<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div><div><br></div></div><div>On 16 Oct 2018, at 03:58, Toralf Förster <<a href="mailto:toralf.foerster@gmx.de">toralf.foerster@gmx.de</a>> wrote:<br><br></div><blockquote type="cite"><div><span>I do wonder if the advice [1] is ok or wrong.</span><br><br><span>[1] <a href="https://tor.stackexchange.com/questions/6370/how-to-run-an-obfs4-bridge">https://tor.stackexchange.com/questions/6370/how-to-run-an-obfs4-bridge</a></span><br></div></blockquote><br><div>The post contains conflicting advice.</div><div><br></div><div><span style="background-color: rgba(255, 255, 255, 0);"><span class="comment-copy" style="margin: 0px; padding: 0px; border: 0px; font-stretch: inherit; line-height: inherit; vertical-align: baseline; box-sizing: inherit;">> But diversity of obfs4 ports is actually really important, so I'd argue against any instructions that will lead people to using the same port.</span> – <a href="https://tor.stackexchange.com/users/55/roger-dingledine" title="2,956 reputation" class="comment-user" style="margin: 0px; padding: 0px; border: 0px; font-stretch: inherit; line-height: inherit; vertical-align: baseline; box-sizing: inherit; text-decoration: none; cursor: pointer;">Roger Dingledine</a> <span class="comment-date" dir="ltr" style="margin: 0px; padding: 0px; border-top-width: 0px; border-right-width: 0px; border-left-width: 0px; border-bottom-style: none; font-stretch: inherit; line-height: inherit; vertical-align: baseline; box-sizing: inherit;"><a class="comment-link" href="https://tor.stackexchange.com/questions/6370/how-to-run-an-obfs4-bridge#comment6415_6371" style="margin: 0px; padding: 0px; border-top-width: 0px; border-right-width: 0px; border-left-width: 0px; border-bottom-style: none; font-style: inherit; font-variant-caps: inherit; font-stretch: inherit; line-height: inherit; vertical-align: baseline; box-sizing: inherit; text-decoration: none; cursor: pointer;"><span title="2015-04-04 19:50:32Z" class="relativetime-clean" style="margin: 0px; padding: 0px; border: 0px; font-style: inherit; font-variant-caps: inherit; font-stretch: inherit; line-height: inherit; vertical-align: baseline; box-sizing: inherit;">Apr 4 '15 at 19:50</span></a></span> </span></div><div><span style="background-color: rgba(255, 255, 255, 0);"><br></span></div><div><span style="background-color: rgba(255, 255, 255, 0);">This advice is correct.</span></div><div><span style="background-color: rgba(255, 255, 255, 0);"><br></span></div><div><span style="background-color: rgba(255, 255, 255, 0);">> Leave your ExtORPort set to auto for diversity reasons. I have a firewall enabled on my Debian bridge with very restrictive port settings. I had to make port forwards for the given obfs ports in iptables (easy with gufw) as well as in my hardware (internet-)firewall to make things work. So I am not so sure that the ExORPort is for local connections only as mentioned by Rodger (please let me know if I am wrong here). </span></div><div><span style="background-color: rgba(255, 255, 255, 0);"><br></span></div><div><span style="background-color: rgba(255, 255, 255, 0);">This advice confuses ExtORPort (which is local) and</span></div><div><span style="background-color: rgba(255, 255, 255, 0);">ServerTransportListenAddr (which is used for obfs4).</span></div><div><span style="background-color: rgba(255, 255, 255, 0);"><br></span></div><div><span style="background-color: rgba(255, 255, 255, 0);">T</span></div></body></html>