@pomstan @lain host is a debian 11 box running Tor daemon.

it has a second interface directly connected to a second box that has no internet access. The tor box is firewalled so that the second box can only respond to tcp requests, it can't initiate anything. the second box will contain a service provided to tor as a hidden service.

this is an experiment, for "fun" (I'm not having fun yet)