On 12/24/2014 8:29 AM, mikael wrote: > Hi, > I don't know what to do. Please help. > > I'm getting the following warnings in arm: > 16:13:15 [WARN] Your server (MY_PUBLIC_IP:9030) has not managed to > confirm that its DirPort is reachable. Please check your firewalls, > ports, address, /etc/hosts file, etc. > 16:13:15 [WARN] Your server (MY_PUBLIC_IP:443) has not managed to > confirm that its ORPort is reachable. Please check your firewalls, > ports, address, /etc/hosts file, etc. > > My iptables rules are: > mike@host:~$ sudo iptables -nL > Chain INPUT (policy ACCEPT) > target prot opt source destination > ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 > REJECT all -- 0.0.0.0/0 127.0.0.0/8 reject-with > icmp-port-unreachable > ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state > RELATED,ESTABLISHED > REJECT all -- 62.210.140.93 0.0.0.0/0 reject-with > icmp-port-unreachable > REJECT all -- 62.210.151.213 0.0.0.0/0 reject-with > icmp-port-unreachable > REJECT all -- 103.41.124.106 0.0.0.0/0 reject-with > icmp-port-unreachable > REJECT all -- 103.41.124.112 0.0.0.0/0 reject-with > icmp-port-unreachable > REJECT all -- 109.230.220.135 0.0.0.0/0 reject-with > icmp-port-unreachable > REJECT all -- 115.84.179.148 0.0.0.0/0 reject-with > icmp-port-unreachable > REJECT all -- 117.21.225.176 0.0.0.0/0 reject-with > icmp-port-unreachable > REJECT all -- 188.116.19.109 0.0.0.0/0 reject-with > icmp-port-unreachable > REJECT all -- 219.232.239.40 0.0.0.0/0 reject-with > icmp-port-unreachable > REJECT all -- 221.235.188.214 0.0.0.0/0 reject-with > icmp-port-unreachable > ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 > ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 > ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW > tcp dpt:22 > ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 > ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 > ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:9001 > ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:9030 > ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp > dpts:6881:6999 > ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp > dpts:6881:6999 > ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 8 > LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg > 5/min burst 5 LOG flags 0 level 7 prefix `iptables denied: ' > REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with > icmp-port-unreachable > > Chain FORWARD (policy ACCEPT) > target prot opt source destination > REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with > icmp-port-unreachable > > Chain OUTPUT (policy ACCEPT) > target prot opt source destination > ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 Does your system use tcp wrappers? If so you may need to add a line like this to /etc/hosts.allow : tor: ALL
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ tor-relays mailing list tor-relays@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays