[tor-relays] iptables

mikael mikael at gutanet.sk
Wed Dec 24 15:29:41 UTC 2014


Hi,
I don't know what to do. Please help.

I'm getting the following warnings in arm:
16:13:15 [WARN] Your server (MY_PUBLIC_IP:9030) has not managed to 
confirm that its DirPort is reachable. Please check your firewalls, 
ports, address, /etc/hosts file, etc.
  16:13:15 [WARN] Your server (MY_PUBLIC_IP:443) has not managed to 
confirm that its ORPort is reachable. Please check your firewalls, 
ports, address, /etc/hosts file, etc.

My iptables rules are:
mike at host:~$ sudo iptables -nL
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
REJECT     all  --  0.0.0.0/0            127.0.0.0/8 reject-with 
icmp-port-unreachable
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state 
RELATED,ESTABLISHED
REJECT     all  --  62.210.140.93        0.0.0.0/0 reject-with 
icmp-port-unreachable
REJECT     all  --  62.210.151.213       0.0.0.0/0 reject-with 
icmp-port-unreachable
REJECT     all  --  103.41.124.106       0.0.0.0/0 reject-with 
icmp-port-unreachable
REJECT     all  --  103.41.124.112       0.0.0.0/0 reject-with 
icmp-port-unreachable
REJECT     all  --  109.230.220.135      0.0.0.0/0 reject-with 
icmp-port-unreachable
REJECT     all  --  115.84.179.148       0.0.0.0/0 reject-with 
icmp-port-unreachable
REJECT     all  --  117.21.225.176       0.0.0.0/0 reject-with 
icmp-port-unreachable
REJECT     all  --  188.116.19.109       0.0.0.0/0 reject-with 
icmp-port-unreachable
REJECT     all  --  219.232.239.40       0.0.0.0/0 reject-with 
icmp-port-unreachable
REJECT     all  --  221.235.188.214      0.0.0.0/0 reject-with 
icmp-port-unreachable
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:80
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:443
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW 
tcp dpt:22
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp spt:53
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp spt:53
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:9001
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:9030
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp 
dpts:6881:6999
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp 
dpts:6881:6999
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           icmp type 8
LOG        all  --  0.0.0.0/0            0.0.0.0/0           limit: avg 
5/min burst 5 LOG flags 0 level 7 prefix `iptables denied: '
REJECT     all  --  0.0.0.0/0            0.0.0.0/0 reject-with 
icmp-port-unreachable

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
REJECT     all  --  0.0.0.0/0            0.0.0.0/0 reject-with 
icmp-port-unreachable

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0


More information about the tor-relays mailing list