this post was submitted on 02 Aug 2025
37 points (91.1% liked)

Ask Lemmy

33815 readers
1031 users here now

A Fediverse community for open-ended, thought provoking questions


Rules: (interactive)


1) Be nice and; have funDoxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them


2) All posts must end with a '?'This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?


3) No spamPlease do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.


4) NSFW is okay, within reasonJust remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either !asklemmyafterdark@lemmy.world or !asklemmynsfw@lemmynsfw.com. NSFW comments should be restricted to posts tagged [NSFW].


5) This is not a support community.
It is not a place for 'how do I?', type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.


6) No US Politics.
Please don't post about current US Politics. If you need to do this, try !politicaldiscussion@lemmy.world or !askusa@discuss.online


Reminder: The terms of service apply here too.

Partnered Communities:

Tech Support

No Stupid Questions

You Should Know

Reddit

Jokes

Ask Ouija


Logo design credit goes to: tubbadu


founded 2 years ago
MODERATORS
 

Hi, I have an OpenWrt router and an IP address that is a normal IP address.

Given how much oppression there is, I'd like to find some way to allow anyone to use this IP address to connect to Tor.

I would prefer to do this using a programming running on the OpenWrt router (which doesn't run a VPN and has a good processer).

Is there a way for me to create a snowflake "node" that just constantly runs and connects people to Tor so they can experience the wonders of the Internet?

Also, would there be any legal concerns if someone connects to Tor and does something bad or if they are in a country that doesn't like Tor or would Snowflake protect me?

I do not have a regular cell that I can run for the same purpose, and this connection could also accommodate quite a few people.

Would there be a risk of being hacked if I do this?

all 11 comments
sorted by: hot top controversial new old
[–] napkin2020@sh.itjust.works 8 points 2 days ago (1 children)

If you can't answer these questions by yourself, don't. It is a noble thing to do, yes, but it is (unfortunately) not worth trying out.

[–] throbbing_banjo@lemmy.world 3 points 2 days ago

This is the most sensible answer here, honestly. The sentiment and intent are admirable, but you're opening yourself up to a lot of potential risk.

[–] CameronDev@programming.dev 15 points 4 days ago (1 children)

You can run an exit node on openwrt: https://openwrt.org/docs/guide-user/services/tor/extras

Depending on your country's laws, you may be on the hook for any content that is accessed via your network. So all the child porn, extremist content etc, thats all possibly on you.

Hacking risk is minimal, but every additional service you run on your router increases its attack surface.

[–] WhyJiffie@sh.itjust.works 2 points 2 days ago (1 children)

this is dangerous, and I'm pretty sure it's not what they wanted

[–] CameronDev@programming.dev 2 points 2 days ago (1 children)

I dont disagree on the danger, but what did you think they wanted?

[–] WhyJiffie@sh.itjust.works 2 points 2 days ago (1 children)

a wifi access point that routes all traffic through Tor.

I'm aware that Tor is not exactly made for that, but rather to work as a proxy (which could work for devices that account for proxy autoconfiguration), its not unheard of

[–] CameronDev@programming.dev 1 points 1 day ago (1 children)

That also makes sense. Wouldnt that potentially risk the users de-anonymising themselves (and OP)? They wouldnt be protected by the tor browser protections, so a site could request location etc.

Standard VPN is probably a better tool.

For OP: Routing all traffic through a VPN isnt too hard, you can just add the VPN client and then route traffic through the interface. You can do it all from Luci. If you want more info, I can share how I did it with wireguard.

[–] WhyJiffie@sh.itjust.works 2 points 1 day ago

That also makes sense. Wouldnt that potentially risk the users de-anonymising themselves (and OP)? They wouldnt be protected by the tor browser protections, so a site could request location etc.

well the given permissions should be vetted, but even then, considering all the traffic that suddenly and collectively comes from a different IP, maybe that could still deanonymize users.

but, the point was censorship circumvention, not anonymity, so if the user considers the risks it could still be useful

Standard VPN is probably a better tool.

yeah but that could be easier to block. and often the provider requires you to have their app which will do who knows what.

Routing all traffic through a VPN isnt too hard,

and actually it's easier. like you just create a tunnel, which gets its own network interface, and you set that network interface up as if it was your actual internet connection. I'm pretty sure there's a package that adds the web gui menus for the first part.

but, OP should also look up V2Ray and other proxying tech to be able to do something in case things become worse.

[–] thr0w4w4y2@sh.itjust.works 2 points 2 days ago
[–] nocturne@slrpnk.net 6 points 3 days ago
  1. This is not a support forum