Raspberry Pi3で Tor WiFi AP（トーア、匿名通信システム）をインストールする

● Option 1:
sudo apt-get install tor

● Option 2:
sudo nano /etc/apt/sources.list
# Add the following entry
deb http://deb.torproject.org/torproject.org jessie main
deb-src http://deb.torproject.org/torproject.org jessie main

# Add the gpg key
gpg --keyserver keys.gnupg.net --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89
gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -

# apt-get
sudo apt-get -y update
sudo apt-get -y install build-essential fakeroot devscripts
sudo apt-get -y build-dep tor deb.torproject.org-keyring

# Build Tor
mkdir ~/debian-packages; cd ~/debian-packages
# tor-0.2.9.9
apt-get source tor
# ~/debian-packages/tor-0.2.9.9
cd tor-*
debuild -rfakeroot -uc -us
cd ..

# Install the new package Tor
sudo dpkg -i tor_*.deb

ping 8.8.8.8
ping 208.67.222.222
ifconfig -a
netstat -r

sudo apt-get update
# hostapdと isc-dhcp-serverをインストール
sudo apt-get install -y hostapd isc-dhcp-server

# Configuring iptables-persistent
sudo apt-get install -y iptables-persistent
# Save current IPv4 rules? - Yes (/etc/iptables/rules.v4)
# Save current IPv6 rules? - Yes (/etc/iptables/rules.v6)

sudo nano /etc/dhcp/dhcpd.conf

# Comment
#option domain-name "example.org";
#option domain-name-servers ns1.example.org, ns2.example.org;

# Un-Comment
authoritative;

# Add
subnet 192.168.42.0 netmask 255.255.255.0 {
	range 192.168.42.10 192.168.42.50;
	option broadcast-address 192.168.42.255;
	option routers 192.168.42.1;
	default-lease-time 600;
	max-lease-time 7200;
	option domain-name "local";
	option domain-name-servers 8.8.8.8, 8.8.4.4;
}

# Add お好みでこっち DNS設定 OpenDNS
subnet 192.168.42.0 netmask 255.255.255.0 {
	range 192.168.42.10 192.168.42.50;
	option broadcast-address 192.168.42.255;
	option routers 192.168.42.1;
	default-lease-time 600;
	max-lease-time 7200;
	option domain-name "local";
	option domain-name-servers 208.67.222.222, 208.67.220.220;
}

sudo nano /etc/default/isc-dhcp-server

INTERFACES="wlan0"

sudo ifdown wlan0

sudo nano /etc/network/interfaces

#auto wlan0
#iface wlan0 inet manual
#    wpa-conf /etc/wpa_supplicant/wpa_supplicant.conf

iface wlan0 inet static
  address 192.168.42.1
  netmask 255.255.255.0

sudo ifconfig wlan0 192.168.42.1

sudo nano /etc/hostapd/hostapd.conf

interface=wlan0
driver=nl80211
ssid=Pi_AP
country_code=US
hw_mode=g
channel=6
macaddr_acl=0
auth_algs=1
ignore_broadcast_ssid=0
wpa=2
wpa_passphrase=Raspberry
wpa_key_mgmt=WPA-PSK
wpa_pairwise=CCMP
wpa_group_rekey=86400
ieee80211n=1
wme_enabled=1

sudo nano /etc/default/hostapd

DAEMON_CONF="/etc/hostapd/hostapd.conf"

sudo nano /etc/sysctl.conf

net.ipv4.ip_forward=1

sudo sh -c "echo 1 > /proc/sys/net/ipv4/ip_forward"
sudo reboot

　この状態で下記を実行すれば単純な WiFiアクセスポイントとして使用できます。

# isc-dhcp-server + iptables WiFi Access point
sudo iptables -F
sudo iptables -t nat -F

sudo sysctl -w net.ipv4.ip_forward=1
sudo iptables -t nat -A POSTROUTING -s 192.168.42.0/24 -o eth0 -j MASQUERADE

sudo iptables -t nat -L

sudo sh -c "iptables-save > /etc/iptables.ipv4.nat"

sudo apt-get update
sudo apt-get -y install tor

sudo nano /etc/tor/torrc

Log notice file /var/log/tor/notices.log
VirtualAddrNetwork 10.192.0.0/10
AutomapHostsSuffixes .onion,.exit
AutomapHostsOnResolve 1
TransPort 9040
TransListenAddress 192.168.42.1
DNSPort 53
DNSListenAddress 192.168.42.1

# SSIDを Pi_APから Onion_Piに変更する（変更しなくても良い）
sudo nano /etc/hostapd/hostapd.conf

# ssid=Pi_AP
ssid=Onion_Pi

sudo iptables -F
sudo iptables -t nat -F

sudo iptables -t nat -A PREROUTING -i wlan0 -p tcp --dport 22 -j REDIRECT --to-ports 22
sudo iptables -t nat -A PREROUTING -i wlan0 -p udp --dport 53 -j REDIRECT --to-ports 53
sudo iptables -t nat -A PREROUTING -i wlan0 -p tcp --syn -j REDIRECT --to-ports 9040

sudo iptables -t nat -L

sudo sh -c "iptables-save > /etc/iptables.ipv4.nat"

# iptablesの設定を確認する
$ sudo iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination
REDIRECT   tcp  --  anywhere             anywhere             tcp dpt:ssh redir ports 22
REDIRECT   udp  --  anywhere             anywhere             udp dpt:domain redir ports 53
REDIRECT   tcp  --  anywhere             anywhere             tcp flags:FIN,SYN,RST,ACK/SYN redir ports 9040

Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination

sudo nano /etc/network/interfaces

pre-up iptables-restore < /etc/iptables.ipv4.nat

sudo touch /var/log/tor/notices.log
sudo chown debian-tor /var/log/tor/notices.log
sudo chmod 644 /var/log/tor/notices.log

sudo update-rc.d tor enable

$ which tor
/usr/local/bin/tor

$ ls -l  /usr/bin/tor
-rwxr-xr-x 1 root root 1731428 Dec 20 16:30 /usr/bin/tor

sudo reboot

sudo service tor start

sudo service tor status

Jan 29 05:49:05.655 [notice] Tor v0.2.5.12 (git-6350e21f2de7272f) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.1t and Zlib 1.2.8.
Jan 29 05:49:05.655 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning
Jan 29 05:49:05.656 [notice] Read configuration file "/etc/tor/torrc".

