{"id":797,"date":"2019-10-19T14:13:50","date_gmt":"2019-10-19T13:13:50","guid":{"rendered":"https:\/\/www.torbox.ch\/?page_id=797"},"modified":"2025-05-25T19:15:38","modified_gmt":"2025-05-25T18:15:38","slug":"submenu-countermeasures-troubleshooting","status":"publish","type":"page","link":"https:\/\/www.torbox.ch\/?page_id=797","title":{"rendered":"Sub-menu: Countermeasure"},"content":{"rendered":"<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><a href=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2023\/03\/countermeasure-menu-v052-e1677962608341.png\"><img loading=\"lazy\" decoding=\"async\" width=\"760\" height=\"493\" src=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2023\/03\/countermeasure-menu-v052-e1677962608341.png\" alt=\"The upper part of the Countermeasure sub-menu of TorBox v.0.5.2.\" class=\"wp-image-3095\" srcset=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2023\/03\/countermeasure-menu-v052-e1677962608341.png 760w, https:\/\/www.torbox.ch\/wp-content\/uploads\/2023\/03\/countermeasure-menu-v052-e1677962608341-300x195.png 300w\" sizes=\"auto, (max-width: 760px) 85vw, 760px\" \/><\/a><figcaption class=\"wp-element-caption\">The upper part of the Countermeasure sub-menu of TorBox v.0.5.2.<\/figcaption><\/figure>\n<\/div>\n\n\n<p>The primary purpose of the Countermeasure  sub-menu is to offer a simple way of using <a href=\"https:\/\/2019.www.torproject.org\/docs\/pluggable-transports.html\">OBFS4<\/a>, <a href=\"https:\/\/tb-manual.torproject.org\/circumvention\/\">Snowflake, and Meek-Azure<\/a> bridges. <strong>Bridges circumvent censorship<\/strong>, e.g., on networks where Tor guard nodes and Tor connection handshakes are blocked. Thus, they are providing an entry to the Tor network. Additionally, the implementation of pluggable transports theoretically makes it possible to disguise Tor traffic in such a way that an ISP, network, government, or other censors cannot detect the use of Tor. The traffic then looks like <em>http<\/em> or another protocol. However, because, in general, using bridges lowers the network speed, it is best only to use them if necessary. Meek-Azure and Snowflake are probably slower than OBFS4, why it is preferable to try first OBFS4 before activating Snowflake or Meek-Azure.&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>OBFS4<\/strong> makes Tor traffic look random. Activating OBFS4 bridges can be problematic behind a tightly configured firewall (see more <a rel=\"noreferrer noopener\" href=\"https:\/\/www.torbox.ch\/?page_id=112#i-selected-to-use-obfs4-bridges-with-pluggable-transports-when-i-started-torbox-the-first-time-but-so-far-im-unable-to-connect-to-the-internet-torbox-received-a-valid-ip-from-the-router-but-tor-stuck-at-bootstrapped-0-what-can-i-do\" target=\"_blank\">here<\/a>). Usually, OBFS4 works well in countries with moderate Internet censorship.<\/li>\n\n\n\n<li><strong>Snowflake<\/strong> is an improvement upon&nbsp;<a href=\"https:\/\/crypto.stanford.edu\/flashproxy\/\">Flashproxy<\/a>. It sends your traffic through&nbsp;<a href=\"https:\/\/en.wikipedia.org\/wiki\/WebRTC\">WebRTC<\/a>, a peer-to-peer protocol with built-in&nbsp;<a href=\"https:\/\/en.wikipedia.org\/wiki\/Hole_punching_(networking)\">NAT punching<\/a>.&nbsp;Usually, Snowflake is more effective in China, Iran, Russia or Turkmenistan (see also <a href=\"https:\/\/github.com\/radio24\/TorBox\/discussions\/179\">here<\/a>).<\/li>\n\n\n\n<li><strong>Meek<\/strong> uses a technique called &#8220;<a href=\"https:\/\/en.wikipedia.org\/wiki\/Domain_fronting\">domain fronting<\/a>&#8221; to send a message to a Tor relay in a way that is hard to block. <strong>Meek-Azure<\/strong> makes it look like you are browsing to&nbsp;<a href=\"https:\/\/en.wikipedia.org\/wiki\/Microsoft_Azure\">Microsoft\u2019s Azure<\/a>&nbsp;server&nbsp; instead of using Tor. <\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><a href=\"https:\/\/metrics.torproject.org\/userstats-bridge-transport.html?start=2021-10-04&amp;end=2023-10-04&amp;transport=obfs4&amp;transport=snowflake\"><img loading=\"lazy\" decoding=\"async\" width=\"760\" height=\"420\" src=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2023\/10\/bridge-use-22-23-e1696555692562.png\" alt=\"Most used is OBFS4 and Snowflake.