[tor-relays] Running Bind locally

krishna e bera keb at cyblings.on.ca
Sat Sep 7 19:05:55 UTC 2013


On 13-09-07 02:55 PM, Peter Palfrader wrote:
> On Sat, 07 Sep 2013, Yoriz wrote:
> 
>> Does Tor use the system DNS configuration? In other words, if I would
>> run a local Bind daemon, would my tor exit use it? Is that bad for the
>> safety of the tor user, as the Bind daemon effectively becomes an
>> audit log of all domains visited by tor users?
> 
> Running a local bind or unbound is probably a smart thing to do, and if
> you put 127.0.0.1 into /etc/resolv.conf tor will use that.

A local caching nameserver will improve performance of course.
What are recommended policies to ensure the cache isnt useful to
adversaries?



More information about the tor-relays mailing list