[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] does it make sense to close unused ports at a tor relay with iptables ?

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-relays] does it make sense to close unused ports at a tor relay with iptables ?
From: Tim Wilson-Brown - teor <teor2345@xxxxxxxxx>
Date: Thu, 28 Apr 2016 19:14:18 +1000
Delivered-to: archiver@xxxxxxxx
Delivery-date: Thu, 28 Apr 2016 05:14:38 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:subject:from:in-reply-to:date:message-id:references:to; bh=a0W9abra5hQG0PRZ4Y5eNHG3dr3SVpMI2aABGQmA1tY=; b=Jgq73jINkshvxSpm+f1u5R6veEcEYjCXqTNqW5n6v7fwQul+UGtrSeH5MIV35hDOux scJGNUNlpABvkf91+x/Z+XV/wtXXA4UJQpcZW+rtzg1DvxnCscGzORm+KwudsTCoaA/+ NMeBwpWBQxxTvJsn/UZGEC5NDxhJkNNJ91I+a0kIN6w5CKIN2NXJRjGpvXz4GKXZd33q iSXk9z8JXZ2r8J6DvfGc4E8ZLYP7gIVPQuW1CvJzawYGlBv4FkQOLyBPoAA865TucxVm sNp964Pcc49zV+0ycgfN2crlzb2EL4A2hP40hy3ctyhRxbYNcfUMiDUKoqSGFtxJ/hh2 zjkQ==
In-reply-to: <5721C814.7010401@xxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
References: <5721C814.7010401@xxxxxx>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

> On 28 Apr 2016, at 18:21, Toralf FÃrster <toralf.foerster@xxxxxx> wrote:
> 
> Signed PGP part
> Me do wonder, if it has an advantage or not.

Ports in, or ports out?

Closing inbound ports is a security precaution, but don't close ssh by mistake!

Closing outbound ports is a bad idea, because other Tor relays can choose any port for their ORPort and DirPort.

Tim

Tim Wilson-Brown (teor)

teor2345 at gmail dot com
PGP 968F094B
ricochet:ekmygaiu4rzgsk6n

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Follow-Ups:
- Re: [tor-relays] does it make sense to close unused ports at a tor relay with iptables ?
  - From: Toralf FÃrster

References:
- [tor-relays] does it make sense to close unused ports at a tor relay with iptables ?
  - From: Toralf FÃrster

Prev by Author: Re: [tor-relays] MaxMemInQueues is set to 256 MB
Next by Author: Re: [tor-relays] does it make sense to close unused ports at a tor relay with iptables ?
Previous by thread: [tor-relays] does it make sense to close unused ports at a tor relay with iptables ?
Next by thread: Re: [tor-relays] does it make sense to close unused ports at a tor relay with iptables ?
Index(es):
- Author
- Thread