PF Tor Traffic

[bsdbsdbsd1]

My Firewall setup is the following:

block all
pass out all

My Firewall (PF) is blocking out Tor traffic but not all other outgoing traffic. I need help writing a rule helping Tor traffic pass. I think this is strange since all outgoing traffic is allowed to pass (pass out all).

[jggimi]

BitTorrent is a peer-to-peer protocol. If you wish to have your BitTorrent software function as a peer, you must configure the system running BitTorrent and any gateway routers to permit this incoming traffic to your selected TCP or UDP port number. You must also pass responding, outgoing traffic.

Your chosen BitTorrent software should have a mechanism for you to specify your chosen UDP and TCP port number, so that the software can advertise it to other peers and trackers.


---

Edited to add: If your OpenBSD system is connected to the Internet through a gateway router, you will need to add a single pass rule to accept any incoming traffic that is destined to your selected destination port number, such as:

pass in proto {udp tcp} from any to (self) port 54321

You will need to provision that gateway router to forward that port on your local network.

[bsdbsdbsd1]

Than you for the torrent guide.

[flatdog]

Originally Posted by jggimi

BitTorrent is a peer-to-peer protocol. If you wish to have your BitTorrent software function as a peer, you must configure the system running BitTorrent and any gateway routers to permit this incoming traffic to your selected TCP or UDP port number. You must also pass responding, outgoing traffic.

Your chosen BitTorrent software should have a mechanism for you to specify your chosen UDP and TCP port number, so that the software can advertise it to other peers and trackers.


---

Edited to add: If your OpenBSD system is connected to the Internet through a gateway router, you will need to add a single pass rule to accept any incoming traffic that is destined to your selected destination port number, such as:You will need to provision that gateway router to forward that port on your local network.

Tor (the onion routing) and bittorrent are two different beasts.

[flatdog]

I've found this, posted back in 2021, I believe it should work today. Haven't tested myself, I used to block anything TOR-related, YMMV. Good luck and keep us posted.

[jggimi]

Ah, I misread the original post from @bsdbsdbsd1. Thank you for the correction!