GitHub - ghaziwali/Hulios: A Rust-based transparent Tor proxy that routes all system traffic through the Tor network enhanced security, proper DNS isolation, and modern Linux compatibility.

I’ve open-sourced HULIOS, a small Linux-only security tool written in Rust that enforces system-wide Tor routing at the firewall layer.

Instead of relying on application proxies or environment variables, HULIOS uses a default-deny iptables OUTPUT policy, redirects all TCP traffic through Tor’s TransPort, forces DNS through Tor’s DNSPort, and blocks common leak paths such as QUIC, DoT, IPv6, and router-level DNS.

The goal is to provide a minimal, auditable Tor enforcement layer suitable for threat-modeling exercises, hardened workstations, or lab environments where DNS and traffic leakage must be provably prevented.

I’m interested in feedback on the firewall model, DNS handling, and any edge cases I may have missed.