Thanks for keeping us updated. If you ever need money for legal fees, a support campaign, or anything like that: let me know. I can round up a lot of assistance through BinaryFreedom and the Anarchist Black Cross.<br>Comrade Ringo Kamens<br>
Armed Division, 35th Parallel<br><br><div class="gmail_quote">On Feb 20, 2008 11:22 AM, Tom Hek <<a href="mailto:tomtorexitnode@gmail.com">tomtorexitnode@gmail.com</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
-----BEGIN PGP SIGNED MESSAGE-----<br>Hash: SHA1<br><br>Hello fellow Tor relay admins,<br><br>I run several Tor relays on residential DSL connections. This morning my<br>dad called me, telling me that my ISP had disconnected us from the<br>
Internet because of a Trojan running on my systems (I wasn't at home at<br>that moment ;)). They had received a abuse complainant that one of my<br>boxes on this DSL connection was on a botnet.<br><br>I checked the timestamp of the log they sended to me with the uptime of<br>
the computers. Only the computer that was running a Tor node was online.<br>It was pretty obvious that the botnet connections were coming from this<br>box. The box was clean, had no rootkits installed or other malicious<br>
software, so it was Tor, relaying a connection for a bot.<br><br>My ISP didn't knew what Tor was and asked if "that Tor" logged the<br>connections that were running through it. I told them Tor was an<br>anonymity system so it doesn't keep any logs of the traffic that's going<br>
through it. They were confused, they told me that every decent Tor relay<br>keeps a log of the connections running through it.<br><br>I'm living in The Netherlands, running this Tor node on the ISP XS4ALL.<br>XS4ALL is one of the ISP's with the most knowledge of the internet and<br>
the things happening on the internet. I'm pretty shocked that they<br>didn't knew about Tor. I want to alert all the Tor relay admins that are<br>running Tor nodes on a connection from XS4ALL to be prepared to get<br>
disconnected, because they think there is a trojan or rootkit running on<br>your system..<br><br>XS4ALL restored the DSL line but I had to promise that it wouldn't<br>happen again..<br><br>Tom Hek<br>-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1.4.8 (Darwin)<br>Comment: Using GnuPG with Mozilla - <a href="http://enigmail.mozdev.org" target="_blank">http://enigmail.mozdev.org</a><br><br>iEYEARECAAYFAke8U7wACgkQStmJ9+mkUHNdigCdGxiIcOqMjD2jThp03KmlVP8x<br>
s0YAnRRECJrxX/XiGIrg/fJpiadsYYKQ<br>=n7vE<br>-----END PGP SIGNATURE-----<br></blockquote></div><br>