October 2020 - tor-onions - lists.torproject.org

Onion Service Monitoring
by shadow 16 Aug '21

16 Aug '21

Dear fellow Onion Service operators, I'm curios how you monitor the availability of your onion services? I implemented a solution with icinga2 check commands. It basically queries the onion service via torsocks and check_tcp command [1]. > > object CheckCommand "check_tor_onion" { > command = [ "torsocks", PluginDir + "/check_tcp" ] > timeout = 6m > arguments = { > "-H" = "$hostname$" > "-p" = "$port$" > "-t" = "$timeout$" > } > } This solution is kind of flaky and produces a lot of mail noise, even if I run it with large timeout value (360s), check attempts and retry intervals. Recently I came across the tool called hsprober [2], which looks like a more compelling option. though it requires a prometheus setup. Since it is a network, where connections constantly looses connections, I would like to know how you treat this flakyness. Regardless of which software stack you use, I'm interested in your concept for monitoring your onion services from the outside (user side) and from the inside (server side). And also which tools do you use. Thank you for any answers and opinions. Have a happy new year. shadow [1] - https://www.monitoring-plugins.org/doc/man/check_tcp.html [2] - https://git.autistici.org/ale/hsprober -- best regards | viele Gruesse, shadow(a)systemli.org receive my key: gpg --keyserver zimmermann.mayfirst.org --recv-keys 0x5C6B6ED4248C1F32

7 11

The problem of finding hidden Tor service after server restart
by Mariusz Otlewski 01 Feb '21

01 Feb '21

Hi All, I have several Raspberry Pi with hidden Tor service - I use this to connect to Raspberry over ssh. It works very well. I noticed that after restarting the raspberry, I have to wait a while for the hidden service to be found in the Tor network again. It's okay if I wait a minute, but sometimes I have to wait 5, 10 or even 15 minutes before the .onion address is found in the Tor network and I can connect to it. While waiting, I have a message in TorBrowser: *Onionsite Not Found*, in Torify: *Host unreachable* So I have a few questions. What determines the time after which I can find a hidden service on the Tor? Is it possible somehow to force a faster propagation of the availability of .onion address on the network? I've done a lot of testing but it looks very random. Could you please help clarify this point? Best Regards Manieck

2 2

Possible Tor network attack?
by 0xf2＠secmail.pro 17 Oct '20

17 Oct '20

Some onionsites are returning 0xF2 errorcode but their servers are online. Is the middle node blocking Tor's description request? Details: 0xF2 — Introduction failed, which means that the descriptor was found but the service is no longer connected to the introduction point. It is likely that the service has changed its descriptor or that it is not running. PoC: foreach lists in OnionServerLists.txt: do code := query OnionURL if code ne 200 log fi endfor One of those URL: http://zkyo47fhjhfstn3a2bnaj3ir5rcv7f6vo3cuktpjpiw2mxfjqakqipyd.onion/ Try to open above example URL on Tor Browser 10 per 2 hours.

1 0