[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Transparently anonymizing traffic iptables problem
https://wiki.torproject.org/noreply/TheOnionRouter/TransparentProxy :
[quote]
2.1. Transparently anonymizing traffic for a specific user
[code]
iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner anonymous -m tcp --syn -j REDIRECT --to-ports 9040
iptables -t nat -A OUTPUT -p udp -m owner --uid-owner anonymous -m udp --dport 53 -j REDIRECT --to-ports 53
iptables -t nat -A OUTPUT -m owner --uid-owner anonymous -j DROP
[/code]
[/quote]
But last iptables rule will not working anymore.
Iptables warning:
[quote]
The "nat" table is not intended for filtering, hence the use of DROP is deprecated and will permanently be disabled in the next iptables release. Please adjust your scripts.
[/quote]
What's better iptables rule for *specific* user?