[tor-talk] Tor transparent proxy leaks?

[grarpamp]

A) The rules might be wrong
B) Lsof may be seeing pre-nat connection addresses
C) Don't include unrelated datas like rpcbind, ssh, etc
when your concern is some other app.

Those attempting to debug their setup should
be running tcpdump or wireshark on their internal
and external interfaces, etc. Lsof isn't the sort
of tool to use to see what just flew by.