\" class=\"wp-image-3403\"\/><\/a><figcaption class=\"wp-element-caption\"><a href=\"https:\/\/metrics.torproject.org\/userstats-bridge-transport.html?start=2021-10-04&amp;end=2023-10-04&amp;transport=obfs4&amp;transport=snowflake\">Most used is OBFS4 and Snowflake<\/a>.<\/figcaption><\/figure>\n<\/div>\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p>After&nbsp;<a href=\"https:\/\/www.torbox.ch\/?page_id=1168\">installing TorBox<\/a>&nbsp;either, by using the image file and the&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2023\/07\/TorBox-A5-RPI4-053.png\" target=\"_blank\">corresponding start-up instruction<\/a> or&nbsp;<a href=\"https:\/\/www.torbox.ch\/?page_id=1168#script\">by running our installation script<\/a>, OBFS4 bridges, Snowflake and Meek-Azure are already configured and can be activated with the first start-up of TorBox or later by using the Countermeasure menu entries 2, 7, or 12. However, only one of these pluggable transports can be activated at once.<\/p>\n\n\n\n<p>In the following, we look at all menu entries one by one:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu entry 1: All about bridges and pluggable transports &#8211; read me first<\/strong>: This brief introduction is intended to help new users, in particular, to understand and simplify the use of tor bridges and pluggable transports.<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu entry 2: Activate configured OBFS4 bridges to circumvent censorship<\/strong>: Use that menu entry to start the OBFS4 bridge mode. Unlike Snowflake and Meek-Azure, OBFS4 supports the use of several different bridges, which makes your connection more stable. With this menu, you can activate all OBFS4 bridges, only the ones, which are online, or you can specifically select bridges to be activated.<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu entry 3: Add additional OBFS4 bridges<\/strong>: OBFS4 bridges can either added automatically or manually. If manually added, the input box takes only one bridge address at a time. In other words: if you want to add three bridges, then the input box appears three times. If you&#8217;re going to add several bridges at once, then select menu entry 13. Apart from the automatic method, you have other ways to obtain OBFS4 bridges:<br><br>\n<ul class=\"wp-block-list\">\n<li>Direct from the <a href=\"https:\/\/bridges.torproject.org\/\">Tor Bridge database<\/a> (chose &#8220;Advanced Options&#8221;, &#8220;obfs4&#8221; and press &#8220;Get Bridges&#8221;).<\/li>\n\n\n\n<li>Via email to <a rel=\"noreferrer noopener\" href=\"mailto:bridges@torproject.org?body=get%20transport%20obfs4\" target=\"_blank\">bridges@torproject.org<\/a>, using an address from Gmail or Riseup with &#8220;<a rel=\"noreferrer noopener\" href=\"mailto:bridges@torproject.org?body=get%20transport%20obfs4\" target=\"_blank\">get transport obfs4<\/a>&#8221; in the body of the mail.<\/li>\n\n\n\n<li>Via Telegram (official): <a href=\"https:\/\/t.me\/GetBridgesBot\">https:\/\/t.me\/GetBridgesBot<\/a> ; then use \/bridges to get a bridge.<\/li>\n\n\n\n<li>(Not recommended, only if needed): Via Telegram (unofficial): <a href=\"https:\/\/t.me\/tor_bridges\">https:\/\/t.me\/tor_bridges<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu entry 4: List all xy OBFS4 bridges<\/strong>: This menu entry will list all already configured OBFS4 bridges and show the bridge&#8217;s state (<strong>online<\/strong>, <strong>offline<\/strong>, or <strong>doesn&#8217;t exist<\/strong>). However, the status of the OBFS4 bridge can only be shown if Tor&#8217;s bridge database can be reached. Each line is one OBFS4 bridge listed as <strong>Number: IP:Port Fingerprint<\/strong> &#8211; <strong>Status<\/strong> (name, certificate, packet size, and timing obfuscation are not shown). You can look up more details using the&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/metrics.torproject.org\/rs.html\" target=\"_blank\">Relay Search Tool on the Tor Metrics<\/a>&nbsp;with the bridge&#8217;s fingerprint.<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><a href=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2020\/05\/what_a_bridge.