Fixes bridges being silently blocked by per-app firewalls like Little Snitch on macOS.
Fixed
- Transport helpers now run from a stable path, so firewalls can allow them (#74). On macOS and Linux, the bridge transport helpers (lyrebird / webtunnel-client) ran from the system temp directory. Per-app firewalls like Little Snitch identify a process by its executable path, so a helper in a periodically-purged temp folder never got a durable allow rule and could be silently denied without ever prompting - every bridge then failed with "general SOCKS server failure" even with an "allow all" rule for OnionHop itself. The helpers now run from a stable per-user location (
~/Library/Caches/onionhop-pton macOS,~/.cache/onionhop-pton Linux), so the firewall can prompt once and remember the answer, the same way it does for Tor Browser's bundled lyrebird. The stale-transport cleanup at connect time now also covers helpers running from that directory.
Downloads
| Platform | File |
|---|---|
| Windows installer | OnionHop-Setup-v3.exe |
| Windows portable | OnionHopV3-Portable-3.7.4-win-x64.zip |
| Windows CLI | OnionHop-CLI-Setup-3.7.4.exe / OnionHopCLI-Portable-3.7.4-win-x64.zip |
| Linux | OnionHop-x86_64.AppImage |
| Linux CLI | OnionHopCLI-3.7.4-linux-x64.tar.gz |
| macOS (Apple Silicon) | OnionHop-3.7.4-macOS-arm64.dmg |
| macOS (Intel) | OnionHop-3.7.4-macOS-x64.dmg |
| macOS CLI (Apple Silicon) | OnionHopCLI-3.7.4-macos-arm64.tar.gz |
| macOS CLI (Intel) | OnionHopCLI-3.7.4-macos-x64.tar.gz |