onion \
+  --to fbx@dutlqrrmjhtfa3vp.onion
+

+ +

This will test the SMTP delivery using tor. Replace the email +address with your own address to test your server. :)

+ +

Until I wipe my test machine, I can be reached using the +fbx@dutlqrrmjhtfa3vp.onion mail address, deliverable over +SMTorP. :)

+ +

+ + + Tags: debian, english, freedombox, personvern, surveillance. + + +

FreedomBox milestone - all packages now in Debian Sid @@ -866,6 +954,8 @@ default password is 'secret'.

October (6)

November (1)

2013 @@ -1045,7 +1135,7 @@ default password is 'secret'.

@@ -1057,7 +1147,7 @@ default password is 'secret'.

@@ -1065,7 +1155,7 @@ default password is 'secret'.

@@ -1097,7 +1187,7 @@ default password is 'secret'.

@@ -1127,7 +1217,7 @@ default password is 'secret'.

diff --git a/blog/tags/frikanalen/index.html b/blog/tags/frikanalen/index.html index 9535a5ce55..36497eace2 100644 --- a/blog/tags/frikanalen/index.html +++ b/blog/tags/frikanalen/index.html @@ -991,6 +991,8 @@ NUUG lykkes med Ã¥ fÃ¥ ut sine opptak med like stor suksess.

October (6)

November (1)

2013 @@ -1170,7 +1172,7 @@ NUUG lykkes med Ã¥ fÃ¥ ut sine opptak med like stor suksess.

@@ -1182,7 +1184,7 @@ NUUG lykkes med Ã¥ fÃ¥ ut sine opptak med like stor suksess.

@@ -1190,7 +1192,7 @@ NUUG lykkes med Ã¥ fÃ¥ ut sine opptak med like stor suksess.

@@ -1222,7 +1224,7 @@ NUUG lykkes med Ã¥ fÃ¥ ut sine opptak med like stor suksess.

@@ -1252,7 +1254,7 @@ NUUG lykkes med Ã¥ fÃ¥ ut sine opptak med like stor suksess.

diff --git a/blog/tags/intervju/index.html b/blog/tags/intervju/index.html index ca70b9d5d0..6411313089 100644 --- a/blog/tags/intervju/index.html +++ b/blog/tags/intervju/index.html @@ -4948,6 +4948,8 @@ veldig bra utvalg av gratis spill som er av hÃ¸y kvalitet. Veldig lett

October (6)

November (1)

2013 @@ -5127,7 +5129,7 @@ veldig bra utvalg av gratis spill som er av hÃ¸y kvalitet. Veldig lett

@@ -5139,7 +5141,7 @@ veldig bra utvalg av gratis spill som er av hÃ¸y kvalitet. Veldig lett

@@ -5147,7 +5149,7 @@ veldig bra utvalg av gratis spill som er av hÃ¸y kvalitet. Veldig lett

@@ -5179,7 +5181,7 @@ veldig bra utvalg av gratis spill som er av hÃ¸y kvalitet. Veldig lett

@@ -5209,7 +5211,7 @@ veldig bra utvalg av gratis spill som er av hÃ¸y kvalitet. Veldig lett

diff --git a/blog/tags/isenkram/index.html b/blog/tags/isenkram/index.html index 1b3c2db10a..4ac97bc38b 100644 --- a/blog/tags/isenkram/index.html +++ b/blog/tags/isenkram/index.html @@ -1065,6 +1065,8 @@ please send me an email. :)

October (6)

November (1)

2013 @@ -1244,7 +1246,7 @@ please send me an email. :)

@@ -1256,7 +1258,7 @@ please send me an email. :)

@@ -1264,7 +1266,7 @@ please send me an email. :)

@@ -1296,7 +1298,7 @@ please send me an email. :)

@@ -1326,7 +1328,7 @@ please send me an email. :)

diff --git a/blog/tags/kart/index.html b/blog/tags/kart/index.html index b2acb05f5f..9ebd460a99 100644 --- a/blog/tags/kart/index.html +++ b/blog/tags/kart/index.html @@ -1422,6 +1422,8 @@ det viser at behovet for fribruks-sjÃ¸kart er til stedet.

October (6)

November (1)

2013 @@ -1601,7 +1603,7 @@ det viser at behovet for fribruks-sjÃ¸kart er til stedet.

@@ -1613,7 +1615,7 @@ det viser at behovet for fribruks-sjÃ¸kart er til stedet.

@@ -1621,7 +1623,7 @@ det viser at behovet for fribruks-sjÃ¸kart er til stedet.

@@ -1653,7 +1655,7 @@ det viser at behovet for fribruks-sjÃ¸kart er til stedet.

