February 2013 - tor-relays - lists.torproject.org

Recommended specifications for 1Gbps exit
by Matt Joyce 05 Mar '13

05 Mar '13

I am wondering if anyone with experience in this area could advise me some on recommended specifications for a 1Gbps exit I think my latest once needs a package upgrade to handle it, currently seems stuck at around 100Mbps worth of traffic. Currently it has access to 3 v cores @1.33Ghz and 1GB of RAM and I think the latter might be becoming the limit instead now I had thought it was the CPU when it had just the one core but that alone hasn't helped. I am not entirely sure if tor is infact using the other cores though watching with top it is sitting at 100 or a fraction over like 104% or so. MaxCPU's is set in torrc to 4 as the OS sees 4 virtual cores but is capped to 300% by the hypervisor perhaps it should be set to 3 not sure if there is any benefit in setting to 4 I have limited experience with virtual servers but unfortunately a fully dedicated server for tor is financially out of my budget at the moment. Also, just to confirm while I'm aware it's very possible that the limitation could be bandwidth given it shares with the other VPS'es on the host I don't believe that was the case, I pulled a backup from there to another server of mine on a different AS and continent and it transferred at 250Mbps while tor was running at 100Mbps the entire time, so unless the contention is over the download which seems less likely for a server I think we should be able to get a good 300Mbps of exit capacity out of this possibly more. So can anyone can advise on recommended CPU, RAM have to consider budget but will try and meet them, also if there are any settings I should check in torrc?

5 9

[ANNOUNCE] check_tor.py: a Nagios check for Tor relays
by Jérémy Bobbio 26 Feb '13

26 Feb '13

Hi! I hereby announce the first release of check_tor.py. It is meant to be used with Nagios (or a similar tool with a compatible interface) in order to check if a bridge, entry node, middle node or exit node is working as intended. check_tor.py is a Python script that relies on Stem [1] to control a dedicated Tor instance in order to perform its checks. For more documentation, please refer to the README at: <http://anonscm.debian.org/gitweb/?p=users/lunar/check_tor.git;a=blob;f=READ…> Download through Git: $ git clone git://anonscm.debian.org/users/lunar/check_tor.git $ cd check_tor && git tag -v 0.1 Browse using gitweb at: <http://anonscm.debian.org/gitweb/?p=users/lunar/check_tor.git> check_tor.py is licensed under GPLv3+. Contributions are highly welcome. [1] https://stem.readthedocs.org/ -- Jérémy Bobbio .''`. lunar(a)debian.org : :Ⓐ : # apt-get install anarchism `. `'` `-

2 2

Google Groups Exit Policy Reject?
by Jonathan Baker-Bates 25 Feb '13

25 Feb '13

Hi All, I've been forwarded a request to block Google Groups IPs due to some abuse or various usenet groups. Is anyone else rejecting from these IPs, and should I do the same? Thanks, Jonathan

4 5

US Investigators seem to learn
by Moritz Bartl 22 Feb '13

22 Feb '13

Hi, I thought I would let you know: Our US hoster is regularly contacted by law enforcement about our exits there. Some agents ask if the traffic pattern is balanced, ie. if the same amount of traffic enters and leaves the box. I always argue that this is a good indicator for Tor traffic, and that it is bad to mix Tor traffic with other traffic for that exact reason. -- Moritz Bartl https://www.torservers.net/

7 9

Problems with Debian package and low ports
by Chris Baines 14 Feb '13

14 Feb '13

I am having some problems with tor (version 0.2.3.25-1), I get warnings when it resumes form hibernation: Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 Can anyone help?

11 11

Re: [tor-relays] Problems with Debian package and low ports (Chris Baines)
by Christian 13 Feb '13

