Tor - The Onion Router

1465 readers

1 users here now

Tips, tricks and information about the Tor network!

Tor Project

founded 4 years ago

MODERATORS

imattau@lemmy.ml

Stuck at Opened Socks listener connection (ready) (lemmy.ml)

submitted 1 month ago* (last edited 1 month ago) by Gordon_F@lemmy.ml to c/tor@lemmy.ml

4 comments fedilink hide all child comments

Hi,

I've just installed tor ( 0.4.5.16 )

When I launch it ( debian fork ) I'm stuck at

Opened Socks listener connection (ready) on 127.0.0.1:9050

I have a strong set of nftables maybe that what block it ?

What should open in order to have tor connect ?

Thanks.

you are viewing a single comment's thread
view the rest of the comments

[–] Gordon_F@lemmy.ml 2 points 1 month ago (1 children)

Thank you very much @qprimed@lemmy.ml ! indeed I saw in my nftables log tentative to 443 and 9001. ( I didn't find this in the tor doc ... )

9050 is your socks proxy - so protect it. if your nftables is blocking localhost:9050/TCP then you need to correct that.

is this will do : ip saddr 127.0.0.1 ip daddr 127.0.0.1 accept ?

[–] qprimed@lemmy.ml 1 points 1 month ago* (last edited 1 month ago)

that will work. always test your FW rules after a change. never just trust it.

netcat is your friend for a quick test to port 9050/TCP from a different PC if you are listening on more than just the loopback. careful with the loopback source addy AFAIK there is no guarantee that local host traffic to 127.0.0.1 will be sourced from 127.0.0.1 - I may be wrong here, but be safe.

regardless, depending on your rules, you will either get a timeout, instant connection reset or connect. obviously connect is bad if you think the traffic should be blocked, refusal is ok as long as the daemon is actually running (FW on a non-listening port can generate a TCP RST so its somewhat ambiguous), timeout is best as you know as long as the host is up, the FW is likely dropping traffic.

a more comprehensive test against any local host would be done with nmap.

sounds like you are poking things with a stick - thats awesome! happy to help :-)

edit: clarify loopback.