IP-tables and TOR

[Jason]

Michael Gomboc wrote:
> Hi!
> 
> Could some net filter expert give me some advise how to use iptables with TOR?
> 
> I'm trying the following to drop all non TOR connections:
> 
> iptables -F INPUT
> iptables -F OUTPUT
> 
> 
> iptables -P INPUT DROP
> iptables -P OUTPUT DROP
> 
> iptables -A OUTPUT -o lo -j ACCEPT
> iptables -A INPUT -i lo -j ACCEPT
> 
> 
> iptables -A OUTPUT -m owner --uid-owner debian-tor -j ACCEPT
> 
> 
> iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> 
> 
> Is there more to think about?
> 

dhcp?  Unless you want to statically assign your address for _every_ network you connect to (I'm assuming a laptop/mobile device). 

ntp?  I've found TOR is much more reliable with an accurate clock.


hth,

Jason.
***********************************************************************
To unsubscribe, send an e-mail to majordomo at torproject.org with
unsubscribe or-talk    in the body. http://archives.seul.org/or/talk/