BYOPPP - Build Your Own Privacy Protection Proxy

I have read a blog post, where you can build your own privacy proxy server built on Raspberry PI. The post got me thinking about how I can use this to protect my privacy on my Android phone, and also get rid of those annoying ads. 

Since I own a Samsung Galaxy S3 LTE with Android 4.3 (with a HW based Knox counter), rooting the phone now means you break Knox, and loose warranty. Past the point of no return ...

This means I have to solve this without root. Luckily newer Androids support VPN without rooting, but setting a mandatory system-wide proxy is still not possible without root. 

But thanks to some iptables magic and Privoxy, this is not a problem anymore :) 

The ingredients to build your own privacy protection proxy:

• One (or more) cheap VPS server(s)
• a decent VPN program
• Privoxy
• iptables

VPS server

To get the cheap VPS server, I recommend using Amazon EC2, but choose whatever you like. The micro instance is very cheap (or even free), and has totally enough resources for this task. I'm using the Ubuntu free tier now and it works like a charm. And last but not least Amazon has two-factor authentication! You can set up an Ubuntu server under 10 minutes. Use the AWS region nearest to you, e.g. I choose EU - Ireland.

VPN

For the VPN program, I recommend the free version of the OpenVPN AS (EDIT: be sure to use OpenVPN AS 2.0.6 or later, both on the server and the client). Easy to set-up quick start guide is here, GUI based configuration, and one-click client installer for Android, iOS, Windows, Linux, OSX. The Ubuntu installer packages are here.

The most important settings:

• I prefer to use the TCP 443 and UDP 53 ports for my OpenVPN setup, and let the user guess why. 
• For good performance, UDP is preferred over TCP. 
• VPN mode is Layer 3 (routing/NAT).
• Don't forget to allow the configured VPN ports in the AWS firewall (security groups). 

Other VPN settings:

• Should VPN clients have access to private subnets (non-public networks on the server side)? - Yes
• Should client Internet traffic be routed through the VPN? - Yes

Privoxy

The next component we have to install and configure is Privoxy. As usual, "apt-get install privoxy" just works. The next step is to configure privoxy via /etc/privoxy/config file, there are two options to change:

• listen-address your.ip.add.ress:8118
• accept-intercepted-requests 1

Beware not to allow everyone accessing your Privoxy server in the AWS EC2 security groups, be sure it is reachable only to VPN users!

After everything is set, start privoxy with "service privoxy start", and add it to the autostart "update-rc.d privoxy defaults".

Iptables

And the final step is to configure your iptables chain to forward every web traffic from the VPN clients to the Privoxy server:

iptables -t nat -A PREROUTING -s 5.5.0.0/16 -p tcp -m multiport --dports 80,8080,81 -j DNAT --to-destination your.ip.add.ress:8118 

Optionally you can block access to all other ports as well, and what does not go through your Privoxy won't be reachable.

Based on your Linux distribution and preference, you might make this rule persistent.

Final test

Now you can connect to the VPN server from your Android device.

After logging in from a client, you get the following nice packages to install on your device:

After connecting, the final results can be seen in the following screenshots. And yes, there is a reason I chose Angry Birds as an example.

Angry Birds without Privoxy

Angry Birds with Privoxy

Stupid flashlight app with ad

Stupid flashlight app with Privoxy

Spoiler alert

If you are afraid of NSA tracking you, this post is not for you. If you want to achieve IP layer anonymity, this post is not for you. As long as you are the only one using that service, it should be trivial to see what could possibly go wrong with that.

Known issues

Whenever the Internet connection (Wifi, 3G) drops, the VPN connection drops as well, and your privacy is gone ...

Sites breaking your privacy through SSL can still do that as long as the domain is not in the Privoxy blacklist.

Additional recommendation

If you are using OSX or Windows, I can recommend Aviator to be used as your default browser. It is just great, give it a try!

PS: There are also some adblock apps removed from the official store which can block some ads, but you have to configure a proxy for every WiFi connection you use, and it is not working over 3G.

