I am attempting to run a full bitcoin-core (v0.13.1
) node over the Tor network for the first time. I have set up my /etc/tor/torrc
file with the following two lines:
HiddenServiceDir /var/lib/tor/bitcoin_service/
HiddenServicePort 8333 127.0.0.1:8333
I have set up a file ~/.bitseed/bitseed.conf
with (not sure this is required)
onion=1
I retrieved my onion address from /var/lib/tor/bitcoin-service/hostname
allowing me to set up ~/.bitcoin/bitcoin.conf
with settings such as:
onlynet=onion
onion=127.0.0.1:9050
listen=1
bind=127.0.0.1:8333
externalip=<my-onion-address>
seednode=wxvp2d4rspn7tqyu.onion
seednode=bk5ejfe56xakvtkk.onion
seednode=bpdlwholl7rnkrkw.onion
seednode=hhiv5pnxenvbf4am.onion
seednode=4iuf2zac6aq3ndrb.onion
seednode=nkf5e6b7pl4jfd4a.onion
seednode=xqzfakpeuvrobvpj.onion
seednode=tsyvzsqwa2kkf6b2.onion
banscore=10000
bantime=11
It seems to be working as I can see my mempool growing from the debug file, and I have one inbound connection. But my connection count is very small (2 or 3). Is there anything else I need to do? In particular, I wanted to confirm that I have no need to set up my firewall ufw
to accept connections on port 8333
(or 9050
) in order to achieve inbound connections, and I have no need to redirect port 8333 or 9050 from my router to the fixed local ip address of my machine (setting up ufw
to allow 8833
and redirecting port 8333
from router would be required if I was running a normal node).
EDIT: 9 connections of which one inbound, but this single inbound connection is myself. So the question really is: How do I allow inbound connections?
EDIT2: I am now of the opinion that this setting is correct. I was wrong to think a prior inbound connection was to 'myself', after 24 hours I have seen a peek of 4 inbound connections. I can confirm there is no need to tweak ufw
or change any of your router settings (the tor protocol is not affected by either of these), and this seems to be working having tor on top of a VPN connection (bitmask
). Hence I have no more questions but happy to stand corrected if any of the above is wrong.