Re: [tor-relays] Relay operators: help improve this hardening document?

2015-02-06 Thread when2plus2is5
Hi, Many of you are advanced *nix users. Some of us aren't. So first I'd like to thank mmcc for writing the document. I've spent weeks bungling around trying to figure out how to manage my several exit relays in the most responsible manner.. I've managed to create a reasonably interesting i

Re: [tor-relays] Relay operators: help improve this hardening document?

2015-02-06 Thread Andreas Krey
On Fri, 06 Feb 2015 11:08:47 +, when2plus2...@riseup.net wrote: ... > Iptables is an advanced firewall. Iptables is a pain in the ass for new > users to expertly configure. Basic settings aren't difficult, but I > don't want basic. I'm (apparently) in the minority on this, but my tor nodes d

[tor-relays] Avoiding using my own Exit

2015-02-06 Thread Chris Tilt
Hello, When running a relay that is configured as an Exit, do you run the risk of your own TOR browsing sessions (initiated from the same private network) using the relay and effectively short-circuiting the location randomization? Note that I don't have a relay up yet, so my question may be lack

Re: [tor-relays] Avoiding using my own Exit

2015-02-06 Thread Justaguy
Yes. But, it is easy to exclude your own relays. https://www.torproject.org/docs/tor-manual.html.en#ExcludeNodes On 02/06/2015 08:54 PM, Chris Tilt wrote: > Hello, > > When running a relay that is configured as an Exit, do you run the risk of > your own TOR browsing sessions (initiated from the sam

Re: [tor-relays] Changes in network traffic pattern

2015-02-06 Thread Toralf Förster
On 02/05/2015 11:32 PM, Hu Man wrote: > I have been running a tor relay for about a year and according to my > munin graph It normally receives, on average, just under 2,000 incoming > tcp connections on port 443 every 5 minutes. /me assumes 443 is your ORport ? > In the last few days that figure

Re: [tor-relays] Relay operators: help improve this hardening document?

2015-02-06 Thread I
Thanks for being the one to start on it. I think there ought to be some specific help for people like me who want to do the best to contribute. I did search in many ways for hardening tips but it takes a lot of nous to make some of the leaps expected by uber-cool-already-knowing authors. Would