<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>
<div>>> Why do I have to open 9001 UDP at the DSL router firewall and not<br/>
>> necessarily in iptables?<br/>
><br/>
>Tor does not use UDP, you should be not be required to add such a<br/>
>router firewall rule. What happens if you just take it out?<br/>
><br/>
>--<br/>
>Moritz Bartl</div>
<div> </div>
<div>Hi Moritz</div>
<div> </div>
<div>
<div>To answer your question here is my log</div>
<div>Oct 20 07:32:08.265 [Notice] Opening OR listener on 0.0.0.0:9001<br/>
Oct 20 07:32:08.265 [Notice] Your Tor server's identity key fingerprint is '.. bla bla ..'<br/>
Oct 20 07:32:08.290 [Notice] Now checking whether ORPort x.x.x.102:9001 is reachable... (this may take up to 20 minutes -- look for log messages indicating success)<br/>
...<br/>
Oct 20 07:52:07.025 [Warning] Your server (x.x.x.x:9001) has not managed to confirm that its ORPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.</div>
<div>Oct 20 08:12:07.639 [Warning] Your server (x.x.x.x:9001) has not managed to confirm that its ORPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.</div>
<div>...</div>
<div>Now I open 9001 udp at the DSL router</div>
<div>...</div>
<div>Oct 20 08:31:04.223 [Notice] Our directory information is no longer up-to-date enough to build circuits: We have no usable consensus.<br/>
Oct 20 08:31:04.400 [Notice] Tor has successfully opened a circuit. Looks like client functionality is working.<br/>
Oct 20 08:31:04.424 [Notice] Now checking whether ORPort x.x.x.x:9001 is reachable... (this may take up to 20 minutes -- look for log messages indicating success)<br/>
Oct 20 08:31:07.088 [Notice] We now have enough directory information to build circuits.</div>
<div>:)</div>
<div> </div>
In the past I tried several things and found someone else did the following (! start page !)<br/>
He tells to use 9001 udp for his PI so I try it for Tails and it works. I expected to not need udp. Question is why?<br/>
Interesting is we both use a german well known Fritz!Box DSL router.</div>
<div> </div>
<div>German site [<a href="http://www.webstimme.de/2013/08/23/raspberry-pi-als-tor-relay-betreiben-howto" target="_blank">http://www.webstimme.de/2013/08/23/raspberry-pi-als-tor-relay-betreiben-howto</a>]</div>
<div>Ports der Router-Firewall öffnen:<br/>
1. Sie müssen folgende Ports für TOR auf ihrem Router öffnen (jeweils TCP und UDP):<br/>
Standard: ORPort 9001<br/>
Standard: DirPort 9030</div>
<div> </div>
Thanks, Zwiebel
<div> </div>
</div>
<div> </div>
<div class="signature"> </div></div></body></html>