@@ -1683,7 +1685,7 @@ det viser at behovet for fribruks-sjÃ¸kart er til stedet.

diff --git a/blog/tags/ldap/index.html b/blog/tags/ldap/index.html index 181869e713..2554db8814 100644 --- a/blog/tags/ldap/index.html +++ b/blog/tags/ldap/index.html @@ -1070,6 +1070,8 @@ new IETF work group?

October (6)

November (1)

2013 @@ -1249,7 +1251,7 @@ new IETF work group?

@@ -1261,7 +1263,7 @@ new IETF work group?

@@ -1269,7 +1271,7 @@ new IETF work group?

@@ -1301,7 +1303,7 @@ new IETF work group?

@@ -1331,7 +1333,7 @@ new IETF work group?

diff --git a/blog/tags/lenker/index.html b/blog/tags/lenker/index.html index c4be1c681d..60a84921ca 100644 --- a/blog/tags/lenker/index.html +++ b/blog/tags/lenker/index.html @@ -665,6 +665,8 @@ Word 2007 hÃ¥ndterer ODF dÃ¥rlig

October (6)

November (1)

2013 @@ -844,7 +846,7 @@ Word 2007 hÃ¥ndterer ODF dÃ¥rlig

@@ -856,7 +858,7 @@ Word 2007 hÃ¥ndterer ODF dÃ¥rlig

@@ -864,7 +866,7 @@ Word 2007 hÃ¥ndterer ODF dÃ¥rlig

@@ -896,7 +898,7 @@ Word 2007 hÃ¥ndterer ODF dÃ¥rlig

@@ -926,7 +928,7 @@ Word 2007 hÃ¥ndterer ODF dÃ¥rlig

diff --git a/blog/tags/lsdvd/index.html b/blog/tags/lsdvd/index.html index b4878d1c7c..3317d27c40 100644 --- a/blog/tags/lsdvd/index.html +++ b/blog/tags/lsdvd/index.html @@ -151,6 +151,8 @@ list. :)

October (6)

November (1)

2013 @@ -330,7 +332,7 @@ list. :)

@@ -342,7 +344,7 @@ list. :)

@@ -350,7 +352,7 @@ list. :)

@@ -382,7 +384,7 @@ list. :)

@@ -412,7 +414,7 @@ list. :)

diff --git a/blog/tags/ltsp/index.html b/blog/tags/ltsp/index.html index c81bf5cd91..31a612eac2 100644 --- a/blog/tags/ltsp/index.html +++ b/blog/tags/ltsp/index.html @@ -85,6 +85,8 @@ of these cards.

October (6)

November (1)

2013 @@ -264,7 +266,7 @@ of these cards.

@@ -276,7 +278,7 @@ of these cards.

@@ -284,7 +286,7 @@ of these cards.

@@ -316,7 +318,7 @@ of these cards.

@@ -346,7 +348,7 @@ of these cards.

diff --git a/blog/tags/mesh network/index.html b/blog/tags/mesh network/index.html index aaf0da7c84..97ec689ce6 100644 --- a/blog/tags/mesh network/index.html +++ b/blog/tags/mesh network/index.html @@ -735,6 +735,8 @@ mesh system.

October (6)

November (1)

2013 @@ -914,7 +916,7 @@ mesh system.

@@ -926,7 +928,7 @@ mesh system.

@@ -934,7 +936,7 @@ mesh system.

@@ -966,7 +968,7 @@ mesh system.

@@ -996,7 +998,7 @@ mesh system.

diff --git a/blog/tags/multimedia/index.html b/blog/tags/multimedia/index.html index 4a8331c20a..14d0215184 100644 --- a/blog/tags/multimedia/index.html +++ b/blog/tags/multimedia/index.html @@ -2311,6 +2311,8 @@ be the only one fitting our needs. :/

October (6)

November (1)

2013 @@ -2490,7 +2492,7 @@ be the only one fitting our needs. :/

@@ -2502,7 +2504,7 @@ be the only one fitting our needs. :/

@@ -2510,7 +2512,7 @@ be the only one fitting our needs. :/

@@ -2542,7 +2544,7 @@ be the only one fitting our needs. :/

@@ -2572,7 +2574,7 @@ be the only one fitting our needs. :/

diff --git a/blog/tags/norsk/index.html b/blog/tags/norsk/index.html index c2a20fc5fc..ca5c56dee9 100644 --- a/blog/tags/norsk/index.html +++ b/blog/tags/norsk/index.html @@ -19053,6 +19053,8 @@ forsÃ¸k.

October (6)

November (1)

2013 @@ -19232,7 +19234,7 @@ forsÃ¸k.

@@ -19244,7 +19246,7 @@ forsÃ¸k.

