Re: [tor-dev] How to build a Router that will only allow Tor users

On 15 March 2016 at 10:52, Martin Kepplinger martink@posteo.de wrote:

Hi,

I try to configure OpenWRT in a way that it will only allow outgoing connections if it is Tor. Basically it is the opposite of "blacklisting exit relays on servers": "whitelisting (guard) relays for clients". It should *not* run Tor itself.

A first test setup (onionoo document, ipset and iptables) kind of worked. It's definitely doable, but not totally trivial in the end.

What did *not* work, was starting Torbrowser. That's a hard requirement, and before bebugging it through I ask: Do I miss something when I just allow outgoing connections to

• Guard,
• Authority,
• and HSDir flagged relays (do I *need* them? that's a different

question probably)

Well it won't work with bridges obviously, including the hardcoded ones in TBB...

-tom