InvizBoxUserGuide|Version1.3 InvizBox UserGuide InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 Table of contents Tableofcontents Introduction Hardware QuickSetup SixEasySteps Overview GeneralStatus Admin Password&Language DropBearSSH Network Wifi CustomizingWifi DeviceConfiguration InterfaceConfiguration Network Tor TorStatus BridgeConfiguration ProxyConfiguration CountryConfiguration TorAdvancedConfiguration Realtimegraphs Load Traffic Wireless Connections Flash Reboot Logout Troubleshooting Reset MiscRecommendations InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 Introduction InvizBoxisasmall,lowpowerdevicethathelpsprovideaneasytousemethodof protectingyourprivacyontheInternet.JustplugtheInvizBoxintoyourexistingrouter/modem. Anew"InvizBox"wifihotspotwillappear.Connecttothenewhotspotandfollowtheonetime configurationsetupandyou'rereadytogo!AlldevicesthatyouconnecttotheInvizBoxwifiwill routetheirtrafficovertheTorPrivacyNetwork. Weallhavearighttoprivacy,arighttoprotectourpersonalinformation,data,location andinternetbehavior.Youmaythinkyouhavenothingtohide,oryouarentdoinganything wrongthatwouldrequireinvestigationbythirdpartiesbutneitherdowe.Thatdoesntmean thatwehavetoleaveourselvesopentotrackingandprofilingbypeople,governments, companies,hackersetc.whoweneitherknowortrust.Invizboxprovidesaneasysolutionto giveyoubackcontroloverwho&whatyouchoosetodiscloseyourpersonalinformationto. Hardware TheInvizBoxisasmallrouterbasedontheMediaTekMT7620NWiFiSystemOnChips
(WiSOC).Specificationsareasfollows:
CPUarchitecture:MIPS24KEc(RT6352) 802.11n2T/2R(2x2:2)2.4GHz300MbpsMAC/BB/PA/RF Clocked@580MHz DDRRAM64MB SupportsWifib/g/n MACaddressfiltering SupportforWPA/WPA2,WPAPSK/WPA2PSK. SupportSystem:Windows/Mac/Linux ColoursWhite. PowerviamicroUSB(cableincluded). 16MBflash Dimensions:65mmX45mmX22mm InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 Quick Setup InthissectionwewillshowyouhowtoquicklysetuptheInvizBoxin6easysteps. SixEasySteps 1. ConnectthesuppliedethernetcabletotheWANportontheInvizBox. 2. Connecttheotherendoftheethernetcabletoanethernetportontheroutergivenby yourinternetserviceprovider. 3. ConnecttheUSBcabletoasuitablepowersource.(Note:Manyroutersnowhave suitableUSBportswhichcanbeusedinsteadofaseparatepowersupply) 4. ConnecttheotherendoftheUSBcabletotheInvizBox. 5. Waitabout30secondsforfirstboot.Ifyouareusingwifi,lookforan"InvizBox"wifi accesspoint. 6. SelecttheInvizBoxwifiaccesspointandenterthepasswordthatisprintedonthe bottomofyourInvizBox. PleaseseeQuickStartManualformoredetail. InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 Overview Toaccessanyoftheadminpagesoutlinedpointyourbrowserto:
http://10.101.0.1 GeneralStatus TheOverviewpagegivesyouabriefoverviewofanumberofthings:
TorStatus Time,Dateandothersysteminformation NetworkOverview DHCPStatus ConnectedClients Belowisascreenshotofhowitwilllook InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 Admin Password&Language ThissectionallowsyoutochangethepasswordforUIandSSH,alongwiththelanguageofthe UI. InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 TochangePasswordjustenterinthenewpasswordintobothBoxesandclickSave&Apply atthebottomofthescreen. ToChangelanguage,SelectthelanguagefromthedropdownandclickSave&Applyatthe bottomofthescreen. DropBearSSH ThissectiondescribeshowtosetupSSHaccesstotheInvizBox.Outofthebox,SSHis disabled. ToenableSSHyouhavetoclickAdd.Oncethatisdonetocanconfiguretheoptions asseenbelow. InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 Hereyoucanconfiguretheportandotheroptionsdisplayed.YoucanalsoaddSSHKeys(one perline)intotheappropriatesection.OnceyouchangeanyoftheseclicktheSave&Apply buttonatthebottomofthescreen. Network Wifi TheWIFIsectionallowsyoutogodeeperandconfigurethewifiaccesspointtoyourownsetup. IdeallyitisonlyrecommendedtochangethewifiESSID,accesspointpasswordandchannel. InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 IntheWirelessOverviewpageyoucanseethegeneralstatusoftheWificonnectionsand connectedclients.Youcanalsodisableandeditthewififromthispage. Disable:ClickingthisbuttonwillstoptheWifiaccesspoint.TorandLANwillcontinuetowork normally.ThisisgoodforifallyouwantisLANandwanttostopwififromeatingthoseprecious airwaves. Edit:Thisbringyoutoamoredetailedsectionwhichallowmorepreciseconfigurationofthe Wifiaccesspoint. CustomizingWifi OntheWirelessOverviewselectEdit.Thefollowingpagewillappear InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 DeviceConfiguration GeneralSetup Inthissectionyoucanseethestatus.YoucanalsochangetheChanneland TransmissionPower.OnceyouchangeanyoftheseclicktheSave&Applybuttonon thebottomofthescreen AdvancedSettings Inthissectionyoucaneditthefollowing:
Band HTmode(802.11n) CountryCode DistanceOptimization FragmentationThreshold RTS/CTSThreshold OnceyouchangeanyoftheseclicktheSave&Applybuttononthebottomofthe screen InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 InterfaceConfiguration GeneralSetup Inthissectionyoucaneditthefollowing:
ESSID Mode Network lan:VLANInterface:"eth0.1"
tor:VLANInterface:"eth0.3"
wan:VLANInterface:"eth0.2"
wifi:VLANInterface:"eth0.4"WirelessNetwork:Master"InvizBox"
HideESSID WMMMode ItisadvisedonlytochangetheESSID.Onceyouchangeanyoftheseclickthe Save&Applybuttononthebottomofthescreen. InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 WirelessSecurity Inthissectionyoucaneditthefollowing:
Encryption Cipher Key OnceyouchangeanyoftheseclicktheSave&Applybuttononthebottomofthe screen InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 MacFilter InthissectionyoucansetupMACbasedfilterforwirelessaccesspoint.Select theoptionsyouwishfrom None AllowOnlyListed AllowAllExceptListed InthedropdownMACListselecttheMACthatyouwantallowedordenied. OnceyouchangeanyoftheseclicktheSave&Applybuttononthebottomofthe screen Network TheNetworksectionallowsyoutogodeeperandconfigurethewifiaccesspointtoyour ownsetup.IdeallyitisonlyrecommendedtochangethewifiESSIDandaccesspointpassword. Itisadvisednottoeditanyofthesesettinginthissection.Doingsocanbreak InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 functionalityofyourInvizBoxandyoumayneedtodoahardreset. Tor InthissectionyoucanRestartTor,ConfigureProxyandBridges,SelectExitNodesand AdvancedConfig.ItalsoshowsyouageneralrunningstatusofTor. TorStatus ThispageshowsiftheInvizBoxisconnectedtotheTornetwork.ItalsoshowstheTorversion, currentbandwidthandTorcircuitstatus. IfTorisnotconnectedclicktheRestartTorbuttonandwaitapproximately30secondsthen Refresh.Torshouldconnect.Ifnotwaitanother30secondsandhitRefreshagain.Ifyoustill cannotconnecttotheTornetwork,youmayneedtoconfigureabridgeorproxy(seebelow). InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 BridgeConfiguration BridgesareTorrelaysthathelpyoucircumventcensorship.Bridgerelays(or"bridges"forshort) areTorrelaysthataren'tlistedinthemainTordirectory.Sincethereisnocompletepubliclistof them,evenifyourISPisfilteringconnectionstoalltheknownTorrelays,theyprobablywon'tbe abletoblockallthebridges.IfyoususpectyouraccesstotheTornetworkisbeingblocked,you