Torify WiFi.

dpkg-divert --local --rename /usr/bin/slirpvde
cat >>/usr/bin/slirpvde <<'EOF'
#!/bin/sh
## torify can't handle DNS from slirpvde.   DNS hack included.
exec /usr/bin/torify $0.distrib "$@"
EOF
chmod a+x /usr/bin/slirpvde

# Shorewall interface for br1 options routeback,dhcp,tcpflags,nosmurfs,sfilter=(169.254.0.0/16,192.168.17.0/24)

# /etc/network/interfaces on Debian
auto br1
iface br1 inet static
	address 10.0.2.3 # Impersonate the DNS server, make sure to set one up.
	netmask 255.255.255.0
	bridge_ports wlan0 tun0
	bridge_fd 0
	bridge_hello 0
	bridge_maxage 2
	bridge_stp off
	pre-up ifup wlan0 tun0
	up ip addr show "wlan0" | awk '$3 ~ /^scope$/ && $4 ~ /^link$/ {system("daemon -- ip addr del "$2" dev '"wlan0"'");}'
	up ip addr show "tun0" | awk '$3 ~ /^scope$/ && $4 ~ /^link$/ {system("daemon -- ip addr del "$2" dev '"tun0"'");}'
	post-down ifdown wlan0 tun0
iface br1 inet6 static
	address 2001:470:c4f7:4::1
	netmask 64
	post-up invoke-rc.d radvd restart

iface wlan0 inet manual
	hostapd /etc/hostapd/hostapd-wlan0.conf
	up ip addr show "$IFACE" | awk '$3 ~ /^scope$/ && $4 ~ /^link$/ {system("daemon -- ip addr del "$2" dev '"$IFACE"'");}'

iface tun0 inet manual
	vde2-switch -
	vde2-plug vde_plug2tap -s- tun0
	vde2-slirp -dhcp
	up ip addr show "$IFACE" | awk '$3 ~ /^scope$/ && $4 ~ /^link$/ {system("daemon -- ip addr del "$2" dev '"$IFACE"'");}'