5 votes
Accepted

Iptables to prevent Webrtc IP address leaks?

Instead of blocking the access from the firewall (iptables), it is easier to block it from the browser itself. If you are using Firefox or Iceweasel, you can disable Javascript completely (using ...
user avatar
  • 1,195
4 votes

transparent proxy .onion firewall rules

I found the issue after some reading. The VirtualAddrNetwork setting was the same as the dhcp pool in my network configuration so when .onion domains were returned the browser was attempting to ...
user avatar
4 votes
Accepted

How do I setup Tor on Debian for secure use as a SOCKS5 proxy?

I've just tested this in a CrunchBang 11 x64 VM. It should work in Ubuntu and the rest of the Debian family. First install Wireshark, by opening a terminal and running these commands: sudo apt-get ...
2 votes

How to block all non-tor network traffic on GNU/Linux?

You are right, this can be achieved by using iptables. This is described in Tor documentation. So, as a root, type: iptables -F OUTPUT iptables -A OUTPUT -j ACCEPT -m owner --uid-owner debian-tor ...
user avatar
  • 708
1 vote

Why doing transparent proxy is a bad idea?

usually yes... first the easiest one, because of error-proneness: i'm pretty sure the configuration (and code) of the mentioned projects is reviewed much more often than the configuration of someones ...
user avatar
1 vote
Accepted

How to configure Whonix Gateway for communication between two local Workstations in Qubes?

sys-whonix is not set up to forward packets between VMs, and doing has not been evaluated for leaks. Instead, qrexec should be used for inter-vm communication. In dom0, create a file /etc/qubes-rpc/...
user avatar
  • 121
1 vote
Accepted

What is the purpose of the nat ipables rules in Tails netfilter?

They allow access to local network resources but deny DNS and the i2p service, to prevent accidental leaks. From ferm.conf: # Local network connections should not go through Tor but DNS ...
user avatar
  • 10.8k
1 vote

Use IPTables to force traffic through Tor?

First install ferm by running sudo apt-get install ferm Use Tails' ferm.conf as a base and removing Tails' restrictions on localhost connections (you can add these back if required but a lot of them ...
user avatar
  • 10.8k
1 vote

What IPs will connect to my server running a hidden .onion site?

You can use netstat to see exactly what IPs are connecting directly. The 127.0.0.1 in your logs is what's seen by applications, rather than the server itself. The server will see your entry guards, ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible