# Transparent tor proxy lxc bridge
auto torbr0
allow-hotplug torbr0
iface torbr0 inet static
        bridge_ports none
        bridge_stp off
        bridge_fd 5
        bridge_maxwait 0
        address 10.0.4.1
        netmask 255.255.255.0
        broadcast 10.0.4.255
        network 10.0.4.0
        up systemctl start tor
        up iptables -t nat -A PREROUTING -i torbr0 -p tcp -m tcp --dport 9050 -j ACCEPT
        up iptables -t nat -A PREROUTING -i torbr0 -p tcp -m tcp --syn -j REDIRECT --to-ports 9040
        up iptables -t nat -A PREROUTING -i torbr0 -p udp -m udp --dport 53 -j REDIRECT --to-ports 9053
        up iptables -A INPUT -i torbr0 -m state --state ESTABLISHED,RELATED -j ACCEPT
        up iptables -A INPUT -i torbr0 -p tcp -m tcp --dport 9040 -j ACCEPT
        up iptables -A INPUT -i torbr0 -p tcp -m tcp --dport 9053 -j ACCEPT
        up iptables -A INPUT -i torbr0 -p udp -m udp --dport 9053 -j ACCEPT
        up iptables -A INPUT -i torbr0 -p tcp -m tcp --dport 9050 -j ACCEPT
        down iptables -t nat -D PREROUTING -i torbr0 -p tcp -m tcp --dport 9050 -j ACCEPT
        down iptables -t nat -D PREROUTING -i torbr0 -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j REDIRECT --to-ports 9040
        down iptables -t nat -D PREROUTING -i torbr0 -p udp -m udp --dport 53 -j REDIRECT --to-ports 9053
        down iptables -D INPUT -i torbr0 -m state --state ESTABLISHED,RELATED -j ACCEPT
        down iptables -D INPUT -i torbr0 -p tcp -m tcp --dport 9040 -j ACCEPT
        down iptables -D INPUT -i torbr0 -p tcp -m tcp --dport 9053 -j ACCEPT
        down iptables -D INPUT -i torbr0 -p udp -m udp --dport 9053 -j ACCEPT
        down iptables -D INPUT -i torbr0 -p tcp -m tcp --dport 9050 -j ACCEPT
        down systemctl stop tor