[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-talk] iptables rules



could someone please clarify a question I have about configuring tor &
iptables.  I'm using a dual nic centos server with squid/privoxy/tor behind
a ISP router.  My internet nic (eth0) gets a dhcp address so I wasn't sure
how to set SocksBindAddress to the eth0 address?  Is there a
SocksBindAdapter setting available?
My tor.conf:
*SocksPort 9150  #privoxy socks5 port*

*SocksBindAddress 127.0.0.1*
*SocksPolicy accept 127.0.0.1*
*SocksPolicy reject **
*AllowUnverifiedNodes middle,rendezvous*
*Log notice syslog*
*RunAsDaemon 1*
*User tor*
*CircuitBuildTimeout 30*
*NumEntryGuards 6*
*KeepalivePeriod 60*
*NewCircuitPeriod 15*
*DataDirectory /var/lib/tor*
*PidFile /var/run/tor/tor.pid*
*Log notice file /var/log/tor/tor.log*

I was thinking I would have to forward eth0:9050 to lo:9050 with these
rules:
*-A FORWARD -i lo -o eth0 -p tcp --dport 9050  -j ACCEPT*
*-A FORWARD -i eth0 -o lo -m state --state ESTABLISHED,RELATED -j ACCEPT*

Any advice would be appreciated.
Robert
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk