April 2018 - tor-commits - lists.torproject.org

[webwml/master] FAQ (relay section): bw shaping is covered in its own section (this section is about stability)
by hiro＠torproject.org 02 Apr '18

02 Apr '18

commit aef4bb669457c4596c5c5c14f5720878a22166f1 Author: nusenu <nusenu-github(a)riseup.net> Date: Sat Feb 10 14:40:02 2018 +0000 FAQ (relay section): bw shaping is covered in its own section (this section is about stability) --- docs/en/faq.wml | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index 4dc00320..0bd4eb5e 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -2141,16 +2141,6 @@ need to be?</a></h3> sure it's not too often, since connections using the relay when it disconnects will break. </li> - <li>Tor has built-in support for <a - href="#BandwidthShaping"> - rate limiting</a>. Further, if you have a fast - link but want to limit the number of bytes per - day (or week or month) that you donate, check out the <a - -href="#LimitTotalBandwidth"> -hibernation - feature</a>. - </li> <li>Each Tor relay has an <a href="#ExitPolicies">exit policy</a> that specifies what sort of outbound connections are allowed or refused

1 0

[webwml/master] FAQ (relay section): link to new relay guide; link to obfs4 bridge guide
by hiro＠torproject.org 02 Apr '18

02 Apr '18

commit b42016e8ae7826b5ac457ec4d9e213cca3662394 Author: nusenu <nusenu-github(a)riseup.net> Date: Sat Feb 10 16:55:34 2018 +0000 FAQ (relay section): link to new relay guide; link to obfs4 bridge guide --- docs/en/faq.wml | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index a5c3038d..d96f33c3 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -2556,7 +2556,7 @@ relay or bridge relay?</a></h3> <p><a href="<page docs/bridges>">Bridge relays</a> (or "bridges" for short) - are <a href="<page docs/tor-doc-relay>">Tor relays</a> that aren't + are <a href="<wiki>TorRelayGuide">Tor relays</a> that aren't listed in the public Tor directory. That means that ISPs or governments trying to block access to the Tor network can't simply block all bridges. @@ -2586,9 +2586,10 @@ lots of bandwidth, you should definitely run a normal relay. If you're willing to <a href="#ExitPolicies">be an exit</a>, you should definitely - run a normal relay, since we need more exits. If you can't be an - exit and only have a little bit of bandwidth, be a bridge. Thanks - for volunteering! + run an exit relay, since we need more exits. If you can't be an + exit and only have a little bit of bandwidth, setup an + <a href="<page docs/pluggable-transports>#operator">obfs4 bridge</a>. + Thanks for volunteering! </p> <hr>

1 0

[webwml/master] FAQ (relay section): new entry: Can I used IPv6 on my relay?
by hiro＠torproject.org 02 Apr '18

02 Apr '18

commit 8ba2d867a69b29b04e73c397a1a9f0e5fb171cf1 Author: nusenu <nusenu-github(a)riseup.net> Date: Sat Feb 10 17:13:09 2018 +0000 FAQ (relay section): new entry: Can I used IPv6 on my relay? --- docs/en/faq.wml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index d96f33c3..4a63ccb3 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -148,6 +148,7 @@ country) <li><a href="#WhyIsntMyRelayBeingUsedMore">Why isn't my relay being used more?</a></li> <li><a href="#IDontHaveAStaticIP">Can I run a Tor relay using a dynamic IP address?</a></li> + <li><a href="#IPv6Relay">Can I use IPv6 on my relay?</a></li> <li><a href="#PortscannedMore">Why do I get portscanned more often when I run a Tor relay?</a></li> <li><a href="#HighCapacityConnection">How can I get Tor to fully @@ -2163,6 +2164,18 @@ the program iptables (for *nix) useful. <hr> + <a id="IPv6Relay"></a> + <h3><a class="anchor" href="#IPv6Relay">Can I use IPv6 on my relay?</a></h3> + + <p> + Tor has <a href="<wiki>org/roadmaps/Tor/IPv6Features">partial</a> support for IPv6 and we + encourage every relay operator to <a href="<wiki>TorRelayGuide#IPv6">enable IPv6 functionality + </a> in their torrc configuration files when IPv6 connectivity is available. + For the time being Tor will require IPv4 addresses on relays, you can not run a Tor relay + on a host with IPv6 addresses only. + </p> + + <hr> <a id="PortscannedMore"></a> <h3><a class="anchor" href="#PortscannedMore">Why do I get portscanned more often when I run a Tor relay?</a></h3>

1 0

[webwml/master] FAQ (relay section): update BadExit question (wiki is obsolete, add email address)
by hiro＠torproject.org 02 Apr '18

