Hi, I don't know what to do. Please help.
I'm getting the following warnings in arm: 16:13:15 [WARN] Your server (MY_PUBLIC_IP:9030) has not managed to confirm that its DirPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc. 16:13:15 [WARN] Your server (MY_PUBLIC_IP:443) has not managed to confirm that its ORPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
My iptables rules are: mike@host:~$ sudo iptables -nL Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 REJECT all -- 0.0.0.0/0 127.0.0.0/8 reject-with icmp-port-unreachable ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED REJECT all -- 62.210.140.93 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 62.210.151.213 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 103.41.124.106 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 103.41.124.112 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 109.230.220.135 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 115.84.179.148 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 117.21.225.176 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 188.116.19.109 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 219.232.239.40 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 221.235.188.214 0.0.0.0/0 reject-with icmp-port-unreachable ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:9001 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:9030 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:6881:6999 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:6881:6999 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 8 LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 5/min burst 5 LOG flags 0 level 7 prefix `iptables denied: ' REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain FORWARD (policy ACCEPT) target prot opt source destination REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain OUTPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
Found the problem. Had to fill out the Address, don't know why, but tor fetched a different IP The used system has only one configured interface:
mike@torhost:~$ ip addr 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:50:56:b8:8b:37 brd ff:ff:ff:ff:ff:ff inet MY_PUBLIC_IP/24 brd 81.2.236.255 scope global eth0 inet6 fe80::250:56ff:feb8:8b37/64 scope link valid_lft forever preferred_lft forever 3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000 link/ether 00:50:56:b8:9f:4c brd ff:ff:ff:ff:ff:ff 4: eth2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000 link/ether 00:50:56:b8:68:52 brd ff:ff:ff:ff:ff:ff
On 12/24/14 4:29 PM, mikael wrote:
Hi, I don't know what to do. Please help.
I'm getting the following warnings in arm: 16:13:15 [WARN] Your server (MY_PUBLIC_IP:9030) has not managed to confirm that its DirPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc. 16:13:15 [WARN] Your server (MY_PUBLIC_IP:443) has not managed to confirm that its ORPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
My iptables rules are: mike@host:~$ sudo iptables -nL Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 REJECT all -- 0.0.0.0/0 127.0.0.0/8 reject-with icmp-port-unreachable ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED REJECT all -- 62.210.140.93 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 62.210.151.213 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 103.41.124.106 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 103.41.124.112 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 109.230.220.135 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 115.84.179.148 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 117.21.225.176 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 188.116.19.109 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 219.232.239.40 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 221.235.188.214 0.0.0.0/0 reject-with icmp-port-unreachable ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:9001 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:9030 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:6881:6999 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:6881:6999 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 8 LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 5/min burst 5 LOG flags 0 level 7 prefix `iptables denied: ' REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain FORWARD (policy ACCEPT) target prot opt source destination REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain OUTPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
On 12/24/2014 8:29 AM, mikael wrote:
Hi, I don't know what to do. Please help.
I'm getting the following warnings in arm: 16:13:15 [WARN] Your server (MY_PUBLIC_IP:9030) has not managed to confirm that its DirPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc. 16:13:15 [WARN] Your server (MY_PUBLIC_IP:443) has not managed to confirm that its ORPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
My iptables rules are: mike@host:~$ sudo iptables -nL Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 REJECT all -- 0.0.0.0/0 127.0.0.0/8 reject-with icmp-port-unreachable ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED REJECT all -- 62.210.140.93 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 62.210.151.213 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 103.41.124.106 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 103.41.124.112 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 109.230.220.135 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 115.84.179.148 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 117.21.225.176 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 188.116.19.109 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 219.232.239.40 0.0.0.0/0 reject-with icmp-port-unreachable REJECT all -- 221.235.188.214 0.0.0.0/0 reject-with icmp-port-unreachable ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:9001 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:9030 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:6881:6999 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:6881:6999 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 8 LOG all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 5/min burst 5 LOG flags 0 level 7 prefix `iptables denied: ' REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain FORWARD (policy ACCEPT) target prot opt source destination REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain OUTPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
Does your system use tcp wrappers? If so you may need to add a line like this to /etc/hosts.allow :
tor: ALL
tor-relays@lists.torproject.org