[tor-relays] How to prevent netscan usage?

[Tim Wilson-Brown - teor]

Hi Roland,

> On 26 Nov 2015, at 14:50, ZEROF <security at netmajstor.com> wrote:
> 
> Hi,
> 
> First rule is to use some firewall, 2nd is to disable that port for few days. You will not lose exit flag becuase of this

To retain the exit flag, you need to allow exiting on at least two of 80, 443, 6667, to at least a /8 IPv4 netblock.

So if you disable port 80, please consider checking you have port 6667 enabled.

Tim

Tim Wilson-Brown (teor)

teor2345 at gmail dot com
PGP 968F094B

teor at blah dot im
OTR CAD08081 9755866D 89E2A06F E3558B7F B5A9D14F

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20151126/e9558b54/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20151126/e9558b54/attachment.sig>