Apply conversion script to all *.md files. authored by Alexander Hansen Færøy's avatar Alexander Hansen Færøy
[https://fteproxy.org/ FTE] is a [wiki:doc/PluggableTransports pluggable transport]. Here's how to configure an “fte” bridge:
[FTE](https://fteproxy.org/) is a [pluggable transport](./doc/PluggableTransports). Here's how to configure an “fte” bridge:
[[TOC(noheading)]]
= FTE bridge setup =
# FTE bridge setup
For the examples below, our IP address is 203.0.113.1. In practice, replace this with your own address.
== Example torrc ==
{{{
## Example torrc
```
DataDirectory /path/to/tor_data # location to store runtime data
Log notice file /path/to/tor_log # location to log notices, warnings, and errors
RunAsDaemon 1 # runs as a background process
......@@ -20,38 +20,38 @@ ContactInfo $EMAILADDRESS # email address in case contacting you is required
Nickname $RELAYNAME # name for this relay
SocksPort 0 # prevents tor from being used as a client
ExitPolicy reject *:* # prevents us from connecting to non-relays
}}}
```
== Example log output ==
{{{
## Example log output
```
[notice] Registered server transport 'fte' at '0.0.0.0:59003'
}}}
```
== iptables rules to mirror on 80/443 ==
## iptables rules to mirror on 80/443
Mirror on port 80:
{{{
```
-A PREROUTING -d 203.0.113.1/32 -p tcp -m tcp --dport 80 -j DNAT --to-destination 203.0.113.1:59003
}}}
```
Mirror on port 443:
{{{
```
-A PREROUTING -d 203.0.113.1/32 -p tcp -m tcp --dport 443 -j DNAT --to-destination 203.0.113.1:59003
}}}
```
== PF rules to mirror on 80/443 ==
## PF rules to mirror on 80/443
For this example, our interface is msk0.
Mirror on port 80:
{{{
```
pass in on msk0 proto tcp from any to 203.0.113.1 port 80 \
rdr-to 203.0.113.1 port 59003
}}}
```
Mirror on port 443:
{{{
```
pass in on msk0 proto tcp from any to 203.0.113.1 port 443 \
rdr-to 203.0.113.1 port 59003
}}}
```
== Unpublished bridges ==
## Unpublished bridges
If you decide to make your bridge "unpublished", and would like the support team to use your bridge for helping users in heavily restricted regions; please send the bridge address / fingerprint to tor-assistants<AT>lists<DOT>torproject<DOT>org.