Archlinux.fr [Forums]

Code : Tout sélectionner

Log notice file /var/log/tor.log
    VirtualAddrNetwork 10.192.0.0/10
    AutomapHostsSuffixes .onion,.exit
    AutomapHostsOnResolve 1
    TransPort 9050
    TransListenAddress 192.168.1.15 
    DNSPort 53
    DNSListenAddress 192.168.1.15

Code : Tout sélectionner

[root@rasp lolop]# less /etc/iptables/iptables.rules 

*nat
:PREROUTING ACCEPT [182:17890]
:INPUT ACCEPT [1200:78949]
:OUTPUT ACCEPT [51:12485]
:POSTROUTING ACCEPT [51:12485]
-A PREROUTING -i wlan0 -p tcp -m tcp --dport 22 -j REDIRECT --to-ports 22
-A PREROUTING -i wlan0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 80			(serveur nginx)
-A PREROUTING -i wlan0 -p udp -m udp --dport 53 -j REDIRECT --to-ports 53			(dns tor)
-A PREROUTING -i wlan0 -p tcp -m tcp --dport 9091 -j REDIRECT --to-ports 9091		(transmission)
-A PREROUTING -i wlan0 -p tcp -m tcp --dport 4080 -j REDIRECT --to-ports 4080		(mldonkey)
-A PREROUTING -i wlan0 -p tcp -m tcp --dport 9100 -j REDIRECT --to-ports 9100		(p910nd, pour imprimer sans cups)

-A PREROUTING -i wlan0 -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j REDIRECT --to-ports 9050		(sensé passer le trafic dans tor)
-A POSTROUTING -s 172.16.1.0/24 -o wlan0 -j MASQUERADE									(partage la connexion sur ethernet)
COMMIT

*filter
:INPUT ACCEPT [68385741:47566027153]
:FORWARD DROP [19052:3995738]
:OUTPUT ACCEPT [50588559:37975853089]
-A FORWARD -s 172.16.1.0/24 -o wlan0 -m conntrack --ctstate NEW,RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -d 172.16.1.0/24 -i wlan0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
COMMIT