[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] HOW-TO: Simple DNS resolver for tor exit operators

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-relays] HOW-TO: Simple DNS resolver for tor exit operators
From: Ralph Seichter <m16+tor@xxxxxxxxxxxxxxx>
Date: Tue, 12 Sep 2017 22:25:15 +0200
Delivered-to: archiver@xxxxxxxx
Delivery-date: Tue, 12 Sep 2017 16:25:42 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/simple; d=monksofcool.net; s=bravo; t=1505247915; bh=EU6mRd0nho1/Kk8qm/z9F7LlUFtRTc/wMNsLuzXwKCU=; h=Subject:To:References:From:Message-ID:Date:User-Agent:In-Reply-To: Content-Type:Content-Language; b=y6TW4Jf5NvFaJt00JZjsd5seSflQ8XF7cO2ZFzcEHD3NXI9oZsZJ6KwIdn0+b+0EE nsItjPs7vrkjCU/du4lSDTO+gM/UXnHY2yPVB4jOWq04Osx74HDpD6SzGhRnZzHsNt fxjXNiZD9mDzRZThoROtlwY1ujOl362hFhHlMo3JAscF6EWwR8Wpb60bYFduuHwT4Y GDZ80tdM+IVP2kAbK6psS0DW8bdJ4Yxw1NJ/UBzxfp+ZtrhQ/+bDzgiAW4TFVW6kb2 EqXNsFc4w2RqmIscXU5Xblzut++BhkMDnGugDPFghTWBaJEYUI5oCexvmQ0ZrVAvyy +wBUtpJv43QLA==
In-reply-to: <2076505303.1710424.1505247083310.JavaMail.zimbra@laposte.net>
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
References: <2076505303.1710424.1505247083310.JavaMail.zimbra@laposte.net>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.3.0

On 12.09.17 22:11, jpmvtd261@xxxxxxxxxxx wrote:

> My idea is designed to protect the exit node against a DNS attack from
> the owner of the DNS server. Not from the ISP or an attacker monitoring
> the traffic going in and out of the ISP data center.

I'm not certain what you consider a "DNS attack".

Many exit node operators run a caching DNS resolver on their exits,
which is easily done. Lacking that, you can use the resolvers run by
your ISP, who can monitor all outbound traffic anyway, as I mentioned.

-Ralph
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Follow-Ups:
- Re: [tor-relays] HOW-TO: Simple DNS resolver for tor exit operators
  - From: Igor Mitrofanov

References:
- Re: [tor-relays] HOW-TO: Simple DNS resolver for tor exit operators
  - From: jpmvtd261

Prev by Author: Re: [tor-relays] Tor-arm failure
Next by Author: Re: [tor-relays] HOW-TO: Simple DNS resolver for tor exit operators
Previous by thread: Re: [tor-relays] HOW-TO: Simple DNS resolver for tor exit operators
Next by thread: Re: [tor-relays] HOW-TO: Simple DNS resolver for tor exit operators
Index(es):
- Author
- Thread