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"108\" src=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2020\/05\/what_a_bridge-1024x108.png\" alt=\"The elements of a bridge address\" class=\"wp-image-1379\"\/><\/a><figcaption class=\"wp-element-caption\">The elements of a bridge address<\/figcaption><\/figure>\n<\/div>\n\n\n<p><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-white-color\">.<\/mark><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu entry 5: Delete configured OBFS4 bridges<\/strong>: OBFS4 bridges can be removed all, only the ones that don&#8217;t exist anymore or selected ones. After removing all bridges, the OBFS4 mode will automatically be deactivated, and TorBox will try to reach the Tor network directly through the Internet, which is the default. However, deactivating the OBFS4 mode by removing all OBFS4 bridges is unnecessary &#8211; just deactivate them (menu entry 6).<br><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-white-color\">.<\/mark><\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-large\"><a href=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2020\/05\/bridge-list.png\"><img loading=\"lazy\" decoding=\"async\" width=\"360\" height=\"202\" src=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2020\/05\/bridge-list-e1590975881659.png\" alt=\"An example of a list of bridges.\" class=\"wp-image-1532\"\/><\/a><figcaption class=\"wp-element-caption\">An example of a list of OBFS4 bridges.<\/figcaption><\/figure>\n<\/div>\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu <strong>entry<\/strong> 6: Deactivate configured OBFS4 bridges<\/strong>: Use that menu entry to deactivate OBFS4 bridges. With choosing to deactivate all OBFS4 bridges, the OBFS4 mode will also be automatically deactivated, and TorBox will try to reach the Tor network directly through the Internet, which is the default. Alternatively, you can also only deactivate bridges that are offline or specifically select bridges to be deactivated. In this case, the OBFS4 mode will still be activated until all OBFS4 bridges are deactivated.<br><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-white-color\">.<\/mark><\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu entry 7: Activate configured SNOWFLAKE bridges to circumvent censorship<\/strong>: Use that menu entry to start the SNOWFLAKE bridge mode. Currently, Snowflake supports only one bridge line. Only the first one will be used if you select several bridge lines in <em>torrc<\/em>.<br><br><strong>Important<\/strong>: The OFFLINE\/ONLINE status of Snowflake- and Meek-Bridges is always labeled as OFFLINE in the bridge database. Therefore, the status is not displayed in the list of Snowflake bridges.&nbsp;<br><br><strong>Please be patient!<\/strong> It can take <strong>up to 5 minutes<\/strong> until TorBox is again ready to relay the data stream of your clients through the tor network &#8211; until then, the clients will be offline. Usually, any error messages can be ignored, just wait! You should see \u201cBootstrapped 100%: Done\u201d at the end. Press <strong>q<\/strong> to leave the log. Tor Statistics (and probably some other tools) will not work under Snowflake. <\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><a href=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2023\/10\/snowflake-bridge-selection.png\"><img loading=\"lazy\" decoding=\"async\" width=\"752\" height=\"379\" src=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2023\/10\/snowflake-bridge-selection.png\" alt=\"\" class=\"wp-image-3374\" srcset=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2023\/10\/snowflake-bridge-selection.png 752w, https:\/\/www.torbox.ch\/wp-content\/uploads\/2023\/10\/snowflake-bridge-selection-300x151.png 300w\" sizes=\"auto, (max-width: 752px) 85vw, 752px\" \/><\/a><\/figure>\n<\/div>\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu entry 8: Add additional SNOWFLAKE bridges<\/strong>: SNOWFLAKE bridges can either added automatically or manually. If manually added, the input box takes only one bridge address at a time. <\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu entry 9: List all xy SNOWFLAKE bridges<\/strong>: This menu entry will list all already configured SNOWFLAKE bridges. Each line is one SNOWFLAKE bridge listed as <strong>Number: IP:Port Fingerprint<\/strong> (name and other advanced information are not shown). You can look up more details using the&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/metrics.torproject.org\/rs.html\" target=\"_blank\">Relay Search Tool on the Tor Metrics<\/a>&nbsp;with the bridge&#8217;s fingerprint.