| 1 |
.TH MIX 1 "Mixmaster Version 3.0 beta" |
.TH MIXMASTER 1 "Mixmaster Version 3.0 beta" |
| 2 |
.\" $Id: mix.1,v 1.29 2003/05/03 01:56:07 weaselp Exp $ |
.\" $Id$ |
| 3 |
.SH NAME |
.SH NAME |
| 4 |
mix \- anonymous remailer software |
mixmaster \- anonymous remailer software |
| 5 |
.SH SYNOPSIS |
.SH SYNOPSIS |
| 6 |
.B mix |
.B mixmaster |
| 7 |
[\fB\-hpmdSvT\fR] |
[\fB\-hpmdSvT\fR] |
| 8 |
[\fB\-t \fIuser@host\fR] |
[\fB\-t \fIuser@host\fR] |
| 9 |
[\fB\-g \fInewsgroup\fR] |
[\fB\-g \fInewsgroup\fR] |
| 10 |
[\fB\-s \fIsubject\fR] |
[\fB\-s \fIsubject\fR] |
| 11 |
[\fB\-a \fIfilename\fR] |
[\fB\-a \fIfilename\fR] |
|
[\fB\-n \fInym\fR] |
|
| 12 |
[\fB\-l \fImix1,mix2,mix3,...\fR] |
[\fB\-l \fImix1,mix2,mix3,...\fR] |
| 13 |
[\fB\-c \fInum\fR] |
[\fB\-c \fInum\fR] |
| 14 |
[\fIuser@host\fR] |
[\fIuser@host\fR] |
| 15 |
[\fIfilename\fR] |
[\fIfilename\fR] |
| 16 |
.PP |
.PP |
| 17 |
.B mix |
.B mixmaster |
| 18 |
[\fB\-f\fR[\fBrfg\fR] \fIfilename\fR] |
[\fB\-f\fR[\fBrfg\fR] \fIfilename\fR] |
| 19 |
.PP |
.PP |
| 20 |
.B mix \-\-nym\-config=\fIyournym \fR[\fBname=\fIPseudonym\fR] |
.B mixmaster \fR[\fB\-RGKSP\fR] |
|
[\fBopt=\fInymserver options\fR] [\fB\-\-latency=\fIhours\fR] |
|
|
[\fB\-\-reply\-chain=\fIrem1,rem2,...\fR] |
|
|
.PP |
|
|
.B mix \fR[\fB\-RGKSP\fR] |
|
| 21 |
.SH DESCRIPTION |
.SH DESCRIPTION |
| 22 |
Mixmaster is an anonymous remailer. Remailers provide protection |
Mixmaster is an anonymous remailer. Remailers provide protection |
| 23 |
against traffic analysis and allow sending mail anonymously or |
against traffic analysis and allow sending mail anonymously or |
| 27 |
standard input or from a file. Destination address and input file can |
standard input or from a file. Destination address and input file can |
| 28 |
be specified in the command line. If no address is given in the |
be specified in the command line. If no address is given in the |
| 29 |
command line, the input file is expected to contain a message complete |
command line, the input file is expected to contain a message complete |
| 30 |
with mail headers. Messages to be sent under a pseudonym must contain |
with mail headers. |
|
a |
|
|
.I Nym: |
|
|
header rather than |
|
|
.IR From: . |
|
| 31 |
.SH OPTIONS |
.SH OPTIONS |
| 32 |
.TP |
.TP |
| 33 |
.B "\-h, \-\-help" |
.B "\-h, \-\-help" |
| 65 |
.I file |
.I file |
| 66 |
to the message. |
to the message. |
| 67 |
.TP |
.TP |
|
.B "\-n, \-\-nym=\fIyournym" |
|
|
Use the given pseudonym to send the message. |
|
|
.TP |
|
| 68 |
.B \-\-encrypt |
.B \-\-encrypt |
| 69 |
Encrypt the message using the OpenPGP format. |
Encrypt the message using the OpenPGP format. |
| 70 |
.TP |
.TP |
| 108 |
.TP |
.TP |
| 109 |
.B "\-fg\fR [\fIfile\fR]" |
.B "\-fg\fR [\fIfile\fR]" |
| 110 |
Send a group reply to a message. |
Send a group reply to a message. |
|
.TP |
|
|
.B "\-\-nym\-config=\fInym \fR[\fBname=\fIPseudonym\fR] [\fBopt=\fInymserver options\fR]" |
|
|
Generate a pseudonym. |
|
|
|
|
|
For example, to set up a pseudonym with two mail reply blocks and nym |
|
|
server acknowledgment for successfully remailed messages: |
|
|
.PP |
|
|
mix --nym-config=yournym@nym.alias.net opt=+acksend --to=user@domain |
|
|
--reply-chain=privacy,hr13,hyper --to=user@domain |
|
|