● Option 2: Raspberry Pi3で Torをソースリストからビルドする方法
sudo nano /etc/apt/sources.list
# Add the following entry
deb http://deb.torproject.org/torproject.org jessie main
deb-src http://deb.torproject.org/torproject.org jessie main

# Add the gpg key
gpg --keyserver keys.gnupg.net --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89
gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -

# apt-get
sudo apt-get -y update
sudo apt-get -y install build-essential fakeroot devscripts
sudo apt-get -y build-dep tor deb.torproject.org-keyring

# Build Tor
mkdir ~/debian-packages; cd ~/debian-packages
# tor-0.2.9.9
apt-get source tor
# ~/debian-packages/tor-0.2.9.9
cd tor-*
debuild -rfakeroot -uc -us
cd ..

# ls -l *.deb
# -rw-r--r-- 1 pi pi 1388876 Feb  4 08:24 tor_0.2.9.9-1~d80.jessie+1_armhf.deb
# -rw-r--r-- 1 pi pi 2767244 Feb  4 08:24 tor-dbg_0.2.9.9-1~d80.jessie+1_armhf.deb
# -rw-r--r-- 1 pi pi 1050600 Feb  4 08:24 tor-geoipdb_0.2.9.9-1~d80.jessie+1_all.deb

# Install the new package Tor
sudo dpkg -i tor_*.deb

# sudo dpkg -i tor_*.deb
# Selecting previously unselected package tor.
# (Reading database ... 127768 files and directories currently installed.)
# Preparing to unpack tor_0.2.9.9-1~d80.jessie+1_armhf.deb ...
# Unpacking tor (0.2.9.9-1~d80.jessie+1) ...
# Setting up tor (0.2.9.9-1~d80.jessie+1) ...
# Something or somebody made /var/lib/tor disappear.
# Creating one for you again.
# Something or somebody made /var/log/tor disappear.
# Creating one for you again.
# Processing triggers for systemd (215-17+deb8u6) ...
# Processing triggers for man-db (2.7.0.2-5) ...

$ which tor
/usr/sbin/tor

$ ls -l /usr/sbin/tor
lrwxrwxrwx 1 root root 10 Feb  4 08:23 /usr/sbin/tor -> ../bin/tor

$ ls -l /usr/bin/tor
-rwxr-xr-x 1 root root 2348224 Feb  4 08:24 /usr/bin/tor

sudo apt-get install -y git build-essential automake libevent-dev libssl-dev

cd
# https://gitweb.torproject.org/tor.git
# git clone -b master https://git.torproject.org/tor.git
# git clone -b release-0.2.9 https://git.torproject.org/tor.git
# https://git.torproject.org/debian/tor.git
git clone -b debian-0.2.9 https://git.torproject.org/debian/tor.git

cd tor

./autogen.sh

./configure --disable-asciidoc


make

sudo make install

$ which tor
/usr/local/bin/tor

$ ls -l /usr/local/bin/tor
-rwxr-xr-x 1 root staff 7658092 Jan 29 06:29 /usr/local/bin/tor

git clone -b debian-0.2.9 https://git.torproject.org/debian/tor.git
　の場合、
./configure
　だと失敗するので
./configure --disable-asciidoc
　とする。

checking whether the compiler accepts -Wzero-length-array... no
==================================

Building Tor has failed since manpages cannot be built.

You need asciidoc installed to be able to build the manpages.
To build without manpages, use the --disable-asciidoc argument
when calling configure.

==================================

FWinSdCardImager SDカード イメージ書き込みアプリ、ラズパイの Raspbian OS、Jetson Nanoの Ubuntuの書き込みに便利

FWinPiFinder ラズベリーパイ IPアドレス発見アプリ。ARPコマンドでラズパイの IPアドレスを探索発見する

Raspberry Pi 3系のトラブルであるある第一位の電源トラブル、低電圧警報に関する情報のまとめ

Raspberry Piで CPUの脆弱性 Spectreと Meltdownの脆弱性をチェックする方法

Raspberry Pi Zero Wを海外通販の Pimoroni等での購入方法、購入できる通販ショップ一覧まとめ

Raspberry Pi 3で安定して使える相性の無い最適な microSDカードの種類のまとめ

Raspberry Pi 3 Model Bに専用カメラモジュール RaspiCamを接続する方法

Raspberry Pi 3の Linuxコンソール上で使用する各種コマンドまとめ

Raspberry Pi 3公式フォーラムの FAQの内容の日本語訳

Raspberry Pi 3で GPIO端子の I2C機能を有効化する方法

大人気の CPUボード、Raspberry Pi 3 Model Bで作ってみよう

Espressif ESP8266 Arduino互換でスケッチが使える ESP-12Eモジュール基板

BangGood通販はドローン以外にも面白い商品がまだまだ有った（電子工作編）