@@ -19252,7 +19254,7 @@ forsÃ¸k.

@@ -19284,7 +19286,7 @@ forsÃ¸k.

@@ -19314,7 +19316,7 @@ forsÃ¸k.

diff --git a/blog/tags/nuug/index.html b/blog/tags/nuug/index.html index ac17c270dc..7bdff12f50 100644 --- a/blog/tags/nuug/index.html +++ b/blog/tags/nuug/index.html @@ -10762,6 +10762,8 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

October (6)

November (1)

2013 @@ -10941,7 +10943,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -10953,7 +10955,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -10961,7 +10963,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -10993,7 +10995,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -11023,7 +11025,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

diff --git a/blog/tags/offentlig innsyn/index.html b/blog/tags/offentlig innsyn/index.html index 2accaf2fb1..63cc8e02d8 100644 --- a/blog/tags/offentlig innsyn/index.html +++ b/blog/tags/offentlig innsyn/index.html @@ -1109,6 +1109,8 @@ til Ã¥ levere hver uke. Har ikke undersÃ¸kt noen av de andre.

October (6)

November (1)

2013 @@ -1288,7 +1290,7 @@ til Ã¥ levere hver uke. Har ikke undersÃ¸kt noen av de andre.

@@ -1300,7 +1302,7 @@ til Ã¥ levere hver uke. Har ikke undersÃ¸kt noen av de andre.

@@ -1308,7 +1310,7 @@ til Ã¥ levere hver uke. Har ikke undersÃ¸kt noen av de andre.

@@ -1340,7 +1342,7 @@ til Ã¥ levere hver uke. Har ikke undersÃ¸kt noen av de andre.

@@ -1370,7 +1372,7 @@ til Ã¥ levere hver uke. Har ikke undersÃ¸kt noen av de andre.

diff --git a/blog/tags/open311/index.html b/blog/tags/open311/index.html index d3f95e3d13..ba25f146a4 100644 --- a/blog/tags/open311/index.html +++ b/blog/tags/open311/index.html @@ -180,6 +180,8 @@ work like the free software project communities I am used to.

October (6)

November (1)

2013 @@ -359,7 +361,7 @@ work like the free software project communities I am used to.

@@ -371,7 +373,7 @@ work like the free software project communities I am used to.

@@ -379,7 +381,7 @@ work like the free software project communities I am used to.

@@ -411,7 +413,7 @@ work like the free software project communities I am used to.

@@ -441,7 +443,7 @@ work like the free software project communities I am used to.

diff --git a/blog/tags/opphavsrett/index.html b/blog/tags/opphavsrett/index.html index 90050a19d2..c63bdd6ed8 100644 --- a/blog/tags/opphavsrett/index.html +++ b/blog/tags/opphavsrett/index.html @@ -3777,6 +3777,8 @@ database.

October (6)

November (1)

2013 @@ -3956,7 +3958,7 @@ database.

@@ -3968,7 +3970,7 @@ database.

@@ -3976,7 +3978,7 @@ database.

@@ -4008,7 +4010,7 @@ database.

@@ -4038,7 +4040,7 @@ database.

diff --git a/blog/tags/personvern/index.html b/blog/tags/personvern/index.html index 0413170ff2..b38343131b 100644 --- a/blog/tags/personvern/index.html +++ b/blog/tags/personvern/index.html @@ -20,6 +20,94 @@

Entries tagged "personvern".

+ A Debian package for SMTP via Tor (aka SMTorP) using exim4 +

+ 10th November 2014 +

The right to communicate with your friends and family in private, +without anyone snooping, is a right every citicen have in a liberal +democracy. But this right is under serious attack these days.

+ +

+torsocks swaks --server dutlqrrmjhtfa3vp.onion \
+  --to fbx@dutlqrrmjhtfa3vp.onion
+

+ +

This will test the SMTP delivery using tor. Replace the email +address with your own address to test your server. :)

+ +

Until I wipe my test machine, I can be reached using the +fbx@dutlqrrmjhtfa3vp.onion mail address, deliverable over +SMTorP. :)

+ +

+ + + Tags: debian, english, freedombox, personvern, surveillance. + + +

Hva henger under skibrua over E16 pÃ¥ SollihÃ¸gda? @@ -6716,6 +6804,8 @@ kontanter for noen dager siden.

October (6)

November (1)

2013 @@ -6895,7 +6985,7 @@ kontanter for noen dager siden.

@@ -6907,7 +6997,7 @@ kontanter for noen dager siden.

@@ -6915,7 +7005,7 @@ kontanter for noen dager siden.

@@ -6947,7 +7037,7 @@ kontanter for noen dager siden.

