Re: [tor-relays] hardening a tor relay

2014-05-23 Thread Noilson Caio
Nice thread. in my case (tor exit node): Output only security connections; ExitPolicy accept *:22 ExitPolicy accept *:443 ExitPolicy accept *:465 ExitPolicy accept *:995 ExitPolicy accept *:993 ExitPolicy reject *:* Block all output like http and smtp in my netfilter (Gnu Linux); -A OUTPUT -p

Re: [tor-relays] hardening a tor relay

2014-05-23 Thread Roger Dingledine
On Fri, May 23, 2014 at 06:16:56PM -0300, Noilson Caio wrote: Block all output like http and smtp in my netfilter (Gnu Linux); -A OUTPUT -p tcp -m tcp --dport 80 -j DROP -A OUTPUT -p tcp -m tcp --dport 110 -j DROP etc .. Relays need to allow connections to all outgoing ports. If you do