iptables and tor

[dante]

> The packets coming in on Tor TLS tunnels are destined for your node.
> They go up the stack through TCP and TLS to the Tor application
> itself. Tor does its AES CTR encryption on the cells coming out of
> these streams, and puts them in other streams based on the circuit
> labels. Here they get TLS'd, packed into TCP segments and go out.
> This means that packets going out after relaying have nothing to do
> with packets coming in, so I don't think marking makes any difference.
> This is clearly a positive point of Tor.
Thanks Csaba, that's exactly what I was worried about and your
information is reassuring.   The usual allow/deny rules should be good
enough.

---

Anthony G. Basile, Ph.D.
Director of Information Technology,
D'Youville College,
320 Porter Ave.
Buffalo NY, 14201