<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
<br>> Date: Tue, 23 Mar 2010 12:48:08 +0100<br>> From: marco@predicatori.it<br>> To: or-talk@freehaven.net<br>> Subject: BIND down, weird IPs pop up on tor.log<br>> <br>> Hi, something really weird has happened to my tor node.<br>> I was restarting BIND, wich serves as dns in my LAN, on another machine.<br>> <br>> Around the same time I found these two lines in /var/log/tor/tor.log:<br>> <br>> Mar 22 10:29:18.806 [notice] Your IP address seems to have changed<br>> to 182.219.88.104. Updating.<br>> Mar 22 10:29:18.832 [notice] Your IP address seems to have changed<br>> to 182.219.55.216. Updating.<br>> <br>> I wonder where these IPs came from, and how this could be related to<br>> BIND being down at the very moment.<br>> <br>> $whois says that those are IPs from Down Under, but I'm almost<br>> exactly at the other side of the world. Moreover, I can't see any<br>> line later on saying that I went back to my real IP.<br>> <br>> Everything seems to be working normally.<br>> <br>> Thanks a lot.<br>> <br><br>I assume you have a fixed IP and an Address line in your torrc?<br>Would restarting BIND make Tor try to guess its IP? In that case you could have triggered the bug in 0.2.1.23/24 which gave some of us with dynamic IPs severe problems - the IP guessed was random contents of memory changing every few seconds. It's fixed in 0.2.1.25 (a<font style="" color="#000000">n 0.2.2.10 alpha </font>I'm told).<br>Just a thought - others know the workings better.<br>GD<br> <br /><hr />Hotmail is redefining busy with tools for the New Busy. Get more from your inbox. <a href='http://www.windowslive.com/campaign/thenewbusy?ocid=PID27925::T:WLMTAGL:ON:WL:en-US:WM_HMP:032010_2' target='_new'>Sign up now.</a></body>
</html>