@@ -6977,7 +7067,7 @@ kontanter for noen dager siden.

diff --git a/blog/tags/personvern/personvern.rss b/blog/tags/personvern/personvern.rss index 85779da38d..e7e2a5f90f 100644 --- a/blog/tags/personvern/personvern.rss +++ b/blog/tags/personvern/personvern.rss @@ -6,6 +6,82 @@ http://people.skolelinux.org/pere/blog/ + + A Debian package for SMTP via Tor (aka SMTorP) using exim4 + http://people.skolelinux.org/pere/blog/A_Debian_package_for_SMTP_via_Tor__aka_SMTorP__using_exim4.html + http://people.skolelinux.org/pere/blog/A_Debian_package_for_SMTP_via_Tor__aka_SMTorP__using_exim4.html + Mon, 10 Nov 2014 13:40:00 +0100 + The right to communicate with your friends and family in private, +without anyone snooping, is a right every citicen have in a liberal +democracy. But this right is under serious attack these days. + +A while back it occurred to me that one way to make the dragnet +surveillance conducted by NSA, GCHQ, FRA and others (and confirmed by +the whisleblower Snowden) more expensive for Internet email, +is to deliver all email using SMTP via Tor. Such SMTP option would be +a nice addition to the FreedomBox project if we could send email +between FreedomBox machines without leaking metadata about the emails +to the people peeking on the wire. I +<a href="http://lists.alioth.debian.org/pipermail/freedombox-discuss/2014-October/006493.html">proposed +this on the FreedomBox project mailing list in October</a> and got a +lot of useful feedback and suggestions. It also became obvious to me +that this was not a novel idea, as the same idea was tested and +documented by Johannes Berg as early as 2006, and both +<a href="https://github.com/pagekite/Mailpile/wiki/SMTorP">the +Mailpile</a> and <a href="http://dee.su/cables">the Cables</a> systems +propose a similar method / protocol to pass emails between users. + +To implement such system one need to set up a Tor hidden service +providing the SMTP protocol on port 25, and use email addresses +looking like username@hidden-service-name.onion. With such addresses +the connections to port 25 on hidden-service-name.onion using Tor will +go to the correct SMTP server. To do this, one need to configure the +Tor daemon to provide the hidden service and the mail server to accept +emails for this .onion domain. To learn more about Exim configuration +in Debian and test the design provided by Johannes Berg in his FAQ, I +set out yesterday to create a Debian package for making it trivial to +set up such SMTP over Tor service based on Debian. Getting it to work +were fairly easy, and +<a href="https://github.com/petterreinholdtsen/exim4-smtorp">the +source code for the Debian package</a> is available from github. I +plan to move it into Debian if further testing prove this to be a +useful approach. + +If you want to test this, set up a blank Debian machine without any +mail system installed (or run <tt>apt-get purge exim4-config</tt> to +get rid of exim4). Install tor, clone the git repository mentioned +above, build the deb and install it on the machine. Next, run +<tt>/usr/lib/exim4-smtorp/setup-exim-hidden-service</tt> and follow +the instructions to get the service up and running. Restart tor and +exim when it is done, and test mail delivery using swaks like +this: + +<blockquote><pre> +torsocks swaks --server dutlqrrmjhtfa3vp.onion \ + --to fbx@dutlqrrmjhtfa3vp.onion +</pre></blockquote> + +This will test the SMTP delivery using tor. Replace the email +address with your own address to test your server. :) + +The setup procedure is still to complex, and I hope it can be made +easier and more automatic. Especially the tor setup need more work. +Also, the package include a tor-smtp tool written in C, but its task +should probably be rewritten in some script language to make the deb +architecture independent. It would probably also make the code easier +to review. The tor-smtp tool currently need to listen on a socket for +exim to talk to it and is started using xinetd. It would be better if +no daemon and no socket is needed. I suspect it is possible to get +exim to run a command line tool for delivery instead of talking to a +socket, and hope to figure out how in a future version of this +system. + +Until I wipe my test machine, I can be reached using the +<tt>fbx@dutlqrrmjhtfa3vp.onion</tt> mail address, deliverable over +SMTorP. :) + + + Hva henger under skibrua over E16 pÃ¥ SollihÃ¸gda? http://people.skolelinux.org/pere/blog/Hva_henger_under_skibrua_over_E16_p__Sollih_gda_.html diff --git a/blog/tags/raid/index.html b/blog/tags/raid/index.html index f1fb448741..0c2a851673 100644 --- a/blog/tags/raid/index.html +++ b/blog/tags/raid/index.html @@ -121,6 +121,8 @@ disk(s) is failing when the RAID is running short on disks.