maywanttousebridges. TheadditionofbridgestoTorisastepforwardintheblockingresistancerace.Itisperfectly possiblethatevenifyourISPfilterstheInternet,youdonotrequireabridgetouseTor.Soyou shouldtrytouseTorwithoutbridgesfirst,sinceitmightwork. InvizBoxalsohaspluggabletransportsupport.Wesupportobfs2,obfs3andscramblesuit bridges.Onlyusethesebridgetypesifnormalbridgesareblockedforyou. TouseBridgesonInvizBox.InputthebridgesintothetextboxandclickSave&Apply.You cangetusablebridgesfromhere. ProxyConfiguration InvizBoxhastheabilitytoconfigureTortouseanyHTTPSorSOCKSproxytogetaccesstothe TorNetwork.ThismeansevenifTorisblockedbyyourlocalnetwork,openproxiescanbe safelyusedtoconnecttotheTorNetworkandontotheuncensoredInternet.Acaveatisthat theopenproxyhostwillseeyouareusingTor,butitwillnotbeabletoreadyourtrafficasitis stillwrappedinlayersofencryption. InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 ThesestepsassumeyouhavehaveavalidproxyoftypeHTTPS,SOCKS4,orSOCKS5.(To clarify,anHTTPSproxyisanHTTPproxythatalsosupportsCONNECTrequests.) 1. ChoosetheTypeofproxyyouareusing,whetherHTTP/HTTPS,SOCKS4,orSOCKS5. 2. ProxyIPAddress:Entertheopenproxyaddress.ThiscanbeahostnameorIPAddress. 3. Port:Entertheportfortheproxy. 4. Generally,youdonotneedaUsernameandPassword.Ifyoudo,entertheinformation intheproperfields. 5. OnceyouchangeanyoftheseclicktheSave&Applybuttononthebottomofthe 6. TorwillrestartandthestatuscanbeseenontheTorStatustab. screen. CountryConfiguration InvizBoxhastheabilitytoconfigurewhichexitnodesToruses.Therearemultipleoptions detailedbelow 1. Useanyexitnode(default) ThisistheTordefault.Torwilldecidethebestrouteusingthismethod. 2. Exclude"FiveEyes"countries ThisoptionwillexcludeAustralia,Canada,NewZealand,theUnitedKingdomandthe UnitedStatesfortheTorrouteselection. 3. Allowonlycountriesselectedbelow InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 ThisoptionallowyoutoselectfromthelistbelowandonlyusethoseselectedCountries asexitNodes 4. Donotusecountriesselectedbelow Thisoptionallowyoutoselectfromthelistbelowanditwillexcludeusingthose selectedCountriesasexitNodes N.BFromTorProjectWerecommendyoudonotusethesetheyareintendedfor testingandmaydisappearinfutureversions.YougetthebestsecuritythatTorcanprovide whenyouleavetherouteselectiontoToroverridingtheentry/exitnodescanmessupyour anonymityinwayswedon'tunderstand. TorAdvancedConfiguration InvizBoxnowhastheabilitytoeditthe/etc/tor/torrcconfigfilefromtheGUI.Youcanusethis sectiontowriteanyconfigoptionsfromtheTorProjectmanual InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 Notes:
ChangingthisconfigwilloverwriteanychangesyouhavemadeinthenormalTorConfig section.AlsobeawarethatanincorrectoptionherecanbreakTorandpossiblyaffectyour anonymity. Realtime graphs Load Thisshowstherealtimeloadontherouterfor1min,5minand15min.Fairlyself explanatory,butifnotreadmoreonloadstatisticshere InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 Traffic TocheckthetrafficflowonanyoftheinterfacesWAN,Tor,LAN,Wifietc.OpenRealtime GRaphs>Traffic.ItshowstheInbound/OutboundAverageandPeaktrafficrates. InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 Wireless TheWirelesssectionshowtherealtimegraphsforSignal,NoiseandPhysicalRate. InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 Connections Thissectiongivesanoverviewofallthecurrentlyactiveconnectionsontherouterboth sourceanddestination. InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 Flash PeriodicallyInvizBoxwillreleaseanewfirmware.Thisisthesectionwhereyouupload andapplythatfirmware.OnlyeverflashofficialInvizBoxfirmware.Wecantassistifyoustart tinkeringwithotherfirmwares. Dontworrytheflashprocedureisprettystraightforward. Toinstallanewfirmwarefollowthesesimplesteps 1. Downloadofficialfirmwarefromourfirmwarepage. 