[tor-relays] hardening a tor relay

[David Serrano]

On 2014-05-24 01:25:36 (-0700), Contra Band wrote:
> 
> Your experience is really helpful. After some thoughts now I'm allowing only 
> 
> incoming tcp ports 443 and ssh 
> 
> outgoing tcp port 443

Please enable at least outgoing port 9001 as well. Most relays listen on that
port, with 443 in second place. With those ports allowed you'll be able to
reach 80% of the network.

This is a quick tally of the number of relays by orport:

$ awk '/^r / {print $8}' ~/tmp/2014-05-24-07-00-00-consensus |sort -n |uniq -c |sort -rn |head
   2613 9001
   1251 443
     49 8080
     35 9090
     34 80
     27 9002
     25 8443
     25 22
     23 8001
     22 110


-- 
 David Serrano
 GnuPG id: 280A01F9
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20140524/a10185a6/attachment.sig>