Firewall needs/settings for running standalone Snowflake proxy

[mre]

Hi there,

I’m trying to set up a snowflake proxy on a vps, but I am not having luck finding any info on firewall requirements. I’m not sure experienced with NAT and would appreciate a little guidance as to what to do. I have the docker image up and running and accepting connections, but have shut it down until I figure out how to secure the proxy.

It’s set up with the sole purpose of running this proxy and is not hosting any other services.

Thanks in advance.

Emil

[meskio]

The firewall needs to have the UDP ports 32768-60999 open and reachable from the proxy.

More info:

[tor-relays] snowflake incoming UDP ports

Quoting Toralf Förster (2022-02-19 11:15:19) I do simply run here   ~/devel/go/src/snowflake/proxy/proxy &>>/tmp/snowflake-proxy.log & and was wondering if I have to open special UDP inbound ports ? [...] but b/c I do have a rather restrict inbound firewall rule set I'm wondering about that. If you have a restricted firewall you might have what snowflake calls 'restricted NAT', the most useful snowflake proxies are the 'unrestricted NAT' ones, as they allow clients in a more restric…

[mre]

Hi meskido,

Thanks for your quick reply.

I ended up allowing all outgoing connections (and blocking all incoming). From looking at the docker logs it seems to be working?

I do wonder why there so much more outbound than inbound traffic, though.