[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Remailer Chaining Security? [LONG]
:But how does one go about chaining through the remailers? I tried this
:and the message got lost. If indeed you can, does it just involve using
:more than one (anon-to) line in the header?
Note-1: [R-R-T: stands for Request-Remailing-To: ]
Note-2: [You is in this doc [email protected],
substitute that adress for own if you want
to receive the test message yourself]
First you should test only one remailer:
you > remailer 1 > RRT- you
This is what you send:
--
TO: [email protected]
::
Request-Remailing-To: [email protected]
Test of remailer at jpunix.com
------------------------------------------------
This is what you receive:
--
You will receive this message from jpunix.com
From: [email protected]
To: [email protected]
Test of remailer at jpunix.com
--
If this is succesful you add another remailer:
you > remailer 2 > RRT- rem 2 >> RRT you
This is what you send:
---
TO: [email protected]
::
Request-Remailing-To: [email protected]
::
Request-Remailing-To: [email protected]
Test of remailer at jpunix.com and RRT kaiwan.com
-----------------------------------------------------
Remailer [email protected] will receive this message from
[email protected]
------
From: [email protected]
To: [email protected]
::
Request-Remailing-To: [email protected]
Test of remailer at jpunix.com and RRT kaiwan.com
------
Because the message has the header pasting tokens [::]
the remailer at kaiwan.com knows where to send it to.
You will receive this message from kaiwan.com
From: [email protected]
To: [email protected]
Test of remailer at jpunix.com and RRT kaiwan.com
---------------------------------------------------------
You can keep adding remailer this way, everytime you receive
a test message back you add another remailer: if you stop receiving
test messages, the last remailer added is most likely "down". You can
check that by using that remailer directly.
---------------------------------------------------------
The above is simple unencrypted remailing. If you want to have an
encrypted chained remailing, you first have to "design" the chain.
1] send to jpunix.com there RRT kaiwan.com
2] at kaiwan.com RRT vox.hacktic.nl
3] at vox.hacktic.nl RRT [email protected]
First you make the 3rd stage:
--
::
Request-Remailing-To: [email protected]
Test of PGP'ed remailing trough jpunix, kaiwan and vox.
--
The above is encrypted whit the PGPpubKEY of VoX.hacktic.nl and will
result in this:
-----BEGIN PGP MESSAGE-----
Version: 2.6 for VoX Labz.
hIwCWd90FI1WkT0BA/9I6ILVhl5ZpsgKgHye+ng9CokwzdW1pMgcd0ecigppAODe
53LlyVw/hl1ERYIzWW9W4vnuh7sLgu9XjxB515FtT5VSyZLZrhKIF7XtACga2On+
1NmsecLTrgXYcc4k0Y+l66Hs06z92yhFvjXruDBS2Pame0VDtgZo+4aPntioDaYA
AABJsVIWRaJkCib+uek9Pr6GqFP7lwaMqq8XFnFxY42h3Wn3c5DikrzmwKGK5xVs
hmiZnEhJgXvR7jS2cNNOk/geG4SnUqvMTzpq6w==
=b0bT
-----END PGP MESSAGE-----
--
Then you than proceed to the 2nd stage the message wich has to leave
kaiwan.com:
::
Encrypted: PGP
-----BEGIN PGP MESSAGE-----
Version: 2.6 for VoX Labz.
hIwCWd90FI1WkT0BA/9I6ILVhl5ZpsgKgHye+ng9CokwzdW1pMgcd0ecigppAODe
53LlyVw/hl1ERYIzWW9W4vnuh7sLgu9XjxB515FtT5VSyZLZrhKIF7XtACga2On+
1NmsecLTrgXYcc4k0Y+l66Hs06z92yhFvjXruDBS2Pame0VDtgZo+4aPntioDaYA
AABJsVIWRaJkCib+uek9Pr6GqFP7lwaMqq8XFnFxY42h3Wn3c5DikrzmwKGK5xVs
hmiZnEhJgXvR7jS2cNNOk/geG4SnUqvMTzpq6w==
=b0bT
-----END PGP MESSAGE-----
But kaiwan.com has to know where to send it to, so the 2nd stage msg is:
::
Request-Remailing-To: [email protected]
::
Encrypted: PGP
-----BEGIN PGP MESSAGE-----
Version: 2.6 for VoX Labz.
hIwCWd90FI1WkT0BA/9I6ILVhl5ZpsgKgHye+ng9CokwzdW1pMgcd0ecigppAODe
53LlyVw/hl1ERYIzWW9W4vnuh7sLgu9XjxB515FtT5VSyZLZrhKIF7XtACga2On+
1NmsecLTrgXYcc4k0Y+l66Hs06z92yhFvjXruDBS2Pame0VDtgZo+4aPntioDaYA
AABJsVIWRaJkCib+uek9Pr6GqFP7lwaMqq8XFnFxY42h3Wn3c5DikrzmwKGK5xVs
hmiZnEhJgXvR7jS2cNNOk/geG4SnUqvMTzpq6w==
=b0bT
-----END PGP MESSAGE-----
The above is then encrypted whit the PGPpubKEY of kaiwan.com:
--
Stage 1:
This new encrypted message gets the headers for jpunix to remail:
::
Request-Remailing-To: [email protected]
::
Encrypted: PGP
-----BEGIN PGG MESSAGE-----
and the PGP encrypted message from stage 2
-----END PGP MESSAGE-----
---
Stage 0: the message you send to jpunix.com
is the encrypted message [with the PGPpubKEY of jpunix.com] of
stage 1 plus a Encrypted: PGP header.
To: [email protected]
::
Encrypted: PGP
-----BEGIN PGG MESSAGE-----
and the PGP encrypted message from stage 1
-----END PGP MESSAGE-----
--
Exit! Stage Left.
Alex de Joode <[email protected]>