nsaforyou.blogg.se - Tor bridge relay setup

c)Uncomment and change value to no for # PasswordAuthentication yesremove # and change to no to look like: PasswordAuthentication no.

b)Uncomment the line # AuthorizedKeysFile %h/.ssh/authorized_keys(just remove the # from the beginning to uncomment).

a)Change the line Port 22to other non-custom port, example Port 39346 – now automated scripts can’t brute force your server.

Make sure you follow this step by step so you won’t get locked out of your server and need to contact your provider to fix it.Įdit the sshd_config file with nano text editor – change these settings as root: Also be sure to backup the private key somewhere safe in encrypted format, otherwise you will be locked out of your server if you lose the SSH-2 key pair. Make sure you generate a SSH-2 key pair type RSA 4096 bit, set a passphrase for it (use PuttyGen on Windows or Linux utility to generate a SSH key pair in any Linux distribution) and save the SSH public key to a file (example sshpubkey.asc). It will use only SSH keys which are far more secure. This will disable clear password authentication for remote SSH connections to your sever.

Secure remote SSH access (you can skip this step if you don’t want to enable SSH keys but if you skip this step make sure you have a really strong root password like JKHGSD*^%SD&uaAsd2734 and at least change the SSH port):.

You need to contact your provider and ask them to install NTP and sync the time on the host machine, and the change will bind to all virtual machines too. Please note if you are on a virtual server which uses OpenVZ virtualization, you will not be able to change to clock as all virtual machines share the Kernel on the host machine. Now you have an accurate time and you don’t have to do anything else. Type these commands as root: service ntp stop ntpdate 0. service ntp start Use ntpdate to force-sync first time and after that NTP service will run in background and keep the time accurate. It is vital important for Tor to have an accurate clock. You have installed NTP (network time protocol) so your clock is permanently synced with servers on the internet.

Install updates and utilities – type these commands as root:Īpt-get update & apt-get dist-upgrade -y apt-get install nano apt-get install screen apt-get install sudo apt-get install ntp -y apt-get install ntpdate -y.Configure a Tor relay or bridge on Debian or Ubuntu Linux