How to set the obfs bridge

Qubes-Whonix
3

Based on confusion the last time this was raised in the forums →

I think it’s worth pointing out that your etc/tor/torrc file, when edited, should look something like this below (these listed bridges are from the wiki example).

# This file is part of Whonix
# Copyright (C) 2012 - 2013 adrelanos
# See the file COPYING for copying conditions.

# Use this file for your user customizations.
# Please see /etc/tor/torrc.examples for help, options, comments etc.

# Anything here will override Whonix’s own Tor config customizations in /usr/share/tor/tor-service-defaults-torrc

# Enable Tor through whonixsetup or manually uncomment “DisableNetwork 0” by
# removing the # in front of it.
DisableNetwork 0
UseBridges 1
ClientTransportPlugin obfs2,obfs3 exec /usr/bin/obfsproxy managed
ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy managed

bridge obfs4 192.235.207.85:42086 0EEB10BF4B4FAF56D46E cert=oue8sYYw5wi4n3mf2WDOg iat-mode=0
bridge obfs4 34.218.26.20:43263 DD21A551767816A0C9495 cert=7qzS6KASquPvJU82Fm7qoJw iat-mode=0
bridge obfs4 161.217.177.95:10703 B3B8009D01BB7E5FDFAEC cert=4RaIqGiOytEXm6Hw iat-mode=0

Note:

  • Prefer obfs4 bridges at this time (not as easily blocked or probed as obfs3);
  • Use obfs4 OR obfs3 bridges in your torrc file - not both;
  • Capitalization in the torrc file matters;
  • Request bridges from the Tor Project (don’t use these above). This is done either by email or from their website (publicly known bridges) → https://bridges.torproject.org/options;
  • Make sure you follow all the steps in the Bridges link so that Tor is working correctly and the Tor process is reloaded; and
  • If you have connection problems, this can relate to your firewall blocking outgoing connections to the ports provided by the bridge. In that case, use bridges with ports 80 and 443, since they are used for general Internet browsing and ‘should just work’.
3 Likes