Would you like to inspect the original subtitles? These are the user uploaded subtitles that are being translated:
1
00:00:00,750 --> 00:00:08,790
Previously we seen how easy it is to connect to a VPN server if the provider offers a VPN client.
2
00:00:08,820 --> 00:00:13,730
As I said earlier most VPN providers do not support Thales.
3
00:00:13,770 --> 00:00:20,220
Therefore if you want to connect to a VPN from Thales and your provider does not support Thales you'll
4
00:00:20,220 --> 00:00:27,540
have to manually modify the firewall settings installed the needed software and connect to the VPN server
5
00:00:27,540 --> 00:00:29,900
that you want to connect to.
6
00:00:29,910 --> 00:00:36,360
So in this lecture I'm going to show you how to do that so that you can connect to any VPN server from
7
00:00:36,360 --> 00:00:43,590
tells please keep in mind like I said earlier connecting to a VPN from Thales is optional.
8
00:00:43,590 --> 00:00:49,980
This is not a required step because as we know Thales automatically forces all traffic to go through
9
00:00:49,980 --> 00:00:51,070
the Tor network.
10
00:00:51,180 --> 00:00:57,450
Therefore by default it is more private and more anonymous than most operating systems.
11
00:00:57,450 --> 00:01:02,010
So the main thing that I'm actually going to be showing you in this lecture is how to configure Thales
12
00:01:02,490 --> 00:01:09,160
so that it redirects data to our VPN provider and then connect to this VPN provider.
13
00:01:09,270 --> 00:01:11,200
So let's go to Thales.
14
00:01:11,490 --> 00:01:14,070
As you can see here I haven't even logged in yet.
15
00:01:14,160 --> 00:01:17,790
Before doing that you need to add an admin account.
16
00:01:18,090 --> 00:01:19,930
So I showed you how to do that before.
17
00:01:20,020 --> 00:01:25,620
We're going to click on the plus and we're going to click on the administrator password and we're just
18
00:01:25,620 --> 00:01:32,130
going to set an admin password so that we can execute commands with Admin privileges.
19
00:01:32,250 --> 00:01:40,120
They're going to click on add two added and then we're gonna start tells Now once you're inside tells
20
00:01:40,380 --> 00:01:42,490
I'm going to go and start my terminal.
21
00:01:42,550 --> 00:01:46,480
So we're gonna go through applications and run the terminal from here.
22
00:01:47,980 --> 00:01:52,810
This is basically a program that allow us to execute commands on the system.
23
00:01:52,810 --> 00:01:57,520
I know it sounds a little bit scary but don't worry I'm gonna walk you through it and the first thing
24
00:01:57,550 --> 00:02:04,870
I want to do is change my privileges to admin privileges because I'm going to be modifying the system
25
00:02:04,870 --> 00:02:07,750
settings and I'm going to be installing additional software.
26
00:02:07,840 --> 00:02:13,200
Therefore I need to be admin for this so to change our permissions to admin.
27
00:02:13,220 --> 00:02:20,920
We're gonna do sudo as you it's going to ask you for the admin password so I'm gonna put the password
28
00:02:20,950 --> 00:02:24,950
that I just said at the start of the video.
29
00:02:25,020 --> 00:02:31,530
Now if you notice at the start I was saying amnesia which is the user that we were using at amnesia
30
00:02:31,990 --> 00:02:39,460
but now it's saying rude at amnesia meaning that we're gonna be executing commands as rude rude is the
31
00:02:39,490 --> 00:02:45,880
admin user account on the system so I'm going to clear the screen and the first command that I want
32
00:02:45,880 --> 00:02:54,130
to run is a command to install open VPN open VPN is a program that we're going to use in order to connect
33
00:02:54,280 --> 00:03:02,440
to our VPN server regardless of what VPN provider you're using whether you use a node or any other VPN
34
00:03:02,440 --> 00:03:03,130
provider.
