edu4rdshl/tor-router
1
0
Fork 0
mirror of https://github.com/edu4rdshl/tor-router.git synced 2026-07-17 23:24:48 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Service improvements

Browse source 
* Created start/stop methods to make service management easier

* Added start/stop functions. Added iptables-save/restore functionality.

---------

Co-authored-by: strepsil <hm@bitlabs.co.za>
This commit is contained in:
mullerhx 2023-03-20 21:45:15 +02:00 • committed by GitHub
parent 34738887a0
commit d0734de5c0
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 71 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

108
files/tor-router
View file

@ -1,48 +1,78 @@
#!/bin/bash #!/bin/bash
# Executable file to create rules for transparent proxy
# Destinations you do not want routed through Tor RULES="/var/tmp/tor-router.save"
NON_TOR="192.168.1.0/24 192.168.0.0/24"
# the UID Tor runs as, actually only support for Debian, ArchLinux and Fedora as been added.
if command -v pacman > /dev/null; then
TOR_UID=$(id -u tor)
elif command -v apt > /dev/null; then
TOR_UID=$(id -u debian-tor)
elif command -v dnf > /dev/null; then
TOR_UID=$(id -u toranon)
else
echo "Unknown distro, please create report the issue to https://github.com/edu4rdshl/tor-router/issues"
exit
fi
# Tor's TransPort # Tor's TransPort
TRANS_PORT="9040" TRANS_PORT="9040"
if ! command -v tor > /dev/null; then case "$1" in
echo "You need to install the tor package." start)
exit if test -f "$RULES"; then
elif ! systemctl is-active tor.service > /dev/null; then echo "$RULES exists. Either delete it, or stop tor-router first."
echo "The tor service is not active, please start the tor service before running the script." exit
exit else
elif ! command -v iptables > /dev/null; then iptables-save > $RULES
echo "You need to install the iptables package." # Executable file to create rules for transparent proxy
exit # Destinations you do not want routed through Tor
else NON_TOR="192.168.1.0/24 192.168.0.0/24"
iptables -F # the UID Tor runs as, actually only support for Debian, ArchLinux and Fedora as been added.
iptables -t nat -F if command -v pacman > /dev/null; then
iptables -t nat -A OUTPUT -m owner --uid-owner $TOR_UID -j RETURN TOR_UID=$(id -u tor)
iptables -t nat -A OUTPUT -p udp --dport 53 -j REDIRECT --to-ports 5353 elif command -v apt > /dev/null; then
TOR_UID=$(id -u debian-tor)
elif command -v dnf > /dev/null; then
TOR_UID=$(id -u toranon)
else
echo "Unknown distro, please create report the issue to https://github.com/edu4rdshl/tor-router/issues"
exit
fi
if ! command -v tor > /dev/null; then
echo "You need to install the tor package."
exit
elif ! systemctl is-active tor.service > /dev/null; then
echo "The tor service is not active, please start the tor service before running the script."
exit
elif ! command -v iptables > /dev/null; then
echo "You need to install the iptables package."
exit
else
iptables -F
iptables -t nat -F
iptables -t nat -A OUTPUT -m owner --uid-owner $TOR_UID -j RETURN
iptables -t nat -A OUTPUT -p udp --dport 53 -j REDIRECT --to-ports 5353
for NET in $NON_TOR 127.0.0.0/9 127.128.0.0/10; do for NET in $NON_TOR 127.0.0.0/9 127.128.0.0/10; do
iptables -t nat -A OUTPUT -d $NET -j RETURN iptables -t nat -A OUTPUT -d $NET -j RETURN
done done
iptables -t nat -A OUTPUT -p tcp --syn -j REDIRECT --to-ports $TRANS_PORT iptables -t nat -A OUTPUT -p tcp --syn -j REDIRECT --to-ports $TRANS_PORT
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
for NET in $NON_TOR 127.0.0.0/8; do for NET in $NON_TOR 127.0.0.0/8; do
iptables -A OUTPUT -d $NET -j ACCEPT iptables -A OUTPUT -d $NET -j ACCEPT
done done
iptables -A OUTPUT -m owner --uid-owner $TOR_UID -j ACCEPT iptables -A OUTPUT -m owner --uid-owner $TOR_UID -j ACCEPT
iptables -A OUTPUT -j ACCEPT iptables -A OUTPUT -j ACCEPT
fi fi
fi
;;
stop)
if ! -f "$RULES"; then
echo "$RULES does not exist. Not doing anything."
exit
else
iptables -t nat -F
iptables-restore < $RULES
rm $RULES
fi
;;
restart)
stop
sleep 2
start
;;
*)
echo "Usage: $0 {start|stop|restart}"
esac

4
files/tor-router.service
View file

@ -4,9 +4,9 @@
[Service] [Service]
Type=simple Type=simple
ExecStart=/usr/bin/tor-router ExecStart=/usr/bin/tor-router start
RemainAfterExit=yes RemainAfterExit=yes
ExecStop=/usr/bin/iptables -F OUTPUT ExecStop=/usr/bin/tor-router stop
TimeoutStopSec=180 TimeoutStopSec=180
KillMode=process KillMode=process
KillSignal=SIGINT KillSignal=SIGINT