Connecting to JonDonym before Tor (User -> JonDonym -> Tor -> Internet)

Originally published at: News - Whonix Forum
As an exercise, I quickly put together a documentation chapter for Connecting to JonDonym before Tor (User -> JonDonym -> Tor -> Internet). Qubes-Whonix only! Non-Qubes-Whonix is unsupported.

At the moment these instructions have several limitations.

  • They install JonDo in a separate ProxyVM behind sys-whonix. The motivation behind this was better security. JonDo is not installable from Debian. It's a package from the website / Debian apt repository. In theory, Tor should not be compromised if JonDo was compromised. But if JonDo was compromised to begin with or more easily exploited than Tor, it is very much desirable to run JonDo in a separate ProxyVM for better isolation.
  • However, this is very impractical. Since Qubes does not support static IP addresses yet, the Tor config setting /etc/tor/torrc 'HTTPSProxy' is not stable. When the JonDo ProxyVM gets its IP changed, connectivity breaks and /etc/tor/torrc in sys-whonix needs a manual update. Not great.
  • It would be a lot more usable to document how to run JonDo directly in sys-whonix (under user tunnel with TUNNEL_FIREWALL=true etc.) However, then we would have less isolation.
  • Does not autostart JonDo yet.
  • And more...
  • I probably won't be able to become a maintainer of a fully featured JonDo-Gateway comparable to Whonix-Gateway using Tor. Help welcome.
  • Also... JonDo – the IP changer had its last release 2013-08-29. So I wonder, is that project dead? Why bother? On the other hand, JonDoFox though had its last release 2016-03-20 so that gives hope.
1 Like

Huh, hadn’t noticed the last update was 2013. Could that be an error? I’ve seen them make mistakes on their webpage before (including blunders with gpg).

In other news, I just noticed they’ve killed off their live DVD, which they had certainly been maintaining: JonDonym Software Downloads

The Live DVD’s development is discontinued, unfortunaly.

I think it is correct. I looked through all of their news blog.

The latest JonDo maintenance release mentioned was 2014-05-09.

Stable version latest changelog 00.19.001 Date: 2013-08-29.

Beta version latest changelog 00.19.015-beta Date: 2016-05-19

So I stand corrected.

There was quite a leap…

Date: 2016-05-19

Date: 2013-10-22

Hi Patrick

This is interesting
To make this configuration need to follow guide about connect proxy before tor?



Do I follow guide about connect proxy before tor?

That is undocumented. Unsupported. (
Undocumented, Untested or Unsupported Features ) Figuring that out needs a
developers mindset and probably hours and hours.