October (6)

November (1)

2013 @@ -300,7 +302,7 @@ disk(s) is failing when the RAID is running short on disks.

@@ -312,7 +314,7 @@ disk(s) is failing when the RAID is running short on disks.

@@ -320,7 +322,7 @@ disk(s) is failing when the RAID is running short on disks.

@@ -352,7 +354,7 @@ disk(s) is failing when the RAID is running short on disks.

@@ -382,7 +384,7 @@ disk(s) is failing when the RAID is running short on disks.

diff --git a/blog/tags/reactos/index.html b/blog/tags/reactos/index.html index d37c6d78dc..5de7701ca7 100644 --- a/blog/tags/reactos/index.html +++ b/blog/tags/reactos/index.html @@ -120,6 +120,8 @@ image.

October (6)

November (1)

2013 @@ -299,7 +301,7 @@ image.

@@ -311,7 +313,7 @@ image.

@@ -319,7 +321,7 @@ image.

@@ -351,7 +353,7 @@ image.

@@ -381,7 +383,7 @@ image.

diff --git a/blog/tags/reprap/index.html b/blog/tags/reprap/index.html index b5422d7620..a90fb79933 100644 --- a/blog/tags/reprap/index.html +++ b/blog/tags/reprap/index.html @@ -547,6 +547,8 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

October (6)

November (1)

2013 @@ -726,7 +728,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -738,7 +740,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -746,7 +748,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -778,7 +780,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -808,7 +810,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

diff --git a/blog/tags/rfid/index.html b/blog/tags/rfid/index.html index 3fbb1fa4d8..6c333c4b65 100644 --- a/blog/tags/rfid/index.html +++ b/blog/tags/rfid/index.html @@ -440,6 +440,8 @@ mer om de nye biometriske passene.

October (6)

November (1)

2013 @@ -619,7 +621,7 @@ mer om de nye biometriske passene.

@@ -631,7 +633,7 @@ mer om de nye biometriske passene.

@@ -639,7 +641,7 @@ mer om de nye biometriske passene.

@@ -671,7 +673,7 @@ mer om de nye biometriske passene.

@@ -701,7 +703,7 @@ mer om de nye biometriske passene.

diff --git a/blog/tags/robot/index.html b/blog/tags/robot/index.html index 9a5d67ae2d..85b8b7ddc0 100644 --- a/blog/tags/robot/index.html +++ b/blog/tags/robot/index.html @@ -485,6 +485,8 @@ firmwaren. :)

October (6)

November (1)

2013 @@ -664,7 +666,7 @@ firmwaren. :)

@@ -676,7 +678,7 @@ firmwaren. :)

@@ -684,7 +686,7 @@ firmwaren. :)

@@ -716,7 +718,7 @@ firmwaren. :)

@@ -746,7 +748,7 @@ firmwaren. :)

diff --git a/blog/tags/rss/index.html b/blog/tags/rss/index.html index 597bc70ac3..00de047cc7 100644 --- a/blog/tags/rss/index.html +++ b/blog/tags/rss/index.html @@ -74,6 +74,8 @@ forsÃ¸k.

October (6)

November (1)

2013 @@ -253,7 +255,7 @@ forsÃ¸k.

@@ -265,7 +267,7 @@ forsÃ¸k.

@@ -273,7 +275,7 @@ forsÃ¸k.

@@ -305,7 +307,7 @@ forsÃ¸k.

@@ -335,7 +337,7 @@ forsÃ¸k.

diff --git a/blog/tags/ruter/index.html b/blog/tags/ruter/index.html index 4a1e25cf24..a3b0a41dc8 100644 --- a/blog/tags/ruter/index.html +++ b/blog/tags/ruter/index.html @@ -228,6 +228,8 @@ OsloomrÃ¥det.

October (6)

November (1)

2013 @@ -407,7 +409,7 @@ OsloomrÃ¥det.

@@ -419,7 +421,7 @@ OsloomrÃ¥det.

@@ -427,7 +429,7 @@ OsloomrÃ¥det.

@@ -459,7 +461,7 @@ OsloomrÃ¥det.

@@ -489,7 +491,7 @@ OsloomrÃ¥det.

diff --git a/blog/tags/scraperwiki/index.html b/blog/tags/scraperwiki/index.html index 9c3b156367..fecb27d668 100644 --- a/blog/tags/scraperwiki/index.html +++ b/blog/tags/scraperwiki/index.html @@ -163,6 +163,8 @@ av Ã¥ dele informasjon med andre uten bruksbegresninger.

October (6)

November (1)

2013 @@ -342,7 +344,7 @@ av Ã¥ dele informasjon med andre uten bruksbegresninger.

