[Block non-Tor traffic] Block all traffic except on port 9050 to avoid leaks #linux #iptables #tor #security #leak

block-non-tor-traffic.sh

#!/bin/bash
touch /tmp/reset.iptables
iptables-restore < reset.iptables
#Reset OUTPUT table
iptables -F OUTPUT
#Enable related traffic to go through
iptables -A INPUT -m state --state ESTABLISHED, RELATED -j ACCEPT
#Enable traffic related to debian-tor user
iptables -A OUTPUT -j ACCEPT -m owner --uid-owner debian-tor
#Enable traffic from loopback
iptables -A OUTPUT -j ACCEPT -o lo
#Enable traffic through 9050
iptables -A OUTPUT -j ACCEPT -p tcp --dport 9050
#Drop everything else
iptables -P OUTPUT DROP
#Print current iptables rules
iptables -L -v