<br><br><strong>Important<\/strong>: The OFFLINE\/ONLINE status of Snowflake- and Meek-Bridges is always labeled as OFFLINE in the bridge database. Therefore, the status is not displayed in the list of Snowflake bridges.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu <strong>entry<\/strong> 10: Delete configured SNOWFLAKE bridges<\/strong>: SNOWFLAKE bridges can be removed all, only the ones that don&#8217;t exist anymore or selected ones. After removing all bridges, the SNOWFLAKE mode will automatically be deactivated, and TorBox will try to reach the Tor network directly through the Internet, which is the default. However, deactivating the SNOWFLAKE mode by removing all SNOWFLAKE bridges is unnecessary &#8211; just deactivate them (menu entry 11).<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu <strong>entry<\/strong> 11: Deactivate configured SNOWFLAKE bridges<\/strong>: Use that menu entry to deactivate SNOWFLAKE.<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu entry 12: Activate\/Deactivate MEEK-AZURE to circumvent censorship:<\/strong> Use that menu entry to start the SNOWFLAKE bridge mode. <br><br><strong>Please be patient!<\/strong> It can take up to 5 minutes until TorBox is again ready to relay the data stream of your clients through the tor network &#8211; until then, the clients will be offline. Usually, any error messages can be ignored, just wait! You should see \u201cBootstrapped 100%: Done\u201d at the end. Press <strong>q <\/strong>to leave the log. Tor Statistics (and probably some other tools) will not work under Meek-Azure. <\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu entry 13: Enter the advanced configuration editor<\/strong>: This menu entry gives access to the Tor configuration file. You should know what you are doing before you change anything in the configuration file &#8212; here, you can break your TorBox. If you are unsure, then <a href=\"mailto:anonym@torbox.ch\">contact us<\/a>. Did you something wrong? You can always overwrite this configuration with the default one, stored in ~\/torbox\/etc\/tor\/. After changing the configuration, use the following commands in the editor: CTRL-S to save the changes. CTRL-X to exit the editor.<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><a href=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2019\/09\/advanced_editor-e1569357580919.png\"><img loading=\"lazy\" decoding=\"async\" width=\"780\" height=\"526\" src=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2019\/09\/advanced_editor-e1569357580919.png\" alt=\"The advanced configuration editor\" class=\"wp-image-872\" style=\"width:760px;height:512px\" srcset=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2019\/09\/advanced_editor-e1569357580919.png 780w, https:\/\/www.torbox.ch\/wp-content\/uploads\/2019\/09\/advanced_editor-e1569357580919-300x202.png 300w, https:\/\/www.torbox.ch\/wp-content\/uploads\/2019\/09\/advanced_editor-e1569357580919-768x518.png 768w\" sizes=\"auto, (max-width: 780px) 85vw, 780px\" \/><\/a><figcaption class=\"wp-element-caption\">The advanced configuration editor<\/figcaption><\/figure>\n<\/div>\n\n\n<p><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu entry 14: Activate\/Deactivate TorBox&#8217;s automatic counteractions (TACA):<\/strong> TACA avoids downtime and improve user experience with lower bandwidth. <\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><a href=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2022\/06\/TACA-v050-e1656347959613.