January 2014 - tor-relays - lists.torproject.org

privoxy, port 8118 scans
by Mateusz Błaszczyk 20 Jan '14

20 Jan '14

Hey I am wondering if this is a coincidence but since I started the tor relay, I see a lot of TCP/8118 connections attempts on my relay's external IP. I run the offending source IPs (aggregated to /24s) through cymru's ip-to-asn decoder and here are results of only today: Bulk mode; whois.cymru.com [2014-01-19 15:16:19 +0000] 15003 | 108.177.181.0 | 108.177.180.0/22 | US | arin | 2012-03-15 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 142.91.245.0 | 142.91.240.0/21 | US | arin | 2012-06-08 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 172.240.255.0 | 172.240.0.0/16 | US | arin | 2013-04-08 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.208.16.0 | 173.208.16.0/21 | US | arin | 2009-12-17 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.208.57.0 | 173.208.56.0/22 | US | arin | 2009-12-17 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.208.85.0 | 173.208.80.0/21 | US | arin | 2009-12-17 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.12.0 | 173.234.12.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.153.0 | 173.234.152.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.235.0 | 173.234.232.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.247.0 | 173.234.244.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.33.0 | 173.234.32.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.41.0 | 173.234.40.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.60.0 | 173.234.56.0/21 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.130.0 | 23.19.128.0/22 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.50.0 | 23.19.50.0/23 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.54.0 | 23.19.52.0/22 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.67.0 | 23.19.64.0/20 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.75.0 | 23.19.64.0/20 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.89.0 | 23.19.88.0/21 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 70.32.43.0 | 70.32.43.0/24 | US | arin | 2008-07-25 | NOBIS-TECH - Nobis Technology Group, LLC 18450 | 173.231.54.0 | 173.231.0.0/18 | US | arin | 2010-03-19 | WEBNX - WebNX, Inc. 20248 | 74.82.191.0 | 74.82.176.0/20 | US | arin | 2010-01-26 | TAKE2 - Take 2 Hosting, Inc. 40676 | 216.24.204.0 | 216.24.192.0/20 | US | arin | 2010-10-14 | AS40676 - Psychz Networks 46475 | 192.169.84.0 | 192.169.80.0/20 | US | arin | 2012-11-02 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 192.169.86.0 | 192.169.80.0/20 | US | arin | 2012-11-02 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 208.115.203.0 | 208.115.192.0/18 | US | arin | 2010-01-06 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 208.115.228.0 | 208.115.192.0/18 | US | arin | 2010-01-06 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 216.245.222.0 | 216.245.192.0/19 | US | arin | 2008-01-28 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 63.143.33.0 | 63.143.32.0/19 | US | arin | 2011-10-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 63.143.36.0 | 63.143.32.0/19 | US | arin | 2011-10-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 63.143.52.0 | 63.143.32.0/19 | US | arin | 2011-10-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 64.31.43.0 | 64.31.0.0/18 | US | arin | 2010-12-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 69.162.116.0 | 69.162.64.0/18 | US | arin | 2008-06-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 69.162.74.0 | 69.162.64.0/18 | US | arin | 2008-06-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 74.63.226.0 | 74.63.192.0/18 | US | arin | 2008-08-29 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 74.63.249.0 | 74.63.192.0/18 | US | arin | 2008-08-29 | LIMESTONENETWORKS - Limestone Networks, Inc. There were almost 200k SYN packets sent for the last 15h from the 228 unique IP addresses. Would that be part of tor project? I have never run privoxy on my network and I am not really sure what the relation between tor and privoxy is? Can somebody shine some light on that? [0] https://www.team-cymru.org/Services/ip-to-asn.html Thanks, -mateusz

2 1

Re: [tor-relays] Trying Trusted Tor Traceroutes
by Sebastian Urbach 20 Jan '14

20 Jan '14

Hi, Of course there are systems still working on the task and probably there will be a few more wit a complete set of results. Considering the fact that this project is running for a few months now and based on the starting dates you can see it does not look good so far. >From what i can see you run the script with traceroute and not with scamper. That will take roughly 1 month to finish. You started yesterday and submitted the data from phase 1,2 and 7 runs from phase 3. Since you are in an early stage i would suggest stopping the script and install scamper as recommended. ETA will go down from about 30 days go 4 days ... -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman Am 20. Januar 2014 13:21:44 schrieb Konrad Neitzel <konrad(a)neitzel.de>: > Hi! > > Am 2014-01-20 12:36, schrieb Sebastian Urbach: > > > Just made a count and the sad truth is that 35 out of 167 systems in > > total completed the task ending with a regular slash24-220.scamper > > entry. Thats even worse than i expected and way more completed test > > results are necessary... > > I am just wondering: My understanding is, that the webpage also shows "work > in progress". Maybe I missed something, but on my system (idkneitzel, > 81.7.11.129) the process is still running and the results inside > Traceroute-results/ are still growing and up to date. > > And I am running a tor node on a low end system so from what I read I > wouldn't expect the job to finish the work in less than a day (just started > yesterday evening after receiving a reply from my provider). > > If there is something wrong then I am willing to do more investigations. > Right now I would expect that everything works as it should. > > With kind regards, > > Konrad > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

