On 12/24/2014 8:29 AM, mikael wrote:
Hi, I don't know what to do. Please help.
I'm getting the following warnings in arm: 16:13:15 [WARN] Your server (MY_PUBLIC_IP:9030) has not managed to confirm that its DirPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc. 16:13:15 [WARN] Your server (MY_PUBLIC_IP:443) has not managed to confirm that its ORPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
My iptables rules are: mike@host:~$ sudo iptables -nL Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 REJECT all -- 0.0.0.0/0 127.0.0.0/8 reject-with icmp-port-unreachable ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED REJECT all -- 62.210.140.93 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 62.210.151.213 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 103.41.124.106 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 103.41.124.112 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 109.230.220.135 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 115.84.179.148 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 117.21.225.176 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 188.116.19.109 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 219.232.239.40 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 221.235.188.214 0.0.0.0/0 reject-with icmp-port-unreachable ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:9001 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:9030 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:6881:6999 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:6881:6999 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 8 LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 5/min burst 5 LOG flags 0 level 7 prefix `iptables denied: ' REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain FORWARD (policy ACCEPT) target prot opt source destination REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain OUTPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
Does your system use tcp wrappers? If so you may need to add a line like this to /etc/hosts.allow :
tor: ALL