[tor-relays] Any security tips on running a TOR relay?

Green Dream greendream848 at gmail.com
Thu Aug 4 17:27:09 UTC 2016


I'd say the normal server hardening precautions apply. Off the top of my
head:

- keep software/packages up to date
- only use public-key authentication for ssh / disable password-based auth
- optionally change the ssh port (it just avoids the worst of the port
scanning / brute force attempts)
- limit the number of services running on your relays (ideally only run Tor
and supporting services (i.e., maybe dns)
- firewall off (deny) everything except DirPort/ORPort/ssh
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20160804/fd02334e/attachment.html>


More information about the tor-relays mailing list