Numbers of circuits are fluctuating
by Jens Kubieziel 20 Jan '14

20 Jan '14

Hi, I found a question at the Q&A site which deals with circuits: <URL:http://tor.stackexchange.com/q/492/88> The guy set up a Tor relay on its DSL connection. According to the Tor logs there are some low numbers of circuits open. From time to time this number jumps up (from 8--1 circuits to 700--850). Do you also see such numbers? What can be the reason for this jump? -- Jens Kubieziel http://www.kubieziel.de

5 4

Re: [tor-relays] tor-relays Digest, Vol 36, Issue 23
by Jack Wilborn 19 Jan '14

19 Jan '14

I have an extra machine that I was hoping to configure for a Tor relay. I'm not a wizard with Linux (Debian), but if there are some more, specific instructions to ensure everything is working, I'd love to do it. My current ISP is Cox and I have about 30 MB/sec Down and about 24 MB/sec up. I understand this is wide enough. If anyone can assist please e-mail me. Thanks Jack On Sat, Jan 18, 2014 at 5:00 AM, <tor-relays-request(a)lists.torproject.org>wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. dutch operators and experience with dutch providers (Rejo Zenger) > 2. VPS ports impassable (I) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 18 Jan 2014 10:22:49 +0100 > From: Rejo Zenger <rejo(a)zenger.nl> > To: tor-relays(a)lists.torproject.org > Subject: [tor-relays] dutch operators and experience with dutch > providers > Message-ID: <20140118092249.GD24192(a)ix.home> > Content-Type: text/plain; charset="us-ascii" > > Hi, > > Are you a Dutch relay operator or do you have experience with hosting a > Tor node with a Dutch ISP? Please get in touch with me! > > I'm colaborating with a journalist from one of the leading technology > media websites on one or more stories that will describe the environment > for Dutch Tor relay operators. What are the main problems you are > facing, are Tor relays a problem to the average Dutch ISP, etc? > > > -- > Rejo Zenger . <rejo(a)zenger.nl> . 0x21DBEFD4 . <https://rejo.zenger.nl> > GPG encrypted e-mail preferred . +31.6.39642738 . @rejozenger >

4 3

Trying Trusted Tor Traceroutes
by Sebastian Urbach 19 Jan '14

19 Jan '14

Dear list members, A little addition to my mail from a few hours ago. I talked to Anupam Das who is one of the responsible people for this project. I just want to quote what he said a few hours ago because its short and precise. It has absolutely nothing to do with the fact that it guys are known as extremely lazy, errr ;-) "Well we did some preliminary analysis which my advisor Prof. Nikita Borisov presented in the 30c3 meeting. Our main conclusion was that we need more data to conclude anything for certain. Previously we had a lot of incomplete traceroutes, so hopefully we'll get some concrete results now. Once we do we'll inform all our participants :)" It would be beneficial for everybody if we all could make an effort. Thanks for your patience -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman

1 0

Trying Trusted Tor Traceroutes
by Sebastian Urbach 19 Jan '14

19 Jan '14

Dear list members, I would like to encourage you to participate in the "Trying Trusted Tor Traceroutes" project: http://web.engr.illinois.edu/~das17/tor-traceroute_v1.html#description Please consider that this project can take a bit longer, somewhere between 4-24 days. If you run a relay of any kind, youre welcome. * * * * * Important: No Bridge Relays ! * * * * * Quick and dirty manual: 1: Install scamper or use traceroute (not as useful and way slower) 2: Download, extract: https://web.engr.illinois.edu/~das17/traceroute-from-tor-relays-4493e7c2119… 3: Run traceroutes.sh, lean back and wait a few days. More details at the page mentioned above. -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman

1 0

VPS ports impassable
by I 19 Jan '14

19 Jan '14

Hej, [WARNING - if you don't want to see another Tor relay get going stop reading now.] After installing Tor on a VPS running Ubuntu 12.04.4 LTS it reports [warn] Your server (173.208.211.179:9030) has not managed to confirm that its DirPort is reachable. Please check your firewalls, ports, address,... The VPS operator is trying his best but says the ports are open and is asking others. In the meantime does anyone have anything to offer? Robert

