[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] securing a VPS [High speed exit]

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-relays] securing a VPS [High speed exit]
From: Craig C-S <craigcsis@xxxxxxxxx>
Date: Wed, 5 Feb 2014 23:04:47 -0800
Delivered-to: archiver@xxxxxxxx
Delivery-date: Thu, 06 Feb 2014 02:04:59 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=alUnZMZjUBkhISRbPs17czEd8UK+J1+9b0u3N14HtGE=; b=JLT+sNH1KSs7QqdR3zGqNtIipeTkzlXKW7l6KPcAyCHAxHuGZOOV8bYLo4UEbmFC1n 9zIY24nep0ttT87FogbOW7glYJCgiI5MK3pVST1PBaHRZjyYtb++9Eja6umRRVBdpcIH GbJ7cj6XyzmwUZYIoDPNsihg9GbAjfulPRlyTHyAOqeyHOLJTE1oJ9WRXxty5QxPnrjW XdA6mMRRCWGFSNNiAcA8zRkhD9Q1Cn8ysoNxmSOvzeDYGCcPbUWntZHF7EDySn00s9Hn +x3CeG+cAbegfpmIjJl8UO9ZQrZOgdSTuPXZ8ZhKRlTx3s0gLEzzeN+CqyyJ2fsJFhsX cOMg==
In-reply-to: <0AC86847F45.00000466beatthebastards@xxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
References: <03bc97aff38.00000affbeatthebastards@xxxxxxxxx> <cadvp+7zjezovbg=_+vgwwg7uxxt53zzjxmsnmmutgh02ygc+ta@xxxxxxxxxxxxxx> <CAFN1edqxQuKLf4QJ4ZGrfSU05mL2_kFsjS8zP1JW8yLegQYEQw@xxxxxxxxxxxxxx> <0AC86847F45.00000466beatthebastards@xxxxxxxxx>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

Thanks all for the advice!

Things to do:

- I'll be looking to run Moxie Marlinspike's knockknock daemon soon as that seems like a superior solution to port knocking and rate limiting. (big fan of his work on TextSecure and RedPhone!)

- Run OpenSSH as a hiddenservice. ÂThis seems obvious now but had not occurred to me.

- Look into Fail2Ban and DenyHosts and implement them.

Done and thank you for the reminders!

- Automated daily updates via emerge

- Server hardening done with hardened-gentoo

- Moved to key auth for ssh

Alan:

I'll keep you and the community updated if soyoustart.com (OVH) has any problem with the exit. ÂBeyond forgetting to ban exits to 25 they have not said anything!

Thanks Alan, David and Robert!

Craig

On Wed, Feb 5, 2014 at 5:12 PM, I <beatthebastards@xxxxxxxxx> wrote:

Also, if you know how set the operating system to update automatically to keep it secure.

Robert

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Follow-Ups:
- Re: [tor-relays] securing a VPS [High speed exit]
  - From: Dan Rogers
- Re: [tor-relays] securing a VPS [High speed exit]
  - From: David Stainton

References:
- Re: [tor-relays] securing a VPS [High speed exit]
  - From: David Stainton
- Re: [tor-relays] securing a VPS [High speed exit]
  - From: I

Prev by Author: [tor-relays] High speed exit
Next by Author: Re: [tor-relays] Middle relay
Previous by thread: Re: [tor-relays] securing a VPS [High speed exit]
Next by thread: Re: [tor-relays] securing a VPS [High speed exit]
Index(es):
- Author
- Thread