Re: [tor-dev] How to build a Router that will only allow Tor users

2016-03-20 Thread Roger Dingledine
On Sun, Mar 20, 2016 at 05:18:16PM +, Rusty Bird wrote: > - moria1 (source 128.31.0.39vs. consensus 128.31.0.34) > - longclaw (source 199.254.238.52 vs. consensus 199.254.238.53) Yes, this is intentional. In the past, this approach has caused governments who tried to censor connections

Re: [tor-dev] How to build a Router that will only allow Tor users

2016-03-20 Thread Rusty Bird
Hi Tim, >>> But the authority IP addresses hardcoded in the Tor client source code >>> differ from the authority IP addresses published in the networkstatus >>> consensus... >>> >>> https://github.com/rustybird/corridor/commit/a56d751df399ab1c54f64b0d4dc59f732dc0adc3 > > Is this still an issue? >

Re: [tor-dev] How to build a Router that will only allow Tor users

2016-03-19 Thread Tim Wilson-Brown - teor
> On 16 Mar 2016, at 18:05, Martin Kepplinger wrote: > > Am 2016-03-15 um 19:07 schrieb Rusty Bird: >> >>> What did *not* work, was starting Torbrowser. That's a hard requirement, >>> and before bebugging it through I ask: Do I miss something when I just >>> allow outgoing connections to >>> >

Re: [tor-dev] How to build a Router that will only allow Tor users

2016-03-16 Thread Martin Kepplinger
Am 2016-03-15 um 19:07 schrieb Rusty Bird: > Hi Martin, > >> I try to configure OpenWRT in a way that it will only allow outgoing >> connections if it is Tor. Basically it is the opposite of "blacklisting >> exit relays on servers": "whitelisting (guard) relays for clients". It >> should *not* run

Re: [tor-dev] How to build a Router that will only allow Tor users

2016-03-15 Thread Rusty Bird
Hi Martin, > I try to configure OpenWRT in a way that it will only allow outgoing > connections if it is Tor. Basically it is the opposite of "blacklisting > exit relays on servers": "whitelisting (guard) relays for clients". It > should *not* run Tor itself. Maybe corridor would work for you: ht

Re: [tor-dev] How to build a Router that will only allow Tor users

2016-03-15 Thread Lunar
Martin Kepplinger: > I try to configure OpenWRT in a way that it will only allow outgoing > connections if it is Tor. Basically it is the opposite of "blacklisting > exit relays on servers": "whitelisting (guard) relays for clients". It > should *not* run Tor itself. I actually implemented this wh

Re: [tor-dev] How to build a Router that will only allow Tor users

2016-03-15 Thread Martin Kepplinger
Am 2016-03-15 um 18:10 schrieb Tom Ritter: > On 15 March 2016 at 10:52, Martin Kepplinger wrote: >> Hi, >> >> I try to configure OpenWRT in a way that it will only allow outgoing >> connections if it is Tor. Basically it is the opposite of "blacklisting >> exit relays on servers": "whitelisting (g

Re: [tor-dev] How to build a Router that will only allow Tor users

2016-03-15 Thread Martin Kepplinger
Am 2016-03-15 um 16:52 schrieb Martin Kepplinger: > Hi, > > I try to configure OpenWRT in a way that it will only allow outgoing > connections if it is Tor. Basically it is the opposite of "blacklisting > exit relays on servers": "whitelisting (guard) relays for clients". It > should *not* run Tor

Re: [tor-dev] How to build a Router that will only allow Tor users

2016-03-15 Thread Tom Ritter
On 15 March 2016 at 10:52, Martin Kepplinger wrote: > Hi, > > I try to configure OpenWRT in a way that it will only allow outgoing > connections if it is Tor. Basically it is the opposite of "blacklisting > exit relays on servers": "whitelisting (guard) relays for clients". It > should *not* run T

[tor-dev] How to build a Router that will only allow Tor users

2016-03-15 Thread Martin Kepplinger
Hi, I try to configure OpenWRT in a way that it will only allow outgoing connections if it is Tor. Basically it is the opposite of "blacklisting exit relays on servers": "whitelisting (guard) relays for clients". It should *not* run Tor itself. A first test setup (onionoo document, ipset and ipta