Re: [tor-relays] Reminder: exit nodes probably shouldn't be using Google's DNS servers

On Thu, 08 Jan 2015, Nick Mathewson wrote:

Would anybody like to share a guide about how to set one of those up safely and migrate correctly?

o apt-get install unbound o remove all nameserver entries in /etc/resolv.conf and add one for the local recursor. Either manually or use (untested): sed -i -e 's/^nameserver /#&/; $a nameserver 127.0.0.1' /etc/resolv.conf o prevent anything else from modifying that file ever again: chattr +i /etc/resolv.conf

voila.