Proxy PAC and Tor failure

Hi,

I'm writing a proxy config file for redirecting tor / tor hidden
services access, e.g.:

function FindProxyForURL(url, host) {

bfilter = "PROXY 127.0.0.1:8080; DIRECT";
squid = "PROXY 127.0.0.1:3128; DIRECT";
tor = "SOCKS 127.0.0.1:9050";
direkt = "DIRECT";

url = url.toLowerCase();
host = host.toLowerCase();
myIp = myIpAddress();

if (shExpMatch(host,"*:*")) {
hostport = host.split(":");
host = hostport[0].toLowerCase();
port = hostport[1].toLowerCase();
};

// onion over tor
if (shExpMatch(host,"*.onion")) {
alert("Using TOR for host " +host + " in url " +url);
return tor;
}
...
}

The Tor rule matches, setting the proxy manually inside firefox works,
but not using the pac file. I get:

Fehler: Proxy-Server nicht gefunden
Firefox wurde konfiguriert, einen Proxy-Server zu nutzen, der nicht
gefunden werden kann.

Error: Proxy-Server not found
Firefox was configured to use a proxy server which can not be located.

Something wrong with the pac script or my configuration?

Thanks
Olaf

Olaf Petzold <(E-Mail Removed)> wrote:
> I'm writing a proxy config file for redirecting tor / tor hidden
> services access, e.g.:

> function FindProxyForURL(url, host) {

> tor = "SOCKS 127.0.0.1:9050";

> url = url.toLowerCase();
> host = host.toLowerCase();
> myIp = myIpAddress();

You don't need this next section; the host parameter has already had the
port number stripped

> if (shExpMatch(host,"*:*")) {
> hostport = host.split(":");
> host = hostport[0].toLowerCase();
> port = hostport[1].toLowerCase();
> };

This next section may better be served with a PAC specific function, which
also means you don't need to lowercase the host value in the first place:

if (dnsDomainIs (host, ".onion")) { alert ("TOR: " + url); return tor; }

> // onion over tor
> if (shExpMatch(host,"*.onion")) {
> alert("Using TOR for host " +host + " in url " +url);
> return tor;
> }


> The Tor rule matches, setting the proxy manually inside firefox works,
> but not using the pac file. I get:

> Error: Proxy-Server not found
> Firefox was configured to use a proxy server which can not be located.

There really is a working tor socks server on your local host at 9050?

Activate the javascript console and check the PAC-alert lines (these
are triggered from your alert() calls). Is your PAC function returning
the expected result?

Chris

Thank you Chris,

>> The Tor rule matches, setting the proxy manually inside firefox works,
>> but not using the pac file. I get:
>
>> Error: Proxy-Server not found
>> Firefox was configured to use a proxy server which can not be located.
>
> There really is a working tor socks server on your local host at 9050?
>
> Activate the javascript console and check the PAC-alert lines (these
> are triggered from your alert() calls). Is your PAC function returning
> the expected result?

I'm sure tor is working, javascript console output is:

PAC-alert: TOR: http://6sxoyfb3h2nvok2d.onion/
PAC-alert: TOR: http://6sxoyfb3h2nvok2d.onion/tor/
PAC-alert: TOR:
http://6sxoyfb3h2nvok2d.onion/tor/fr...ect=startseite
....

on use with foxy-proxy. If I disable FoxyProxy I've got only (using the
pac file):

PAC-alert: TOR: http://6sxoyfb3h2nvok2d.onion/

and Firefox's error message mentioned before. Maybe FoxyProxy does a job
even if it's diabled?

Thanks
Olaf

Olaf Petzold <(E-Mail Removed)> wrote:
> Error: Proxy-Server not found
> Firefox was configured to use a proxy server which can not be located.

> I'm sure tor is working, javascript console output is:
> PAC-alert: TOR: http://6sxoyfb3h2nvok2d.onion/
> [...]

Based on your PAC file, this looks reasonable to me, as an outsider
(I don't use TOR myself).


> If I disable FoxyProxy I've got only (using the pac file):
> PAC-alert: TOR: http://6sxoyfb3h2nvok2d.onion/
> and Firefox's error message mentioned before. Maybe FoxyProxy does a
> job even if it's disabled?

I think this shows that you need to work out how to avoid using .onion
URIs when your SOCKS proxy is disabled.

Does this help?
Chris