May 2012 - tor-relays - lists.torproject.org

case law on for exit nodes
by Rejo Zenger 28 May '12

28 May '12

Hi, Who knows about cases where the owner of Tor exit node was prosecuted or taken to court for information that was up- or downloaded using his/her Tor node? Basically, I'm looking for case law on running Tor exit-nodes. I am especially interested in case law from countries in Europe, but other examples are most welcome as well. If there is an interesting set of verdicts, I'll compile a summary and I'll share it with this list. Thanks for your help! -- Rejo Zenger . <rejo(a)zenger.nl> . 0x21DBEFD4 . <https://rejo.zenger.nl> GPG encrypted e-mail preferred . +31.6.39642738 . @rejozenger

13 25

Re: [tor-relays] tuning MaxAdvertisedBandwidth for CPU
by Scott Bennett 27 May '12

27 May '12

On Thu, 24 May 2012 13:13:56 -0400 micah anderson <micah(a)riseup.net> wrote: >i've got an exit node that is doing a fair bit of bandwidth, but I think it is CPU bound at this point because I am >getting these: > >Your computer is too slow to handle this many circuit creation requests! Please consider using the >MaxAdvertisedBandwidth config option > >i'm wondering what I should set the MaxAdvertisedBandwidth to if I am averaging this type of traffic: >http://torstatus.blutmagie.de/router_detail.php?FP=131b60b9afe6aea60042132d… > >it seems from the graphs, there are some clear plateaus at around >5100000, but I figured that folks here might have some suggestions that >are better than just setting MaxAdvertisedBandwidth just to that number Before you mess around with MaxAdvertisedBandwidth, which really doesn't work as advertised in the man page, try just adding this to your torrc file: MaxOnionsPending 250 That should take care of the occasional moments when the onion skin queue overflows. Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at cs.niu.edu * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************

1 0

New contact info for guard node Austrina
by Samuel Whited 26 May '12

26 May '12

Dear relay operators / users: I operate the guard node Austrina (fp: CA54 C9F2 AA56 FE26 D7A1 6F26 93F6 5385 E85E 2D75) and have recently updated my public key. Any sensitive communications should now use public key 0xEC2C9934 (fp: F259 8DED 56ED E408 FD41 484B FB39 BCF7 EC2C 9934) available from pgp.mit.edu. Please update your keystores, and verify that the new key is cross-signed with the old one (0x0DBB515F). Verification can also be performed via DNS — `dig +short sam._pka.samwhited.com TXT` should give the same fingerprint as above and provide an alternate download location. Contact info on the node should update shortly. Thanks, Sam -- Sam Whited pub 4096R/EC2C9934 SamWhited.com sam(a)samwhited.com 404.492.6008

1 0

tuning MaxAdvertisedBandwidth for CPU
by micah anderson 26 May '12

26 May '12

i've got an exit node that is doing a fair bit of bandwidth, but I think it is CPU bound at this point because I am getting these: Your computer is too slow to handle this many circuit creation requests! Please consider using the MaxAdvertisedBandwidth config option i'm wondering what I should set the MaxAdvertisedBandwidth to if I am averaging this type of traffic: http://torstatus.blutmagie.de/router_detail.php?FP=131b60b9afe6aea60042132d… it seems from the graphs, there are some clear plateaus at around 5100000, but I figured that folks here might have some suggestions that are better than just setting MaxAdvertisedBandwidth just to that number thanks! micah --

3 3

too many abuse reports
by mick 23 May '12

23 May '12

Hi I have today, reluctantly, switched my node torofotheworld.aibohphobia.org from an exit node to relay only. My ISP has stayed faithful over several abuse reports in the past, but this week following two more in quick sucession (from brazilian government services by the look of it) they have asked that I shut down the exit policy. Rather than lose the node entirely, I have agreed. Some bozo has been using sqlmap to scan servers through tor. Mick --------------------------------------------------------------------- blog: baldric.net fingerprint: E8D2 8882 F7AE DEB7 B2AA 9407 B9EA 82CC 1092 7423 ---------------------------------------------------------------------

10 19

Configuring a Tor relay to *not* accept torrent traffic
by Red Rover 20 May '12

20 May '12

Hi there, :-) I am running a Tor relay on a VPS. How do I configure it to NOT accept torrent traffic? I have just received an abuse report from my hosting company. All the best, Redrover

3 4

reg : closing circuits and corresponding TLS connections when application terminates
by Sambuddho Chakravarty 19 May '12

