<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">My bad. Never seen this before. I there a good reason for the <span style="color: rgb(51, 51, 51); font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 13px; background-color: rgb(245, 245, 245);" class="">accept 133.0.0.0/8:80 ?</span><div class=""><font color="#333333" face="Menlo, Monaco, Consolas, Courier New, monospace" size="2" class=""><span style="caret-color: rgb(51, 51, 51); background-color: rgb(245, 245, 245);" class=""><br class=""></span></font></div><div class=""><font color="#000000" class=""><span style="caret-color: rgb(0, 0, 0);" class="">niftybunny</span></font></div><div class=""><font color="#333333" face="Menlo, Monaco, Consolas, Courier New, monospace" size="2" class=""><span style="caret-color: rgb(51, 51, 51); background-color: rgb(245, 245, 245);" class=""><br class=""></span></font><div class=""><br class=""></div><div><blockquote type="cite" class=""><div class="">On 26. Mar 2020, at 15:06, <a href="mailto:gerard@bulger.co.uk" class="">gerard@bulger.co.uk</a> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">"btw, you need to have at least port 80 and 443 … port 80 is missing …"<br class=""><br class="">It there. But to a /8 area IPV4, all IPv6<br class=""><br class="">I have not changed my exit policy for years. Port 80 is there, just limited to a /8 network and all IPv6 addresses port 80 allowed.<br class="">443 all there IPv4 and IPv6<br class=""><br class="">Testing seems to be exiting OK, but badexit tag still there.<br class=""><br class=""><br class="">Gerry<br class=""><br class=""><br class="">-----Original Message-----<br class="">From: tor-relays <<a href="mailto:tor-relays-bounces@lists.torproject.org" class="">tor-relays-bounces@lists.torproject.org</a>> On Behalf Of niftybunny<br class="">Sent: 26 March 2020 12:49<br class="">To: <a href="mailto:tor-relays@lists.torproject.org" class="">tor-relays@lists.torproject.org</a><br class="">Subject: Re: [tor-relays] BadExit<br class=""><br class="">btw, you need to have at least port 80 and 443 … port 80 is missing …<br class=""><br class="">Cheers,<br class=""><br class="">niftybunny<br class=""><br class=""><br class=""><blockquote type="cite" class="">On 25. Mar 2020, at 23:28, <a href="mailto:gerard@bulger.co.uk" class="">gerard@bulger.co.uk</a> wrote:<br class=""><br class="">George<br class=""><br class="">Thanks<br class=""><br class="">My exit, still badexit, is 51AE5656C81CD417479253A6363A123A007A2233 <br class="">and I did get an email which I missed, as it is simply failing to <br class="">exit, Implying my ISP was doing something before they told me. Seems <br class="">to be exiting from my local port now.<br class=""><br class=""><br class=""><br class=""><br class=""><br class="">-----Original Message-----<br class="">From: tor-relays <<a href="mailto:tor-relays-bounces@lists.torproject.org" class="">tor-relays-bounces@lists.torproject.org</a>> On Behalf <br class="">Of Georg Koppen<br class="">Sent: 24 March 2020 18:21<br class="">To: <a href="mailto:tor-relays@lists.torproject.org" class="">tor-relays@lists.torproject.org</a><br class="">Subject: Re: [tor-relays] BadExit<br class=""><br class="">Hi!<br class=""><br class=""><a href="mailto:gerard@bulger.co.uk" class="">gerard@bulger.co.uk</a>:<br class=""><blockquote type="cite" class="">Oh the shame! Never had that tag on my exit before.<br class=""></blockquote><br class="">Sorry to hear. :(<br class=""><br class=""><blockquote type="cite" class=""><br class=""><br class="">I assume it was due to a bad boy attacking an IP, pointed out by my <br class="">ISP,<br class=""></blockquote>and<br class=""><blockquote type="cite" class="">the ISP put my server "under mitigation". I assume some filtering,<br class=""></blockquote>which<br class=""><blockquote type="cite" class="">of course would have looked bad to TOR users.<br class=""><br class=""><br class=""><br class="">I did not spot the ISP's email for 30 minutes, but then I was able to <br class="">block the offended IP. Within minutes of doing that the ISP said <br class="">attack stop and my server was removed from mitigation. However the <br class="">next day badexit tag on my exit and remains there<br class=""><br class=""><br class=""><br class="">How long does the tag last?<br class=""></blockquote><br class="">So long as the Directory Authorities assign it.<br class=""><br class=""><blockquote type="cite" class=""><br class=""><br class="">I go to my other, overseas exit, a family member, to see the tag is aslo<br class="">applied there to. Do family members get tarred with the same brush?<br class=""></blockquote><br class="">It depends on the reason for badexiting.<br class=""><br class=""><blockquote type="cite" class=""><br class=""><br class="">I have turned both into relays for the time being.<br class=""><br class=""><br class=""><br class=""><br class=""><br class="">Or have I got this wrong. Is it a DNS thing? Are no some DNS providers<br class="">causing issues forcing the tag? I am not using opendns.<br class=""></blockquote><br class="">It could be a DNS thing, I am not sure. I recently pushed a commit <br class="">that leads to some exits getting that flag. I tried to contact all the <br class="">relay operators beforehand (some did not have any ContactInfo set) but <br class="">I got almost no reply back. For details see [1].<br class=""><br class="">What's the fingerprint of your relay that got the badexit flag?<br class=""><br class="">Georg<br class=""><br class="">[1] <a href="https://trac.torproject.org/projects/tor/ticket/32864" class="">https://trac.torproject.org/projects/tor/ticket/32864</a><br class=""><br class=""><blockquote type="cite" class=""><br class=""><br class="">Gerry<br class=""><br class=""><br class=""><br class=""><br class=""><br class=""><br class=""><br class="">_______________________________________________<br class="">tor-relays mailing list<br class=""><a href="mailto:tor-relays@lists.torproject.org" class="">tor-relays@lists.torproject.org</a><br class="">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays<br class=""><br class=""></blockquote><br class=""><br class=""><br class="">_______________________________________________<br class="">tor-relays mailing list<br class=""><a href="mailto:tor-relays@lists.torproject.org" class="">tor-relays@lists.torproject.org</a><br class="">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays<br class=""></blockquote><br class=""><br class="">_______________________________________________<br class="">tor-relays mailing list<br class=""><a href="mailto:tor-relays@lists.torproject.org" class="">tor-relays@lists.torproject.org</a><br class="">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays<br class=""></div></div></blockquote></div><br class=""></div></body></html>