Encrypting your (torrent) traffic

[mr-glass]

If your really worried about people snooping on you where you are AND you have a computer set up where you don't have to worry about such things, you can simply use a VPN. If you have even a little networking experience, it shouldn't be too hard.

Essentially, you make an encrypted connection between the two computers and forward all your traffic through the trusted connection. I use this to surf the web at hacker conventions without having the guy behind me reading my email. If your using wifi, its real easy to snoop what your looking at. I've seen it.

First, you'll need that encrypted connection. I use some fancy expensive stuff to connect to my office for this, but I have had great results using hamachi (www.hamachi.cc) in the past. Its real easy to use and creates a nice secure connection between the two points. Windows works great, there is a mac beta that I've used but i keep hearing complaints.

Next, you need to setup the computer at trusted location to be a proxy. There is a ton of different software options out there, but I use ccproxy because it is light and simple. You can probably get by leaving the settings as is (I did).

Finally, you need to set the programs you want to use encrypted traffic to use the proxy. Every program is different, but the proxy settings should be in the network or security settings.


Also, there are some people who use whats called a seedbox for their torrents these days. Essentially its a dedicated server for their bittorent traffic. I don't use it so I can't say much about it, but I know it works quite well. Probly will cost money though.

-MrGlass

Anyone following this, make sure your ISP allows VPN traffic, some consider it business use.

[tehboris]

This doesn't really offer anonymity, it prevents any one examining the traffic between one computer and the other computer. For anonymity you would want to use TOR most likely.

[dark_shroud]

Just to make one thing clear with Bittorrent in general. You cannot hide you IP in the swarms. If a member of the RIAA/MPAA or someone working for them is in the swarm they will get your IP address from the tracker. So not even the useless Peer Guardian can help you.

Also, do not use TOR for p2p traffic. P2P uses too much bandwidth for TOR to handle.

[mr-glass]

No, this does not offer true anonymity, but whoever does try to get your IP address will only get the IP of your proxy, so you could just make sure that computer doesn't lead straight back to you. Either way, the question on this weeks show was about encryption.

As to the ISP blocking VPN traffic, I have never seen this, but hamachi should still work. It is generally not considered a real VPN, and even if it does get blocked it can make an indirect connection through the hamachi servers.

[dark_shroud]

Originally Posted by Mr.Glass

No, this does not offer true anonymity, but whoever does try to get your IP address will only get the IP of your proxy, so you could just make sure that computer doesn't lead straight back to you. Either way, the question on this weeks show was about encryption.

That depends on the client and how it's configured. Some clients like BitComet have the option to send the "Lan IP" when using a proxy or VPN. Also, other clients will get your real IP if you're only using the VPN/proxy for tracker communication.

Originally Posted by Mr.Glass

As to the ISP blocking VPN traffic, I have never seen this, but hamachi should still work. It is generally not considered a real VPN, and even if it does get blocked it can make an indirect connection through the hamachi servers.

Some ISPs will throttle VPNs. Or in some cases all forms of encrypted traffic. Since the Bittorrent encryption was designed to mask the traffic in general.

[mr-glass]

Originally Posted by Dark_Shroud

Some ISPs will throttle VPNs. Or in some cases all forms of encrypted traffic. Since the Bittorrent encryption was designed to mask the traffic in general.

Well, at that point I would call my ISP and demand an explanation why they are blocking me from connecting to my office. If you pay for unlimited internet access, you pay for unlimited internet access. And yes, I have used this argument before, in places where I didnt pay and it wasnt supposed to be unlimited, and it works. Remember, the FCC ruled against comcast last week, they aren't allowed to filter your traffic.

[dark_shroud]

Originally Posted by Mr.Glass

Well, at that point I would call my ISP and demand an explanation why they are blocking me from connecting to my office. If you pay for unlimited internet access, you pay for unlimited internet access. And yes, I have used this argument before, in places where I didnt pay and it wasnt supposed to be unlimited, and it works. Remember, the FCC ruled against comcast last week, they aren't allowed to filter your traffic.

Comcast is just a mess, I've been using them for a few years off and on. I'm now switching to a DSL package that's just as fast and cheaper. I'll get to see how well their "speed boost" actually works.

Otherwise I agree with you about selling an unlimited plan. Comcast wasn't too bad until they started the Sandvine garbage. They don't mess with VPNs and recognized encryptions. The only western ISP I can think of that are pricks like this would be Rogers up in Canada.

I didn't mean blocking or shaping, I mean some ISPs will contact the customer when they notice VPN traffic, and then ask the customer to either stop using VPN or upgrade to a business package. I doubt many do this, but like I say, read the AUP first just in case.