[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Please run a bridge relay! (was Re: Tor 0.2.0.13-alpha is out)

To: or-talk@xxxxxxxxxxxxx
Subject: Re: Please run a bridge relay! (was Re: Tor 0.2.0.13-alpha is out)
From: "F. Fox" <kitsune.or@xxxxxxxxx>
Date: Mon, 24 Dec 2007 17:13:11 -0800
Delivered-to: archiver@xxxxxxxx
Delivered-to: or-talk-outgoing@xxxxxxxx
Delivered-to: or-talk@xxxxxxxx
Delivery-date: Mon, 24 Dec 2007 20:13:34 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:user-agent:mime-version:to:subject:references:in-reply-to:x-enigmail-version:content-type:content-transfer-encoding; bh=FQg67irkp8ObJDIU3RDKlLVsl2+Cx1mKrQpYnKDBwKw=; b=NtGKkN73Uat/eRy+aUH+QEZX1y867TdTxSzoTjZ5J+9q+tBAO1VRCxdgGeYqeOFiCyFZTtwTY2W2PwhmL5uuYNaEXwdswPDl0yc5HWnNhWJz80DNo3cfv+/6vV7VGDOH/nj2KIA6whGPoxY0VYCbcUHkieDgiIIeWjYHI1bQ7UE=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject:references:in-reply-to:x-enigmail-version:content-type:content-transfer-encoding; b=ds/uM3XQTsS8WRhubDjTtoJhqQZYT8GwkAX+34mEYbyqLPPk197mr9xzWAtw/6j4touo01IabJTEHVseYPVG5kops+cv4FNJ562LXGgeR/sIk2k/1pPEE0MKSIJ7g8ayGLPosWNz7T8u2lxAW7nnsMoJ8JPlpOyHSWTACpObkiY=
In-reply-to: <20071223221020.GA10203@xxxxxxxxxxxxxxxxxxx>
References: <20071222091909.GX23692@xxxxxxxxxxxxxx> <20071222100028.GZ20802@xxxxxxxxxxxxxx> <476ED4ED.1060800@xxxxxxxxxx> <20071223221020.GA10203@xxxxxxxxxxxxxxxxxxx>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx
User-agent: Icedove 1.5.0.14pre (X11/20071018)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Drake Wilson wrote:
> Quoth Andrew Del Vecchio <firefox-gen@xxxxxxxxxx>, on 2007-12-23 13:36:45 -0800:
>> Roger, I'm good to go except for one thing: The permissions issue with
>> the port being 443 (less than 1024). Is there an easy way around this
>> without having to create a chroot jail, etc? I'm using the latest Ubuntu
>> 7.10. I can change file permissions but I don't want to create a
>> security vulnerability.
> 
> The obvious way to handle this, if you have iptables available, is
> probably to run the Tor server on some other port (say, 1443) and then
> use iptables to redirect incoming connections on port 443 to port 1443
> instead.

I actually take both approaches.

"Kitsune" (a regular node, not a bridge) listens on a non-privileged
port, having my network's public port 443 redirected to that port.

I also use northernsecurity.net's Debian scripts, which allow easy
chrooting of Tor. =:o)

- --
F. Fox: A+, Network+, Security+
Owner of Tor node "kitsune"
http://fenrisfox.livejournal.com

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHcFknbgkxCAzYBCMRCBcMAJ0SQ/jHufnhE+CHVGHO7Li8cW53OACdETSE
r+8JhtGGU1xfMi981Biksd0=
=0v4X
-----END PGP SIGNATURE-----

References:
- Tor 0.2.0.13-alpha is out
  - From: Roger Dingledine
- Please run a bridge relay! (was Re: Tor 0.2.0.13-alpha is out)
  - From: Roger Dingledine
- Re: Please run a bridge relay! (was Re: Tor 0.2.0.13-alpha is out)
  - From: Andrew Del Vecchio
- Re: Please run a bridge relay! (was Re: Tor 0.2.0.13-alpha is out)
  - From: Drake Wilson

Prev by Author: Re: [OT] more from Cryptome on NSA, Windows firewals, mail services
Next by Author: Kitsune's recent technical difficulties
Previous by thread: Re: Please run a bridge relay! (was Re: Tor 0.2.0.13-alpha is out)
Next by thread: Re: Please run a bridge relay! (was Re: Tor 0.2.0.13-alpha is out)
Index(es):
- Author
- Thread