2. TakenoteofthelistedChecksumontheInvizBoxwebsite. 3. OntheInvizBoxrouter,intheFlashsectionclickChooseFileandselectthe officialfirmwarethatyoudownloaded. 4. ClickFlashImage. WaitafewsecondwhilstthefirmwareisuploadedtotheInvizBox.Apagesimilartothe belowshouldappear. InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 VerifythattheChecksumdisplayedmatchesthecorrespondingoneonthefirmwaredownload pagethatyoutooknoteofearlier.IftheydonotmatchclickCancel.Ifeverythingmatches thengoaheadandclickProceed.WaitApprox120secondsfortheflashtocompleteandfor theInvizBoxtoreboot.Thatsit. Note:Allsettingsandanypasswordchangeswillbeerased/resetbyflashing.Pleaseusethe passwordsuppliedwiththeInvizBoxtoconnecttobothWifiandAdministrationUI. Reboot ToreboottheInvizBox.ClickRebootInvizBox.Yesitsthatsimple. Thefollowpagewillbedisplayedshowingyoueverythingisinorder. Logout Assimpleasitsounds.IfyouwishtoLogout.ClickLogout InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 Troubleshooting Reset Reservedforthosemomentswhensomethingbadhashappenedandyoucantfigureitout. Youvetriedturningitoffandonagain.Hairisbeginningtogetpulled.HardResetisyourfriend. ToperformaHardReset:
1. PowerOfftheInvizbox. 2. OntherearoftheInvizBoxthereisaResetbutton.(Useapapercliporsimilarto pushthebutton) 3. HoldtheResetbuttonandPowerontheInvizBox,KeepholdingtheResetbutton for30seconds. 4. Thatsit.YourebacktohowtheInvizBoxwaswhenitfirstarrived. InvizBoxLtdhttps://invizbox.com InvizBoxUserGuide|Version1.3 Misc Recommendations Pleaseconsiderusingthefollowingplugins:
HTTPSeverywhere PrivacyBadger uBlock AlsopleaselookintodisablingWebRTC.ThisisanissueinbothFirefoxandChromewhichcan leadtoIPaddressexposure.TherearefirewallrulesinplaceinthelatestInvizBoxfirmwareto helpprotectyou. TodisableWebRTCinFirefox,enterabout:configintotheaddressbar,thenset media.peerconnection.enabledtofalse(doubleclickworks). AlternativelyyoucaninstalltheNoScriptaddon. InChrome/ChromiumtheaddonavailableiscalledWebRTCblock.Youcanalternatively installScriptSafe.BothareavailableintheChromestore. InvizBoxLtdhttps://invizbox.com FCC Statement This device complies with part 15 of the FCC rules. Operation is subject to the followi ng two conditions: (1) this device may not cause harmful interference, and (2) this dev ice must accept any interference received, including interference that may cau se undesired operation. Caution:
Changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate the equipment. NOTE: This equipment has been tested and found to comply with the limits for a Clas s B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to p rovide reasonable protection against harmful interference in a residential installation. This equipment generates uses and can radiate radio frequency energy and, if not inst alled and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occu r in a particular installation. If this equipment does cause harmful interference to radi o or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the foll owing measures:
Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help important announc ement Important Note:
Radiation Exposure Statement forth for an This equipment complies with FCC radiation exposure limits set uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator and your body.