Delivery-Date: Sun, 10 Jan 2016 18:17:35 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,T_DKIM_INVALID,T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 1993D1E038B;
	Sun, 10 Jan 2016 18:17:33 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id CDAC121544;
	Sun, 10 Jan 2016 23:17:25 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id A3FF020F7B
 for <tor-talk@lists.torproject.org>; Sun, 10 Jan 2016 23:17:20 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id s5-rCsfLXJ-b for <tor-talk@lists.torproject.org>;
 Sun, 10 Jan 2016 23:17:20 +0000 (UTC)
Received: from imirhil.fr (imirhil.fr [62.210.124.124])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "imirhil.fr", Issuer "CAcert Class 3 Root" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 76ABC20CCB
 for <tor-talk@lists.torproject.org>; Sun, 10 Jan 2016 23:17:20 +0000 (UTC)
Received: from [127.0.0.1] (localhost [127.0.0.1])
 (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by imirhil.fr (Postfix) with ESMTPSA id A4EBA80F37;
 Mon, 11 Jan 2016 00:17:15 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=imirhil.fr; s=mail;
 t=1452467836; bh=fqZKv0vf2vQ8bZgcuN0+b6EymsKMVVor5mAk5LmIVms=;
 h=From:To:Cc:Subject:Date:In-Reply-To:References:From;
 b=a5QWlnvJjoLxVw6tfHiNqqIKo5Yaca8B4teQPmtMcZMenyASnARhEHZYh0ZgqyvrH
 ULPEnRIpNL/lUpm0Dqg6SMG23yTxHxIVSha4DAe+B5j1miz7iXePeMUHBIawepjtPl
 NUvNIQopBCnX3NNzuq1h6cAkBzVfVtYowmG2Np6U=
From: Aeris <aeris+tor@imirhil.fr>
To: Oskar Wendel <o.wendel@wp.pl>
Date: Mon, 11 Jan 2016 00:17:05 +0100
Message-ID: <2071581.DDH0IWsMAp@home>
In-Reply-To: <n6ujfc$ief$1@ger.gmane.org>
References: <n6u1bd$lk2$1@ger.gmane.org> <5692A207.5080309@sky-ip.org>
 <n6ujfc$ief$1@ger.gmane.org>
MIME-Version: 1.0
Cc: tor-talk@lists.torproject.org
Subject: Re: [tor-talk] Help me secure my setup
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============6305631909069278109=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

--===============6305631909069278109==
Content-Type: multipart/signed; boundary="nextPart3112748.A91hX1pLLx"; micalg="pgp-sha512"; protocol="application/pgp-signature"

--nextPart3112748.A91hX1pLLx
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"

> So you recommend manually specifying an entry guard, instead of letting
> Tor choose? Why?

Not at all.
Let your network gateway (or each PC) forward all outgoing traffic (or only=
=20
traffic to Tor node, with iptables + ipset) through your VPN. And use the=20
normal way a normal Tor client per PC, configuring all your application to =
use=20
the standard (and local this time) SOCKS5 proxy or do transparent proxying =
to=20
(local) Trans/DNSPort.

Regards,
=2D-=20
Aeris
Individual crypto-terrorist group self-radicalized on the digital Internet
https://imirhil.fr/

Protect your privacy, encrypt your communications
GPG : EFB74277 ECE4E222
OTR : 5769616D 2D3DAC72
https://caf=C3=A9-vie-priv=C3=A9e.fr/
--nextPart3112748.A91hX1pLLx
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part.
Content-Transfer-Encoding: 7Bit

-----BEGIN PGP SIGNATURE-----
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=Jsvj
-----END PGP SIGNATURE-----

--nextPart3112748.A91hX1pLLx--


--===============6305631909069278109==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============6305631909069278109==--

