{"action":"created","issue":{"url":"https://api.github.com/repos/monero-project/monero/issues/4250","repository_url":"https://api.github.com/repos/monero-project/monero","labels_url":"https://api.github.com/repos/monero-project/monero/issues/4250/labels{/name}","comments_url":"https://api.github.com/repos/monero-project/monero/issues/4250/comments","events_url":"https://api.github.com/repos/monero-project/monero/issues/4250/events","html_url":"https://github.com/monero-project/monero/issues/4250","id":349815588,"node_id":"MDU6SXNzdWUzNDk4MTU1ODg=","number":4250,"title":"Running a monero node over tor","user":{"login":"MarsAttacke","id":38099683,"node_id":"MDQ6VXNlcjM4MDk5Njgz","avatar_url":"https://avatars2.githubusercontent.com/u/38099683?v=4","gravatar_id":"","url":"https://api.github.com/users/MarsAttacke","html_url":"https://github.com/MarsAttacke","followers_url":"https://api.github.com/users/MarsAttacke/followers","following_url":"https://api.github.com/users/MarsAttacke/following{/other_user}","gists_url":"https://api.github.com/users/MarsAttacke/gists{/gist_id}","starred_url":"https://api.github.com/users/MarsAttacke/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MarsAttacke/subscriptions","organizations_url":"https://api.github.com/users/MarsAttacke/orgs","repos_url":"https://api.github.com/users/MarsAttacke/repos","events_url":"https://api.github.com/users/MarsAttacke/events{/privacy}","received_events_url":"https://api.github.com/users/MarsAttacke/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-08-12T14:09:24Z","updated_at":"2018-08-12T16:58:07Z","closed_at":null,"author_association":"NONE","body":"Hi guys, I have a security question to make my first sync : \r\nI'm following this guideline : \r\n\r\nhttps://medium.com/@kic0/running-a-monero-node-over-tor-49c3de49eda8\r\n\r\n\r\nAnd on this step \r\n\r\n> After importing the blockchain.raw run monerod first time to make sure it syncs to latest blockheight we use some \"Tor\" options and a exclusive node to prevent \"leakage\". The node used here is node.xmr.pt:18081 an open node run by comunity members, you should really use your own or you can always run with none at all but be more \"open\" to the network, this is the least recomended \"mode\" tho.\r\n>  \r\n> While Monero isn't made to integrate with Tor, it can be used wrapped with torsocks, if you add --p2p-bind-ip 127.0.0.1 to the monerod command line. You also want to set DNS requests to go over TCP, so they'll be routed through Tor, by setting DNS_PUBLIC=tcp or use a particular DNS server with DNS_PUBLIC=tcp://a.b.c.d (default is 8.8.4.4, which is Google DNS). You may also disable IGD (UPnP port forwarding negotiation), which is pointless with Tor, we also add --hide-my-port so we don't anounce our node to the network itself. To allow local connections from the wallet, you might have to add TORSOCKS_ALLOW_INBOUND=1, some OSes need it and some don't...\r\n\r\n\r\nWith this command : \r\n\r\n\r\n> DNS_PUBLIC=tcp://8.8.4.4 TORSOCKS_ALLOW_INBOUND=1 torsocks ./monerod — p2p-bind-ip 127.0.0.1 — no-igd — add-exclusive-node 80.172.224.52 — hide-my-port\r\n\r\nIf I'm right use the 80.172.224.52 ip to sync is not very secure and I think I miss something, I tried to use 127.0.0.1 but error message when I launch it....\r\n\r\nCould anyone explain to me if it's dangerous to use the 80.172.224.52 ip to sync or not ? and If yes they said that we have to use our own node but how ? (Is it with my onion adress created before ? \r\n\r\nThanks for reading and helping ;)\r\n"},"comment":{"url":"https://api.github.com/repos/monero-project/monero/issues/comments/412356310","html_url":"https://github.com/monero-project/monero/issues/4250#issuecomment-412356310","issue_url":"https://api.github.com/repos/monero-project/monero/issues/4250","id":412356310,"node_id":"MDEyOklzc3VlQ29tbWVudDQxMjM1NjMxMA==","user":{"login":"moneromooo-monero","id":8851073,"node_id":"MDQ6VXNlcjg4NTEwNzM=","avatar_url":"https://avatars3.githubusercontent.com/u/8851073?v=4","gravatar_id":"","url":"https://api.github.com/users/moneromooo-monero","html_url":"https://github.com/moneromooo-monero","followers_url":"https://api.github.com/users/moneromooo-monero/followers","following_url":"https://api.github.com/users/moneromooo-monero/following{/other_user}","gists_url":"https://api.github.com/users/moneromooo-monero/gists{/gist_id}","starred_url":"https://api.github.com/users/moneromooo-monero/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/moneromooo-monero/subscriptions","organizations_url":"https://api.github.com/users/moneromooo-monero/orgs","repos_url":"https://api.github.com/users/moneromooo-monero/repos","events_url":"https://api.github.com/users/moneromooo-monero/events{/privacy}","received_events_url":"https://api.github.com/users/moneromooo-monero/received_events","type":"User","site_admin":false},"created_at":"2018-08-12T16:58:07Z","updated_at":"2018-08-12T16:58:07Z","author_association":"CONTRIBUTOR","body":"If you think this node is an attacker, you can select another one, like one of the seed nodes (though since you select an exclusive node, you might already have deemed those bad).\r\n\"Use your own node\" is for wallet use. You can't bootstrap a node from no other node."}}
{"actor":{"display_login":"moneromooo-monero"}}