[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-relays] DDoS solution for Tor nodes - nftables variant implemented
- To: "tor-relays@xxxxxxxxxxxxxxxxxxxx" <tor-relays@xxxxxxxxxxxxxxxxxxxx>
- Subject: [tor-relays] DDoS solution for Tor nodes - nftables variant implemented
- From: Toralf Förster via tor-relays <tor-relays@xxxxxxxxxxxxxxxxxxxx>
- Date: Sun, 13 Sep 2026 10:44:10 +0200
- Cc: Toralf Förster <toralf.foerster@xxxxxx>
- List-id: "support and questions about running Tor relays (exit, non-exit, bridge)" <tor-relays.lists.torproject.org>
- Reply-to: "support and questions about running Tor relays (exit, non-exit, bridge)" <tor-relays@xxxxxxxxxxxxxxxxxxxx>
- Ui-outboundreport: notjunk:1;M01:P0:4Md4O6FydfA=;WgLJwTINZ6vZcyRDVfquZjb+lwb 0LpY6Q52yZxw0hkTIFzQJJypASqqGYZJIoIEgViTZFYWkqMs1d2ECZew7bq640H6JRjlSbma2 B81JgF2s2vspmxvSUgr/33MZFkWfGrEzPPy014f5cekSDtAkWHs1/EmZXikkaPZX9xwlKpgiL UV0StNelnrp0KAZPt1a7Hc9X/XR4PPIkfkY8ufrTMOiFJDu6VqgImNZfAQe2xgB5g5p//r8Y/ xGgxvVzqxOCK/+WSC2BaxAhb1jpO+I9iulZPbpI5YzbQ/Tfd3ejLOCueRaXNDefaqUW/nf9fd +tb7ar536JgX0bCQTIVJxix8dDDjHJR3wjavoP26ZeYzIrBzel783Z51GfAm1HtPl/Kq852TR HzA56eWduLyClSgs1wsXM3+NSRzNv4Z+zTSBz0aU4pNG4a30Lj9qt6puOlMgCaTP4pOfS7sPY 3v8JRnbTXNqOGLMAZmg2+WinURfQF7N0gfCJgpRtAIM13/CzpEuM1LIWDWJpNtIiqsiDAtyF3 b1LC6cAAmOS7RRdwq10aCvXuHNXhCQOjk0MncWhbPdBdxLpdzMtir0jNQSQ7/9FRU0FKZcM5S Df4N7whCexcj0voA/KwWPW0JbK8rTIQxhiT9Nb/dryP1h7/cdzFnS0f9nkRDx5VrdlgSGbTrg +LG6m3rhRX3ZTOf8QyRmytjaZUPumlqVhqMXbbUl8mMd7H/DM0xscxLDaAIwjiO0XD8CO/8w2 Rgb+WgydI5kxRw5d8oNeEo5bDTHe2POAfpYjbhbc2npjDglGWobgNpBuq1+UU4oirfFN14jF6 EgSSjF++iXMOjUPQ0tjy4HlF+j/Ucgb6BbZkoqmqR4PPHuDnTjqg9eBtpsXk693NFUO8h/qPc A3BM5ChnBRwUY4cZKW+62wRN3mGVslTkeAEPZU1Q9gVWLw0fX7Nk9DTyGs6AMtAqPN+45yH7k QcsxwvEORQSQqBfQpYCiZ2VrFd1XVvNn33d2ALULbUIuolyxD3AwiyzC/HqtJNeLh1F49/wwd tzUsHVwkZoMiTUkjicI8LB9vWyzBSRfW1RbaHw7s5Eq2ju/0K3FF8N0mR0clfP03UJdaKgvbL 5fr7XHSQlg4YLvGELgFF+3kQnsxjZpYD3EE2FaD1ymDG3cuNmNb6Mq3KqQyn4H2oCBZ2vkP+Q 