diff --git a/docs/TOR.MD b/docs/TOR.MD index e9538a3..dd275d6 100644 --- a/docs/TOR.MD +++ b/docs/TOR.MD @@ -5,7 +5,8 @@ P2Pool has several command-line options that should be used for TOR setup: - `--socks5 IP:port` to specify your TOR proxy address (usually `127.0.0.1:9050` if you installed TOR on the same PC) - `--no-dns` to disable all DNS queries and prevent DNS leaks. P2Pool only ever makes DNS requests to get a list of seed nodes, to resolve your Monero node's domain (if it's not set as an IP address), and to resolve manually added peers - `--no-upnp` to disable UPnP requests (they are sent to your router, so use this option if you are not on your home network) -- `--onion-address` your hidden service's address (without port number). This address will be broadcast to other peers when you mine a share in P2Pool. This is to prevent address spamming - you have to mine a real share to be able to broadcast your TOR address +- `--onion-address` your hidden service's address (without port number). This address will be broadcast to other peers when you mine a share in P2Pool. This is to prevent address spamming - you have to mine a real share to be able to broadcast your TOR address. + - **Attention: this also links the onion address with the Monero wallet you use for mining. Create a new onion address when mining through TOR, don't use your existing onion addresses to avoid meta-data leaks.** - `--no-clearnet-p2p` to never connect to clearnet P2Pool nodes. This also makes sure that your P2Pool traffic doesn't exit the TOR network (and is not seen/modified by the exit nodes) ## Setting up a hidden service for P2Pool (Linux) @@ -22,6 +23,7 @@ P2Pool has several command-line options that should be used for TOR setup: ``` - If there were no errors, you should now have the `/var/lib/tor/p2pool` directory with a `hostname` file in it. This file will contain your onion address - Use this address in P2Pool's command line: `--onion-address ADDRESS_FROM_HOSTNAME_FILE` +- It is strongly recommended to create a new onion address for mining (see `--onion-address` remarks). This guide ensures you will be using a new onion address, assuming that you don't already have a hidden service named `p2pool`. ## Command line example ```