Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I want to run a TOR exit node on a vps, what security measures do I have to put in place on the vps? I know it will be a huge target for hackers and the three letter word agencies in the USA so I need to tighten up every possible security hole possible.

Can I use tor ramdisk as my vps OS? Also can I run a openVPN VPN from the same vps?

share|improve this question

2 Answers 2

This is a really borad question. In essence you have said: "I am going to install a service on my Linux VPS that will make it a target to hackers. How do I secure my Linux server?"

All of the standard security measures should be taken. Most distro's have specific guides on hardening the OS as well. Of course follow the four basic rules:

  1. Run all services and programs with lowest privileges.
  2. Disable or delete any services not needed on the machine.
  3. Ensure the system is up to date.
  4. Employ a firewall and host based IPS.

With a little more info on specific threats you are worried about, or distro and software version I may be able to be more specific.

share|improve this answer

This topic is covered well on other questions on this site. See especially Hardening Linux Server and VPS security best practice.

Others that may be of interest include Secure Linux Desktop, Available Resources for Securing RHEL 6, What methods are available for securing SSH?.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.