19 May '12

Hi all I am playing around with an experimental setup of a private Tor network and I am using the control protocol to setup custom circuits. Before establishing the custom circuits on the Tor client , I set the following options: __DisablePredictedCircuits:1 MaxOnionsPending : 1 newcircuitperiod : 999999999 maxcircuitdirtiness : 999999999 CircuitStreamTimeout : 999999999 CircuitIdleTimeout : 999999999 Thereafter, I turn off existing circuits on the client and establish my own circuit using nodes in my private Tor network. Then the client communicates to a server via this circuit. When the client-server communication ends, the circuit closes by itself. Thereafter, in sometime the corresponding OP-OR connections also close. Is there a way to keep the circuit and/or OP-OR connections alive long after the client-server communication has terminated ? Secondly, I don't see all TLS connections corresponding to the requested circuit in all the relays. Eg. I am using thee hosts -- A, B and C for the private network where, A runs two directory authorities and an OR, while B and C run only ORs. The Tor client of my setup establishes circuit through A, B and C using the above configuration parameters. 'getinfo' reports that the requested circuit has been established but I only see TLS connection betwen A and C..is there a reason why this is the case. Also, in my network, C has no exit policies, while A and B have 'reject *:*' exit policies (just to make sure that all TCP connections exit via C). Thanks Sambuddho

1 0

If you're using OpenSSL 1.0.1, upgrade to 1.0.1c
by Nick Mathewson 10 May '12

10 May '12

Hi, all! If you are using any version of openssl 1.0.1, 1.0.1a, or 1.0.1b, you should know that it's affected by a recent security advisory: https://www.openssl.org/news/secadv_20120510.txt If I am reading the diffs for this bug right, it looks like it would attacker to crash a server remotely. To avoid that, I'd recommend that all Tor nodes running any version of OpenSSL 1.0.1 should upgrade to 1.0.1c. Non-1.0.1 version of OpenSSL have this bug in their DTLS implementations, but Tor doesn't use DTLS. We'll try to get new packages out soon. yrs, -- Nick

1 0

Verizon Abuse Notice from Limited relay
by Michael Millspaugh 10 May '12

10 May '12

Hey all - I've been running a relay here for about 2-3 years now, with limited problems, especially since I switched to the more restrictive reduced exit policy (only allowing a few ports). However, I just received this today, which is new and alarming. I've replied with the boilerplate, but I'm worried as I've never heard from verizon since I went reduced, and they are the fastest and most reliable ISP (fiber to the home) in my part of the states. Here's the message, truncated: On 05-09-2011, your account was reported to have been used in an attempt to gain unauthorized access to another system, or to transmit malicious traffic to another Internet user. It is possible your system may have been infected by a virus or a botnet that is causing this action. Report and/or Logs: Timestamp: 2012-05-09 11:28:55 (GMT) Alert: COSED [CSG-GOP-009] SCAN Sqlmap SQL Injection Scan Source: 96.242.209.159 (49608) Destination: 200.189.113.50 (80) Content: LL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,% 20NULL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,% 20NULL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,% 20NULL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,%20NULL,% 20NULL,%20NULL,%20NULL--%20%20AND%20%27tysA%27%3D%27tysA& codigo=09590039044&orgcom=116100&serie=E000874295&tipo= DEFESA%20PREVIA&result=INDEFERIDO&motivo=015&auto=116100-E000874295 HTTP/1.1 Accept-Encoding: identity Accept-Language: en-us,en;q=0.5 Connection: close Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 User-Agent: sqlmap/1.0-dev (r4997) (http://www.sqlmap.org) Accept-Charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: celepar7.pr.gov.br Pragma: no-cache Cache-Control: no-cache,no-store -- TERMS OF USE. By reading this e-mail, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, terms-of-use, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies ("BOGUS AGREEMENTS") that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

3 2

bridge usage summary in vidalia bridge bundle
by eliaz 10 May '12

10 May '12

When I installed Vidalia/Tor from vidalia-bridge-bundle-0.2.2.35-0.2.17, the Bridge Usage Summary the program never appeared. This turned out to be because by default the installed program points to geiop at AppData\Roaming\tor\ . This is incorrect, the file is in AppData\Local\Tor\ . Writing GeoIPFile C:\...\...\AppData\Local\Tor\geoip into torrc fixes this and now the Bridge Usage Summary appears. I don't know if this is just a glitch of my machine (Vista x 64) or if the code needs to be corrected, but I thought I'd report it. By default the bridge bundle places files in three separate folders in AppData\Local\ and Appdata\Roaming\ . Collecting these in one place would make it a bit easier for the user to reconfigure if necessary. - eliaz ---- gpg: 0xE498E90D

1 0