--reply-chain=replay,squirrel,mix |
|
|
|
|
|
To use a message pool: |
|
|
.PP |
|
|
mix --nym-config=yournym@nym.alias.net |
|
|
--post-to=alt.anonymous.messages |
|
|
--subject="secret message" --reply-chain=base |
|
|
.TP |
|
|
.B "\-\-latency=\fIhours" |
|
|
Reply chain latency. |
|
|
.TP |
|
|
.B "\-\-reply\-chain=\fIrem1,rem2,..." |
|
|
Reply chain for the pseudonym. |
|
| 111 |
.SS Remailer options: |
.SS Remailer options: |
| 112 |
.TP |
.TP |
| 113 |
.B "\-\-config=\fIfilename" |
.B "\-\-config=\fIfilename" |
| 155 |
.TP |
.TP |
| 156 |
.B \-\-run\-svc |
.B \-\-run\-svc |
| 157 |
Run the Mixmaster Service on Win32. |
Run the Mixmaster Service on Win32. |
| 158 |
|
.TP |
| 159 |
|
.B \-\-redirect |
| 160 |
|
Read a Mixmaster packet from stdin and route it through a chain given with |
| 161 |
|
\fB\-\-chain\fP. |
| 162 |
|
Note that this may corrupt the packet if there is not enough space in the |
| 163 |
|
headers (that is, if there are more than 20 hops total). This function is |
| 164 |
|
not normaly needed but may come in handy in certain cases. |
| 165 |
.SH CONFIGURATION |
.SH CONFIGURATION |
| 166 |
Mixmaster reads its configuration from the file |
Mixmaster reads its configuration from the file |
| 167 |
.B mix.cfg |
.B mix.cfg |
| 179 |
.PP |
.PP |
| 180 |
All configuration variables can be overridden from the command line, |
All configuration variables can be overridden from the command line, |
| 181 |
e.g. |
e.g. |
| 182 |
.B mix -S --POOLSIZE=0 --RATE=100 |
.B mixmaster -S --POOLSIZE=0 --RATE=100 |
| 183 |
will send all messages currently in the message pool. |
will send all messages currently in the message pool. |
| 184 |
.SS Client configuration: |
.SS Client configuration: |
| 185 |
.TP |
.TP |
| 248 |
.B REMAIL |
.B REMAIL |
| 249 |
is set to |
is set to |
| 250 |
.BR n |
.BR n |
| 251 |
automatically flush the pool every time mixmaster is run. Default: |
automatically flush the pool every time Mixmaster is run. Default: |
| 252 |
.BR n . |
.BR n . |
|
.SS Remailer configuration: |
|
| 253 |
.TP |
.TP |
| 254 |
.B SENDMAIL |
.B SENDMAIL |
| 255 |
Path to the |
Path to the |
| 288 |
is used instead.) |
is used instead.) |
| 289 |
Default: |
Default: |
| 290 |
.IR ANONADDR . |
.IR ANONADDR . |
| 291 |
|
.SS Remailer configuration: |
| 292 |
.TP |
.TP |
| 293 |
.B NEWS |
.B NEWS |
| 294 |
Path to the news posting program, or address of a |
Path to the news posting program, or address of a |
| 440 |
This should |
This should |
| 441 |
.I not |
.I not |
| 442 |
be the same as the client passphrase. |
be the same as the client passphrase. |
| 443 |
|
.TP |
| 444 |
|
.B EXTFLAGS |
| 445 |
|
Additional flags you want to set in the remailer's capabilities string. |
| 446 |
|
Defaults to the empty string, which means none. Example: |
| 447 |
|
.BR testing . |
| 448 |
|
.TP |
| 449 |
|
.B PRECEDENCE |
| 450 |
|
Sets the header Precedence: to this value for all outgoing mail. |
| 451 |
|
Defaults to the empty string, which means no such header is added. |
| 452 |
|
Example: |
| 453 |
|
.BR anon . |
| 454 |
|
If you use this you might want to block user supplied precedence |
| 455 |
|
headers in your header block file. |
| 456 |
.PP |
.PP |
| 457 |
The following variables can be set to |
The following variables can be set to |