4u3+6U5rKiZMx5k3NL5kzj+Wz1DXts/OvBMFOeAO8l7EI0ncAZ0EQxWAr2vwG7Un1d2CZonTi gSv8y0FU+FEacfH4VvIzurIOwNuusy0fvxWbK2qdnCiwITU6N0HFG01DHLxPVNDjl5ysUNZBf eSWxWEinF4VxAcnOvcMvEAsGp03JZTvJzynF2rhLTwpwarCOVmfpGJOQ8cBdnD0eEw/E36aZd WltrLEquptEVF5FfFTh7dl/Onig1+ZqKX4Vyx4Vlk4pvN0JMF/HldhG1hBsBQFir0q1585o6V d5ymkKFwZGfaFnhTNnN75o2M6OlJnWn/LMMWTBIrwBtbNwV2YIqr3aBsS3j6Fn8HvbJQLzYey AizUASV9b80EWgWbKmgIKWkNhpDnrGrhpezIcXXYcx+oFBy0SS1dTcRz5DEBNLi1fhb5+g6b8 RGNSelXuQzZtlqSmTZhKDVPFLkOJKbg+DsedBwg6nr19eKZebJtmUfcvZST+tRNeW3QMFi8we B8DI9HjOdfMhBuwRsZBgtyWzjs+8KIVve/hZyOm0zX9QhEMf5IFySkIcUSQf5KjEI8/3ZAGx2 5c0CKYdZr3MGMabaKQ/W6nBOaKb1y7aE5UXwZPaHrxWFSK6+x4SLQA2dfBRW61nydY3gknjuY wnGCX144VUcZosVgYJNEs8AikL17SX5s5j6aUqD0gq6EcNCwA9ftt0HMjD79HolGvv9CE0389 7B9FoGU0nsv47o++A4+4hGxDZqE+Wde5+7QaUwIpd4lMTBnlwWtiJ47aqvZyYrA5+A+KNwGEy /rw5vsIv5AB4R/kITeULtaFAGLHb5mirba377XZeAxjhl9ouYfjC0zoEozEOPbqe9fNbBTvix OW3w8yOJF2ZoQm2/db/Rl3Ai27vadauVMCb66Bw6twKL5x26I5suonj8toitY84TJ3fiRPXI4 hudAS7NLZG+7L9F3M0avTKRX3gmsz0ST52/rsch3NTJUCm1EIfjN8nIZDypd41Yyb0GDzwuS2 pf0IcFlPQvY/E2tzRk7J+Tbi0q94vNNhbER1ClV6hjwibzJVa4LHxrCNDFwiiuw4OqtdceBq1 AdvGfsvvqHzG/zvGWyMPNE4P64zs2J0HRJCwvJ2k1rGQ2stxO4OfFiNuz+2PgAN/+svzXBcZf Zi+/65IqXB3JzDPYMw6s0WmMuUkZ2TldIDgoVb9wx4gpuHMCXLWEU6uOxRNYOYH4XZrbNRp2x FnC0PgaikkcvwzJ1UV0PzH+WNL723HkvSbJQg7j54XdBwjV8KVAQzJg2BNrKFI3idruK4I0H3 YzkXhMQGNKjVrUGMIVsXZE9AvhKmTL9D4eoMWPSzHiq9gsfai18axbtkuUL4ko20yhe+KKLh8 zA4sgz+pZRRUI0ICBy+FS6CKfZnDA7xGYGFkS49wtVvpAxwJ7z9hyHJ2LU1ns/fBcPi2lSvlT qbkB1C4PYd0R8gCuyPtODZ/XpgXUKkOSSrumZkkb0LIuev4kioCCnKD9BKqqHMYVlmI/RI+Tw d9lgVpmhYObf+33Qz7Ojw6IUEgjaL6wnu/1DQUapGjaRKbCno+JSfomcd8ySF729QMgp5qo0+ 4kSDwlnec/toOsT7f+zT24AXvToMYXEyw+ROiAKKUMYAQADjKiPLB8vdFc8XjPw9CmcO5kwFY uNWxPZNZcPy7Da8sbW7uYsv5q+WDHFEbnOzYTJP7MhIO44L7N6lkIsPb+nY4DvBoHbybTuBFy lmDvnkbRqu5D1f3wW9DtsPV5OszTqMYB8JAr3c5bM7CybFXXmmGvMsIu90ltvIttpIdrrYRYB youWdg2/CK1mTtVSaSEp8icJk1FkRkayc7JLxwkj22Bo4WWiOplYI0hCXyLD8Ns8CFmI+2wB9 OXxCYf7TPO95wRfNwonpPRUUP5LlUDVBxGhuuQQBiWLS3SMqA0lcU3DMDwzpsJBGAeHk5kL5F +B8buWqAlocwDTwwEw38UyZkARZRo1b8JX6QsyWTzc/9HtV62DuF3rfzBr7ZTUn8wJU/8r4aQ mW4NIVrNsMwUb991dne8B5N7UcD+tqmMC2fB9YO9OWb777Kgqhtf2qdvN0vQx/D7Xg1pqSgdn PgbwQejuopcfz2V0V/dX4bSJ/cipSHSqG+k6HCExuL8xA9+tpv2nP9wZOOsAI098BlAjTkt+b ICulsqMVgbrQ0kv9ifN18HBeJmTBnExuC2kSuPNjQIZjNtvXdlmQZBHzMglZfyQEMN1gt6iXE mhelZ3n75kWoCVEf+yitnzPtlDPcgDO/hhiKLrfaz+j06hQC4G6O6E9yA/M13ob6SF7VzumZ7 PM9i/EMsWtUBhjYgYZnHtaGigLM90kY3ihrkRZ85zbDUciVBEDZe5SC5cM1G1PvD1Jigypdie eBOLvEItWZfrWzAAqnly2wybD7ZyU+bKzT7TX2L9WSiSI0HGQpoggV+xSF4z2XZfgJV4el+zH noKNeJcUBIzF7OH5GYlHVjMMMmcPlksYPp/E4RiZNzPLRL7qiXSJxhAbTOiegqaS6miuWE4Zg 31CFH4yDi4jMocKA4AB5t0JbBHc4Tb+pKNs5V5+5ilb28qm1LWpmu9UzEKWI/gF/WFJyX3ndb Zo5tb5LVaqLtunqjmzTT13ErfEyo+lS6Q4OORP9F41edPS1uQ5FomsM+d8rDNggQpkYbIVJNA ORo3tk3yxJTrzA5SnSS0Z69Hqc/scJOuWn8JdJM8J4bswusf8GtNVv5oCNaRs3ILUyN1PRZdD vnZ7+2NDfJEDoK8jugFaMtdcP7a2+cmzDcZZ04NvxLWXD0oPMqljgDEBq6BjGc9YGeM+zZFBz PISOkZcnTQ09DiBopMnEOY7MQAwsGajSKGXUXaPOZnCBHknDOb7ppzAQ47rMq5oHDSHn4ICCx o2dFmhzKGmdy5aFPBPxiiiF9mBVTTeQM3JWCOKn+ekISCLBPT1mRvOIq/vVYdGR3ec3ikVBDl k2DU01BdCtGuK979Of1N5Lu7QCLai2O6mJ9qjG4OJFslwch9QIuN7cW2IZ+iqYDjXuKlcDfRm w/wCK/y8sM4dBb2VOCAM/XTKpx/djjKEdIqkVAmfeMiO2+jjiWEc2KNY1zX1u5nSZiBfW2Nyu GHY5YS9eSrQaiL8nW/dpmpuGs7vtX8WGuvWXfi32r2kzzAJZB0lUaYBzQsVu+jo1IIRPLsvPO NDo9m+AR6MW2iJLZtVaUha8AypQCIAAyvjpoTHEZY2gSLHIK/vG9xTH4LdwZNpFNF6nqz7Chv E7dRHCCMHKiOfeTXonPsxlVjaDXAdNhcqQ+Z+bFUD8XnNzT8PVpnFEV+C68WlEnNWyVuob/Vz MKyDZBagtyglEuQCbNxyavMWBGOJDnb1nEgoZ5IHm4JOZ6l/6IaKaJT9qXRkNsLYW1SVZUNwO 9stDRIYaztbgbe5gOaGdDqh6W010YUhr9mL1NgxoagrX1xhs8XeScjk+zmKSJe2qVivTrFeJz Qt5HI1SxObOsRgMyuqVbeBPiGv88l+fA/mmzyRLswi6N7vD8d0zhx4IOfLHJr0Zl84cs37ynh cgLmnYe5idJk2O3qyvBxfYwNNRveqzG/qI83pw2VLT+fIiN/Qx56awId+IPzu4JsP86SX/u3T MlDoazYFoArU/mm3/Efegnhexnmwud6VoHSakC3Z22E8R3li7NRdtkeXGm1d/vgQ3QFWp5i0H