Updated toriptables2.py Refactor

This commit is contained in:
Rupert Edwards 2016-01-14 12:13:14 -05:00
parent d1eb99448f
commit 0fd6ac5947

View file

@ -1,5 +1,6 @@
#! /usr/bin/env python #! /usr/bin/env python
# Written by Rupe version 2 # Written by Rupe version 2
#
""" """
Tor Iptables script is an anonymizer Tor Iptables script is an anonymizer
that sets up iptables and tor to route all services that sets up iptables and tor to route all services
@ -26,7 +27,7 @@ class TorIptables(object):
self.tor_uid = getoutput("id -ur debian-tor") # Tor user uid self.tor_uid = getoutput("id -ur debian-tor") # Tor user uid
self.trans_port = "9040" # Tor port self.trans_port = "9040" # Tor port
self.tor_config_file = '/etc/tor/torrc' self.tor_config_file = '/etc/tor/torrc'
self.torrc = ''' self.torrc = r'''
## Inserted by %s for tor iptables rules set ## Inserted by %s for tor iptables rules set
## Transparently route all traffic thru tor on port %s ## Transparently route all traffic thru tor on port %s
VirtualAddrNetwork %s VirtualAddrNetwork %s
@ -51,14 +52,16 @@ DNSPort %s
tor_restart = check_call(["service", "tor", "restart"], tor_restart = check_call(["service", "tor", "restart"],
stdout=fnull, stderr=fnull) stdout=fnull, stderr=fnull)
if tor_restart is 0: if tor_restart is 0:
print(" {0}".format("[\033[92m+\033[0m] Anonymizer \033[92mON\033[0m")) print(" {0}".format(
"[\033[92m+\033[0m] Anonymizer \033[92mON\033[0m"))
except CalledProcessError as err: except CalledProcessError as err:
print("\n[!] Command failed: %s" % err.cmd) print("\n[!] Command failed: %s" % err.cmd)
call(["iptables", "-t", "nat", "-A", "OUTPUT", "-m", "owner", "--uid-owner", call(["iptables", "-t", "nat", "-A", "OUTPUT", "-m", "owner", "--uid-owner",
"%s" % self.tor_uid, "-j", "RETURN"]) "%s" % self.tor_uid, "-j", "RETURN"])
call(["iptables", "-t", "nat", "-A", "OUTPUT", "-p", "udp", "--dport", "53", call(["iptables", "-t", "nat", "-A", "OUTPUT", "-p", "udp", "--dport",
"-j", "REDIRECT", "--to-ports", "53"]) self.local_dnsport, "-j", "REDIRECT", "--to-ports", self.local_dnsport
])
for net in self.non_tor: for net in self.non_tor:
call(["iptables", "-t", "nat", "-A", "OUTPUT", "-d", "%s" % net, "-j", call(["iptables", "-t", "nat", "-A", "OUTPUT", "-d", "%s" % net, "-j",