[tor-talk] Securing a Relay - chroot

[CACook at quantum-sci.com]

On Thursday 26 May, 2011 05:37:06 Eugen Leitl wrote:
> Why don't you like Linux vserver? My relay did some 350 GByte/day,
> in a vserver guest on a low-end Atom box.

It must necessarily share the network setup with the host, and so the LAN class C since I can't set up the router downstream with multiple IPs.  Not secure.  Also it would have the same firewall settings, and that is not acceptable either.