I'm just learning how to use tor, I'm solving my doubts by searching for information on the internet. I love looking for information, but I can't find much about it. The only two ways I've managed to change the guard node is by uninstalling the service from my Debian machine and reinstalling it (replacing my Keys and Hostname to keep the domain) or without being so drastic I discovered that by stopping the service, deleting the "state" file and the ones that put "cached" in the same directory /var/lib/tor, when starting the service again it selects a different guard node. Then I said to myself... fuck! it's the "state" file where some "stories" of connections and values appear that I have no idea what they mean but at the end of the file a list appears with a lot of values that I don't understand but... a value appears that puts "nickname" and corresponds with nickname that appears in the "relay search" page of Tor once my connection with a netstat has been bought to see the IP of the node that was assigned to me... mmm interesting. Once I examined more deeply I understood all the values that were reflected, which are those that identify each node within the list created. I deleted the file 3 or 4 times until I got one that I thought was more secure, with an updated version and that was seen for the first time at least 1 year ago, I also preferred that it was a node without family this is my intuition but I do not know if it is really better or worse. I feel more confident with a solitary node (am I wrong?).
My question is directly like this: Can I edit the "state" file to put in the nodes I want?And how do I select which of the nodes in the list for the connection as the guard. And what should I do with the part that says "CircuitBuildTimeBin" and the numerical values that follow? My intuition tells me that nothing that is self-generated by TOR
And regarding the UseEntryGuards key, looking for information there are those who say that putting it in 1 is safer and there are those who say that putting it in 0 is safer. What is better?
The truth is that you can hardly find information about a node change on a hidden service. It's as if it doesn't matter and it's only important to configure the nodes in the browser. But if you are assigned a node with a very old version or a node that takes 15 days since it was first seen, it is not to be trusted very much. I checked with a netstat that the node was assigned to me several times on a trial basis, checking the ip of the saved node on Tor's "relay search" page, and several times the node assigned to me came up with a warning flag that it was untrustworthy. In Tails I can change the service's guard node by editing the torrc file in /etc/tor , so I've noticed it works differently since it also changes the browser node. But in Debian this doesn't work. If I put the EntryNode key in /etc/tor torrc file in Debian the service does not run, it gives an error. EntryNode only applies to the browser configuration as far as I have observed.
And another question I have, in the hidden service I can select the intermediate node to be used for client connections to my hidden service. Or that is predetermined by the client?
Translated with www.DeepL.com/Translator (free version)