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"340\" src=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2022\/06\/TACA-v050-1024x340.png\" alt=\"\" class=\"wp-image-2687\" style=\"width:760px;height:undefinedpx\"\/><\/a><\/figure>\n<\/div>\n\n\n<p>Currently, TACA handles six situations (see image above):<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Protection against entry guard failing and overloaded tor network:<\/strong> This will automatically switch to a new entry guard if the current one is reporting that it is failing or potentially overloaded.<\/li>\n\n\n\n<li><strong>Protection against interrupted wifi (wlan0\/wlan1) connection with the Internet<\/strong>: If TorBox loses the connection to the wifi (interface wlan0 or wlan1), it tries to automatically reconnect to the best available wifi, which the user was connected to before (passwords are automatically stored and handled by <code>wpa_supplicant<\/code>). In places with several weak wifi&#8217;s, it is recommended to log into all of them by using <a href=\"https:\/\/www.torbox.ch\/?page_id=775\">Torbox\u2019s Wireless Manager<\/a> so that TACA can switch from one to another if necessary.<\/li>\n\n\n\n<li><strong>Protection against an excessive number of failing tor circuits (25 failures in 2 minutes):<\/strong> This will restart tor. However, if connected to a wifi (interface wlan0 or wlan1), it will additionally try to reconnect to the best available wifi (see point 2).<\/li>\n\n\n\n<li><strong>Protection against excessive connection failing with tor circuits (40 failures in 2 minutes):<\/strong> This will restart tor. However, if connected to a wifi (interface wlan0 or wlan1), it will additionally try to reconnect to the best available wifi (see point 2).<\/li>\n\n\n\n<li><strong>Protection against tor bootstrapping problems <strong>(25 failures in 2 minutes)<\/strong>:<\/strong> Because there are several causes of a bootstrapping problem, if connected to a wifi (interface wlan0 or wlan1), TACA will try to reconnect to the best available wifi first (see point 2). Additionally, the tor configuration is flushed.<\/li>\n\n\n\n<li><strong>Protection against out of sync time:<\/strong> If TACA detects an out of sync system time, it re-synchronize the system time with ntpdate.<\/li>\n<\/ol>\n\n\n\n<p><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu entry 15: Change or randomize TorBox&#8217;s hostname<\/strong>: At the beginning of 2023, some users in highly authoritarian countries reported that clients with the hostname&nbsp;<em>TorBox<\/em>&nbsp;were blocked from accessing the Internet. This menu entry gives the possibility to change or randomize TorBox&#8217;s hostname.<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><a href=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2023\/10\/change-hostname.png\"><img loading=\"lazy\" decoding=\"async\" width=\"761\" height=\"252\" src=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2023\/10\/change-hostname.png\" alt=\"\" class=\"wp-image-3414\" srcset=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2023\/10\/change-hostname.png 761w, https:\/\/www.torbox.ch\/wp-content\/uploads\/2023\/10\/change-hostname-300x99.png 300w\" sizes=\"auto, (max-width: 761px) 85vw, 761px\" \/><\/a><\/figure>\n<\/div>\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu entry 16: Countermeasure against a tightly configured firewall<\/strong>: Since 2021, the TorBox team observed more and more providers (especially in connection with open hotspots) blocking ports needed for tor to work properly (tor commonly uses ports 80, 443, 9001 and 9030 for network traffic and directory information). If activated, this entry takes care that tor uses only ports 80 and 443 for its data stream. This feature is activated by default. However, <strong>don\u2019t use it<\/strong>&nbsp;if you plan to use bridges or to run an OBFS4 bridge relay!<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu entry 17: Countermeasure against a disconnection when idle feature<\/strong>: Certain Internet providers (usually at airports, in hotels, coffee houses, etc.) disconnect the network connection after a particular time of inactivity. In this case, the Tor statistics (<a href=\"https:\/\/www.torbox.ch\/?page_id=775\">main menu entry 1<\/a>) no longer shows any data transfer. Usually, after about 15 seconds, errors in communication with the Tor network appear. This menu entry activates\/deactivates a recurring Ping to google.com to prevent disconnection by an Internet provider with an activated &#8220;disconnect when idle feature&#8221;.