kKZ2A4ncUKM7UqX1Fee68SFo0A1PchKnYxI6YD3BDfCxoLnXA66DsU1dNOfzT+aO+p923PKvD bmagZWClU0dvFGTxhC/cuE0BwUZEB5fXkP5aELV9vV1b3SNrNFBjlqKfN7Bsx87oKWvJwqGHW N/qPRhapNrgCyBNUW5RFrP23PIXd1EYCb4Li0HuCJrgrzVi6upK3PkOnzrIJTlXliOFa30Q1C 06QfoVnhwdmg3kf/0/Fe0bBHvma4GrO52gk38iXz8+aEq844giZspreUueTMqdPkCjfSQ1nMT ph77PL9m5MBLtUmxMKKYly1OIgSU22sTEt2HgpJN4ebkqGLl1jZ6Et6RjlYkY4IeKBXD8T24n p15YHcTk25fcCRr3EOh/WM66dKsd9M1FMypFN4Kv5BtHEg6FVY61xzZp1Awkd/OMyrDtojDgZ +Cm5bakacRExOHBjDeetyj4mbRU+6OwT4zfYbND621QsIW3RmiW9yw9xvBPtnWgDa3k6V6xUX hMJ6l7y/i/PnloA2PvohlQBEePlTy9pr3YaQasRFjTWrogFOo8KnbJeMvJT97mp6wBxQfkT/k XFc6tc2dQNSyVS264Na6tjBATDu7AGQ+nb8FZFoJjA6mLbqxE7L8hD0z0cUhag9npb/0/q3kq AIdL2/ajjkZOagewGgmFMWiP0G66xKQDQftmJQ69kjuDg54+ZkeTE509sJshAWJg4wA13MiAN DhcBvEG0r6n9BhNzDPnB+qhDI06WPKufLhsmpl8vWfsUjPssmk+ES19xcMJT2HzNl/qdcDcK/ QhCocKC5bulRTDPBCCSaX73uIVc/bfIKPeHV+IzBWoZPFPHAPkOAH3kf31XsnqMtwcNOkZNgK F/SNSgbNzDXP8LgKTY9R6kJkUa+35NfVuZkduQBfz2/UD7g8Y0eaikBug75IEW3wHtaJdSKv9 3oWaKc7SM8tw3HASJQYCA3aMfZ1YxJx7feH0xw6Y9Wr9Yg/Itm0OBeVyteg9GHnPqS3YkPeeP +/G6ehm3HKrjigdb4XgW6gGl0i7rB3QTDT/iLE6qbs2+ykSLSq8VFg62CxCaHt/6VNUHJ1T3/ Nt9/Q/tMFJvqnnnw+uVSaqLuJ367KG8oLjYUV5uZRFbip0Ym4/xj6Xp7CtQYbCSW1033k07NA lMgtBxc0DUbEkeWutxDMZJad9rYkNwjGBnApHvURsJjOBuab1j9nAFeNlGgeYMHQzQgfpJvql ejuwl7JDXS64cL0mKER/kxr4QPFza4Mh7nixFqlLKuyjzpHsc6vyjJOgPO6QQ3dfxIAd8wrey IFUKxE/wC7jtoeQO6D05lOFQ/hjQcZLuB6MyAIGmPUCXDwyrLqdYVRvlPDJbuUETTE00UE4Ok EThm7EkH2y7Qvc7OTX+U8zdhmkQd/f2TXlrseDJs9J3uqYXNFyhWQ==
- User-agent: Mozilla Thunderbird
I eventually managed to have it [1] for nftables too and will continue
to maintain both variants.
The iptables Readme is moved to [2].
Give it a try.
Thx
--
Toralf
[1] https://github.com/toralf/torutils#the-rule-set
[2] https://github.com/toralf/torutils/blob/main/README-iptables.md
_______________________________________________
tor-relays mailing list -- tor-relays@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-relays-leave@xxxxxxxxxxxxxxxxxxxx