<html><head></head><body> <div>Hi Shawn, </div><div><br></div><div>I looked at HardenedBSD and have actually moved to a different VPS so that can I use HBSD. FreeBSD was the only option I had at the time but both instances crashed repeatedly and it got so frustrating that I gave up on FreeBSD. I will give HardenedBSD a go. </div><div><br></div><div>Cheers, </div><div>Dan <caret></caret></div><div><br></div><div id="protonmail_mobile_signature_block"><div>Sent from ProtonMail for iOS</div></div> <div><br></div><div><br></div>On Wed, Mar 31, 2021 at 10:12 AM, Shawn Webb <<a href="mailto:shawn.webb@hardenedbsd.org" class="">shawn.webb@hardenedbsd.org</a>> wrote:<blockquote class="protonmail_quote" type="cite"> On Wed, Mar 31, 2021 at 01:09:45PM +0200, René Ladan wrote:<br>> On 30-03-2021 15:47, Shawn Webb wrote:<br>> > On Tue, Mar 30, 2021 at 02:36:36AM +0000, xplato wrote:<br>> > > Greetings,<br>> > ><br>> > > I am a bit of a noob here so please bear with me. I ran a relay using Ubuntu with very few issues however I decide to add an additional relay and decided to use FreeBSD. They will only run for around 18 hours and then they shut down. I have adjust the torrc file every way I know how and increased the Max vnodes thinking this may have been my issue. I can post the sysrc and torrc if needed. Anyone that might help me figure this out I would be grateful otherwise I am going to reluctantly move them both back to Ubuntu.<br>> > Emerald Onion runs over twenty Tor exit nodes on HardenedBSD 12 and<br>> > 13. Given Tor's need for security, you might want to consider using<br>> > HardenedBSD, a derivative of FreeBSD that implements exploit<br>> > mitigations and security hardening technologies. FreeBSD's state of<br>> > security leaves much to be desired. Tor's relay operators and users<br>> > really should at least have exploit mitigations like ASLR and W^X<br>> > applied.<br>> But it won't fix the problem at hand, unless memory management in<br>> HardenedBSD is different than in FreeBSD.<br><br>Memory management is indeed different in HardenedBSD than in FreeBSD.<br>HardenedBSD implemented a clean-room version of grsecurity's PaX ASLR.<br>FreeBSD's version of ASLR, more appropriately called ASR, has known<br>issues. HardenedBSD's does not.<br><br>Thanks,<br><br>--<br>Shawn Webb<br>Cofounder / Security Engineer<br>HardenedBSD<br><br>https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc<br>_______________________________________________<br>tor-relays mailing list<br>tor-relays@lists.torproject.org<br>https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays<br></blockquote><div><br></div><div><br></div></body></html>