@@ -354,7 +356,7 @@ av Ã¥ dele informasjon med andre uten bruksbegresninger.

@@ -362,7 +364,7 @@ av Ã¥ dele informasjon med andre uten bruksbegresninger.

@@ -394,7 +396,7 @@ av Ã¥ dele informasjon med andre uten bruksbegresninger.

@@ -424,7 +426,7 @@ av Ã¥ dele informasjon med andre uten bruksbegresninger.

diff --git a/blog/tags/sikkerhet/index.html b/blog/tags/sikkerhet/index.html index ecb3f6f4d6..d29809dff8 100644 --- a/blog/tags/sikkerhet/index.html +++ b/blog/tags/sikkerhet/index.html @@ -3144,6 +3144,8 @@ betydelige.

October (6)

November (1)

2013 @@ -3323,7 +3325,7 @@ betydelige.

@@ -3335,7 +3337,7 @@ betydelige.

@@ -3343,7 +3345,7 @@ betydelige.

@@ -3375,7 +3377,7 @@ betydelige.

@@ -3405,7 +3407,7 @@ betydelige.

diff --git a/blog/tags/sitesummary/index.html b/blog/tags/sitesummary/index.html index 52f108a380..4af76a56f7 100644 --- a/blog/tags/sitesummary/index.html +++ b/blog/tags/sitesummary/index.html @@ -279,6 +279,8 @@ everything is taken care of.

October (6)

November (1)

2013 @@ -458,7 +460,7 @@ everything is taken care of.

@@ -470,7 +472,7 @@ everything is taken care of.

@@ -478,7 +480,7 @@ everything is taken care of.

@@ -510,7 +512,7 @@ everything is taken care of.

@@ -540,7 +542,7 @@ everything is taken care of.

diff --git a/blog/tags/skepsis/index.html b/blog/tags/skepsis/index.html index 6adbd508b5..a345f4a905 100644 --- a/blog/tags/skepsis/index.html +++ b/blog/tags/skepsis/index.html @@ -412,6 +412,8 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

October (6)

November (1)

2013 @@ -591,7 +593,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

@@ -603,7 +605,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

@@ -611,7 +613,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

@@ -643,7 +645,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

@@ -673,7 +675,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

diff --git a/blog/tags/standard/index.html b/blog/tags/standard/index.html index fa16f8a4b7..382767956b 100644 --- a/blog/tags/standard/index.html +++ b/blog/tags/standard/index.html @@ -3777,6 +3777,8 @@ Kjenner kun til ufullstendige lÃ¸sninger for slikt.

October (6)

November (1)

2013 @@ -3956,7 +3958,7 @@ Kjenner kun til ufullstendige lÃ¸sninger for slikt.

@@ -3968,7 +3970,7 @@ Kjenner kun til ufullstendige lÃ¸sninger for slikt.

@@ -3976,7 +3978,7 @@ Kjenner kun til ufullstendige lÃ¸sninger for slikt.

@@ -4008,7 +4010,7 @@ Kjenner kun til ufullstendige lÃ¸sninger for slikt.

@@ -4038,7 +4040,7 @@ Kjenner kun til ufullstendige lÃ¸sninger for slikt.

diff --git a/blog/tags/stavekontroll/index.html b/blog/tags/stavekontroll/index.html index 06e940fce8..6ee2a080cb 100644 --- a/blog/tags/stavekontroll/index.html +++ b/blog/tags/stavekontroll/index.html @@ -258,6 +258,8 @@ stavekontrollen.

October (6)

November (1)

2013 @@ -437,7 +439,7 @@ stavekontrollen.

@@ -449,7 +451,7 @@ stavekontrollen.

@@ -457,7 +459,7 @@ stavekontrollen.

@@ -489,7 +491,7 @@ stavekontrollen.

@@ -519,7 +521,7 @@ stavekontrollen.

diff --git a/blog/tags/stortinget/index.html b/blog/tags/stortinget/index.html index 375da816bc..7876cd6b4c 100644 --- a/blog/tags/stortinget/index.html +++ b/blog/tags/stortinget/index.html @@ -855,6 +855,8 @@ at vi i NUUG har fÃ¥tt operativ en norsk utgave av

October (6)

November (1)

2013 @@ -1034,7 +1036,7 @@ at vi i NUUG har fÃ¥tt operativ en norsk utgave av

@@ -1046,7 +1048,7 @@ at vi i NUUG har fÃ¥tt operativ en norsk utgave av

@@ -1054,7 +1056,7 @@ at vi i NUUG har fÃ¥tt operativ en norsk utgave av

@@ -1086,7 +1088,7 @@ at vi i NUUG har fÃ¥tt operativ en norsk utgave av

@@ -1116,7 +1118,7 @@ at vi i NUUG har fÃ¥tt operativ en norsk utgave av

diff --git a/blog/tags/surveillance/index.html b/blog/tags/surveillance/index.html index db07a523c9..552e7bf69a 100644 --- a/blog/tags/surveillance/index.html +++ b/blog/tags/surveillance/index.html @@ -20,6 +20,94 @@

Entries tagged "surveillance".

