[tor-relays] debugging unbound on 'torexit' failing DNS queries (solved)
tor-admin at portaltodark.world
Fri Jan 26 05:37:05 UTC 2018
Server has now been unsuspended, and is back online. You asked "do you
require a stateful packet filter?". Do you mean to disable conntrack?
I have removed all my connection tracking iptables entries. My iptables
looks like this now. Will keep an eye on it now.
*:INPUT ACCEPT [0:0]*
*:FORWARD ACCEPT [0:0]*
*:OUTPUT ACCEPT [6716:3141641]*
*-A INPUT -p icmp -j ACCEPT*
*-A INPUT -i lo -j ACCEPT*
*-A INPUT -s x.x.x.x -p tcp -m comment --comment SSH -m tcp --dport 22 -j
*-A INPUT -p tcp -m comment --comment Tor -m tcp --dport 80 -j ACCEPT*
*-A INPUT -p tcp -m comment --comment Tor -m tcp --dport 443 -j ACCEPT*
*-A INPUT -j DROP*
*-A FORWARD -j DROP*
On Wed, Jan 24, 2018 at 9:15 PM nusenu <nusenu-lists at riseup.net> wrote:
> > Seems my VPS got suspended when I increased the connlimit above 10000. Do
> > you think my INPUT filters which use conntrack could have caused this
> You did confirm that already, no?
> twitter: @nusenu_
> tor-relays mailing list
> tor-relays at lists.torproject.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the tor-relays