13 Feb '13

Good night Chris, I hope I don't misunderstand your issue, but if you use hibernation, you use a kind of desktop setup, aren't you? If port forwarding running a firewall and tor on the same machine (that's hibernating) behind a normal router looks tricky by means to verify the config, see my suggestion. If my assumption is correct, you have to set port forwarding in your router, say port 443 to 9090, and then use the torrc file to let tor listen on port 9090, but to advertise port 443. This makes tor bind to a higher port than 1024 and thus not needing root privileges if you run tor as the default user debian-tor, but lets your machine be available on port 443 although hibernating might be a bad idea for a tor node. ;-) If you use a home ISP with small bandwidth, maybe you'd better be a bridge (sufficient uptime also appreciated). I hope this could help. Sincerly, christian Am Mittwoch, den 13.02.2013, 19:35 +0000 schrieb tor-relays-request(a)lists.torproject.org: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Problems with Debian package and low ports (Chris Baines) > 2. Re: Problems with Debian package and low ports (Wessel Nieboer) > 3. Re: Problems with Debian package and low ports (Nils Vogels) > 4. Re: Problems with Debian package and low ports (theo(a)caber.nl) > 5. Re: Problems with Debian package and low ports (Roman Mamedov) > 6. Re: Problems with Debian package and low ports > (Christopher Baines) > 7. Re: Problems with Debian package and low ports > (Christopher Baines) > 8. Re: Problems with Debian package and low ports (Roger Dingledine) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 13 Feb 2013 16:41:54 +0000 > From: Chris Baines <cbaines8(a)gmail.com> > To: tor-relays <tor-relays(a)lists.torproject.org> > Subject: [tor-relays] Problems with Debian package and low ports > Message-ID: > <CAGGGvRs=FYNeKX9_7Ymyn1k2r1xPL1qv11BDGVABgmyDMqA9ZQ(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > I am having some problems with tor (version 0.2.3.25-1), I get > warnings when it resumes form hibernation: > Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied > Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 > > Can anyone help? > > > ------------------------------ > > Message: 2 > Date: Wed, 13 Feb 2013 17:44:02 +0100 > From: Wessel Nieboer <weebl(a)weebl.me> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] Problems with Debian package and low ports > Message-ID: <511BC2D2.40507(a)weebl.me> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Op 13-2-2013 17:41, Chris Baines schreef: > > I am having some problems with tor (version 0.2.3.25-1), I get > > warnings when it resumes form hibernation: > > Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied > > Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 > > > > Can anyone help? > > _______________________________________________ > > tor-relays mailing list > > tor-relays(a)lists.torproject.org > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > Does it work when you've just booted your computer? > > -Wessel > > > ------------------------------ > > Message: 3 > Date: Wed, 13 Feb 2013 18:07:53 +0100 > From: Nils Vogels <bacardicoke(a)gmail.com> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] Problems with Debian package and low ports > Message-ID: > <CAEM+PCU-0xVPEA+H2cMBZCeTgJwhAcWqG7N2Ve567t_sbdrGEw(a)mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > Tor has already changed to a non-privileged user, but you are trying to > bind on ports that only root is allowed to bind on. > > Two solutions: > > 1) Run tor as root (really, a bad idea) > 2) Bind to other ports than 80 and 443. Since you are resuming, you are > unlikely to be a stable relay/exit/bridge anyway, so you can basically > choose any port you want and just use it for your own traffic only. > > On Wed, Feb 13, 2013 at 5:41 PM, Chris Baines <cbaines8(a)gmail.com> wrote: > > > I am having some problems with tor (version 0.2.3.25-1), I get > > warnings when it resumes form hibernation: > > Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied > > Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 > > > > Can anyone help? > > _______________________________________________ > > tor-relays mailing list > > tor-relays(a)lists.torproject.org > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > > > > > -- > Simple guidelines to happiness: > Work like you don't need the money, > Love like your heart has never been broken and > Dance like no one can see you. >

1 0

Re: [tor-relays] [tor-talk] Legal problems: TOR relay & Torrents in .de
by grarpamp 11 Feb '13

11 Feb '13

> I've snail-mailed them a letter based on what Moritz had posted. They > replied with a standardized letter without even commenting on my > statements. It's basically saying "Last chance to pay or we'll go to > court." > > So I'm a little unsure whether or not it's now time to actually > consult a lawyer or wait until FOX makes it's next move. I believe what some others were saying is to simply ignore any initial complaints that come in which appear to be automated or are in some way not sufficiently personalized, lacking in real data, or stamped by a court. Just because someone complains from getting emailspam or can scrape peers off a tracker could just be a courtesy or idle probe. If such first notices bother you, sure, have an initial consult with a lawyer for potential future engagement if needed. But now that you have snailmailed them, it is raised on different level. One for which some would surely say a five minute chat with a prospective lawyer is wise. Also, if other people on the list get such first notices and don't know what to do with them, redacting any identifying material and posting the remaining full text [from an anonymous account if prudent to further avoid confirmation] would let others get a sense of what is out there and offer any experience. Just saying 'I got a mail about filesharing from my node and I mailed them back' doesn't help the poster or others. Then again, we're not lawyers, consult a real one as needed.

1 0

EC2 IP vs Region & Does this matter in the Tor network?
by David Gilbert 11 Feb '13

11 Feb '13

Hello, I'm operating 6 relays in the EC2 where 4/6 claim to be located outside the US but only 1/6 show up as outside of the US based on the IP address and report on atlas (https://atlas.torproject.org/#search/relay1org, don't heckle, I'm getting an idea of pricing and boosting speed over the next 5 months). Now, I'm curious if the IP address vs region it's supposedly operating in matters at all. Will people in the middle east be less likely to connect to my Tokyo/Singapore based relays because the IP address shows its in the USA? Or any other issues? Also, if this does in fact affect the effectiveness of my relays in those regions, has anyone had experience being able to acquire an IP from Amazon for other regions? I do not have a support contract, since I'm paying for this out of my own pocket so I'm unable to contact tech support. I would be inclined to pay whatever fees it costs to get it done, if I knew exactly what it is I need to do. - David

3 4

Possible bug on Tor 0.2.4.8-alpha and 0.2.4.9-alpha
by Jon 06 Feb '13

06 Feb '13

I started the Tor alpha yesterday, and now have numerous instances of " " Bug/Attack: unexpected sendme cell from client. Closing circ." Anything to be concened about Jon

1 0

Newbie question
by Chuck Bevitt 05 Feb '13

05 Feb '13

I'm running an exit node using my home ISP (yes, I've read the warnings). My question is: what happens when my ISP changes my IPAddress? Will existing connections to my node be lost and will the node reestablish itself? Thanks, Chuck Bevitt Sent from my iPad

5 5