+ A Debian package for SMTP via Tor (aka SMTorP) using exim4 +

+ 10th November 2014 +

The right to communicate with your friends and family in private, +without anyone snooping, is a right every citicen have in a liberal +democracy. But this right is under serious attack these days.

+ +

+torsocks swaks --server dutlqrrmjhtfa3vp.onion \
+  --to fbx@dutlqrrmjhtfa3vp.onion
+

+ +

This will test the SMTP delivery using tor. Replace the email +address with your own address to test your server. :)

+ +

Until I wipe my test machine, I can be reached using the +fbx@dutlqrrmjhtfa3vp.onion mail address, deliverable over +SMTorP. :)

+ +

+ + + Tags: debian, english, freedombox, personvern, surveillance. + + +

Hva henger under skibrua over E16 pÃ¥ SollihÃ¸gda? @@ -2082,6 +2170,8 @@ automatisk over i spesialkartet.

October (6)

November (1)

2013 @@ -2261,7 +2351,7 @@ automatisk over i spesialkartet.

@@ -2273,7 +2363,7 @@ automatisk over i spesialkartet.

@@ -2281,7 +2371,7 @@ automatisk over i spesialkartet.

@@ -2313,7 +2403,7 @@ automatisk over i spesialkartet.

@@ -2343,7 +2433,7 @@ automatisk over i spesialkartet.

diff --git a/blog/tags/surveillance/surveillance.rss b/blog/tags/surveillance/surveillance.rss index 837cbdb2b0..c0b1b6cf6d 100644 --- a/blog/tags/surveillance/surveillance.rss +++ b/blog/tags/surveillance/surveillance.rss @@ -6,6 +6,82 @@ http://people.skolelinux.org/pere/blog/ + + A Debian package for SMTP via Tor (aka SMTorP) using exim4 + http://people.skolelinux.org/pere/blog/A_Debian_package_for_SMTP_via_Tor__aka_SMTorP__using_exim4.html + http://people.skolelinux.org/pere/blog/A_Debian_package_for_SMTP_via_Tor__aka_SMTorP__using_exim4.html + Mon, 10 Nov 2014 13:40:00 +0100 + The right to communicate with your friends and family in private, +without anyone snooping, is a right every citicen have in a liberal +democracy. But this right is under serious attack these days. + +A while back it occurred to me that one way to make the dragnet +surveillance conducted by NSA, GCHQ, FRA and others (and confirmed by +the whisleblower Snowden) more expensive for Internet email, +is to deliver all email using SMTP via Tor. Such SMTP option would be +a nice addition to the FreedomBox project if we could send email +between FreedomBox machines without leaking metadata about the emails +to the people peeking on the wire. I +<a href="http://lists.alioth.debian.org/pipermail/freedombox-discuss/2014-October/006493.html">proposed +this on the FreedomBox project mailing list in October</a> and got a +lot of useful feedback and suggestions. It also became obvious to me +that this was not a novel idea, as the same idea was tested and +documented by Johannes Berg as early as 2006, and both +<a href="https://github.com/pagekite/Mailpile/wiki/SMTorP">the +Mailpile</a> and <a href="http://dee.su/cables">the Cables</a> systems +propose a similar method / protocol to pass emails between users. + +To implement such system one need to set up a Tor hidden service +providing the SMTP protocol on port 25, and use email addresses +looking like username@hidden-service-name.onion. With such addresses +the connections to port 25 on hidden-service-name.onion using Tor will +go to the correct SMTP server. To do this, one need to configure the +Tor daemon to provide the hidden service and the mail server to accept +emails for this .onion domain. To learn more about Exim configuration +in Debian and test the design provided by Johannes Berg in his FAQ, I +set out yesterday to create a Debian package for making it trivial to +set up such SMTP over Tor service based on Debian. Getting it to work +were fairly easy, and +<a href="https://github.com/petterreinholdtsen/exim4-smtorp">the +source code for the Debian package</a> is available from github. I +plan to move it into Debian if further testing prove this to be a +useful approach. + +If you want to test this, set up a blank Debian machine without any +mail system installed (or run <tt>apt-get purge exim4-config</tt> to +get rid of exim4). Install tor, clone the git repository mentioned +above, build the deb and install it on the machine. Next, run +<tt>/usr/lib/exim4-smtorp/setup-exim-hidden-service</tt> and follow +the instructions to get the service up and running. Restart tor and +exim when it is done, and test mail delivery using swaks like +this: + +<blockquote><pre> +torsocks swaks --server dutlqrrmjhtfa3vp.onion \ + --to fbx@dutlqrrmjhtfa3vp.onion +</pre></blockquote> + +This will test the SMTP delivery using tor. Replace the email +address with your own address to test your server. :) + +The setup procedure is still to complex, and I hope it can be made +easier and more automatic. Especially the tor setup need more work. +Also, the package include a tor-smtp tool written in C, but its task +should probably be rewritten in some script language to make the deb +architecture independent. It would probably also make the code easier +to review. The tor-smtp tool currently need to listen on a socket for +exim to talk to it and is started using xinetd. It would be better if +no daemon and no socket is needed. I suspect it is possible to get +exim to run a command line tool for delivery instead of talking to a +socket, and hope to figure out how in a future version of this +system. + +Until I wipe my test machine, I can be reached using the +<tt>fbx@dutlqrrmjhtfa3vp.onion</tt> mail address, deliverable over +SMTorP. :) + + + Hva henger under skibrua over E16 pÃ¥ SollihÃ¸gda? http://people.skolelinux.org/pere/blog/Hva_henger_under_skibrua_over_E16_p__Sollih_gda_.html diff --git a/blog/tags/sysadmin/index.html b/blog/tags/sysadmin/index.html index 5cc4bc0d51..b7a09a3a74 100644 --- a/blog/tags/sysadmin/index.html +++ b/blog/tags/sysadmin/index.html @@ -232,6 +232,8 @@ and DHCP updates I wanted to do.