35
00:03:03,160 --> 00:03:04,390
It doesn't really matter.
36
00:03:04,390 --> 00:03:07,310
You can use open VPN with all of them.
37
00:03:07,360 --> 00:03:12,610
So the first thing that we need to do is install this program on tells and to do that.
38
00:03:12,640 --> 00:03:15,800
All we have to do is do abd get.
39
00:03:15,970 --> 00:03:23,530
This is the program entails that we can use to install other programs and what we want to do is install
40
00:03:24,180 --> 00:03:33,020
and the program that we want to install is called Open VPN so apt get is a program that we use to install
41
00:03:33,080 --> 00:03:38,870
other programs install is what we want to do we want to install another program and the program that
42
00:03:38,870 --> 00:03:42,410
we want to install is called Open VPN.
43
00:03:42,410 --> 00:03:47,150
I'm going to hit enter and this is TELL ME DO I REALLY WANT TO DO THIS.
44
00:03:47,170 --> 00:03:53,630
I'm going to say yes so I'm going to type away from my keyboard and hit enter and perfect.
45
00:03:53,630 --> 00:03:57,200
Now open VPN is installed as you can see in here.
46
00:03:57,320 --> 00:04:04,100
Now you can see the notification that we have right now it's asking us if I want to install this program
47
00:04:04,140 --> 00:04:06,910
on the once or install every time.
48
00:04:07,190 --> 00:04:13,280
If you click on installed every time Thales will install this program every time you start tales because
49
00:04:13,340 --> 00:04:15,220
as we know it tells us amnesia.
50
00:04:15,230 --> 00:04:22,120
So if you pick install on the ones it'll only be installed for the session if you restart the computer.
51
00:04:22,140 --> 00:04:23,700
It will be removed.
52
00:04:23,810 --> 00:04:29,960
So I'm going to click on install every time and this way every time I'm a star tails it'll automatically
53
00:04:29,960 --> 00:04:35,810
install open VPN for me and I'll be able to use it without doing the app to get commands that we just
54
00:04:35,810 --> 00:04:37,280
did.
55
00:04:37,440 --> 00:04:44,860
So now that we have open VPN installed we're actually ready to go and connect to our VPN.
56
00:04:45,030 --> 00:04:52,300
But before doing that you need to go ahead and download the configuration files of your VPN.
57
00:04:52,320 --> 00:04:55,470
Now you need to get these from your VPN Provider.
58
00:04:55,470 --> 00:04:58,040
Most VPN providers will give you that.
59
00:04:58,170 --> 00:05:00,120
The process of doing that is different.
60
00:05:00,120 --> 00:05:02,220
You might even need to communicate with them.
61
00:05:03,060 --> 00:05:09,230
But right now I already have them downloaded in my Tor Browser persistent directory in here.
62
00:05:09,360 --> 00:05:17,040
These are the configuration files that I need for my VPN provider to connect use an open VPN.
63
00:05:17,040 --> 00:05:23,580
The main file which is the conflict file is the file with the dot o VPN extension.
64
00:05:23,580 --> 00:05:31,020
If I double click this file you'll see the open VPN configurations and all you need to do is basically
65
00:05:31,020 --> 00:05:32,330
run open VPN.
66
00:05:32,340 --> 00:05:38,850
The programs that we just installed and tell it to use the configuration in this config file.
67
00:05:38,970 --> 00:05:45,660
This will work on any system you can even do it from Windows or Linux but it won't work from Thales
68
00:05:45,840 --> 00:05:52,210
because like I said earlier Thales is configured to force all traffic through the Tor network.
69
00:05:52,290 --> 00:05:59,010
So before doing that before trying to connect to our VPN we need to modify the firewall settings so
70
00:05:59,010 --> 00:06:07,830
that all data is forced to go through the VPN first and then go to the TOR network so to do that.