| 458 |
.B y |
.B y |
| 618 |
.B Rand-Hop |
.B Rand-Hop |
| 619 |
directives. |
directives. |
| 620 |
Default: |
Default: |
| 621 |
.BR 20 . |
.BR 4 . |
| 622 |
.PP |
.TP |
| 623 |
The following are time variables. They can be given as days, hours, or |
.B MAXRECIPIENTS |
| 624 |
minutes. |
limits the number of allowed recipients in outgoing mail. Anything that exceeds this |
| 625 |
|
number is dropped silently. Default: |
| 626 |
|
.BR 5 . |
| 627 |
|
.PP |
| 628 |
|
The following are time variables. They can be given as years ( |
| 629 |
|
.BR y |
| 630 |
|
), months ( |
| 631 |
|
.BR b |
| 632 |
|
), days ( |
| 633 |
|
.BR d |
| 634 |
|
), hours ( |
| 635 |
|
.BR h |
| 636 |
|
), minutes ( |
| 637 |
|
.BR m |
| 638 |
|
), or seconds ( |
| 639 |
|
.BR s |
| 640 |
|
). |
| 641 |
.TP |
.TP |
| 642 |
.B SENDPOOLTIME |
.B SENDPOOLTIME |
| 643 |
How often Mixmaster should check the pool for messages |
How often Mixmaster should check the pool for messages |
| 685 |
If set to |
If set to |
| 686 |
.BR 0 , |
.BR 0 , |
| 687 |
no log is kept. |
no log is kept. |
| 688 |
|
.TP |
| 689 |
|
.B KEYLIFETIME |
| 690 |
|
Mixmaster sets an expiration date on its remailer keys |
| 691 |
|
.B KEYLIFETIME |
| 692 |
|
after the key creation date. Default: |
| 693 |
|
.BR 13b . |
| 694 |
|
.TP |
| 695 |
|
.B KEYGRACEPERIOD |
| 696 |
|
Mixmaster will continue to decrypt messages encrypted to an expired key |
| 697 |
|
for |
| 698 |
|
.B KEYGRACEPERIOD |
| 699 |
|
period of time after the expiration. This is done to ensure that messages |
| 700 |
|
already injected into the network are allowed to exit. Do not change this |
| 701 |
|
value unless you know what you are doing, or you will risk partitioning |
| 702 |
|
attacks. Default: |
| 703 |
|
.BR 7d . |
| 704 |
|
.TP |
| 705 |
|
.B KEYOVERLAPPERIOD |
| 706 |
|
Mixmaster will generate and advertise a new key |
| 707 |
|
.BR KEYOVERLAPPERIOD |
| 708 |
|
period of time before the expiration of the key. Clients should always use |
| 709 |
|
the most recently created valid key. Clients that deviate from this |
| 710 |
|
recommended behavior risk partitioning attacks. Default: |
| 711 |
|
.BR 1b . |
| 712 |
.PP |
.PP |
| 713 |
The following strings must be specified at compile-time in |
The following strings must be specified at compile-time in |
| 714 |
.BR config.h . |
.BR config.h . |
| 958 |
.B mixrand.bin |
.B mixrand.bin |
| 959 |
Random seed file (\fBMIXRAND\fP). |
Random seed file (\fBMIXRAND\fP). |
| 960 |
.TP |
.TP |
|
.B secrets.mix |
|
|
List of your nyms with configuration data (encrypted) (\fBNYMDB\fP). |
|
|
.TP |
|
|
.B nymsec.pgp |
|
|
Your nyms' secret PGP keys (encrypted) (\fBNYMSECRING\fP). |
|
|
.TP |
|
| 961 |
.B secring.pgp |
.B secring.pgp |
| 962 |
Remailer type 1 secret keys (\fBPGPREMSECRING\fP). |
Remailer type 1 secret keys (\fBPGPREMSECRING\fP). |
| 963 |
.TP |
.TP |
| 988 |
.B dsaparam.mix |
.B dsaparam.mix |
| 989 |
Public DSA parameters used for DSA key generation (\fBDSAPARAMS\fP). |
Public DSA parameters used for DSA key generation (\fBDSAPARAMS\fP). |
| 990 |
.TP |
.TP |
| 991 |
.B mix.pid |
.B mixmaster.pid |
| 992 |
Pid file in daemon mode (\fBPIDFILE\fP). |
Pid file in daemon mode (\fBPIDFILE\fP). |
| 993 |
.TP |
.TP |
| 994 |
.BI pool/ |
.BI pool/ |