CyberMind-FR a870eb380e feat(toolbox): kbin Tor egress quick-switch — switch + tunnel, DARK (ref #683) ... Routes the R3 mitm-wg worker uid's upstream egress + DNS through Tor (TransPort 9040 / DNSPort 5353) via an nft owner-match table, so MITM inspection (ad-block/poison/banner/safe-browsing) is fully preserved — only the exit IP + network identity change. Ships default-OFF, fail-closed. - filters: tor_mode / tor_preset flags (validated) - api: GET/POST /admin/tor/{state,on,off,newnym,check-leaks} (kbin-gated) - tor_ctl.py: reuses secubox-tor control-port logic (status/NEWNYM), no JWT - tunnel: conf/nft-toolbox-tor.nft (fail-closed kill-switch + v6 drop) + torrc drop-in + root path-triggered reconciler (portal stays NoNewPrivileges=true; nft loaded before tor = no clearnet window) - WebUI: 🧅 Tor tab (badge, toggle, NEWNYM, leak probe) - packaging: Depends jq; Recommends tor, python3-socksio; postinst adds secubox-toolbox to debian-tor group; prerm disarms on real removal - 166 tests green (10 new); toolbox 2.7.1 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-19 12:19:52 +02:00
..
integration-tests
plans	feat(#662 Phase 1): MITM-engine migration analysis + phased plan + compiled/tested Go forging-MITM PoC	2026-06-18 17:07:48 +02:00
runs	fix(mail): replay Phase 1 fix commits lost in PR #141 squash-merge	2026-05-15 17:15:00 +02:00
specs	feat(toolbox): kbin Tor egress quick-switch — switch + tunnel, DARK (ref #683)	2026-06-19 12:19:52 +02:00