71
00:06:07,950 --> 00:06:14,580
I'm going to open the configuration file for the firewall so I'm going to go back to my terminal and
72
00:06:14,640 --> 00:06:15,970
I'm going to do G.
73
00:06:16,050 --> 00:06:23,790
Edit the edit is a text editor so I'm basically saying I want to use a text editor to open a text file
74
00:06:24,180 --> 00:06:30,530
and the text file that I want to open is the text file that controls the firewall in tails.
75
00:06:30,930 --> 00:06:39,910
So the that text file is stored in ATC firm and the name of the text file is firm dot com.
76
00:06:41,470 --> 00:06:47,350
So we're doing G edits because that's the text editor that we want to use and we're telling it we want
77
00:06:47,350 --> 00:06:50,380
to edit the following file.
78
00:06:50,380 --> 00:06:52,770
If I had entered this will open the file for me.
79
00:06:52,780 --> 00:06:59,500
As you can see in here and what we want to do like I said we want to add an exception for the VPN server
80
00:06:59,680 --> 00:07:01,180
that we want to connect to.
81
00:07:01,780 --> 00:07:09,470
So I'm going to scroll down and I'm going to look for where it says whitelist access to local resources.
82
00:07:10,000 --> 00:07:16,390
And in here we're going to add the information of this server that we want to connect to.
83
00:07:16,390 --> 00:07:19,950
We can get this information from here from the conflict file.
84
00:07:19,990 --> 00:07:24,540
Like I said this is the file with the dot o VPN extension.
85
00:07:24,700 --> 00:07:34,390
So the first thing we're going to do is type D A D D R to specify the IP of the VPN server that we want
86
00:07:34,390 --> 00:07:38,130
to connect to and we can get that from the conflict file.
87
00:07:38,370 --> 00:07:40,270
It's after the remote in here.
88
00:07:40,330 --> 00:07:42,570
So we have it right here.
89
00:07:42,670 --> 00:07:50,120
I'm just going to copy this and paste it here then we're going to need to specify the protocol.
90
00:07:50,140 --> 00:07:54,260
So I'm going to type protocol followed by the protocol.
91
00:07:54,400 --> 00:07:59,410
Again looking at the conflict file we can see the protocol is UDP.
92
00:07:59,410 --> 00:08:05,080
So again we're just going to type UDP in here then we need to specify the port.
93
00:08:05,140 --> 00:08:11,170
So we're going to type deep port again we're going to get that from the conflict file from the remote
94
00:08:11,200 --> 00:08:16,620
entry so the remote contains the IP followed by the port so we can see the port here.
95
00:08:16,630 --> 00:08:19,090
It's 1 1 9 1.
96
00:08:19,090 --> 00:08:29,730
Again we go back here 1 1 9 1 and we're gonna save for this specific IP with this specific protocol
97
00:08:29,760 --> 00:08:31,230
with this port.
98
00:08:31,290 --> 00:08:36,870
I want you to allow the admin user the route user to do anything.
99
00:08:36,870 --> 00:08:46,720
So we're gonna open two curly brackets and we're gonna see mod owner the new I.D. of the owner is rude
100
00:08:46,740 --> 00:08:53,490
like I said root is the admin in Linux and we're gonna say we want to accept all connections that this
101
00:08:53,490 --> 00:09:03,270
user does to this specific IP with this specific protocol with this specific port the next thing that
102
00:09:03,270 --> 00:09:11,310
we need to do is redirect and force all traffic to go through this VPN server so that anything that
103
00:09:11,310 --> 00:09:17,940
the operating system does will have to flow this way and that way it is very difficult for other programs
104
00:09:17,940 --> 00:09:26,250
to access the Internet directly and therefore leak information about our real IP and real identity.
105
00:09:26,250 --> 00:09:34,400
So to do that we're going to scroll down to where it says Tor is allowed to do anything it wants to
106
00:09:34,400 --> 00:09:35,090
do.
