[tor-relays] hardening a tor relay

[Contra Band]

That is a great piece of advice David. I have enabled the tcp outgoing 9001 and seeing a lot of new connections established to relays with 9001 ORPort. Thanks a lot.


Keep it up guys...





On Saturday, May 24, 2014 8:51 AM, David Serrano <tor at dserrano5.es> wrote:
On 2014-05-24 01:25:36 (-0700), Contra Band wrote:

> 
> Your experience is really helpful. After some thoughts now I'm allowing only 
> 
> incoming tcp ports 443 and ssh 
> 
> outgoing tcp port 443

Please enable at least outgoing port 9001 as well. Most relays listen on that
port, with 443 in second place. With those ports allowed you'll be able to
reach 80% of the network.

This is a quick tally of the number of relays by orport:

$ awk '/^r / {print $8}' ~/tmp/2014-05-24-07-00-00-consensus |sort -n |uniq -c |sort -rn |head
   2613 9001
   1251 443
     49 8080
     35 9090
     34 80
     27 9002
     25 8443
     25 22
     23 8001
     22 110


-- 
David Serrano
GnuPG id: 280A01F9
_______________________________________________
tor-relays mailing list
tor-relays at lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Thanks