July 2011 - tor-relays - lists.torproject.org

Number of Connections Open
by Tim Sally 02 Aug '11

02 Aug '11

Hi! I'm working on a model to estimate the number of connections an OR has open as a function of the OR's bandwidth. I could really use some help confirming that my model is reasonable. Would any relay operators be willing to share the results of some variant of netstat | wc -l and the bandwidth of the relay? Thanks, Tim

8 7

stable flag
by Softail 25 Jul '11

25 Jul '11

My relay seems to gain and lose the stable flag every day for the last several days. It's been up more than a week. Is this normal? I don't recall seeing this on a previous hosting provider and I suspect there is something going on with the network. I'm thinking of setting the log level to info or debug to try to figure out what is going on. Is that a good idea? Is it likely to be informative? Thanks -- A man in chains knows he should have acted sooner... Julian Assange

3 4

possible bad exit or bad circuit
by cmeclax-sazri 24 Jul '11

24 Jul '11

jceaovh Pandora18 tornodeca I was browsing a website that I hang out on all the time, and it came up with a Privoxy forwarding failure error. I tried another website and got the same error. I restarted Privoxy; didn't fix it. I brought up Vidalia and looked at the circuits. The one listed above was first; when I attempted to view the website, it added a line with the name of the website, labeled Closed, which quickly disappeared. I closed the circuit and refreshed the website and it came up.

2 5

Strange warnings
by Klaus Layer 22 Jul '11

22 Jul '11

Hi, My relays suddenly show the following warnings: "Tried to establish rendezvous on non-OR or non-edge circuit." Is this something I should worry about? I am wondering why several of my relays shows that at nearly the same time. Thanks, Klaus

2 1

Odd activity on my rely
by George Gemelos 19 Jul '11

19 Jul '11

I'm running an exit node, yreka and have noticed as single IP address that has been connected for at least a day, probably longer, which is pushing anywhere from 3Mb to 9Mb but receives very little traffic back from my node, sub 500Kb. My traffic to this machine is going out of 443 (my ORPort) and being sent to port 50090 on the other machine. I only allow exit traffic to ports 80 and 443. So I do not think this is exit traffic. I have also checked on blutmagie and could not find the IP as a relay which would suggest that this is a TOR user and I am serving as an entry node. I have never seen such speeds for a single user. The one sided nature of the traffic and its size have my interests peaked. I just wanted to verify that this is not unusual and something that I should investigating. I did not include the IP address of the machine because I was not sure it would be in the spirit of TOR to post such information. Any feedback would be greatly appreciated.

4 8

Seeking headless TAILS (or similar)
by Steve Snyder 19 Jul '11

19 Jul '11

I'm looking for a Tor installation that boots off of read-only media and acts as a relay, sort of a TAILS but without the user-space applications. Does such a thing exist? Thanks.

2 2

control_auth_cookie problem
by mick 18 Jul '11

18 Jul '11

Hi Guys I use munin to monitor a bunch of stuff (including tor) on my servers. The long run munin stats are quite useful. I checked my stats today and noticed that there were no entries for tor on one machine going back a couple of weeks. Now I know I rebooted the machine in question about 12 days ago and I /think/ I upgraded tor at that time. Certainly the restart will have caused a regeneration of the cookie file anyway. Checking my logs, I see the following from munin: "Unable to connect to Tor ControlPort (515 Authentication failed: Wrong length on authentication cookie" and similarly in the tor log: " Got authentication cookie with wrong length (16)" Now I can see that the cookie file is 32 characters long, so I'm guessing that the file contains a control character that is screwing up the munin php plugin line "$cookie = file_get_contents($cookiepath);" Anyone else seen this before? Any ideas for fixing it? - short of restarting tor again (I've done that and I'm reluctant to keep on stopping and starting what should be a stable server), Thanks Mick --------------------------------------------------------------------- The text file for RFC 854 contains exactly 854 lines. Do you think there is any cosmic significance in this? Douglas E Comer - Internetworking with TCP/IP Volume 1 http://www.ietf.org/rfc/rfc854.txt ---------------------------------------------------------------------

