Tor and iptables.

hack3rcon · 12-12-2016, 01:13 AM

Quote:

Originally Posted by Turbocapitalist

I'd go with the simpler rules close to those proposed by the list:

Code:

*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -j ACCEPT -m state --state RELATED,ESTABLISHED
-A INPUT -i lo -j ACCEPT
-A INPUT -j REJECT
-A OUTPUT -j ACCEPT -m state --state NEW,RELATED,ESTABLISHED
COMMIT

The other rules you have contain a bunch of lines unnecessary for a regular desktop. See if those work. If they do, they can be adjusted but try them as-is first.

Then, in your idea Desktop user must not protect itself against DDoS attacks or...?

hack3rcon · 12-12-2016, 01:14 AM

OK, You consider that my system is not a Desktop and it is a Web Server and like to use Tor too.

Turbocapitalist · 12-12-2016, 01:57 AM

Quote:

Originally Posted by hack3rcon

Then, in your idea Desktop user must not protect itself against DDoS attacks or...?

Most types of DDoS attacks can only be mitigated upstream. Your own packet filter can't help with that. But first things first: do the rules in #30 allow normal Desktop operation including using the Tor Browser Bundle? Yes/No?

hack3rcon · 12-13-2016, 08:45 AM

Quote:

Originally Posted by Turbocapitalist

Most types of DDoS attacks can only be mitigated upstream. Your own packet filter can't help with that. But first things first: do the rules in #30 allow normal Desktop operation including using the Tor Browser Bundle? Yes/No?

#30?

Turbocapitalist · 12-13-2016, 08:47 AM

Quote:

Originally Posted by hack3rcon

#30?

Yes, post #30 in this thread.