[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] Running Bind locally

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-relays] Running Bind locally
From: krishna e bera <keb@xxxxxxxxxxxxxx>
Date: Sat, 07 Sep 2013 15:05:55 -0400
Delivered-to: archiver@xxxxxxxx
Delivery-date: Sat, 07 Sep 2013 15:06:11 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cyblings.on.ca; s=google; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=S4rvSdfIyBJCY75/MH/YdmlN4O4YUu78Zsn5SpmWtP4=; b=Sk2lZyqLV1vFlLUyIP6vlwBgwVtBG1W7HKeCW3MaHj8kk3ruKyA0XcjtHIRWwP/Xt8 2bOg3/1BUbL2zMzoPfhHR1PU2eN3gPK0UqY807jVKhMVGjm1Haip551k5iLCna8vYbh8 obSh+zoRvwT3z+qiIjb/DDtfyfWQfUrThudxA=
In-reply-to: <20130907185555.GM14563@xxxxxxxxxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
References: <6ACAC95E-CBB7-4B86-A5CF-231D9AC45EED@xxxxxxxxxxxxxx> <20130907185555.GM14563@xxxxxxxxxxxxxxxxxxxx>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130803 Thunderbird/17.0.8

On 13-09-07 02:55 PM, Peter Palfrader wrote:
> On Sat, 07 Sep 2013, Yoriz wrote:
> 
>> Does Tor use the system DNS configuration? In other words, if I would
>> run a local Bind daemon, would my tor exit use it? Is that bad for the
>> safety of the tor user, as the Bind daemon effectively becomes an
>> audit log of all domains visited by tor users?
> 
> Running a local bind or unbound is probably a smart thing to do, and if
> you put 127.0.0.1 into /etc/resolv.conf tor will use that.

A local caching nameserver will improve performance of course.
What are recommended policies to ensure the cache isnt useful to
adversaries?

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

References:
- [tor-relays] Running Bind locally
  - From: Yoriz
- Re: [tor-relays] Running Bind locally
  - From: Peter Palfrader

Prev by Author: Re: [tor-relays] onionoo
Next by Author: Re: [tor-relays] Relay
Previous by thread: Re: [tor-relays] Running Bind locally
Next by thread: Re: [tor-relays] Running Bind locally
Index(es):
- Author
- Thread