[tor-talk] tor with vpn

grarpamp grarpamp at gmail.com
Tue Jul 5 07:34:53 UTC 2016


On 7/4/16, Mirimir <mirimir at riseup.net> wrote:
> Yes, VMs are heavyweight. But iptables rules for this are pretty
> trivial. Drop everything (input, forward and output). Accept output on
> eth0 only for user debian-tor. Accept all output on tun0.

Sure that big hammer approach works for many.

But it's not trivial, or in some cases even possible,
if you need some combinations of...
a) anything less than the entire routing table captured to vpn
b) more than one tor and/or vpn instance running
c) point different apps at and/or through different things
d) etc

The ticket exists make those type of things more trivial ;)


More information about the tor-talk mailing list