1#!/bin/sh
2
3#
4# Complex configuration file:
5# (1) connects 4 virtual machines (tap0 tap1 tap2 tap3) to TOR
6# (2) allows TOR routers administration (with vm-ctrl command)
7# (3) allows machines tap0 and tap1 to mount NFS disks on NFS server 192.168.1.2
8# (4) limits machine tap1 to use exit nodes in Germany and France only
9# (5) hosts hidden services /hidden/svc1 and /hidden/svc2 on tap0, and service /hidden/svc3 on tap1
10#
11# You probably need to adjust this configuration, depending on which features
12# you need, and which ones you don't need.
13#
14
15# add this line to /etc/rc.conf:
16# . /usr/local/etc/vm-to-tor.rc.conf.complex
17
18firewall_enable="YES"
19firewall_type="open"
20vm_to_tor_enable="YES"
21vm_to_tor_vm_type="vbox"
22# (1) define which machines to support
23vm_to_tor_ifaces="tap0 tap1 tap2 tap3"
24# (2) allows TOR routers administration
25vm_to_tor_control_socket="YES"
26vm_to_tor_allow_cookie_auth="YES"
27# (3) allow NFS
28vm_to_tor_tap0_fw_allow_nfs="192.168.1.2"
29vm_to_tor_tap1_fw_allow_nfs="192.168.1.2"
30# (4) limit exit nodes
31vm_to_tor_tap1_tor_options="ExitNodes {de},{fr}"
32# (5) hidden services
33vm_to_tor_hs="${vm_to_tor_hs}|tap0 /hidden/svc1 80    8080"
34vm_to_tor_hs="${vm_to_tor_hs}|tap0 /hidden/svc2 80    8080"
35vm_to_tor_hs="${vm_to_tor_hs}|tap1 /hidden/svc3 443   10443"
36