107
00:09:35,150 --> 00:09:39,740
We're gonna say this can only be valid if the outer face.
108
00:09:39,770 --> 00:09:50,810
So the interface in which data flows through is t u and 0 now 2 and 0 is a virtual interface that doesn't
109
00:09:50,810 --> 00:09:52,050
exist right now.
110
00:09:52,130 --> 00:09:58,780
It will be created once we connect to the VPN server and what we're doing right now in here is force
111
00:09:58,780 --> 00:10:05,540
and all traffic to go through this interface that will be creating the encrypted tunnel between our
112
00:10:05,540 --> 00:10:10,430
computer and the VPN server so that's it.
113
00:10:10,430 --> 00:10:15,920
Right now first of all we added a rule to allow Thales to connect to the VPN server.
114
00:10:16,160 --> 00:10:23,000
And second we configured the firewall to force all traffic to go through the connection of this VPN
115
00:10:23,000 --> 00:10:23,510
server.
116
00:10:24,080 --> 00:10:24,700
So I'm gonna do.
117
00:10:24,700 --> 00:10:30,310
Control is to save this and we're gonna do control q to quit the file.
118
00:10:30,350 --> 00:10:37,820
We're also done with the config so I'm going to close it in here and I'm gonna clear my screen and right
119
00:10:37,850 --> 00:10:44,660
now we just have to do one more thing before connecting to the VPN server which is restarting our firewall
120
00:10:44,720 --> 00:10:47,260
for these changes to take effect.
121
00:10:47,450 --> 00:10:56,210
To do that we're going to do ATC in it the D firm which is the name of my firewall and we're going to
122
00:10:56,210 --> 00:10:59,330
say I want to restart this firewall.
123
00:10:59,330 --> 00:11:06,050
We're going to hit enter and if you fail at the stage it means that you miss configured one of the rules.
124
00:11:06,080 --> 00:11:11,990
So please just revise the video and make sure you set up the rules exactly like I did.
125
00:11:12,080 --> 00:11:15,930
As you can see I was able to restart it with no issues at all.
126
00:11:15,950 --> 00:11:24,200
Therefore right now I am ready to go ahead and connect to my VPN server now before doing that let me
127
00:11:24,200 --> 00:11:25,270
just show you right here.
128
00:11:25,280 --> 00:11:29,860
As you can see the configuration files are stored in my home.
129
00:11:29,900 --> 00:11:32,120
Persistent tor browser.
130
00:11:32,270 --> 00:11:38,660
So I need to navigate to this location before being able to use these files.
131
00:11:38,660 --> 00:11:45,740
So we're going to use the CDE command to change my current working directory to this directory.
132
00:11:45,860 --> 00:11:53,750
So we're going to do CDE followed by persistent and you can use the TARP to auto complete for example.
133
00:11:53,750 --> 00:12:00,410
I'm just gonna type T O R and press tab to auto complete tor browser.
134
00:12:00,410 --> 00:12:04,670
If I hit enter you'll see that I am inside the correct path right now.
135
00:12:04,670 --> 00:12:06,560
Same path as you see in here.
136
00:12:07,220 --> 00:12:13,130
Therefore right now I can go ahead and use this file to connect to my VPN server.
137
00:12:13,820 --> 00:12:19,110
So we're going to use the program open VPN that we installed at the start of the video.
138
00:12:19,280 --> 00:12:27,080
So we're gonna do open VPN dash dash config to specify the config file and again as you can see in my
139
00:12:27,080 --> 00:12:31,680
case the conflict file right here is called config dot or VPN.
140
00:12:31,880 --> 00:12:37,490
In your case it might be called something else but the config file is always the file that ends with
141
00:12:37,490 --> 00:12:38,880
DOT or VPN.
142
00:12:39,530 --> 00:12:44,220
So I'm gonna type config that or VPN and before I had entered.
143
00:12:44,240 --> 00:12:47,720
Just gonna go over the command or use an open VPN.
