[User] Setting up port forwarding

Jacob Hoffman-Andrews jsha at eff.org
Tue Dec 9 10:26:29 PST 2014


Thanks, fixed!

On 12/08/2014 08:10 PM, Matt Kraai wrote:
> Hi,
>
> On Mon, Oct 13, 2014 at 01:33:30PM -0400, Jacob S Hoffman-Andrews wrote:
>> This is now up on our wiki, thanks so much!
>>
>> https://github.com/EFForg/OpenWireless/wiki/Running-a-Tor-relay
> On the wiki, the "iptables -I FORWARD" commands are appended to the
> "iptables -I PREROUTING" commands.  I think surrounding the commands
> with ``` should fix this, but I don't know how to test it.  Here's a
> patch:
>
> diff --git a/Running-a-Tor-relay.md b/Running-a-Tor-relay.md index
> 6a00255..abca3c1 100644 --- a/Running-a-Tor-relay.md +++
> b/Running-a-Tor-relay.md @@ -14,8 +14,10 @@ Here are some details sent
> to the OpenWireless mailing list by a contributor who
>    * To forward Tor traffic
>      * added the following lines to /etc/firewall.user:
>   
> -      iptables -I PREROUTING -t nat -i ge00 -p tcp --dport 9001 -j DNAT --to 172.30.42.2:9001
> -      iptables -I FORWARD -p tcp -d 172.30.42.2 --dport 9001 -j ACCEPT
> +```
> +iptables -I PREROUTING -t nat -i ge00 -p tcp --dport 9001 -j DNAT --to 172.30.42.2:9001
> +iptables -I FORWARD -p tcp -d 172.30.42.2 --dport 9001 -j ACCEPT
>   
> -      iptables -I PREROUTING -t nat -i ge00 -p tcp --dport 9030 -j DNAT --to 172.30.42.2:9030
> -      iptables -I FORWARD -p tcp -d 172.30.42.2 --dport 9030 -j ACCEPT
> +iptables -I PREROUTING -t nat -i ge00 -p tcp --dport 9030 -j DNAT --to 172.30.42.2:9030
> +iptables -I FORWARD -p tcp -d 172.30.42.2 --dport 9030 -j ACCEPT
> +```
>




More information about the User mailing list