steinex / tor-ddos Goto Github PK

Since https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40223, the snowflake-01 bridge has 5 outgoing IP addresses. One of them is the same as the forward DNS of snowflake-01.torproject.net, but the other four are different. It would be helpful if the rules excepted the other four addresses as well. See corresponding changes in toralf/torutils#7 and Enkidu-6/tor-ddos#25.

193.187.88.42 (existing)
193.187.88.43
193.187.88.44
193.187.88.45
193.187.88.46
2a0c:dd40:1:b::42 (existing)
2a0c:dd40:1:b::43
2a0c:dd40:1:b::44
2a0c:dd40:1:b::45
2a0c:dd40:1:b::46

Besides that, there is now a separate snowflake-02 bridge, running at a different site. It was included in Tor Browser 12.0 released 2022-12-07, so it will start to receive traffic now. At this point it only has one outgoing IP address (one each for IPv4 and IPv6).

141.212.118.18
2607:f018:600:8:be30:5bff:fef1:c6fa

Cc @ln5

Sounds very nice and logic. I have only very rough knowledge about firewall rules, but at least I have a few rules (working nice) set up - however using nftables (which seems to be the successor of iptables). Do you have the ruleset for nft at hand as well maybe?

Hey, i'm new to IP tables so sorry if this is a stupid question but how can I adapt this script for a server running 2 Relays (both on the same IP address)