[tor-relays] Reminder: exit nodes probably shouldn't be using Google's DNS servers

[Peter Palfrader]

On Thu, 08 Jan 2015, Nick Mathewson wrote:

> Would anybody like to share a guide about how to set one of those up
> safely and migrate correctly?

o  apt-get install unbound
o  remove all nameserver entries in /etc/resolv.conf and add one for the
   local recursor.  Either manually or use (untested):
     sed -i -e 's/^nameserver /#&/; $a nameserver 127.0.0.1' /etc/resolv.conf
o prevent anything else from modifying that file ever again:
   chattr +i /etc/resolv.conf

voila.

-- 
                           |  .''`.       ** Debian **
      Peter Palfrader      | : :' :      The  universal
 http://www.palfrader.org/ | `. `'      Operating System
                           |   `-    http://www.debian.org/