adds UDP reject for transproxy; thx to patrickbx
From a81741afe06ac2309b4306dedbd5a0ebf755b7e1 Mon Sep 17 00:00:00 2001 From: patch <patrickbx@gmail.com>
This commit is contained in:
parent
971c04e9f2
commit
d1e299250a
|
@ -309,6 +309,16 @@ public class TorTransProxy implements TorServiceConstants {
|
|||
script.append(" -j REJECT");
|
||||
script.append(" || exit\n");
|
||||
|
||||
// Reject all other outbound UDP packets
|
||||
script.append(ipTablesPath);
|
||||
script.append(" -A OUTPUT");
|
||||
script.append(" -t filter");
|
||||
script.append(" -m owner --uid-owner ");
|
||||
script.append(tApp.getUid());
|
||||
script.append(" -p udp");
|
||||
script.append(" -j REJECT");
|
||||
script.append(" || exit\n");
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
|
@ -407,6 +417,16 @@ public class TorTransProxy implements TorServiceConstants {
|
|||
script.append(" -j REJECT");
|
||||
script.append(" || exit\n");
|
||||
|
||||
// Reject all other outbound TCP packets
|
||||
script.append(ipTablesPath);
|
||||
script.append(" -D OUTPUT");
|
||||
script.append(" -t filter");
|
||||
script.append(" -m owner --uid-owner ");
|
||||
script.append(tApp.getUid());
|
||||
script.append(" -p udp");
|
||||
script.append(" -j REJECT");
|
||||
script.append(" || exit\n");
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
|
@ -648,7 +668,15 @@ public class TorTransProxy implements TorServiceConstants {
|
|||
script.append(" -p tcp");
|
||||
script.append(" -j REJECT");
|
||||
script.append(" || exit\n");
|
||||
|
||||
|
||||
// Reject all other outbound UDP packets
|
||||
script.append(ipTablesPath);
|
||||
script.append(" -t filter");
|
||||
script.append(" -A OUTPUT");
|
||||
script.append(" -p udp");
|
||||
script.append(" -j REJECT");
|
||||
script.append(" || exit\n");
|
||||
|
||||
String[] cmdAdd = {script.toString()};
|
||||
|
||||
code = TorServiceUtils.doShellCommand(cmdAdd, res, runRoot, waitFor);
|
||||
|
@ -717,6 +745,14 @@ public class TorTransProxy implements TorServiceConstants {
|
|||
script.append(" -j REJECT");
|
||||
script.append(" || exit\n");
|
||||
|
||||
// Reject all other outbound TCP packets
|
||||
script.append(ipTablesPath);
|
||||
script.append(" -D OUTPUT");
|
||||
script.append(" -t filter");
|
||||
script.append(" -p udp");
|
||||
script.append(" -j REJECT");
|
||||
script.append(" || exit\n");
|
||||
|
||||
String[] cmdAdd = {script.toString()};
|
||||
|
||||
code = TorServiceUtils.doShellCommand(cmdAdd, res, runRoot, waitFor);
|
||||
|
|
Loading…
Reference in New Issue