October (6)

November (1)

2013 @@ -411,7 +413,7 @@ and DHCP updates I wanted to do.

@@ -423,7 +425,7 @@ and DHCP updates I wanted to do.

@@ -431,7 +433,7 @@ and DHCP updates I wanted to do.

@@ -463,7 +465,7 @@ and DHCP updates I wanted to do.

@@ -493,7 +495,7 @@ and DHCP updates I wanted to do.

diff --git a/blog/tags/valg/index.html b/blog/tags/valg/index.html index 024c7cf4b8..e0289689d1 100644 --- a/blog/tags/valg/index.html +++ b/blog/tags/valg/index.html @@ -961,6 +961,8 @@ inneholdt i Iran hvis de ikke hadde hemmelige valg?

October (6)

November (1)

2013 @@ -1140,7 +1142,7 @@ inneholdt i Iran hvis de ikke hadde hemmelige valg?

@@ -1152,7 +1154,7 @@ inneholdt i Iran hvis de ikke hadde hemmelige valg?

@@ -1160,7 +1162,7 @@ inneholdt i Iran hvis de ikke hadde hemmelige valg?

@@ -1192,7 +1194,7 @@ inneholdt i Iran hvis de ikke hadde hemmelige valg?

@@ -1222,7 +1224,7 @@ inneholdt i Iran hvis de ikke hadde hemmelige valg?

diff --git a/blog/tags/video/index.html b/blog/tags/video/index.html index 7eebf0cc97..9464b280d2 100644 --- a/blog/tags/video/index.html +++ b/blog/tags/video/index.html @@ -3473,6 +3473,8 @@ larger stick as well.

October (6)

November (1)

2013 @@ -3652,7 +3654,7 @@ larger stick as well.

@@ -3664,7 +3666,7 @@ larger stick as well.

@@ -3672,7 +3674,7 @@ larger stick as well.

@@ -3704,7 +3706,7 @@ larger stick as well.

@@ -3734,7 +3736,7 @@ larger stick as well.

diff --git a/blog/tags/vitenskap/index.html b/blog/tags/vitenskap/index.html index a6f37a7491..2750fb43d5 100644 --- a/blog/tags/vitenskap/index.html +++ b/blog/tags/vitenskap/index.html @@ -415,6 +415,8 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

October (6)

November (1)

2013 @@ -594,7 +596,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

@@ -606,7 +608,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

@@ -614,7 +616,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

@@ -646,7 +648,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

@@ -676,7 +678,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

diff --git a/blog/tags/web/index.html b/blog/tags/web/index.html index 6c6c8606fc..b0f03d6911 100644 --- a/blog/tags/web/index.html +++ b/blog/tags/web/index.html @@ -2633,6 +2633,8 @@ be the only one fitting our needs. :/

October (6)

November (1)

2013 @@ -2812,7 +2814,7 @@ be the only one fitting our needs. :/

@@ -2824,7 +2826,7 @@ be the only one fitting our needs. :/