[tor-relays] does it make sense to close unused ports at a tor relay with iptables ?
Dr Gerard Bulger
gerard at bulger.co.uk
Thu Apr 28 23:08:05 UTC 2016
From: tor-relays [mailto:tor-relays-bounces at lists.torproject.org] On Behalf Of Daniel Llewellyn
Sent: 28 April 2016 15:35
To: tor-relays at lists.torproject.org
Subject: Re: [tor-relays] does it make sense to close unused ports at a tor relay with iptables ?
On 28/04/16 14:33, Dr Gerard Bulger wrote:
> Currently the rules are thus:
> -A INPUT -p tcp -m tcp --dport 9030 -j ACCEPT -A INPUT -p tcp -m tcp
> --dport 9051 -j ACCEPT Which opens up those TOR ports on BOTH my IPs,
> not what I want (OK torrc is listening to the second IP, but that is
> fiddly to set up for each service)
> I want my normal ports to be open on 1st IP and shut on second IP.
to block per IP Address you can amend to use the following form:
-A INPUT -p tcp -m tcp -d <your tor IP> --dport 9030 -j ACCEPT -A INPUT -p tcp -m tcp -d <your tor IP> --dport 9051 -j ACCEPT
P.S. this email is not GnuPG signed because I'm having issues with enigmail, ubuntu, gpg-agent and yubikey
Daniel Llewellyn, Bowl Hat
PGP/GnuPG Key ID: 0x0349ED21
4C9C BFAD 0069 D679 9660 BCD5 40C2 D958 0349 ED21
More information about the tor-relays