=======================================
Onion Service
=======================================

pkg install tor

ed /etc/rc.conf
...
tor_enable="YES"
...

cp /usr/local/etc/tor/torrc.sample /usr/local/etc/tor/torrc

service tor start

ed /usr/local/etc/tor/torrc
...
# Site 1
HiddenServiceDir /var/db/tor/site1
HiddenServicePort 80 127.0.0.1:80

# Site 2
HiddenServiceDir /var/db/tor/site2
HiddenServicePort 80 127.0.0.1:80
...

service tor reload
service tor status

cat /var/db/tor/site1/hostname
cat /var/db/tor/site2/hostname

=======================================

pkg install apache24

ed /usr/local/etc/apache24/httpd.conf
...
LoadModule proxy_module libexec/apache24/mod_proxy.so
LoadModule proxy_http_module libexec/apache24/mod_proxy_http.so
LoadModule proxy_unixd_module libexec/apache24/mod_proxy_unixd.so
...

ed /usr/local/etc/apache24/vhosts/site1.onion
...
# Tor Hidden Site
<VirtualHost 127.0.0.1:9000>
    ServerName abcdef...xyz1.onion
    DocumentRoot "/var/www/site1.onion"
    # Ensure directory permissions allow access
    <Directory "/var/www/site1.onion">
        Require all granted
    </Directory>
    ErrorLog "/var/log/apache24/site1.onion-error.log"
</VirtualHost>
...

ed /usr/local/etc/apache24/vhosts/site2.onion
...
<VirtualHost 127.0.0.1:80>
    ServerName site2.onion
    DocumentRoot "/var/www/site2.onion"
    # Ensure directory permissions allow access
    <Directory "/var/www/site2.onion">
        Require all granted
    </Directory>
    ErrorLog "/var/log/apache24/site2.onion-error.log"
</VirtualHost>
...

apachectl configtest
apachectl graceful

=======================================

ed /usr/local/bin/my.ipwf
...
#!/bin/sh

ipfw -q -f flush
cmd="ipfw -q add"

$cmd 00100 allow ip from any to any via lo0

$cmd 00110 deny ip from 127.0.0.0/8 to any in via igb0

$cmd 00200 check-state

$cmd 00300 allow tcp from any to me 80,443 in setup keep-state

$cmd 00310 allow tcp from any to me 22 in setup keep-state

$cmd 00400 deny tcp from any to me 8080 in
$cmd 00401 deny tcp from any to me 8081 in
$cmd 00402 deny tcp from any to me 8082 in

$cmd 00500 allow ip from me to any out keep-state

$cmd 65000 deny log ip from any to any
...

/usr/local/bin/my.ipfw
ipfw -a list

=======================================

# 1. use tor browser on another platform (shame about FreeBSD)
# 2. fuck with firefox + proxy configuration

http://abcdef...xyz1.onion

=======================================