02 Apr '18

commit 4913c11c3a1839928fe8ec53ad353a4604c9e91e Author: nusenu <nusenu-github(a)riseup.net> Date: Sat Feb 10 15:58:14 2018 +0000 FAQ (relay section): update BadExit question (wiki is obsolete, add email address) --- docs/en/faq.wml | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index 05eb799e..fa763adb 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -2454,12 +2454,10 @@ users the BadExit flag why did that happen?</a></h3> <p>If you got this flag then we either discovered a problem or suspicious - activity coming from your exit and weren't able to contact you. The reason - for most flaggings are documented on the <a - href="https://trac.torproject.org/projects/tor/wiki/doc/badRelays">bad - relays wiki</a>. Please <a - href="<page about/contact>">contact us</a> so - we can sort out the issue.</p> + activity when routing traffic through your exit and weren't able to contact you. + Please reach out to the <a href="mailto:bad-relays@lists.torproject.org">bad-relays team</a> + so we can sort out the issue. + </p> <hr>

1 0

[webwml/master] FAQ (relay section): move two questions out of the relay section
by hiro＠torproject.org 02 Apr '18

02 Apr '18

commit 6d5896ac66201bd8d640f28196c0216ef0283fa9 Author: nusenu <nusenu-github(a)riseup.net> Date: Sat Feb 10 16:37:13 2018 +0000 FAQ (relay section): move two questions out of the relay section the following two questions have been moved from the relay to the "Advanced Tor usage" section as they are more client related: I want to run my Tor client on a different computer than my applications. Can I install Tor on a central server, and have my clients connect to it? --- docs/en/faq.wml | 156 ++++++++++++++++++++++++++++---------------------------- 1 file changed, 78 insertions(+), 78 deletions(-) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index fa763adb..a5c3038d 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -132,6 +132,10 @@ country) worry?</a></li> <li><a href="#SocksAndDNS">How do I check if my application that uses SOCKS is leaking DNS requests?</a></li> + <li><a href="#TorClientOnADifferentComputerThanMyApplications">I want to run my Tor client on a + different computer than my applications.</a></li> + <li><a href="#ServerClient">Can I install Tor on a central server, and + have my clients connect to it?</a></li> </ul> <a id="relay"></a> @@ -167,10 +171,6 @@ be?</a></li> Why did that happen?</a></li> <li><a href="#MyRelayRecentlyGotTheGuardFlagAndTrafficDroppedByHalf">My relay recently got the Guard flag and traffic dropped by half.</a></li> - <li><a href="#TorClientOnADifferentComputerThanMyApplications">I want to run my Tor client on a - different computer than my applications.</a></li> - <li><a href="#ServerClient">Can I install Tor on a central server, and - have my clients connect to it?</a></li> <li><a href="#JoinTheNetwork">So I can just configure a nickname and ORPort and join the network?</a></li> <li><a href="#RelayOrBridge">Should I be a normal relay or bridge @@ -2027,6 +2027,80 @@ from the source code release tor-0.2.4.16-rc is: <hr> + <a id="TorClientOnADifferentComputerThanMyApplications"></a> + <h3><a class="anchor" href="#TorClientOnADifferentComputerThanMyApplications">I + want to run my Tor client on a different computer than my applications. + </a></h3> + <p> + By default, your Tor client only listens for applications that + connect from localhost. Connections from other computers are + refused. If you want to torify applications on different computers + than the Tor client, you should edit your torrc to define + SocksListenAddress 0.0.0.0 and then restart (or hup) Tor. If you + want to get more advanced, you can configure your Tor client on a + firewall to bind to your internal IP but not your external IP. + </p> + + <hr> + + <a id="ServerClient"></a> + <h3><a class="anchor" href="#ServerClient">Can I install Tor on a + central server, and have my clients connect to it?