Re: Blocking traceroute

2013-04-19 Thread Jiri B
On Thu, Apr 18, 2013 at 10:52:00PM -0400, Stuart McMurray wrote: You don't even need socat. You could do it all with pf. Except for DNS, though, you'd have to block outbound DNS traffic to maintain anonymity. It's not possible to redirect outgoing traffic back to local IP where source host is

Blocking traceroute

2013-04-18 Thread fekete
I want to create a Tor hidden server, which people SSH into over Tor. Users could discover the IP server by running traceroute. To stop this I have added a simple rule to pf.conf based off helping traceroute. Otherwise they could just build or run their own binary traceroute. block on em0 inet

Re: Blocking traceroute

2013-04-18 Thread Shawn K. Quinn
On Thu, 2013-04-18 at 22:35 +, fek...@tormail.org wrote: I want to create a Tor hidden server, which people SSH into over Tor. Users could discover the IP server by running traceroute. To stop this I have added a simple rule to pf.conf based off helping traceroute. Otherwise they could

Re: Blocking traceroute

2013-04-18 Thread fekete
I've just been thinking about how I will block everything and still have Tor. I will have Tor on the NAT and have it accept connections from the hidden server, and users can make outgoing connections through Tor only using socat. Thinking about it, the server will simply have no Internet and the

Re: Blocking traceroute

2013-04-18 Thread Juan Francisco Cantero Hurtado
On Thu, Apr 18, 2013 at 10:35:53PM -, fek...@tormail.org wrote: I want to create a Tor hidden server, which people SSH into over Tor. Users could discover the IP server by running traceroute. To stop this I have added a simple rule to pf.conf based off helping traceroute. Otherwise they

Re: Blocking traceroute

2013-04-18 Thread Stuart McMurray
You don't even need socat. You could do it all with pf. Except for DNS, though, you'd have to block outbound DNS traffic to maintain anonymity. J. Stuart McMurray On Thu, Apr 18, 2013 at 10:17 PM, Juan Francisco Cantero Hurtado i...@juanfra.info wrote: On Thu, Apr 18, 2013 at 10:35:53PM