IP-tables and TOR

Michael Gomboc michael.gomboc at gmail.com
Tue Aug 24 17:54:14 UTC 2010


Could some net filter expert give me some advise how to use iptables with TOR?

I'm trying the following to drop all non TOR connections:

iptables -F INPUT
iptables -F OUTPUT

iptables -P INPUT DROP
iptables -P OUTPUT DROP

iptables -A OUTPUT -o lo -j ACCEPT
iptables -A INPUT -i lo -j ACCEPT

iptables -A OUTPUT -m owner --uid-owner debian-tor -j ACCEPT

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

Is there more to think about?

Thanks a lot!

Michael Gomboc

pgp-id: 0x5D41FDF8
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20100824/6a39dd88/attachment.htm>

More information about the tor-talk mailing list