144
00:12:47,720 --> 00:12:51,780
This is the program that will allow us to connect to our VPN server.
145
00:12:51,860 --> 00:12:57,560
We're doing dash dash contact to specify the config file and my config file is called config.
146
00:12:57,560 --> 00:13:00,930
That old VPN I'm going to hit enter.
147
00:13:01,760 --> 00:13:05,220
And as you can see it's going to ask me for the password.
148
00:13:05,240 --> 00:13:11,390
This is your password to connect to your VPN server not the password of the system.
149
00:13:11,390 --> 00:13:15,820
So I'm going to input mine right now here and there.
150
00:13:16,110 --> 00:13:16,810
And perfect.
151
00:13:17,240 --> 00:13:23,340
If you see initialization sequence completed this means that the connection has been established.
152
00:13:23,450 --> 00:13:32,320
Now you will also notice that the Onion icon in here will have an X as if you're not connected to anything.
153
00:13:32,390 --> 00:13:33,700
Don't worry about this.
154
00:13:33,770 --> 00:13:39,010
You're seeing that because right now the traffic is forced to go through the VPN server.
155
00:13:39,020 --> 00:13:45,080
Like I said and that's why the system thinks that it's not connected but it is actually connected to
156
00:13:45,080 --> 00:13:48,320
the VPN server to confirm this.
157
00:13:48,320 --> 00:13:51,260
I'm gonna go and run my tor browser.
158
00:13:53,120 --> 00:14:00,190
And I'm just gonna go to check the Tor Project dot org and perfect as you can see it's still announced
159
00:14:00,250 --> 00:14:04,550
that my browser right now is configured to use data or browser.
160
00:14:05,270 --> 00:14:11,840
So right now what's happening is we're connecting to the VPN first and then our traffic is routed to
161
00:14:11,840 --> 00:14:17,750
the TOR network and then like I said we can bounce through three nodes and then go to the Internet or
162
00:14:17,750 --> 00:14:22,240
stay within the Tor network and access on hidden services.
163
00:14:22,420 --> 00:14:28,240
Now just to make sure that this is the way our computer is set up and it can't access the terror network
164
00:14:28,240 --> 00:14:30,430
directly or the Internet directly.
165
00:14:30,520 --> 00:14:35,350
What I'm going to do in here I'm just going to go back to my terminal window and I'm going to press
166
00:14:35,350 --> 00:14:43,210
control and see to quit the running program right here and now if I go back to my Tor Browser and refresh
167
00:14:43,210 --> 00:14:49,720
the page you will see that I do not have connection and that is perfect because while I just did right
168
00:14:49,720 --> 00:14:56,180
now I disconnected from the VPN server and because I did that I can't access anything.
169
00:14:56,620 --> 00:14:58,350
And this is exactly what we want.
170
00:14:58,350 --> 00:15:06,580
We want our computer to be configured in a way that it forces all traffic through the VPN server if
171
00:15:06,580 --> 00:15:12,130
you want to go back to the previous configuration where traffic is forced through the Tor network directly.
172
00:15:12,580 --> 00:15:15,030
All you have to do is simply restart tails.
173
00:15:15,070 --> 00:15:16,550
Tails is amnesiac.
174
00:15:16,600 --> 00:15:23,080
All of these configurations will disappear and you will be connected to the TOR network directly.
175
00:15:23,080 --> 00:15:30,520
As usual now this could be a feature and can be something annoying if you always want to connect to
176
00:15:30,520 --> 00:15:36,880
a VPN because every time you restart tails you will have to do this you will have to do all of the steps
177
00:15:36,880 --> 00:15:43,240
that I showed you previously in order to connect your VPN provider because your settings will be reset
178
00:15:43,270 --> 00:15:44,620
every time you restart.
19881
Can't find what you're looking for?
Get subtitles in any language from opensubtitles.com, and translate them here.