[tor-relays] Let's increase the amount of exit relays doing DNSSEC validation

Ralph Seichter m16+tor at monksofcool.net
Thu Apr 12 14:21:21 UTC 2018


On 12.04.18 13:05, Alexander Dietrich wrote:

> Just to be safe, you could also check the rest of the dig output and
> /etc/resolv.conf (or relevant resolver configuration on your system)
> to make sure your BIND is being used.

I have seen hosters where /etc/resolv.conf is overwritten whenever the
system reboots, and in these cases I used the following:

  # Add this to /etc/tor/torrc
  ServerDNSResolvConfFile /etc/tor/resolv.conf

  # /etc/tor/resolv.conf
  nameserver 127.0.0.1
  # IPv6 alternative
  #nameserver ::1

-Ralph



More information about the tor-relays mailing list