Is it possible to modify /etc/tor/torrc for specific exit nodes?

Qubes-Whonix
1

Hi

I use latest Qubes and I’m new to Whonix
I have two main but related question:

  1. How can I set specific countries for my exit nodes? Do I edit the /etc/tor/torrc inside the template, or where? My goal is to have specific nodes per VM I launch. So if I’ll launch two disposable VM instances of whonix’s tor, I want to be able to launch them with specific exit nodes.
  2. I usually had a flag indicator just in the URL address bar on the left side. It was very handy. Why is there no flag indicator in whonix’s tor version? How can I enable it? Are there any risks?
2

I’m not sure this is possible, it would require somehow combining stream isolation settings with selecting specific exit nodes, which I don’t think Tor has support for (though I could be mistaken here). You can do this on a per-Gateway basis though, see:

Note that restricting Tor’s choice of nodes will have a negative impact on anonymity. You really should not do this unless you know what you’re doing.

I believe that with the workstation/gateway split Whonix uses, Tor Browser doesn’t know what circuits Tor is routing its traffic over. This prevents it from knowing what exit node it is accessing a website through. You can see what circuits are active by opening a terminal in the gateway and running onioncircuits, but that won’t let you determine which circuit is being used by your web connection, so it’s not really a good solution.

1 Like
3

Yes, read this before you edit:

Disabled for security reasons:

1 Like
4

Thank you both but I think I didn’t explain myself fully previously.

I know how to change exit nodes in general and the risks of this, but I’m a bit not sure how can I control the exit nodes per disposable I launch. Maybe this not possible, I don’t know. So for example I want to be able to launch one disposable and have country1, country2, country3 and then launch another disposable with countries country4, country5, country6.

I read the risks of the country flag/circuits and I don’t mind it anymore because of the risks.

5

Disposable WS 1 linked to GW 1 appvm (or disposable or standalone) based on GW template 1.

Disposable WS 2 linked to GW 2 appvm (or disposable or standalone) based on GW template 2.

You can clone the templates to produce many other (modify as you like) templates.

6

Can I clone only the workstation-18-dvm and make the changes in there? or do I need to clone the entire chain of gateway-18, whorkstation-18 and the workstation-18-dvm?

7

I forgot the torrc doesn’t exist in workstation. So I guess I need to clone the entire chain then.

Thank you

8

The typical way:

Typical here means unspecific to Qubes Disposables.

Possible.

Using Whonix-Gateway as Disposable is at the time of writing not documented / encouraged.

See:

Ephemeral Whonix-Gateway ProxyVMs

9

Thank you!