Skip to content

Instantly share code, notes, and snippets.

@isislovecruft
Last active August 29, 2015 14:06
Show Gist options
  • Save isislovecruft/3e74d75f6a7917f2b3c1 to your computer and use it in GitHub Desktop.
Save isislovecruft/3e74d75f6a7917f2b3c1 to your computer and use it in GitHub Desktop.
Mbox profile for testing that Tahoe only makes connections to the local Tor instance's SocksPort
# tahoe-client-tor-only.mbox
# --------------------------
#
# An Mbox [0] profile for assuring that a Tahoe client only makes connections
# to the local Tor instance's SocksPort. (In this example, `59050`.)
#
# NOTE: You'll need a patched copy of Mbox, see this tor-dev mailing list
# post, [1] and this patch. [2]
#
# Example usage:
# ~/code/tahoe-lafs $ mbox -p tahoe-client-tor-only.mbox ./bin/tahoe start
#
# [0]: http://pdos.csail.mit.edu/mbox/
# [1]: https://lists.torproject.org/pipermail/tor-dev/2014-May/006911.html
# [2]: https://github.com/tsgates/mbox/commit/6dd0e49202795564e627e9eeba664fc685b14bb7
[fs]
# Don't sandbox files in ~/.tahoe directory
direct: ~/.tahoe
[network]
# Block any network calls unless they are to the Tor SocksPort:
block: 0.0.0.0
allow: 127.0.0.1:59050
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment