I have read a blog post, where you can build your own privacy proxy server built on Raspberry PI. The post got me thinking about how I can use this to protect my privacy on my Android phone, and also get rid of those annoying ads.
Since I own a Samsung Galaxy S3 LTE with Android 4.3 (with a HW based Knox counter), rooting the phone now means you break Knox, and loose warranty. Past the point of no return ...
This means I have to solve this without root. Luckily newer Androids support VPN without rooting, but setting a mandatory system-wide proxy is still not possible without root.
But thanks to some iptables magic and Privoxy, this is not a problem anymore :)
The ingredients to build your own privacy protection proxy:
- One (or more) cheap VPS server(s)
- a decent VPN program
- Privoxy
- iptables
VPS server
To get the cheap VPS server, I recommend using Amazon EC2, but choose whatever you like. The micro instance is very cheap (or even free), and has totally enough resources for this task. I'm using the Ubuntu free tier now and it works like a charm. And last but not least Amazon has two-factor authentication! You can set up an Ubuntu server under 10 minutes. Use the AWS region nearest to you, e.g. I choose EU - Ireland.
For the VPN program, I recommend the free version of the OpenVPN AS (EDIT: be sure to use OpenVPN AS 2.0.6 or later, both on the server and the client). Easy to set-up quick start guide is here, GUI based configuration, and one-click client installer for Android, iOS, Windows, Linux, OSX. The Ubuntu installer packages are here.
The most important settings:
- I prefer to use the TCP 443 and UDP 53 ports for my OpenVPN setup, and let the user guess why.
- For good performance, UDP is preferred over TCP.
- VPN mode is Layer 3 (routing/NAT).
- Don't forget to allow the configured VPN ports in the AWS firewall (security groups).
Other VPN settings:
- Should VPN clients have access to private subnets (non-public networks on the server side)? - Yes
- Should client Internet traffic be routed through the VPN? - Yes
Privoxy
The next component we have to install and configure is Privoxy. As usual, "apt-get install privoxy" just works. The next step is to configure privoxy via /etc/privoxy/config file, there are two options to change:- listen-address your.ip.add.ress:8118
- accept-intercepted-requests 1
Beware not to allow everyone accessing your Privoxy server in the AWS EC2 security groups, be sure it is reachable only to VPN users!
After everything is set, start privoxy with "service privoxy start", and add it to the autostart "update-rc.d privoxy defaults".
After everything is set, start privoxy with "service privoxy start", and add it to the autostart "update-rc.d privoxy defaults".
Iptables
And the final step is to configure your iptables chain to forward every web traffic from the VPN clients to the Privoxy server:
iptables -t nat -A PREROUTING -s 5.5.0.0/16 -p tcp -m multiport --dports 80,8080,81 -j DNAT --to-destination your.ip.add.ress:8118
Optionally you can block access to all other ports as well, and what does not go through your Privoxy won't be reachable.
Based on your Linux distribution and preference, you might make this rule persistent.
Final test
Now you can connect to the VPN server from your Android device.
After connecting, the final results can be seen in the following screenshots. And yes, there is a reason I chose Angry Birds as an example.
After logging in from a client, you get the following nice packages to install on your device:
Angry Birds without Privoxy |
Angry Birds with Privoxy |
Stupid flashlight app with ad |
Stupid flashlight app with Privoxy |
Spoiler alert
If you are afraid of NSA tracking you, this post is not for you. If you want to achieve IP layer anonymity, this post is not for you. As long as you are the only one using that service, it should be trivial to see what could possibly go wrong with that.
Known issues
Whenever the Internet connection (Wifi, 3G) drops, the VPN connection drops as well, and your privacy is gone ...
Sites breaking your privacy through SSL can still do that as long as the domain is not in the Privoxy blacklist.
Additional recommendation
If you are using OSX or Windows, I can recommend Aviator to be used as your default browser. It is just great, give it a try!
PS: There are also some adblock apps removed from the official store which can block some ads, but you have to configure a proxy for every WiFi connection you use, and it is not working over 3G.
Continue reading
- Termux Hacking Tools 2019
- Best Pentesting Tools 2018
- Best Hacking Tools 2019
- Hack Tools Github
- Hack Tools
- Hacking Tools Pc
- Best Hacking Tools 2020
- Hackers Toolbox
- Hacker Tool Kit
- Hacking Apps
- Pentest Reporting Tools
- Hacker Tools Linux
- Hacking Tools Github
- Hack Tools For Windows
- Hacker Tools Software
- Pentest Tools Alternative
- Hack Tools For Pc
- Hacker Hardware Tools
- Hack Tools Pc
- Hacking Tools Software
- Android Hack Tools Github
- Hack Tools Download
- Pentest Tools Alternative
- Bluetooth Hacking Tools Kali
- Pentest Tools For Ubuntu
- Pentest Tools Download
- Hacking App
- Hacking Tools Name
- Pentest Tools Website
- Pentest Tools For Ubuntu
- Pentest Tools Windows
- Blackhat Hacker Tools
- Tools For Hacker
- Hack Website Online Tool
- Hacking Tools Hardware
- Easy Hack Tools
- Growth Hacker Tools
- Pentest Tools Free
- Pentest Tools Port Scanner
- Pentest Recon Tools
- Hak5 Tools
- Easy Hack Tools
- Hacking Tools Pc
- Hacker Tools Online
- Hacking Tools For Windows
- Best Pentesting Tools 2018
- Pentest Tools Website Vulnerability
- Android Hack Tools Github
- Hacking Tools For Kali Linux
- Hacker Tools Free
- Hacking Tools 2019
- Tools 4 Hack
- Hacking Tools For Windows Free Download
- Hacker Tools Free
- Hack App
- Hacking Tools For Kali Linux
- Hacking Tools Github
- Pentest Tools Website Vulnerability
- Kik Hack Tools
- Hacker Tools Mac
- Hacking Tools Windows
- Hacking Tools Pc
- Hacking Tools Github
- Pentest Tools Subdomain
- World No 1 Hacker Software
- Nsa Hack Tools Download
- Pentest Tools Android
- Hacking Tools For Games
- Pentest Box Tools Download
- Pentest Tools Kali Linux
- Hacker Tools 2019
- Physical Pentest Tools
- Top Pentest Tools
- Nsa Hack Tools Download
- Hacker Techniques Tools And Incident Handling
- Install Pentest Tools Ubuntu
- Pentest Reporting Tools
- Pentest Tools Bluekeep
- Nsa Hack Tools
- Hack Website Online Tool
- Hack Tools 2019
- Hacking Tools Pc
- Hacker Tools Software
- Tools 4 Hack
- Physical Pentest Tools
- Hacker Security Tools
- Nsa Hack Tools
- Pentest Tools Website Vulnerability
- Pentest Tools Nmap
- Pentest Tools
- Usb Pentest Tools
- Pentest Tools Android
- Hacking Apps
- Pentest Recon Tools
- Hack Tools 2019
- Hacking Tools Pc
- Hacker Tools Hardware
- Hack Rom Tools
- Nsa Hacker Tools
- Pentest Tools Bluekeep
- Hacker Tools Free
- Hack Tools
- Best Pentesting Tools 2018
- Github Hacking Tools
- Hacker Tools 2020
- Hack Tools Download
- Hack Tools Download
- Hacker Tools Free Download
- Hack Apps
- Nsa Hack Tools
- Hacking Tools Github
- Usb Pentest Tools
- Hackrf Tools
- Hacker Tools Hardware
- Beginner Hacker Tools
- Hacking Tools For Games
- How To Hack
- Pentest Tools Free
- Hack Apps
- How To Make Hacking Tools
- Nsa Hacker Tools
- Top Pentest Tools
- Hacker Tools List
- Hacker Tools For Pc
- Kik Hack Tools
- Hacking Tools For Windows Free Download
- Hack Tool Apk No Root
- What Is Hacking Tools
- Best Hacking Tools 2019
- Usb Pentest Tools
- Tools 4 Hack
- Hacker Tools 2020
- Hacking Tools Online
- Hacking Apps
- Pentest Tools Windows
- Blackhat Hacker Tools
- Tools 4 Hack
- Github Hacking Tools
- Blackhat Hacker Tools
- Pentest Automation Tools
- Nsa Hack Tools
- Hacker Tool Kit
- Hacking Tools For Mac
- Hack Tools 2019
- Hacking Tools Windows 10
- Github Hacking Tools
- Pentest Tools Open Source
- Pentest Tools Download
- New Hacker Tools
- Hack And Tools
- Free Pentest Tools For Windows
- Pentest Tools
- Hacker Tools For Ios
- Github Hacking Tools
- Easy Hack Tools
- Pentest Tools Website
- Hacker Tools For Windows
- Hack Tools Download
- Pentest Tools Open Source
- Hacks And Tools
- Pentest Tools For Ubuntu
- Hack Tools Online
- Kik Hack Tools
- Hacking App
- Ethical Hacker Tools
- Hacking Tools Online
- What Are Hacking Tools
No comments:
Post a Comment