[tor-relays] iptables

[mikael]

Found the problem.
Had to fill out the Address, don't know why, but tor fetched a different IP
The used system has only one configured interface:

mike at torhost:~$ ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
     inet 127.0.0.1/8 scope host lo
     inet6 ::1/128 scope host
        valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
state UP qlen 1000
     link/ether 00:50:56:b8:8b:37 brd ff:ff:ff:ff:ff:ff
     inet MY_PUBLIC_IP/24 brd 81.2.236.255 scope global eth0
     inet6 fe80::250:56ff:feb8:8b37/64 scope link
        valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
     link/ether 00:50:56:b8:9f:4c brd ff:ff:ff:ff:ff:ff
4: eth2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
     link/ether 00:50:56:b8:68:52 brd ff:ff:ff:ff:ff:ff


On 12/24/14 4:29 PM, mikael wrote:
> Hi,
> I don't know what to do. Please help.
>
> I'm getting the following warnings in arm:
> 16:13:15 [WARN] Your server (MY_PUBLIC_IP:9030) has not managed to 
> confirm that its DirPort is reachable. Please check your firewalls, 
> ports, address, /etc/hosts file, etc.
>  16:13:15 [WARN] Your server (MY_PUBLIC_IP:443) has not managed to 
> confirm that its ORPort is reachable. Please check your firewalls, 
> ports, address, /etc/hosts file, etc.
>
> My iptables rules are:
> mike at host:~$ sudo iptables -nL
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination
> ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
> REJECT     all  --  0.0.0.0/0            127.0.0.0/8 reject-with 
> icmp-port-unreachable
> ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state 
> RELATED,ESTABLISHED
> REJECT     all  --  62.210.140.93        0.0.0.0/0 reject-with 
> icmp-port-unreachable
> REJECT     all  --  62.210.151.213       0.0.0.0/0 reject-with 
> icmp-port-unreachable
> REJECT     all  --  103.41.124.106       0.0.0.0/0 reject-with 
> icmp-port-unreachable
> REJECT     all  --  103.41.124.112       0.0.0.0/0 reject-with 
> icmp-port-unreachable
> REJECT     all  --  109.230.220.135      0.0.0.0/0 reject-with 
> icmp-port-unreachable
> REJECT     all  --  115.84.179.148       0.0.0.0/0 reject-with 
> icmp-port-unreachable
> REJECT     all  --  117.21.225.176       0.0.0.0/0 reject-with 
> icmp-port-unreachable
> REJECT     all  --  188.116.19.109       0.0.0.0/0 reject-with 
> icmp-port-unreachable
> REJECT     all  --  219.232.239.40       0.0.0.0/0 reject-with 
> icmp-port-unreachable
> REJECT     all  --  221.235.188.214      0.0.0.0/0 reject-with 
> icmp-port-unreachable
> ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:80
> ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:443
> ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW 
> tcp dpt:22
> ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp spt:53
> ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp spt:53
> ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:9001
> ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:9030
> ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp 
> dpts:6881:6999
> ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp 
> dpts:6881:6999
> ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           icmp type 8
> LOG        all  --  0.0.0.0/0            0.0.0.0/0 limit: avg 5/min 
> burst 5 LOG flags 0 level 7 prefix `iptables denied: '
> REJECT     all  --  0.0.0.0/0            0.0.0.0/0 reject-with 
> icmp-port-unreachable
>
> Chain FORWARD (policy ACCEPT)
> target     prot opt source               destination
> REJECT     all  --  0.0.0.0/0            0.0.0.0/0 reject-with 
> icmp-port-unreachable
>
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination
> ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
> _______________________________________________
> tor-relays mailing list
> tor-relays at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays