IP-tables and TOR

[Michael Gomboc]

Hi!

Could some net filter expert give me some advise how to use iptables with TOR?

I'm trying the following to drop all non TOR connections:

iptables -F INPUT
iptables -F OUTPUT


iptables -P INPUT DROP
iptables -P OUTPUT DROP

iptables -A OUTPUT -o lo -j ACCEPT
iptables -A INPUT -i lo -j ACCEPT


iptables -A OUTPUT -m owner --uid-owner debian-tor -j ACCEPT


iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT


Is there more to think about?

Thanks a lot!



-- 
Michael Gomboc

pgp-id: 0x5D41FDF8
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20100824/6a39dd88/attachment.htm>