<br><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-white-color\">.<\/mark><\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Menu entry 18: Connect\/Disconnect TorBox to\/from a VPN:<\/strong> This menu entry will connect the TorBox to a VPN so that the local network data from the command prompt is routed through the VPN. However, this menu entry will not restart Tor, and your client network data will still be routed directly through Tor using the interface highlighted in the main menu. This is useful if your ISP censors the network traffic so that TorBox cannot update Tor or TorBox. If you want to route Tor through VPN, please, use entry 9 in the <a href=\"https:\/\/www.torbox.ch\/?page_id=775\">main menu<\/a>. <br><br>Before using this menu entry, please ensure that one or more *.ovpn \u2013 files are in the ~\/openvpn directory so that TorBox can execute OpenVPN with that file.<br><br>Using that menu entry again deactivates the VPN connection, and the local network data from the command prompt is routed through your Internet provider without a VPN (default). However, this menu entry will not restart. <strong>Client network data will always be routed through Tor.<\/strong><br><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-white-color\">.<\/mark><\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><a href=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2025\/05\/TorBoxs-different-connection-modes-e1748195025684.png\"><img loading=\"lazy\" decoding=\"async\" width=\"760\" height=\"682\" src=\"https:\/\/www.torbox.ch\/wp-content\/uploads\/2025\/05\/TorBoxs-different-connection-modes-e1748195025684.png\" alt=\"TorBox\u2019s different connection modes\" class=\"wp-image-3903\"\/><\/a><figcaption class=\"wp-element-caption\">TorBox\u2019s different connection modes<\/figcaption><\/figure>\n<\/div>\n\n\n<center><h1><p style=\"text-align: center;\">\u2022 \u2022 \u2022<\/p><\/h1><\/center>\n\n\n\n<p><strong>Problems and questions<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Can I use TorBox and VPN together? &#8211;&gt; see <a rel=\"noreferrer noopener\" href=\"https:\/\/www.torbox.ch\/?page_id=112#can-i-use-torbox-and-vpn-together\" target=\"_blank\">here<\/a>.<\/li>\n\n\n\n<li>Can Tor protect me against tracking and\/or fingerprinting in webbrowser to guaranty my anonymity accessing a website? &#8211;&gt; see <a href=\"https:\/\/www.torbox.ch\/?page_id=112#can-tor-protect-me-against-tracking-andor-fingerprinting-in-webbrowser-to-guaranty-my-anonymity-accessing-a-website\">here<\/a>.<\/li>\n\n\n\n<li>I\u2019m connected to a public wireless network; everything works as expected. However, every x minutes, the connection to the wireless network stops completely, and I have to repeat the entire login procedure. What could be the reason? &#8211;&gt; see <a rel=\"noreferrer noopener\" href=\"https:\/\/www.torbox.ch\/?page_id=112#ping\" target=\"_blank\">here<\/a>.<\/li>\n\n\n\n<li>Is it possible to activate an OBFS4 bridge relay and simultaneously use OBFS4 bridges on the same TorBox? &#8211;&gt; see <a href=\"https:\/\/www.torbox.ch\/?page_id=112#is-it-possible-to-activate-an-obfs4-bridge-relay-and-simultaneously-use-obfs4-bridges-on-the-same-torbox\">here<\/a>.<\/li>\n\n\n\n<li>Is it possible to activate an OBFS4 bridge relay and simultaneously use the countermeasure against tightly configured firewalls? \u2013&gt; see&nbsp;<a href=\"https:\/\/www.torbox.ch\/?page_id=112#is-it-possible-to-activate-an-obfs4-bridge-relay-and-simultaneously-use-the-countermeasure-against-tightly-configured-firewalls\">here<\/a>.<\/li>\n\n\n\n<li>Is it possible to use bridges and simultaneously the countermeasure against tightly configured firewalls? &#8211;&gt; see <a href=\"https:\/\/www.torbox.ch\/?page_id=112#is-it-possible-to-use-bridges-and-simultaneously-the-countermeasure-against-tightly-configured-firewalls\">here<\/a>.