<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">Hi,</span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);"><br></span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">I didn't get your original email, it appears my spam filter is eating all your emails.</span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">(And a few other emails.)</span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);"><br></span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">At 12:25 5/18/2018 -0400, starlight.2017q4 at <a href="http://binnacle.cx">binnacle.cx</a> wrote:</span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">>Lately seeing escalating abuse traffic on the relay dirport, now up to 20k rotating source IP addresses per week.</span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">></span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">>The simple solution is to disable dirport, but the relay is a fallback directory and I don't want to make a change that will negatively affect the relay's ability to function as such. Would </span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">>disabling dirport be a problem?</span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);"><br></span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">All supported Tor clients use the ORPort.</span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">They won't notice if you remove the DirPort.</span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);"><br></span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">>also:</span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">></span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">>can a non-advertised dirport be left configured for local-system use while the public advertised dirport is disabled?</span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);"><br></span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;">This config doesn't work, and that's a bug:</p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><a href="https://trac.torproject.org/projects/tor/ticket/26136">https://trac.torproject.org/projects/tor/ticket/26136</a></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);"><br></span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">>does a command utility or method exist for querying dirport documents via tunnelled-dir-server? including miscellanous documents such as</span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">></span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">>/tor/status-vote/current/consensus.z</span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;">…</p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><br></p><p style="margin: 0px; font-stretch: normal; line-height: normal;">Stem master supports ORPort endpoints in <font face="UICTFontTextStyleTallBody"><span style="background-color: rgba(255, 255, 255, 0);"><tt class="descclassname">stem.descriptor.remote.</tt><tt class="descname" style="font-weight: bold;">Query</tt></span></font> requests:</p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><a href="https://stem.torproject.org/change_log.html">https://stem.torproject.org/change_log.html</a></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><br></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><span style="background-color: rgba(255, 255, 255, 0);">There might not be convenience functions for some of the document types you listed, so you'll need to pass their paths in the resource argument. You might also want to avoid compression locally by dropping the ".z".</span></p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><br></p><p style="margin: 0px; font-stretch: normal; line-height: normal;">There don't seem to be any examples of ORPort endpoints in the Stem repository. I think Dave plans to add some more documentation as part of Tor Summer of Privacy.</p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><br></p><p style="margin: 0px; font-stretch: normal; line-height: normal;">T</p><p style="margin: 0px; font-stretch: normal; line-height: normal;"><br></p><div></div></body></html>