Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [iptables]

The tag has no usage guidance.

1
vote
1answer
65 views

Why doing transparent proxy is a bad idea?

I wonder why Tor Browser, Tails or Whonix are the most preferred ways of browsing Tor. What's wrong with manually doing a transparent proxy and routing all traffic over Tor through iptables? Why do it ...
0
votes
0answers
15 views

How do I drop non-Tor traffic in iptables and allow only Whonix-Gateway traffic?

I want to drop all non-Tor traffic in iptables and allow only traffic from Whonix-Gateway virtual machine on the host. My iptables config: # Generated by iptables-save v1.8.2 on Sat May 18 15:54:56 ...
0
votes
1answer
599 views

Manually firewall Ubuntu for Tor?

Can someone offer a brief walk-through for firewalling Ubuntu 16 with UFW for tor. I only want to allow tor traffic out on my device. I'm not sure if it's even possible with UFW. # ufw default deny ...
0
votes
0answers
32 views

Connect to a vpn through tor nftables

I have a box with 3 interfaces wlan0, eth0 (with internet connection) and tun0 (Openvpn). I want to connect that box to a remote vpn using tor socks. Until now I have the sock 60140 open in tor, the ...
1
vote
0answers
470 views

Iptables - Transparent Proxy with only one interface

I'm new to TOR and I'm trying to anonymize Internet connections from an automated malware analysis lab. All my machines are in the same subnetwork, and I just specify my TOR machine as a gateway for ...
1
vote
1answer
989 views

How to configure Whonix Gateway for communication between two local Workstations in Qubes?

I'm running Qubes with two Whonix Workstations side-by-side on the same Whonix Gateway. I'd like to set up SSH communication between them: locally, not through the onionsphere. How do I configure ...
2
votes
2answers
2k views

Iptables to prevent Webrtc IP address leaks?

Since I do not understand correctly how https://github.com/diafygi/webrtc-ips works, I would be happy if someone could explain to me what I can do more generally than disabling Webrtc in my browser. ...
1
vote
1answer
73 views

What is the purpose of the nat ipables rules in Tails netfilter?

I had a look at the iptables rules from Tails OS Briefly speaking, what is the purpose of the lan iptables rules? Chain lan (3 references) target prot opt source destination ...
1
vote
1answer
6k views

How do I setup Tor on Debian for secure use as a SOCKS5 proxy?

This is a fairly common question. I've found good guidance from the Tor Project, this and other StackExchange communities, and so on. But I haven't found a coherent set of instructions, covering both ...
1
vote
0answers
5k views

Orbot is Unreasonably Slow

I decided to start using orbot due to the tracking apparently being done by AT&T. I am unable however to get any sort of borderline acceptable internet speeds....When I try go to a webpage it is ...
2
votes
1answer
1k views

Use IPTables to force traffic through Tor?

Just wondering, I am using Debian, I am wondering if I can make IPTables or a easier to use firewall drop all traffic but the traffic I allow (including DNS) goes through Tor. Can this be done? I don'...
2
votes
1answer
2k views

How to block all non-tor network traffic on GNU/Linux?

What is the simplest way to identify and block all non-tor network traffic on GNU/Linux? I assume the most effective way would be some kind of iptables rule to distinguish between tor and non-tor ...
6
votes
1answer
2k views

transparent proxy .onion firewall rules

I am configuring a tor hardware router as an anonymizing transparent proxy using the info here and the good news is everything is working as it should; I can connect and browse sites, dns is forwarded ...
2
votes
3answers
404 views

What IPs will connect to my server running a hidden .onion site?

If I'm running Tor and a hidden .onion site on my server, which IPs will connect to it? Will it be just 127.0.0.1 or one of the thousands of daily changing exit nodes? Will they connect over a ...