>> Why do I have to open 9001 UDP at the DSL router firewall and not
>> necessarily in iptables?
>
>Tor does not use UDP, you should be not be required to add such a
>router firewall rule. What happens if you just take it out?
>
>--
>Moritz Bartl
 
Hi Moritz
 
To answer your question here is my log
Oct 20 07:32:08.265 [Notice] Opening OR listener on 0.0.0.0:9001
Oct 20 07:32:08.265 [Notice] Your Tor server's identity key fingerprint is '.. bla bla ..'
Oct 20 07:32:08.290 [Notice] Now checking whether ORPort x.x.x.102:9001 is reachable... (this may take up to 20 minutes -- look for log messages indicating success)
...
Oct 20 07:52:07.025 [Warning] Your server (x.x.x.x:9001) has not managed to confirm that its ORPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
Oct 20 08:12:07.639 [Warning] Your server (x.x.x.x:9001) has not managed to confirm that its ORPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
...
Now I open 9001 udp at the DSL router
...
Oct 20 08:31:04.223 [Notice] Our directory information is no longer up-to-date enough to build circuits: We have no usable consensus.
Oct 20 08:31:04.400 [Notice] Tor has successfully opened a circuit. Looks like client functionality is working.
Oct 20 08:31:04.424 [Notice] Now checking whether ORPort x.x.x.x:9001 is reachable... (this may take up to 20 minutes -- look for log messages indicating success)
Oct 20 08:31:07.088 [Notice] We now have enough directory information to build circuits.
:)
 
In the past I tried several things and found someone else did the following (! start page !)
He tells to use 9001 udp for his PI so I try it for  Tails and it works. I expected to not need udp. Question is why?
Interesting is we both use a german well known Fritz!Box DSL router.
 
German site [http://www.webstimme.de/2013/08/23/raspberry-pi-als-tor-relay-betreiben-howto]
Ports der Router-Firewall öffnen:
1. Sie müssen folgende Ports für TOR auf ihrem Router öffnen (jeweils TCP und UDP):
Standard: ORPort 9001
Standard: DirPort 9030
 
Thanks, Zwiebel