[tor-relays] snowflake incoming UDP ports

[meskio]

Quoting Toralf Förster (2022-02-19 11:15:19)
> I do simply run here
> 
>   ~/devel/go/src/snowflake/proxy/proxy &>>/tmp/snowflake-proxy.log &
> 
> and was wondering if I have to open special UDP inbound ports ?
[...]
> but b/c I do have a rather restrict inbound firewall rule set I'm
> wondering about that.

If you have a restricted firewall you might have what snowflake calls 
'restricted NAT', the most useful snowflake proxies are the 'unrestricted NAT' 
ones, as they allow clients in a more restricted NAT situations to connect to 
them. You can check the NAT type you have in the logs.

If you have restricted NAT I would recommend you to open the UDP port range of 
32768-60999.

More information about NAT types:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/wikis/NAT-matching

There as a conversation about that in the forum few months ago:
https://forum.torproject.net/t/a-few-questions-about-the-standalone-snowflake-proxy/387

-- 
meskio | https://meskio.net/
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
 My contact info: https://meskio.net/crypto.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Nos vamos a Croatan.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: signature
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20220219/5f9552d9/attachment.sig>