</a></h3> + <p> + Yes. Tor can be configured as a client or a relay on another + machine, and allow other machines to be able to connect to it + for anonymity. This is most useful in an environment where many + computers want a gateway of anonymity to the rest of the world. + However, be forwarned that with this configuration, anyone within + your private network (existing between you and the Tor + client/relay) can see what traffic you are sending in clear text. + The anonymity doesn't start until you get to the Tor relay. + Because of this, if you are the controller of your domain and you + know everything's locked down, you will be OK, but this configuration + may not be suitable for large private networks where security is + key all around. + </p> + <p> +Configuration is simple, editing your torrc file's SocksListenAddress +according to the following examples: + </p> + <pre> + + #This provides local interface access only, + #needs SocksPort to be greater than 0 + SocksListenAddress 127.0.0.1 + + #This provides access to Tor on a specified interface + SocksListenAddress 192.168.x.x:9100 + + #Accept from all interfaces + SocksListenAddress 0.0.0.0:9100 + </pre> + <p> +You can state multiple listen addresses, in the case that you are +part of several networks or subnets. + </p> + <pre> + SocksListenAddress 192.168.x.x:9100 #eth0 + SocksListenAddress 10.x.x.x:9100 #eth1 + </pre> + <p> +After this, your clients on their respective networks/subnets would specify +a socks proxy with the address and port you specified SocksListenAddress +to be. + </p> + <p> +Please note that the SocksPort configuration option gives the port ONLY for +localhost (127.0.0.1). When setting up your SocksListenAddress(es), you need +to give the port with the address, as shown above. + <p> +If you are interested in forcing all outgoing data through the central Tor +client/relay, instead of the server only being an optional proxy, you may find +the program iptables (for *nix) useful. + </p> + + <hr> + <a id="RunningATorRelay"></a> <h2><a class="anchor" href="#RunningATorRelay">Running a Tor relay:</a></h2> @@ -2476,80 +2550,6 @@ users <hr> - <a id="TorClientOnADifferentComputerThanMyApplications"></a> - <h3><a class="anchor" href="#TorClientOnADifferentComputerThanMyApplications">I - want to run my Tor client on a different computer than my applications. - </a></h3> - <p> - By default, your Tor client only listens for applications that - connect from localhost. Connections from other computers are - refused. If you want to torify applications on different computers - than the Tor client, you should edit your torrc to define - SocksListenAddress 0.0.0.0 and then restart (or hup) Tor. If you - want to get more advanced, you can configure your Tor client on a - firewall to bind to your internal IP but not your external IP. - </p> - - <hr> - - <a id="ServerClient"></a> - <h3><a class="anchor" href="#ServerClient">Can I install Tor on a - central server, and have my clients connect to it?</a></h3> - <p> - Yes. Tor can be configured as a client or a relay on another - machine, and allow other machines to be able to connect to it - for anonymity. This is most useful in an environment where many - computers want a gateway of anonymity to the rest of the world. - However, be forwarned that with this configuration, anyone within - your private network (existing between you and the Tor - client/relay) can see what traffic you are sending in clear text. - The anonymity doesn't start until you get to the Tor relay. - Because of this, if you are the controller of your domain and you - know everything's locked down, you will be OK, but this configuration - may not be suitable for large private networks where security is - key all around. - </p> - <p> -Configuration is simple, editing your torrc file's SocksListenAddress -according to the following examples: - </p> - <pre> - - #This provides local interface access only, - #needs SocksPort to be greater than 0 - SocksListenAddress 127.0.0.1 - - #This provides access to Tor on a specified interface - SocksListenAddress 192.168.x.x:9100 - - #Accept from all interfaces - SocksListenAddress 0.0.0.0:9100 - </pre> - <p> -You can state multiple listen addresses, in the case that you are -part of several networks or subnets. - </p> - <pre> - SocksListenAddress 192.168.x.x:9100 #eth0 - SocksListenAddress 10.x.x.x:9100 #eth1 - </pre> - <p> -After this, your clients on their respective networks/subnets would specify -a socks proxy with the address and port you specified SocksListenAddress -to be. - </p> - <p> -Please note that the SocksPort configuration option gives the port ONLY for -localhost (127.0.0.1). When setting up your SocksListenAddress(es), you need -to give the port with the address, as shown above. - <p> -If you are interested in forcing all outgoing data through the central Tor -client/relay, instead of the server only being an optional proxy, you may find -the program iptables (for *nix) useful. - </p> - - <hr> - <a id="RelayOrBridge"></a> <h3><a class="anchor" href="#RelayOrBridge">Should I be a normal relay or bridge relay?</a></h3>