Related news

1. Pentest Tools Nmap
2. Best Pentesting Tools 2018
3. Pentest Tools Github
4. Hacker Tools Mac
5. Beginner Hacker Tools
6. Pentest Tools Download
7. Hacker Tools Free Download
8. Hacking Tools For Windows Free Download
9. Hacking Tools For Pc
10. Hacker Tools 2019
11. Hack App
12. Nsa Hack Tools Download
13. Pentest Tools For Android
14. What Are Hacking Tools
15. Hacking Tools Download
16. Pentest Tools Open Source
17. How To Make Hacking Tools
18. Nsa Hacker Tools
19. Underground Hacker Sites
20. Hacker Tools Mac
21. Easy Hack Tools
22. Hacker Tools Software
23. Hacker Tools Windows
24. Hacking Tools For Windows
25. What Are Hacking Tools
26. Hacking Tools For Windows Free Download
27. Hacker Tools Mac
28. Install Pentest Tools Ubuntu
29. Pentest Tools For Android
30. Hacking Tools Pc
31. Pentest Tools Download
32. Hack Tools
33. Physical Pentest Tools
34. Hacking Tools For Pc
35. Pentest Box Tools Download
36. Hacker Tools 2019
37. Pentest Tools Free
38. Hacking Tools Software
39. How To Hack
40. Pentest Tools For Android
41. Best Pentesting Tools 2018
42. Pentest Tools List
43. Growth Hacker Tools
44. Hacker Tools Software
45. Hack Apps
46. Hacker Tools Online
47. Hacker Tools Linux
48. What Is Hacking Tools
49. Hacker Tools Mac
50. Hacking Tools Github
51. Kik Hack Tools
52. Hacking Tools For Pc
53. Hacking Tools For Pc
54. Nsa Hack Tools Download
55. Pentest Tools Website Vulnerability
56. Game Hacking
57. Pentest Tools Website Vulnerability
58. Ethical Hacker Tools
59. Hack Apps
60. What Is Hacking Tools
61. New Hacker Tools
62. Blackhat Hacker Tools
63. Hackers Toolbox
64. Hacking Tools 2019
65. Hacker Hardware Tools
66. Physical Pentest Tools
67. Pentest Tools For Android
68. Hacker Tools Free
69. Hack Tool Apk
70. Nsa Hack Tools
71. Usb Pentest Tools
72. New Hacker Tools
73. Pentest Box Tools Download
74. Pentest Tools Online
75. Hacker Tools For Ios
76. Hacking Tools Kit
77. Pentest Tools Website
78. How To Install Pentest Tools In Ubuntu
79. Hacking Apps
80. Hacker Tools Apk Download
81. Pentest Tools Linux
82. Hack Apps
83. Hacking Apps
84. How To Make Hacking Tools
85. Pentest Tools For Android
86. Hacker Search Tools
87. Hack Tools For Games
88. Easy Hack Tools
89. Hack Website Online Tool
90. Hacking Tools 2020
91. Hacking Tools Name
92. Hacker Tools 2019
93. Hacker Tools
94. Hacker Tools For Ios
95. Hacking Tools Free Download
96. Pentest Tools Android
97. Hacking Tools 2019
98. Pentest Tools Download
99. Tools 4 Hack
100. Pentest Tools Tcp Port Scanner
101. Pentest Tools For Android
102. Install Pentest Tools Ubuntu
103. World No 1 Hacker Software
104. Hacking Tools Free Download
105. Pentest Tools Bluekeep
106. Nsa Hack Tools
107. Termux Hacking Tools 2019
108. Hacking Tools Kit
109. Blackhat Hacker Tools
110. Pentest Tools Port Scanner
111. Best Pentesting Tools 2018
112. Hacker Tools 2019
113. Nsa Hack Tools Download
114. Tools Used For Hacking
115. Hacker Tools Apk
116. Hacker Tool Kit
117. Hacking Tools 2019
118. Tools For Hacker
119. Hacking Tools And Software
120. Hack Tools For Mac
121. Hack Tools 2019
122. Hacking Tools For Windows Free Download
123. Hacker Tools Linux
124. Hacking Tools Download
125. Beginner Hacker Tools
126. Pentest Tools For Mac
127. Pentest Reporting Tools
128. Computer Hacker
129. Android Hack Tools Github
130. What Is Hacking Tools
131. Hack Tools 2019
132. Pentest Tools Apk
133. Pentest Box Tools Download
134. Hacking Tools Pc
135. Kik Hack Tools
136. How To Make Hacking Tools
137. Nsa Hack Tools
138. Hack And Tools
139. Pentest Tools For Android
140. Hack Tools Mac
141. Hacker Tools Windows
142. Nsa Hacker Tools
143. Black Hat Hacker Tools
144. Hack Tools Mac
145. Best Pentesting Tools 2018
146. Hacking Tools Usb
147. Hacking Tools For Pc
148. Hacking Tools For Mac
149. Hack And Tools
150. Hack Tools For Ubuntu
151. Pentest Tools Android
152. Physical Pentest Tools
153. Pentest Tools Kali Linux
154. Hacker Tools
155. Tools For Hacker
156. Hacking Tools And Software
157. Hackers Toolbox
158. Hack Website Online Tool
159. Ethical Hacker Tools