<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Yes, I have fail2ban installed but the attack is focused on my
ORPort 9001. Similarly, I have an external firewall but it
permits 9001 port passage.</p>
<p>Thanks for the thoughts, though, --potlatch<br>
</p>
<div class="moz-cite-prefix">On 7/31/2019 2:40 AM, TorGate wrote:<br>
</div>
<blockquote type="cite"
cite="mid:34D35ED9-6575-4252-B978-D5B17C62B86B@linux-hus.dk">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">You can install failtoban, have you a extern
firewall ?</div>
<div dir="ltr"><br>
Am 31.07.2019 um 05:14 schrieb potlatch <<a
href="mailto:potlatch@protonmail.com" moz-do-not-send="true">potlatch@protonmail.com</a>>:<br>
<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div>Hello Tor users,<br>
</div>
<div>Help me with a problem please. I have a
small exit/backup & directory VPS in Finland [1]. This
last week the
server (and Tor) have been overwhelmed with non-Tor IP
addresses. This
may be a small version of a DoS attack. I took the server
down for a
few days but when I restarted it the attack was there before
Tor users. Eventually, the load caused kernal crash.<br>
</div>
<div>I noticed this last week, that my Consensus Weight had
dropped from 5500 to 68. <br>
</div>
<div>Does anyone have an efficient way to defeat this ongoing
attack?<br>
</div>
<div>--potlatch<br>
</div>
<div><br>
</div>
<div>[1] 9B31F1F1C1554F9FFB3455911F82E818EF7C7883
TorExitFinland<br>
</div>
<div><br>
</div>
<div class="protonmail_signature_block">
<div class="protonmail_signature_block-user
protonmail_signature_block-empty"><br>
</div>
<div class="protonmail_signature_block-proton">Sent with <a
href="https://protonmail.com" target="_blank"
moz-do-not-send="true">ProtonMail</a> Secure Email.<br>
</div>
</div>
<div><br>
</div>
</div>
</blockquote>
<blockquote type="cite">
<div dir="ltr"><span>_______________________________________________</span><br>
<span>tor-relays mailing list</span><br>
<span><a href="mailto:tor-relays@lists.torproject.org"
moz-do-not-send="true">tor-relays@lists.torproject.org</a></span><br>
<span><a
href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays"
moz-do-not-send="true">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a></span><br>
</div>
</blockquote>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
tor-relays mailing list
<a class="moz-txt-link-abbreviated" href="mailto:tor-relays@lists.torproject.org">tor-relays@lists.torproject.org</a>
<a class="moz-txt-link-freetext" href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a>
</pre>
</blockquote>
<div class="moz-signature">-- <br>
1. When a distinguished but elderly scientist states that
something is possible, he is almost certainly right. When he
states that something is impossible, he is very probably wrong. 2.
The only way of discovering the limits of the possible is to
venture a little way past them into the impossible. 3. Any
sufficiently advanced technology is indistinguishable from magic.
- Arthur C. Clarke</div>
</body>
</html>