[tor-relays] Reminder: exit nodes probably shouldn't be using Google's DNS servers

Peter Palfrader weasel at torproject.org
Thu Jan 8 15:11:09 UTC 2015

On Thu, 08 Jan 2015, Nick Mathewson wrote:

> Would anybody like to share a guide about how to set one of those up
> safely and migrate correctly?

o  apt-get install unbound
o  remove all nameserver entries in /etc/resolv.conf and add one for the
   local recursor.  Either manually or use (untested):
     sed -i -e 's/^nameserver /#&/; $a nameserver' /etc/resolv.conf
o prevent anything else from modifying that file ever again:
   chattr +i /etc/resolv.conf


                           |  .''`.       ** Debian **
      Peter Palfrader      | : :' :      The  universal
 http://www.palfrader.org/ | `. `'      Operating System
                           |   `-    http://www.debian.org/

More information about the tor-relays mailing list