[tor-relays] Re: Snowflake throughput (was Re: Re: Snowflake setup fail)

[ProSecureRelays via tor-relays <tor-relays@xxxxxxxxxxxxxxxxxxxx>]

Hi there,

did you check your firewall/router-appliance for Static Port Mapping?

For security reasons, some firewalls/routers have random port assignment of the external NAT-Ports. Means, a random source port will be selected.

I had to change this for some Deutsche Telekom VoIP Costumers and that did the trick.

For an OPNSense Firewalls as example, go to Firewall -> Source NAT -> Create New Rule

Interface = WAN, Source = Your Proxy IP, Destination = any, Static Port = enabled, Translate Address = Interface Address

If you don't have a professional router/firewall, then this setting might not be available for you.

I could further assist if you need help with OPN/PFSense or Sophos based Firewall Setups.

Furthermore, I can warmly recommend the Browser Plugin from SnowFlake. Setup in seconds and still modest traffic without any network setup.

Best regards and have a nice weekend!

Joker

-----Ursprüngliche Nachricht-----
Von: Cecylia Bocovich via tor-relays [mailto:tor-relays@xxxxxxxxxxxxxxxxxxxx] 
Gesendet: Donnerstag, 27. August 2026 23:14
An: tor-relays@xxxxxxxxxxxxxxxxxxxx
Cc: Cecylia Bocovich
Betreff: [tor-relays] Re: Snowflake throughput (was Re: Re: Snowflake setup fail)

On 8/25/26 3:51 PM, John Thompson via tor-relays wrote:
> Thanks. It isn't clear to me which tor-snowflake config file needs to 
> be modified. I added "-ephemeral-ports-range 40000:45000" to the 
> "ExecStart" line in 
> /etc/systemd/system/snap.tor-snowflake.snowflake.service, ran 
> "systemctl reload-daemon", ran "sudo snap restart tor-snowflake", 
> opened ports 40000-45000 in the firewall, restarted firewalld, opened 
> ports 40000-45000 UDP on the router to be forwarded to the snowflake 
> machine, 
> but it hasn't made a difference. NAT is still reported as "restricted."

You can try the following steps to check that your port forwarding is 
working correctly:

- Run on the same machine as your snowflake proxy a simple TCP server to 
listen for incoming connections to a port in that range:
nc -l 40000

- From *another network*, try to connect to your IP and port
nc [IP] 40000

If IP forwarding is set up correctly, you should be able to send and 
receive messages on that connection.

Thank you for running a Snowflake proxy! Proxies with restrictive NATs 
are still very valuable to the network.

_______________________________________________
tor-relays mailing list -- tor-relays@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-relays-leave@xxxxxxxxxxxxxxxxxxxx

_______________________________________________
tor-relays mailing list -- tor-relays@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-relays-leave@xxxxxxxxxxxxxxxxxxxx