[tor-dev] How to build a Router that will only allow Tor users
martink at posteo.de
Tue Mar 15 15:52:14 UTC 2016
I try to configure OpenWRT in a way that it will only allow outgoing
connections if it is Tor. Basically it is the opposite of "blacklisting
exit relays on servers": "whitelisting (guard) relays for clients". It
should *not* run Tor itself.
A first test setup (onionoo document, ipset and iptables) kind of
worked. It's definitely doable, but not totally trivial in the end.
What did *not* work, was starting Torbrowser. That's a hard requirement,
and before bebugging it through I ask: Do I miss something when I just
allow outgoing connections to
* and HSDir flagged relays (do I *need* them? that's a different
I don't restrict ports for now, even though I really should, and it's
all only IPv4 addresses I care about for now, and I easily could just
have OpenWRT configured wrongly, but:
DNS is not an issue I think, what else could be?
So far I only see Torbrowser talking to one Authority while starting.
More information about the tor-dev