Access tor-blocking sites

Support
1

I need to access websites that block Tor. Right now I’m using Whonix (—>Tor) —> VPN —> Iceweasel, but I’m not sure if this is the best option.

I’ve read a lot about tunneling proxy and VPN through Tor (including all Whonix wiki) and I know that it’s a very complicated and tricky question, so I’m not expecting a definite 100% answer. I would be grateful for anything that you think is the safest option. Probably something that you would use in my position.

  1. What is the safest way to access sites that block Tor from Whonix?
  2. Any additional recommendations on how stay safe while doing it?

Also, wiki mentions that «Desktop resolution is 1024x768 for all Whonix users» but when I check sites like whoer or ipleak from Iceweasel, they show my real resolution.

  1. What do you think is the problem with real resolution?
2
  1. I don’t think that there is any usable/great/safest way to do this.
  2. No.
  3. Wiki was outdated.
3

[quote=“Patrick, post:2, topic:1149”]1. I don’t think that there is any usable/great/safest way to do this.
2. No.
3. Wiki was outdated.[/quote]

Ok, I see that, thank you. I still need some way even if it won’t be as safe as just using Tor. I got few more questions.

  1. If I understand correctly, according to wiki, while using Whonix (—>Tor) —> VPN —> Firefox I at least won’t leak my external non-Tor IP and DNS? That’s not outdated?

  2. If my VPN provider keeps logs, The IPs they’ll keep still will be the Tor exit nodes, correct?

  3. Also, wiki mentions that I can use Proxy/VPN/SSH → Tor Browser → website. Do you know where I can find information on how to do that? (i.e. how can I use Tor Browser with VPN IP?) When I simply enable VPN on Whonix-Workstation and use Tor Browser, it still has Tor IP.

3.1. Will I share Fingerprints with other Tor Browser users in this case?

  1. After enabling SecurityKiss VPN according to instruction (VPN Tunnel Setup Examples), I’m getting this message in Whonix-Workstation: «TransPort Test result: looks like you’re not connected through Tor. Possible reasons: You added a VPN»

Does it mean that my connection is Host —>Tor —>VPN or I am literally not connected through Tor (Host —>VPN)? Is this something to be worried about?

Thank you and sorry if these are dumb bikeshedding questions.

4
1. If I understand correctly, according to wiki, while using Whonix (—>Tor) —> VPN —> Firefox I at least won't leak my external non-Tor IP and DNS? That's not outdated?
Yes. Up to date.
2. If my VPN provider keeps logs, The IPs they'll keep still will be the Tor exit nodes, correct?
Correct.
3. Also, wiki mentions that I can use Proxy/VPN/SSH -> Tor Browser -> website. Do you know where I can find information on how to do that? (i.e. how can I use Tor Browser with VPN IP?) When I simply enable VPN on Whonix-Workstation and use Tor Browser, it still has Tor IP.
See: https://www.whonix.org/wiki/Tunnel_Proxy_or_SSH_or_VPN_through_Tor#uwt_and_Tor_Browser "If you want to do it with Tor Browser, read Change/Remove Proxy Settings. "
3.1. Will I share Fingerprints with other Tor Browser users in this case?
Unfortunately, not exactly.

From Tor Browser Essentials (seemingly unrelated), but the information on transparent proxying applies here. See
“Note, accessing 127.0.0.1 using Tor Browser is no longer possible due to a change in Tor Browser by The Tor Project. You could set to transparent torification, but then you would be vulnerable to fingerprinting issues. See Tor Browser, Local Connections for more information and a workaround.”
on that link (contains links).

4. After enabling SecurityKiss VPN according to instruction (https://www.whonix.org/wiki/TestVPN), I’m getting this message in Whonix-Workstation: «TransPort Test result: looks like you're not connected through Tor. Possible reasons: You added a VPN»
Expected.
Does it mean that my connection is Host —>Tor —>VPN or I am literally not connected through Tor (Host —>VPN)? Is this something to be worried about?
Nothing to worry. If you're using Whonix-Workstation we're reasonably sure that all connections always go through Tor first.
Thank you and sorry if these are dumb bikeshedding questions.
They're not bad questions. Frequently asked questions. It's due to our documentation on that topic being bad. Ticket: https://phabricator.whonix.org/T125

Most confusing comes from Tor Browser being configured to use a SocksPort by default (for Stream Isolation) vs needing to remove these proxy settings (Tor Browser Essentials) so system default (TransPort), VPN is being used by Tor Browser.