[tor-relays] Traffic in port 9050 in a relay (denial of service attack?)

Lars Noodén lars.nooden at gmail.com
Wed Nov 6 12:00:09 UTC 2013


On 11/06/2013 01:26 PM, mick wrote:
> I disagree. Dropping all traffic other than that which is
> explicitly required is IMHO a better practice. (And how do you know
> in advance which ports get attacked?)

Using reject instead of drop simplifies troubleshooting.

http://www.chiark.greenend.org.uk/~peterb/network/drop-vs-reject

Drop tends to get in the way.

Regards,
/Lars


More information about the tor-relays mailing list