Hi there!
I try to configure a tor relay on an whonix-gateway but I allways receive the answer that my server has not managed to confirm that its ORPort and its DIRPort are rechable.
How can I fix this?
Thanks Peter
peter.zehetner@liwest.at wrote:
Hi there!
I try to configure a tor relay on an whonix-gateway but I allways receive the answer that my server has not managed to confirm that its ORPort and its DIRPort are rechable.
How can I fix this?
Thanks Peter
If you're using whonix-gateway you are probably in a virtual machine that has a NAT virtual adapter with the host's physical network interface. You need to forward the ORPort (and DirPort) from host to guest in the virtualization software -> virtual network editor settings.
If the host itself is behind NAT you might need to do yet another port forwarding in the router that connects the host to the internet.
Or, you can setup in the virtualization software, for the network card attached to the whonix-gateway virtual machine Bridged networking instead of NAT, so that it will get an IP directly from the router and just do just one port forwarding from the router to the whonix-gateway-vm IP instead of two.
However, unless your host has many many resources, it does not make sense to run a Tor relay in a vm. There are torrc settings that make it use as many resources as you'd like to give it (ram, cpu, bandwidth, including accounting for metered connections). I recommend you install Tor directly and properly edit torrc to satisfy your needs.
it does not make sense to run a Tor relay in a vm.
The value of a limited environment is in case the tor daemon gets exploited. A full vm needed, tor's not an OS, so perhaps not. A static tor in an equivalent of lighter BSD jail, probably a fair balance. A dynamic tor in full access OS [root] shell... as with any other service best practice, hell no.
As to NAT, the fewer the better, especially not consumer DSL/Cable "routers" that tank under load, those should be bridged to a real BSD/Linux box that can handle it.
tor-relays@lists.torproject.org