BYOPPP - Build Your Own Privacy Protection Proxy

I have read a blog post, where you can build your own privacy proxy server built on Raspberry PI. The post got me thinking about how I can use this to protect my privacy on my Android phone, and also get rid of those annoying ads. 

Since I own a Samsung Galaxy S3 LTE with Android 4.3 (with a HW based Knox counter), rooting the phone now means you break Knox, and loose warranty. Past the point of no return ...

This means I have to solve this without root. Luckily newer Androids support VPN without rooting, but setting a mandatory system-wide proxy is still not possible without root. 

But thanks to some iptables magic and Privoxy, this is not a problem anymore :) 

The ingredients to build your own privacy protection proxy:

• One (or more) cheap VPS server(s)
• a decent VPN program
• Privoxy
• iptables

VPS server

To get the cheap VPS server, I recommend using Amazon EC2, but choose whatever you like. The micro instance is very cheap (or even free), and has totally enough resources for this task. I'm using the Ubuntu free tier now and it works like a charm. And last but not least Amazon has two-factor authentication! You can set up an Ubuntu server under 10 minutes. Use the AWS region nearest to you, e.g. I choose EU - Ireland.

VPN

For the VPN program, I recommend the free version of the OpenVPN AS (EDIT: be sure to use OpenVPN AS 2.0.6 or later, both on the server and the client). Easy to set-up quick start guide is here, GUI based configuration, and one-click client installer for Android, iOS, Windows, Linux, OSX. The Ubuntu installer packages are here.

The most important settings:

• I prefer to use the TCP 443 and UDP 53 ports for my OpenVPN setup, and let the user guess why. 
• For good performance, UDP is preferred over TCP. 
• VPN mode is Layer 3 (routing/NAT).
• Don't forget to allow the configured VPN ports in the AWS firewall (security groups). 

Other VPN settings:

• Should VPN clients have access to private subnets (non-public networks on the server side)? - Yes
• Should client Internet traffic be routed through the VPN? - Yes

Privoxy

The next component we have to install and configure is Privoxy. As usual, "apt-get install privoxy" just works. The next step is to configure privoxy via /etc/privoxy/config file, there are two options to change:

• listen-address your.ip.add.ress:8118
• accept-intercepted-requests 1

Beware not to allow everyone accessing your Privoxy server in the AWS EC2 security groups, be sure it is reachable only to VPN users!

After everything is set, start privoxy with "service privoxy start", and add it to the autostart "update-rc.d privoxy defaults".

Iptables

And the final step is to configure your iptables chain to forward every web traffic from the VPN clients to the Privoxy server:

iptables -t nat -A PREROUTING -s 5.5.0.0/16 -p tcp -m multiport --dports 80,8080,81 -j DNAT --to-destination your.ip.add.ress:8118 

Optionally you can block access to all other ports as well, and what does not go through your Privoxy won't be reachable.

Based on your Linux distribution and preference, you might make this rule persistent.

Final test

Now you can connect to the VPN server from your Android device.

After logging in from a client, you get the following nice packages to install on your device:

After connecting, the final results can be seen in the following screenshots. And yes, there is a reason I chose Angry Birds as an example.

Angry Birds without Privoxy

Angry Birds with Privoxy

Stupid flashlight app with ad

Stupid flashlight app with Privoxy

Spoiler alert

If you are afraid of NSA tracking you, this post is not for you. If you want to achieve IP layer anonymity, this post is not for you. As long as you are the only one using that service, it should be trivial to see what could possibly go wrong with that.

Known issues

Whenever the Internet connection (Wifi, 3G) drops, the VPN connection drops as well, and your privacy is gone ...

Sites breaking your privacy through SSL can still do that as long as the domain is not in the Privoxy blacklist.

Additional recommendation

If you are using OSX or Windows, I can recommend Aviator to be used as your default browser. It is just great, give it a try!

PS: There are also some adblock apps removed from the official store which can block some ads, but you have to configure a proxy for every WiFi connection you use, and it is not working over 3G.

Related word

1. Pentest Tools Url Fuzzer
2. World No 1 Hacker Software
3. Pentest Tools
4. Hacks And Tools
5. Hacker Tools For Ios
6. Best Hacking Tools 2020
7. Hackers Toolbox
8. Hacking Tools
9. Physical Pentest Tools
10. Hacker Tools List
11. Hack Tools For Pc
12. Tools For Hacker
13. Hacker Tools 2020
14. Hacking Tools Online
15. Tools For Hacker
16. Hacker Tools Apk Download
17. Pentest Tools List
18. Hack Tools For Mac
19. Hack Tools Download
20. Free Pentest Tools For Windows
21. Pentest Tools Port Scanner
22. Hacker Hardware Tools
23. Free Pentest Tools For Windows
24. Pentest Tools
25. Pentest Automation Tools
26. Hackers Toolbox
27. Pentest Tools List
28. Hacking Tools For Games
29. Hacking App
30. Hack Tool Apk
31. Hack Tool Apk No Root
32. Pentest Tools Bluekeep
33. Hacks And Tools
34. Pentest Tools Framework
35. Hacker Tools Apk
36. Pentest Tools Subdomain
37. Beginner Hacker Tools
38. Hacking Tools Kit
39. Usb Pentest Tools
40. Hacking App
41. Termux Hacking Tools 2019
42. Hacker Tools For Ios
43. Hacking Tools For Windows 7
44. Best Pentesting Tools 2018
45. Tools For Hacker
46. Hacking Tools Usb
47. Underground Hacker Sites
48. Pentest Tools Linux
49. Hacker Tool Kit
50. Hacking Tools For Games
51. New Hack Tools
52. Hacker Tools 2019
53. Hacking Tools For Mac
54. Hacker Tools Github
55. Hacking Tools Kit
56. Hacker Tools Free Download
57. Hacker Tool Kit
58. Pentest Tools Website
59. Pentest Tools Url Fuzzer
60. Easy Hack Tools
61. Hacking App
62. Pentest Recon Tools
63. Hacker Tools Online
64. Pentest Tools Nmap
65. Easy Hack Tools
66. New Hack Tools
67. Hacking Tools For Windows 7
68. Hacking Tools
69. Hacker Tools Software
70. Underground Hacker Sites
71. Hacker Hardware Tools
72. Pentest Automation Tools
73. Free Pentest Tools For Windows
74. Pentest Reporting Tools
75. Hacker Hardware Tools
76. Hacking Tools Kit
77. Usb Pentest Tools
78. Hacking Tools For Mac
79. Hack Tools 2019
80. Hacker Techniques Tools And Incident Handling
81. Pentest Tools Free
82. Blackhat Hacker Tools
83. Hacker Tools Software
84. World No 1 Hacker Software
85. Hacker Hardware Tools
86. Hacking Apps
87. Tools 4 Hack
88. Hacker Tools 2019
89. Hack Tool Apk
90. Bluetooth Hacking Tools Kali
91. Hacking Tools 2020
92. Pentest Recon Tools
93. Hacking Tools For Mac