# Transparent tor proxy lxc bridge
auto torbr0
allow-hotplug torbr0
iface torbr0 inet static
bridge_ports none
bridge_stp off
bridge_fd 5
bridge_maxwait 0
address 10.0.4.1
netmask 255.255.255.0
broadcast 10.0.4.255
network 10.0.4.0
up systemctl start tor
up iptables -t nat -A PREROUTING -i torbr0 -p tcp -m tcp --dport 9050 -j ACCEPT
up iptables -t nat -A PREROUTING -i torbr0 -p tcp -m tcp --syn -j REDIRECT --to-ports 9040
up iptables -t nat -A PREROUTING -i torbr0 -p udp -m udp --dport 53 -j REDIRECT --to-ports 9053
up iptables -A INPUT -i torbr0 -m state --state ESTABLISHED,RELATED -j ACCEPT
up iptables -A INPUT -i torbr0 -p tcp -m tcp --dport 9040 -j ACCEPT
up iptables -A INPUT -i torbr0 -p tcp -m tcp --dport 9053 -j ACCEPT
up iptables -A INPUT -i torbr0 -p udp -m udp --dport 9053 -j ACCEPT
up iptables -A INPUT -i torbr0 -p tcp -m tcp --dport 9050 -j ACCEPT
down iptables -t nat -D PREROUTING -i torbr0 -p tcp -m tcp --dport 9050 -j ACCEPT
down iptables -t nat -D PREROUTING -i torbr0 -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j REDIRECT --to-ports 9040
down iptables -t nat -D PREROUTING -i torbr0 -p udp -m udp --dport 53 -j REDIRECT --to-ports 9053
down iptables -D INPUT -i torbr0 -m state --state ESTABLISHED,RELATED -j ACCEPT
down iptables -D INPUT -i torbr0 -p tcp -m tcp --dport 9040 -j ACCEPT
down iptables -D INPUT -i torbr0 -p tcp -m tcp --dport 9053 -j ACCEPT
down iptables -D INPUT -i torbr0 -p udp -m udp --dport 9053 -j ACCEPT
down iptables -D INPUT -i torbr0 -p tcp -m tcp --dport 9050 -j ACCEPT
down systemctl stop tor
Comments