Re: [tor-relays] Relay operators: help improve this hardening document?

2015-02-05 Thread Libertas
On 02/06/2015 12:03 AM, grarpamp wrote: > On Thu, Feb 5, 2015 at 11:15 PM, Nick Mathewson wrote: >> The idea is that Tor could ship with some basic recommendations, and >> links to places to find more advice? > > If it's a question that can be answered by searching "how do i > secure and run my u

Re: [tor-relays] Changes in network traffic pattern

2015-02-05 Thread tor-admin
On Friday 06 February 2015 11:32:42 Hu Man wrote: > First thought was DDOS but traffic is not high enough to cause any problems. > I did some digging and in a 5 minute period received the following requests > to the port tor is listening on (number of requests and source ip address) > [... removed

Re: [tor-relays] Relay operators: help improve this hardening document?

2015-02-05 Thread grarpamp
On Thu, Feb 5, 2015 at 11:15 PM, Nick Mathewson wrote: > The idea is that Tor could ship with some basic recommendations, and > links to places to find more advice? If it's a question that can be answered by searching "how do i secure and run my unix server", including anything other than links t

[tor-relays] Relay operators: help improve this hardening document?

2015-02-05 Thread Nick Mathewson
Hi, all! There's a project going on to try to add instructions for hardening a Tor relay for security: https://trac.torproject.org/projects/tor/ticket/13703 The idea is that Tor could ship with some basic recommendations, and links to places to find more advice? Recently, "mmcc" has uploaded

Re: [tor-relays] TOR: Inbound, Outbound, Exit connections

2015-02-05 Thread ZEROF
Inbounds: "Servers configured to receive inbound connections only through Tor are called hidden services. Rather than revealing a server's IP address (and thus its network location), a hidden service is accessed through its onion address . " Outbound: Trraf

[tor-relays] Changes in network traffic pattern

2015-02-05 Thread Hu Man
Hi All I have been running a tor relay for about a year and according to my munin graph It normally receives, on average, just under 2,000 incoming tcp connections on port 443 every 5 minutes. In the last few days that figure has increased to about 10,000 and spiked to about 19,000 incoming reque

Re: [tor-relays] [tor-assistants] Running obfs4proxy on Debian Stable

2015-02-05 Thread ZEROF
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 If you want to try to install jessi without updating your system it's possible. Add repositry to /etc/apt/sources.list, run apt-get update. Then use this and only this command to upgrade only that package from new repository (check if you need to rep