[tor-talk] Problem with TransPort etc.

[BlueStar88]

Am Sat, 21 Apr 2012 18:17:01 +0200
schrieb Anders Andersson <pipatron at gmail.com>:

> On this server, Tor is running fine, with the following in torrc:
> TransPort 10.x.x.x:19050
> DNSPort 10.x.x.x:19053
> VirtualAddrNetwork 10.192.0.0/10
> 
> 10.x.x.x is that server's address on the LAN. 'netstat' shows that
> Tor is listening on these ports.
> 
> On my client machine, I have created a user called 'torvm'. I have
> added these two iptables rules:
> # iptables -A OUTPUT -t nat -p tcp -m owner –-uid-owner torvm -j DNAT
> --to 10.x.x.x:19050
> # iptables -A OUTPUT -t nat -p udp --dport 53 -mowner --uid-owner
> torvm -j DNAT --to 10.x.x.x:19053

I don't know DNSPort behavior, does 19053 listens to UDP only? Maybe you
need DNAT port 53 TCP traffic to that port too, since DNS answer packets
exceeding one UDP packet size go trough TCP...


Greetings

-- 
BlueStar88

0x36150C86 (PGP)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20120421/15ceb63b/attachment.pgp>