I would like to prevent to the best of my ability getting malware or virus when torrenting. I know there is never 100% certainty of not getting one, but i'd like to mitigate it. I'd like to ask your advice/expertise.

These are the practices I use. Please build on them if you think there is room for improvement and how.

First off, I use linux (transmission) and only download media (music, movies), no software. I know this already lowers the risks significantly since most malware are on .exe for Windows, however I am aware mp3/mp4 and mkv files can still embed malware to exploit VLC vulnerabilities and also Linux.
I use Proton VPN with kill switch in advanced settings - no internet (at all) allowed when the VPN is not connected.
I limit opening the downloaded media in the PC. After seeding for a few months, I usually transfer them into an external HDD and delete them from the PC. Media may be used in a TV/phone for viewing/listening.
I have downloaded torrent media going into a separate internal SSD which is encrypted (obviously unencrypted when torrenting). This probably doesn't do much, but I get somewhat piece of mind when I am not torrenting and the ssd is locked.
I use normally pirate bay org and get the torrents with the higher number of seeds.

I understood joining some private tracker may help, but I found it difficult to join. Any advice and recommendations are welcome!

you are viewing a single comment's thread
view the rest of the comments

[–] mangaskahn@lemmy.waynetec.us 0 points 2 days ago (1 children)

It's probably best to handle that at the firewall, host based, external, or ideally both. The only traffic allowed outbound from the torrent box should be the VPN connection. Then it doesn't matter if routing or interface binding is set up wrong.

[–] so0t8@lemmy.org 0 points 1 day ago (1 children)

The only traffic allowed outbound from the torrent box should be the VPN connection. Then it doesn’t matter if routing or interface binding is set up wrong

Thanks, how could I do this with ufw?

[–] mangaskahn@lemmy.waynetec.us 1 points 1 day ago

https://yottasrc.com/wiki/article?t=how-to-block-outgoing-traffic-to-private-networks-using-ufw-on-your-server

Stop all incoming and outgoing traffic then allow only the VPN remote port number out to the Internet.

Remember to allow inbound connections from your local network to the management ports if you need them.

Do the same on your network firewall, block all outbound traffic from the torrent box IP address then allow only the remote vpn port out.