~mdw
/
firewall
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
functions.m4, local.m4: Handle fragments in a useful way.
[firewall]
/
vampire.m4
diff --git
a/vampire.m4
b/vampire.m4
index
82439d2
..
13e37bd
100644
(file)
--- a/
vampire.m4
+++ b/
vampire.m4
@@
-48,6
+48,8
@@
allowservices inbound tcp \
rsync \
http https \
git
rsync \
http https \
git
+allowservices inbound tcp \
+ tor_public tor_directory
allowservices inbound udp \
dns \
tripe \
allowservices inbound udp \
dns \
tripe \
@@
-70,6
+72,10
@@
run iptables -A inbound -j ACCEPT \
-s 172.29.198.0/24 \
-p tcp --destination-port $port_squid
-s 172.29.198.0/24 \
-p tcp --destination-port $port_squid
+## Watch outgoing Tor usage.
+run iptables -A OUTPUT -m multiport \
+ -p tcp --source-ports $port_tor_public,$port_tor_directory
+
## Other interesting things.
dnsresolver inbound
ntpclient inbound 158.152.1.76 158.152.1.204 194.159.253.2
## Other interesting things.
dnsresolver inbound
ntpclient inbound 158.152.1.76 158.152.1.204 194.159.253.2