Privoxy, socks5 & mozilla

Support for security such as Firewalls and securing linux
Post Reply
The.Ex-pat
Posts: 37
Joined: 2019/06/21 00:07:29

Privoxy, socks5 & mozilla

Post by The.Ex-pat » 2019/06/21 00:30:39

Hello, All

I have a C7 machine running Privoxy configured for socks5 and I'm using Foxfire with the proxy settings configured to socks5 also.
The firewall on the C7 machine will only accept requests from One(1) specific ip & mac address.

How secure is this connection? Is the information traveling across public network encrypted?

Thank you.

- Ex.Pat

hunter86_bg
Posts: 2019
Joined: 2015/02/17 15:14:33
Location: Bulgaria
Contact:

Re: Privoxy, socks5 & mozilla

Post by hunter86_bg » 2019/06/22 08:31:13

Anything going outside the proxy via http will be unencrypted.

If you configured the proxy to use only TLS, you should be encrypting the traffic between client and proxy.

'Should' is not always equal to 'it is'.
Better get a network capture between the client and the proxy and double-check the encryption.

The.Ex-pat
Posts: 37
Joined: 2019/06/21 00:07:29

Re: Privoxy, socks5 & mozilla

Post by The.Ex-pat » 2019/06/22 16:26:21

hunter86_bg wrote:
2019/06/22 08:31:13
Anything going outside the proxy via http will be unencrypted.

If you configured the proxy to use only TLS, you should be encrypting the traffic between client and proxy.

'Should' is not always equal to 'it is'.
Better get a network capture between the client and the proxy and double-check the encryption.
I'm mostly concerned with the traffic between client and proxy. I'm in Mexico City, MX at the moment and the proxy is in Los Angeles, CA USA.

If I'm using the proxy to view a secure HTTPS site. Is the whole chain encrypted?
Client > Proxy > HTTPS web site. Secure enough to say, Shop on Amazon or Pay bills or Online bank.

Another question, what is the best way to get the network capture? Will Wire Shark work?

Thank you

hunter86_bg
Posts: 2019
Joined: 2015/02/17 15:14:33
Location: Bulgaria
Contact:

Re: Privoxy, socks5 & mozilla

Post by hunter86_bg » 2019/06/23 04:34:26

Wireshark , tshark, tcpdump - they all capture pretty well.
When you do capture run separate captures per interface and during the capture - access a regular site (http://).

If you use access https website - you don't need the proxy for encryption purposes, only for hiding your identity.

I have never used privoxy, but I don't see anything about encryption in their FAQ . Are you sure it supports encryption ?

Post Reply