IP-tables and TOR

[Michael Gomboc <michael.gomboc@xxxxxxxxx>]

Hi!

Could some net filter expert give me some advise how to use iptables with TOR?

I'm trying the following to drop all non TOR connections:

iptables -F INPUT
iptables -F OUTPUT
 

iptables -P INPUT DROP

iptables -P OUTPUT DROP

iptables -A OUTPUT -o lo -j ACCEPT

iptables -A INPUT -i lo -j ACCEPT
 


iptables -A OUTPUT -m owner --uid-owner debian-tor -j ACCEPT

 

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT


Is there more to think about?

Thanks a lot!


-- 
Michael Gomboc

pgp-id: 0x5D41FDF8