<\/li>\n\n\n\n<li>I set up an Onion Service and want to share a folder with or without client authorization, but the TorBrowser on another system shows only errors that it cannot connect to the Onion Service. What is wrong here? &#8211;&gt; see <a href=\"https:\/\/www.torbox.ch\/?page_id=112#i-set-up-an-onion-service-and-want-to-share-a-folder-with-or-without-client-authorization-but-the-torbrowser-on-another-system-shows-only-errors-that-it-cannot-connect-to-the-onion-service-what-is-wrong-here\">here<\/a>.<\/li>\n\n\n\n<li>Is there a way to force \/ block TorBox to use an exit node in a specific country? &#8211;&gt; see <a href=\"https:\/\/www.torbox.ch\/?page_id=112#is-there-a-way-to-forceblock-torbox-to-use-an-exit-node-in-a-specific-country\">here<\/a>. <\/li>\n\n\n\n<li>My TorBox is connected to a captive portal (used in airports, hotels, coffee houses etc.) and cannot connect to bridges. What\u2019s wrong? &#8211;&gt; see <a href=\"https:\/\/www.torbox.ch\/?page_id=112#my-torbox-is-connected-to-a-captive-portal-used-in-airports-hotels-coffee-houses-etc-and-cannot-connect-to-bridges-whats-wrong\">here<\/a>.<\/li>\n\n\n\n<li>Ok, I\u2019m using bridges so that the Tor Browser \/ Tails is running behind TorBox. However, isn\u2019t that a risk for my security\/anonymity (\u201cTor over Tor\u201d scenario)? &#8211;&gt; see <a href=\"https:\/\/www.torbox.ch\/?page_id=112#ok-im-using-bridges-so-that-the-tor-browser-tails-is-running-behind-torbox-however-isnt-that-a-risk-for-my-securityanonymity-tor-over-tor-scenario\">here<\/a>.<\/li>\n\n\n\n<li>Why is the local TorBox traffic not routed through tor? Why is by default Google\u2019s and\/or Cloudflare\u2019s service used to circumvent cheap censorship measures or to test the connectivity? Can I change Google and \/ or Cloudflare services with something else? &#8211;&gt; see <a href=\"https:\/\/www.torbox.ch\/?page_id=112#why-is-the-local-torbox-traffic-not-routed-through-tor-why-is-by-default-googles-andor-cloudflares-service-used-to-circumvent-cheap-censorship-measures-or-to-test-the-connectivity-can-i-change-google-andor-cloudflare-services-with-something-else\">here<\/a>.<\/li>\n\n\n\n<li>Why is tor so slow \u2013 is the tor network broken? &#8211;&gt; see <a href=\"https:\/\/www.torbox.ch\/?page_id=112\">here<\/a>.<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The primary purpose of the Countermeasure sub-menu is to offer a simple way of using OBFS4, Snowflake, and Meek-Azure bridges. Bridges circumvent censorship, e.g., on networks where Tor guard nodes and Tor connection handshakes are blocked. Thus, they are providing an entry to the Tor network. Additionally, the implementation of pluggable transports theoretically makes it &hellip; <a href=\"https:\/\/www.torbox.ch\/?page_id=797\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Sub-menu: Countermeasure&#8221;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_uag_custom_page_level_css":"","footnotes":""},"class_list":["post-797","page","type-page","status-publish","hentry"],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false,"post-thumbnail":false},"uagb_author_info":{"display_name":"John Doe","author_link":"https:\/\/www.torbox.ch\/?author=2"},"uagb_comment_info":0,"uagb_excerpt":"The primary purpose of the Countermeasure sub-menu is to offer a simple way of using OBFS4, Snowflake, and Meek-Azure bridges. Bridges circumvent censorship, e.g., on networks where Tor guard nodes and Tor connection handshakes are blocked. Thus, they are providing an entry to the Tor network. Additionally, the implementation of pluggable transports theoretically makes it&hellip;","_links":{"self":[{"href":"https:\/\/www.torbox.ch\/index.php?rest_route=\/wp\/v2\/pages\/797","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.torbox.ch\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.torbox.ch\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.torbox.ch\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.torbox.ch\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=797"}],"version-history":[{"count":109,"href":"https:\/\/www.torbox.ch\/index.php?rest_route=\/wp\/v2\/pages\/797\/revisions"}],"predecessor-version":[{"id":3905,"href":"https:\/\/www.torbox.ch\/index.php?rest_route=\/wp\/v2\/pages\/797\/revisions\/3905"}],"wp:attachment":[{"href":"https:\/\/www.torbox.ch\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=797"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}