The crisis in the Ukraine triggert me to provide Tor relays.
But my motivation is much bigger (and few inches in size): the Stasi
observation files about my parents - few hundred pages.
In contrast here are the ridiculous 9 (and mostly blackened) spy pages about me.
Freedom needs free press.
Free press needs whistle-blowing.
Whistle-blowing needs anonymity.
Anonymity is provided by Tor.
The status of my visible Tor relays is at
2 relays run at a stable hardened Gentoo Linux
under a recent stable vanilla kernel (no modules, minimal config),
meaning without USB (eg.: why not),
graphics, serial + parallel interfaces, unused drivers, file systems et. al.,
LibreSSL instead OpenSSL and
OpenRC instead systemd.
Another relay is configured as a Tor bridge at a Debian VM.
Hint: boot into a kernel made with make defconfig,
strip down the kernel .config using make localmodconfig and /usr/src/linux/scripts/kconfig/streamline_config.pl,
and further do remove everything which isn't needed, eg. sound)
/tmp is a tmpfs,
swap is encrypted
network: IPv4 and IPv6 have static ip addresses
Hint: request an additional IPv4/IPv6 address pair for Tor, b/c Tor addresses will be added to certain black lists soon
dnsmasq is used to have DNSSEC,
here's the DNSSEC Authentication Chain
incoming ports except ssh, DirPort and ORPort are closed
sshd listens at a non-default port, password or *root* login are forbidden
a Tor exit notice is provided both at IPv4 and at IPv6 DirPort(s)
here's the link to the reduced exit policy Wiki.
homepage is legal-checked (contact, impressum and disclaimer)
An unusual behavior happened at 6th of Nov 2014 where the BOINC software was involved too.
And here're few DDoS examples from the past:
27th of April 2015 (>300 MBit/s),
20th of Nov 2015 (34 MBit/s, more),
30th of Jan 2016 (>500 MBit/s),
20th of March 2016 (>900 MBit/s, values),
13th of Jun 2016 (>65 MBit/s),
7th of Jun 2016 (>275 MBit/s),
21th of Jul 2016 (>180 MBit/s, values and graph),
22th of Jul 2016 (>250 Kpck/s, graph)
"Tor" and the "Onion Logo" are registered trade marks of Torproject, Inc.
back to my home page