As requested... How to install and set-up Tor on BSD. Warning: You must learn about security in the BSD's first. Most especially setting up a firewall (pf recommended). I am using FreeBSD in this example, but it should also work the same on OpenBSD or Dragonfly. Not sure about NetBSD. Take this as a guide, every installation is different. At the end I installed firefox-esr just to show you where the Tor-socks config data would go. I might do more videos about hardening BSD in the future, dunno...

Complete FreeBSD install, FULL disk ecnryption with ZFS und Geli, configuration and full desktop install with Gnome3. Follow and like. Do it.

This is how to install a minimal Debian 10.7 system with only i3 window manager and a couple of minimal programs. Yes, I put both dmenu and rofi on the install list, but you can pick one or both. All you have to do is download the latest Debian net install iso from Debian. In this install I am using a VM, but I use this setup on 2 X230's with the latest kernels and some security tweaks. See my other video about Mint and Debian security upgrades.

First time Linux users can get confused by all the "First steps after installing Mint" wesbites and suggestion blogs. Some of those websites include code which has the user install unknown PPAs, or download random packages. The main focus should be on security and privacy. So here are the first steps (or security steps for current users) to take when using Debian or Mint. Put the following in a script and chmod +x it. #!/bin/bash sudo ufw enable sudo ufw default deny incoming sudo ufw reject in proto udp from any to any port 5353 sudo ufw reject out proto udp from any to any port 5353 sudo ufw reject in proto udp from any to any port 5353 sudo ufw reject out proto udp from any to any port 5353 sudo -- bash -c 'echo ">>>>>>>>>>>>NOT YOURS<<<<<<<<<<<<<<<<" >> /etc/issue.net' sudo -- bash -c 'echo "net.ipv6.conf.all.disable_ipv6 = 1" >> /etc/sysctl.conf' sudo -- bash -c 'echo "net.ipv6.conf.default.disable_ipv6 = 1" >> /etc/sysctl.conf' sudo -- bash -c 'echo "net.ipv6.conf.lo.disable_ipv6 = 1" >> /etc/sysctl.conf' sudo -- bash -c 'echo "kernel.exec-shield=1" >> /etc/sysctl.conf' sudo -- bash -c 'echo "kernel.randomize_va_space=1" >> /etc/sysctl.conf' sudo -- bash -c 'echo "net.ipv4.conf.all.rp_filter=1" >> /etc/sysctl.conf' sudo -- bash -c 'echo "net.ipv4.conf.all.accept_source_route=0" >> /etc/sysctl.conf' sudo -- bash -c 'echo "net.ipv4.icmp_echo_ignore_broadcasts=1" >> /etc/sysctl.conf' sudo -- bash -c 'echo "net.ipv4.icmp_ignore_bogus_error_messages=1" >> /etc/sysctl.conf' sudo -- bash -c 'echo "net.ipv4.conf.all.log_martians = 1" >> /etc/sysctl.conf' sudo -- bash -c 'echo "​net.ipv4.tcp_syncookies = 1" >> /etc/sysctl.conf' sudo -- bash -c 'echo "​net.ipv4.tcp_max_syn_backlog = 2048" >> /etc/sysctl.conf' sudo -- bash -c 'echo "​net.ipv4.tcp_synack_retries = 2" >> /etc/sysctl.conf' sudo -- bash -c 'echo "​net.ipv4.tcp_syn_retries = 5" >> /etc/sysctl.conf' sudo -- bash -c 'echo "​net.ipv4.icmp_echo_ignore_all = 1" >> /etc/sysctl.conf' sudo sysctl -p cat /proc/sys/net/ipv6/conf/all/disable_ipv6 sudo -- bash -c 'echo "none /run/shm tmpfs defaults,ro 0 0" >> /etc/fstab' sudo dpkg-statoverride --update --add root sudo 4750 /bin/su sudo sh -c 'echo 1 > /proc/sys/kernel/dmesg_restrict' cat /proc/sys/kernel/dmesg_restrict echo "blacklist btusb" | sudo tee -a /etc/modprobe.d/bluetooth-blacklist.conf echo 'install usb-storage /bin/true' | sudo tee -a /etc/modprobe.d/blacklist-usb.conf sudo systemctl mask ctrl-alt-del.target sudo systemctl daemon-reload sudo nano /etc/default/grub sudo apt purge zeitgeist zeitgeist-core zeitgeist-datahub python-zeitgeist rhythmbox-plugin-zeitgeist geoclue geoclue-ubuntu-geoip geoip-database whoopsie thunderbird rhythmbox rhythmbox-plugins drawing hplip-data geoclue-2.0 firefox-locale-en xinetd nis yp-tools tftpd atftpd tftpd-hpa telnetd rsh-server rsh-redone-server adobe-flashplugin hplip sudo systemctl mask geoclue.service echo -e "\nHidden=true\n" | sudo tee --append /etc/xdg/autostart/tracker-extract.desktop /etc/xdg/autostart/tracker-miner-apps.desktop /etc/xdg/autostart/tracker-miner-fs.desktop /etc/xdg/autostart/tracker-miner-user-guides.desktop /etc/xdg/autostart/tracker-store.desktop > /dev/null sudo rm /var/lib/polkit-1/localauthority/10-vendor.d/geoclue-2.0.pkla sudo apt purge yelp sudo rm geoclue-where-am-i.desktop sudo apt purge xdg-desktop-portal-gtk sudo systemctl stop avahi-daemon avahi-daemon sudo systemctl disable avahi-daemon sudo apt remove avahi-autoipd sudo systemctl mask avahi-daemon