Hi there, did you check your firewall/router-appliance for Static Port Mapping? For security reasons, some firewalls/routers have random port assignment of the external NAT-Ports. Means, a random source port will be selected. I had to change this for some Deutsche Telekom VoIP Costumers and that did the trick. For an OPNSense Firewalls as example, go to Firewall -> Source NAT -> Create New Rule Interface = WAN, Source = Your Proxy IP, Destination = any, Static Port = enabled, Translate Address = Interface Address If you don't have a professional router/firewall, then this setting might not be available for you. I could further assist if you need help with OPN/PFSense or Sophos based Firewall Setups. Furthermore, I can warmly recommend the Browser Plugin from SnowFlake. Setup in seconds and still modest traffic without any network setup. Best regards and have a nice weekend! Joker -----Ursprüngliche Nachricht----- Von: Cecylia Bocovich via tor-relays [mailto:tor-relays@lists.torproject.org] Gesendet: Donnerstag, 27. August 2026 23:14 An: tor-relays@lists.torproject.org Cc: Cecylia Bocovich Betreff: [tor-relays] Re: Snowflake throughput (was Re: Re: Snowflake setup fail) On 8/25/26 3:51 PM, John Thompson via tor-relays wrote:
Thanks. It isn't clear to me which tor-snowflake config file needs to be modified. I added "-ephemeral-ports-range 40000:45000" to the "ExecStart" line in /etc/systemd/system/snap.tor-snowflake.snowflake.service, ran "systemctl reload-daemon", ran "sudo snap restart tor-snowflake", opened ports 40000-45000 in the firewall, restarted firewalld, opened ports 40000-45000 UDP on the router to be forwarded to the snowflake machine, but it hasn't made a difference. NAT is still reported as "restricted."
You can try the following steps to check that your port forwarding is working correctly: - Run on the same machine as your snowflake proxy a simple TCP server to listen for incoming connections to a port in that range: nc -l 40000 - From *another network*, try to connect to your IP and port nc [IP] 40000 If IP forwarding is set up correctly, you should be able to send and receive messages on that connection. Thank you for running a Snowflake proxy! Proxies with restrictive NATs are still very valuable to the network. _______________________________________________ tor-relays mailing list -- tor-relays@lists.torproject.org To unsubscribe send an email to tor-relays-leave@lists.torproject.org