2 1

DNAT question
by Softail 18 Jul '11

18 Jul '11

I'm trying to switch my ports from 9001/9030 to 443/80. The tor configuration seems straight forward. I tried /sbin/iptables --append INPUT --protocol tcp --match state --state NEW --destination a.b.c.d --dport 9001 --jump ACCEPT /sbin/iptables --append INPUT --protocol tcp --match state --state NEW --destination a.b.c.d --dport 9030 --jump ACCEPT /sbin/iptables --table nat --append PREROUTING --protocol tcp --source-port 443 --destination a.b.c.d --jump DNAT --to-destination :9001 /sbin/iptables --table nat --append PREROUTING --protocol tcp --source-port 80 --destination a.b.c.d --jump DNAT --to-destination :9030 but that doesn't seem to work. The OR and Dir ports are not reachable from the outside. I assumed that PREROUTING happened before INPUT but not really an expert on this. The firewall blocks everything else inbound to that address but the two ports I opened. Do I need to open 443/80 on the INPUT chain as well and if so do I also need to keep 9001/9030 open also? CentOS 5.6 if that matters. Thanks -- A man in chains knows he should have acted sooner... Julian Assange

2 4

How to set the path of tor control listener file?
by Klaus Layer 18 Jul '11

18 Jul '11

Hi all, I am running multiple tor instances on my relay server. All instances save the Control listener file to /var/run/tor/control. Therefore one instance overwrites the control listener file of the other. Is there a way to set the location where tor writes the control file as it can be done for PID file with parameter PidFile or authentication cookie file with parameter CookieAuthFile? Thanks, Klaus -- Klaus Layer Walldorf, Germany GPG Fingerprint: 466D 12F8 28A3 D137 A77E FC3B 271C 2D79 6F5E 94C9

2 1

Fwd: Arm 1.4.3 Release
by Damian Johnson 17 Jul '11

17 Jul '11

(especially relevant to relay operators...) Hi all. A new release of arm (http://www.atagar.com/arm/) is now available. This completes the codebase refactoring project that's been a year in the works and provides numerous performance, usability, and stability improvements... * Relay Setup Wizard Setting up a relay can be tricky for new users. In headless environments this means navigating Tor's massive, user unfriendly man page and even when Vidalia's an option it makes relatively poor exit configurations. Starting arm before Tor now provides instructions for auto-generating a good relay setup... a. Selection for what you'd like to be http://www.atagar.com/transfer/tmp/arm_wizard1.png b. Picking your relay options http://www.atagar.com/transfer/tmp/arm_wizard2.png c. Confirmation for the configuration it's making http://www.atagar.com/transfer/tmp/arm_wizard3.png * Menu Interface All of arm's capabilities are now available via a simple menu interface. http://www.atagar.com/transfer/tmp/arm_menu.png * Arm Gui Prototype Over this summer Kamran Khan has been working on a GTK frontend for arm as part of Google Summer of Code. The initial prototype is ready! http://inspirated.com/2011/06/28/summer-of-code-progress-graphs-logs-and-ac… * Performance Improvements Several arm and TorCtl performance fixes providing a 83% faster startup time, 12% lower memory usage, and instantaneous shutdown. * Improved Platform Support Vastly better support for Mac OSX. Arm has also been backported to Debian Squeeze and Ubuntu Lucid / Maverick. http://packages.debian.org/squeeze-backports/tor-arm https://bugs.launchpad.net/maverick-backports/+bug/721886 * ... etc Options for requesting a new identity, shutting down Tor, reconnecting if Tor's been restarted and many, many bugfixes. http://www.atagar.com/arm/releaseNotes.php#1.4.3 Cheers! -Damian

1 0