Re: [tor-relays] Running tor in VPS - keep away snooping eyes

Hi,

If you are asking how to secure  your box better, indeed the public IP address list of relays is often scanned and brute forced. That is why I recommend:

• • if you run only Tor on that box is best, if not make sure your apps

are properly secured (mysql not listening on public IP if it's not a remote mysql server, strong passwords for mysql, ftp, etc.).

• • make sure only ports used by Tor are open. There is no need for

anything else.

• • if you use ssh for administration that is fine, just change the port

from 22 in /etc/ssh/sshd_config to some custom port, anything, like 2988 or whatever.

• • permanently disabled plain password authentication or rhost

authentication in sshd_config and only allow key-based authentication for better security and protection against weak password probing.

• • do not allow any other users for SSH access.

Let me know if you have any other questions.

I have done all that, so covered on that aspect. Was wondering if disk encryption and use of something like TRESOR would be useful?

-kali-