Yes I know Tristan -Thank you for reminding (a quick good tutorial would make change easier)

Unfortunately it doesn’t give an answer on the question.

Am 27.09.2016 um 16:23 schrieb Tristan:

Just so you know, you should be using a local DNS server, or one from the OpenNIC project, instead of Google DNS. Google DNS sees almost 50% of all Tor traffic, and could potentially link people across exits.

On Sep 27, 2016 8:48 AM, "pa011" <pa011@web.de mailto:pa011@web.de> wrote:

On one of my recently started Exits I do see a rather huge and increasing difference between in and out traffic that I don see on any other Exit so far.
The rise doesn’t seem to be linear..

Any explanation for that - or can it just be on the back of a not fixed repetitive warning?

Sep 27 06:42:46.000 [warn] eventdns: All nameservers have failed
Sep 27 06:42:46.000 [notice] eventdns: Nameserver 8.8.8.8:53 <http://8.8.8.8:53> is back up

Thanks
Paul


 eth0  /  daily

         day         rx      |     tx      |    total    |   avg. rate
     ------------------------+-------------+-------------+---------------
     11.09.2016   539,96 MiB |   88,50 MiB |  628,47 MiB |   59,59 kbit/s
     12.09.2016     1,47 GiB |    1,06 GiB |    2,53 GiB |  245,60 kbit/s
     13.09.2016    10,03 GiB |    9,86 GiB |   19,89 GiB |    1,93 Mbit/s
     14.09.2016    17,35 GiB |   16,69 GiB |   34,04 GiB |    3,30 Mbit/s
     15.09.2016    53,11 GiB |   51,59 GiB |  104,70 GiB |   10,17 Mbit/s
     16.09.2016    99,08 GiB |   96,87 GiB |  195,96 GiB |   19,03 Mbit/s
     17.09.2016   144,45 GiB |  140,66 GiB |  285,12 GiB |   27,68 Mbit/s
     18.09.2016   190,05 GiB |  184,50 GiB |  374,55 GiB |   36,36 Mbit/s
     19.09.2016   231,95 GiB |  223,90 GiB |  455,86 GiB |   44,26 Mbit/s
     20.09.2016   291,30 GiB |  282,25 GiB |  573,55 GiB |   55,69 Mbit/s
     21.09.2016   343,19 GiB |  332,33 GiB |  675,52 GiB |   65,59 Mbit/s
     22.09.2016   347,57 GiB |  329,66 GiB |  677,22 GiB |   65,75 Mbit/s
     23.09.2016   388,91 GiB |  373,21 GiB |  762,13 GiB |   74,00 Mbit/s
     24.09.2016   381,35 GiB |  361,64 GiB |  742,99 GiB |   72,14 Mbit/s
     25.09.2016   391,60 GiB |  364,34 GiB |  755,94 GiB |   73,39 Mbit/s
     26.09.2016   374,59 GiB |  337,81 GiB |  712,40 GiB |   69,17 Mbit/s
     27.09.2016   144,06 GiB |  131,67 GiB |  275,73 GiB |   70,89 Mbit/s
     ------------------------+-------------+-------------+---------------
     estimated    382,03 GiB |  349,18 GiB |  731,21 GiB |
_______________________________________________
tor-relays mailing list
tor-relays@lists.torproject.org <mailto:tor-relays@lists.torproject.org>
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>

---

tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

On 09/27/2016 04:39 PM, pa011 wrote:

Yes I know Tristan -Thank you for reminding (a quick good tutorial would make change easier)

here's just an example how i have it setup:

on ubuntu: apt install unbound dnscrypt-proxy

add this to /etc/rc.local:

/usr/sbin/dnscrypt-proxy -a 127.0.0.1:40 -u _dnscrypt-proxy -d -l /dev/null -R dnscrypt.eu-nl /usr/sbin/dnscrypt-proxy -a 127.0.0.1:41 -u _dnscrypt-proxy -d -l /dev/null -R dnscrypt.org-fr /usr/sbin/dnscrypt-proxy -a 127.0.0.1:42 -u _dnscrypt-proxy -d -l /dev/null -R dnscrypt.eu-dk

edit /etc/unbound/unbound.conf:

server: interface: 127.0.0.1 do-ip6: no verbosity: 1 do-not-query-localhost: no

access-control: 0.0.0.0/0 refuse access-control: 127.0.0.0/8 allow

hide-identity: yes hide-version: yes

auto-trust-anchor-file: "/var/lib/unbound/root.key" # get a fresh copy from time to time from here: # ftp://FTP.INTERNIC.NET/domain/named.cache root-hints: "/var/lib/unbound/root.hints"

remote-control: control-enable: yes control-use-cert: no control-interface: /var/run/unbound.sock

forward-zone: name: "." forward-addr: 127.0.0.1@40 # dnscrypt-proxy forward-addr: 127.0.0.1@41 # dnscrypt-proxy 2 forward-addr: 127.0.0.1@42 # dnscrypt-proxy 3

change your /etc/resolv.conf: nameserver 127.0.0.1

for unbound: "auto-trust-anchor-file" and "auto-trust-anchor-file" is for enabling DNSSEC. it's optional. you'd have to fetch the file root-hints. "unbound-anchor" can take care of the auto-trust-anchor-file.