[tor-talk] FreeBSD PF (firewall) ruleset

M C J mcj2770 at gmail.com
Tue Nov 12 03:38:10 UTC 2013


I'm unable to connect to Tor with PF enabled. Without PF, Tor connects and
runs fine (with Privoxy). Soon as PF is enabled, Tor will either disconnect
if already running, or fail to connect if I try.

I've used a very basic pf.conf ruleset:

#######################
block in all
pass out all keep state
#######################

And had no success. I, assume, I need a redirect rule, maybe something like:

################################################
ext_if="ath0"
int_if="lo1"
pass in on lo1 proto tcp from lo1 to ath0 port any \
rdr-to 127.0.0.1 port 8118
################################################

I really don't know. Maybe some allowances for Privoxy need to be made too?

Tor and Privoxy run perfectly with PF disabled, but I would like an active
firewall.

Thanks


More information about the tor-talk mailing list