1 0

[webwml/master] fix youtube url: "This channel does not exist."
by hiro＠torproject.org 02 Apr '18

02 Apr '18

commit 397cbcdbccd7e438582ab431df5f56a4bd89f517 Author: nusenu <nusenu-github(a)riseup.net> Date: Sat Feb 10 11:25:13 2018 +0000 fix youtube url: "This channel does not exist." --- getinvolved/en/volunteer.wml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 22eeaa38..5ece2ca8 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -64,7 +64,7 @@ meetings around the world.</li> href="https://media.torproject.org/video/">Tor's Media server</a>, <a href="http://www.howcast.com/videos/90601-How-To-Circumvent-an-Internet-Proxy/">Howcast</a>, - and <a href="http://www.youtube.com/c/thetorproject">YouTube</a>.</li> + and <a href="https://www.youtube.com/user/TheTorProject">YouTube</a>.</li> <li>Create a poster around a theme, such as "Tor for Freedom!"</li> <li>Create a t-shirt design that incorporates "<a href="https://check.torproject.org/">Congratulations! You are using

1 0

[stem/master] Additionally set 'AssumeReachable 1' for integ tests (see: #25631)
by atagar＠torproject.org 02 Apr '18

02 Apr '18

commit 7a9968422bed0f00e92c584894d4a0644451deb1 Author: Dave Rolek <dmr-x(a)riseup.net> Date: Tue Mar 27 06:00:15 2018 +0000 Additionally set 'AssumeReachable 1' for integ tests (see: #25631) Per suggestion from Tim --- test/runner.py | 1 + 1 file changed, 1 insertion(+) diff --git a/test/runner.py b/test/runner.py index 09b70fe8..67d12dd7 100644 --- a/test/runner.py +++ b/test/runner.py @@ -66,6 +66,7 @@ SocksPort %i ORPort %i ExitRelay 0 PublishServerDescriptor 0 +AssumeReachable 1 DownloadExtraInfo 1 Log notice stdout Log notice file %%s/tor_log

1 0

[stem/master] Don't create + publish exit relay in integ tests (Fixes: #25631)
by atagar＠torproject.org 02 Apr '18

02 Apr '18

commit 3bba5030a3eb6312415f7fa9d4b862be46926032 Author: Dave Rolek <dmr-x(a)riseup.net> Date: Sat Mar 24 00:56:19 2018 +0000 Don't create + publish exit relay in integ tests (Fixes: #25631) --- test/runner.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/test/runner.py b/test/runner.py index 472002d5..09b70fe8 100644 --- a/test/runner.py +++ b/test/runner.py @@ -64,6 +64,8 @@ BASE_TORRC = """# configuration for stem integration tests DataDirectory %%s SocksPort %i ORPort %i +ExitRelay 0 +PublishServerDescriptor 0 DownloadExtraInfo 1 Log notice stdout Log notice file %%s/tor_log

1 0

[webwml/master] Update debian-selector.js and fix default text in page
by hiro＠torproject.org 02 Apr '18

02 Apr '18

commit 7bf85595ea1e22e2af5306c587e62234455970ba Author: hiro <hiro(a)torproject.org> Date: Mon Apr 2 18:20:56 2018 +0200 Update debian-selector.js and fix default text in page --- docs/debian-selector.js | 4 ++-- docs/en/debian.wml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/debian-selector.js b/docs/debian-selector.js index 12554c19..493fd235 100644 --- a/docs/debian-selector.js +++ b/docs/debian-selector.js @@ -132,7 +132,7 @@ function update() { package = package.split(' ')[0]; source_install = true; } - txt += "http://deb.torproject.org/torproject.org"; + txt += "https://deb.torproject.org/torproject.org"; txt += " "; txt += keys[i]; txt += " main"; @@ -140,7 +140,7 @@ function update() { target = keys[i]; txt = "deb " + txt + "\ndeb-src " + txt; if (version != 'stable') { - txt2 = "http://deb.torproject.org/torproject.org"; + txt2 = "https://deb.torproject.org/torproject.org"; txt2 += " "; txt2 += package; txt2 += "-"; diff --git a/docs/en/debian.wml b/docs/en/debian.wml index 1fe14dfa..6f86bd28 100644 --- a/docs/en/debian.wml +++ b/docs/en/debian.wml @@ -89,7 +89,7 @@ version <div id="apt-source"> <p>You need to add the following entry in <code>/etc/apt/sources.list</code> or a new file in <code>/etc/apt/sources.list.d/</code>:</p> -<blockquote><pre id="sources">deb https://deb.torproject.org/torproject.org stretch main +<blockquote><pre id="sources">deb https://deb.torproject.org/torproject.org jessie main </pre></blockquote> </div>

1 0

[webwml/master] Fix small typo
by hiro＠torproject.org 02 Apr '18

02 Apr '18

commit 4fcb5df531cc7e05eb9876d892528f0cefa19a3b Author: hiro <hiro(a)torproject.org> Date: Mon Apr 2 18:09:35 2018 +0200 Fix small typo --- docs/en/debian.wml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/en/debian.wml b/docs/en/debian.wml index b0f27fa5..1fe14dfa 100644 --- a/docs/en/debian.wml +++ b/docs/en/debian.wml @@ -93,7 +93,7 @@ version </pre></blockquote> </div> -<p>Please not that the <a href="https://packages.debian.org/stretch/apt-transport-https">apt-transport-https package</a> is required to enable the usage of 'deb https://foo distro main' lines in the /etc/apt/sources.list so that all package managers using the libapt-pkg library can access metadata and packages available in sources accessible over https (Hypertext Transfer Protocol Secure).</p> +<p>Please note that the <a href="https://packages.debian.org/stretch/apt-transport-https">apt-transport-https package</a> is required to enable the usage of 'deb https://foo distro main' lines in the /etc/apt/sources.list so that all package managers using the libapt-pkg library can access metadata and packages available in sources accessible over https (Hypertext Transfer Protocol Secure).</p> <div id="sig"> <p>Then add the gpg key used to sign the packages by running the following commands at your command prompt:</p>

1 0