Droidian сидит на андроид-ядре, поэтому там, в отличие от мобиан, iptables. значит запуск всего трафика через тор будет по этому скрипту (у waydroid будет свой трафик и туда можно амнезию поставить):

#!/bin/bash

# Flush ALL iptables rules completely (be careful if remote!)
sudo iptables -F
sudo iptables -X
sudo iptables -t nat -F
sudo iptables -t nat -X
sudo iptables -t mangle -F
sudo iptables -t mangle -X
sudo iptables -P INPUT ACCEPT
sudo iptables -P FORWARD ACCEPT
sudo iptables -P OUTPUT ACCEPT

# Verify clean state
sudo iptables -L -v

echo "[*] Installing Tor..."
sudo apt update
sudo apt install -y tor

echo "[*] Configuring Tor..."

# Backup original torrc
sudo cp /etc/tor/torrc /etc/tor/torrc.backup

# Configure Tor for transparent proxy
sudo tee /etc/tor/torrc > /dev/null << 'EOF'
SocksPort 127.0.0.1:9050
TransPort 127.0.0.1:9040
DNSPort 127.0.0.1:9053
VirtualAddrNetworkIPv4 10.192.0.0/10
AutomapHostsOnResolve 1
RunAsDaemon 1
EOF

echo "[*] Restarting Tor..."
sudo systemctl restart tor
sleep 2

echo "[*] Checking Tor ports..."
sudo ss -tlnp | grep -E ':(9050|9040|9053)'

echo "[*] Setting up iptables rules..."

# IMPORTANT: First check if rules already exist to avoid duplicates
# Flush existing rules in our custom chains (or create them)
sudo iptables -t nat -F 2>/dev/null || true

# Create new chain for Tor (or flush if exists)
sudo iptables -t nat -N TOR_REDIRECT 2>/dev/null || sudo iptables -t nat -F TOR_REDIRECT

# Redirect DNS to Tor DNSPort
sudo iptables -t nat -A OUTPUT -p udp --dport 53 -j REDIRECT --to-ports 9053

# Redirect TCP traffic to Tor TransPort (except Tor itself)
sudo iptables -t nat -A OUTPUT -p tcp --syn -m owner ! --uid-owner debian-tor -j REDIRECT --to-ports 9040

# Allow loopback
sudo iptables -t nat -A OUTPUT -o lo -j RETURN

# Don't redirect local/private networks (optional - adjust as needed)
sudo iptables -t nat -A OUTPUT -d 127.0.0.0/8 -j RETURN
sudo iptables -t nat -A OUTPUT -d 192.168.0.0/16 -j RETURN
sudo iptables -t nat -A OUTPUT -d 10.0.0.0/8 -j RETURN

echo "[*] Current iptables nat rules:"
sudo iptables -t nat -L -v

echo "[*] Tor transparent proxy is now active"
echo "[*] Test with: curl --socks5 127.0.0.1:9050 https://check.torproject.org"

echo "[*] Saving iptables rules..."
sudo mkdir -p /etc/iptables
sudo iptables-save > /etc/iptables/rules.v4

echo "[*] Creating systemd service for autostart..."

sudo tee /etc/systemd/system/tor-firewall.service > /dev/null << 'EOF'
[Unit]
Description=Tor Transparent Proxy Firewall
After=network.target tor.service
Wants=tor.service

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/sbin/iptables-restore /etc/iptables/rules.v4
ExecStop=/sbin/iptables -F; /sbin/iptables -t nat -F; /sbin/iptables -t mangle -F

[Install]
WantedBy=multi-user.target
EOF

sudo systemctl daemon-reload
sudo systemctl enable tor-firewall.service

echo "[*] Done. Rules will persist after reboot."