3 5

(no subject)
by I 18 Jan '14

18 Jan '14

5 6

Re: [tor-relays] dutch operators and experience with dutch providers (Rejo Zenger)
by Jan Hendrik den Besten 18 Jan '14

18 Jan '14

Rejo, my encrypted mail tot you does not arrive. See below. Mail Administrator <Postmaster(a)chello.at> schreef: >This Message was undeliverable due to the following reason: > >Your message was not delivered because the destination computer does >not support electronic mail (SMTP). Correct any mistakes in the >address and try sending the message again. > >The following recipients did not receive this message: > > <rejo(a)zenger.nl> > > Please reply to <Postmaster(a)chello.at> > if you feel this message to be in error. > > >------------------------------------------------------------------------ > >Van: "J.H. den Besten" tor(a)janhendrik.eu> >Aan: rejo(a)zenger.nl >Verzonden: Sat Jan 18 16:57:24 CET 2014 >Onderwerp: Re: tor-relays Digest, Vol 36, Issue 23 > >-----BEGIN PGP MESSAGE----- >Version: APG v1.0.9 > >hQEMA/Nqa4fSrms4AQf7BKOj2Jv2RLYipadTb2XFLD7u1U7WgcvJl381cHUcchXZ >bv0jr3/u5gugjyieFXDhC5TQRQLMVCoqtrjP/aIRUWXmOI/X6dp90f4DLDHL0QHo >GFIcUyCkoI2ee7d3fDBi6YMrxf903gJe5w0Wy25CjwaQussqIZyK0w/lGAiFWMJs >2fx4TbJs4AAY1PAMwx8fcX034+uXMni9scml2bXYAMRDrMOXTneUg0QYAyyphGEm >GlGk2bpUKXRZQ+fAMxmKrmQdOama+dKbBPsU7RC3nonOCc9+aYPMa3XneG9OhEEx >pqRhjRUNZmGPnKw2ddk9havSpMT1CZJBonmi1j1cgIUCDAPpghcw8xmKlAEP/jCl >00awlVZsvOeQiCx1BXGQh7cKrhrWN8++qQPwN5qPRRfxKyO1YStxNzqFXvJ1UJ+c >JwK+tEqmvLfvpDO625l7ez3KsbgRXKXiapWYXTj/d6t0ZAotpUdDDNclZ6uQ1kEh >Kp1yQN5x0+bFtMMfA+MEy7R6prWhl81D8JuXEoUjcyp+wQUxxVDPOhphvYBofTWK >3etBN8vdIbaURJATBJbPA9JuslLZ8512XBNmkx21f87ZcAS24vNe8xi2YKeGw+F4 >U/KmfqNHlYc69CytSqw3hHJf4SqeEoojP3nz9tPBWvYLPX9o7h3RNWuEslPaHE29 >0tGVKiD4QHOJ3MJBTOnVoSxaBsobHP5NAddbUe4r3sAdnEKLm2ENuH7I68O/nwmE >h1QJdL+uSBhuymUcNCpQ7uPNw+fO3fQd5v7RI1FryygXOiBEt9SrmUCj/xr4Auqo >HZT4SwN56etZFS41nI0B+gmBRv8kT2HPxrXhWsKolKG9SB3dOXh4BD0W22vl1rqA >AdbpovKnx5oD6rTF3bVzcRBacacvw9KdCwwQHgojXvGkCWPLu+z+liUOogGERj2L >9Uoo5al0xrAaRt21XphtqQPuv9Kwe/tuSuxzHscX0Opx+VCa4He8hdO0Ic0WsC1B >ztFpZ2FCDJGRqyyZsAntq+skYrthrn/NsPjZDqdx0sPQAfFoteeMwSiuLynNWbGu >qTXfcVNv+2hR2A87z8v60A9EGA2T6kCy4B39Ixz/fles36fbN4AAfYwKL/095bXO >fQrG5FvVbiTUVUDFumAwnvKp7Hi31BiyKj0zgQ4aDloXy+6EzbJVrwmMbB2wMJVD >IlxVgHagk2NkvoNb9w+XU8DoJxTxryoGnUkYCWRiAmdbcgyTqMH9Zt0gftg4NewL >Np7WdohiPmZoe6TEjbieOK/UGkR7yGh4rrpHgt+dmnH0dzlkS3RD8FTjr+WKebi+ >u/3ewXUh01EadNz6fOVG8jEid2ulXsYA88JEif9lmfbZ7PDqJeCKkcUl3aPwFsKu >D8NGEU4P85/g7RRRHA3SmG4hkWJjPyCIHHMPAt5Q+FZd7xsX0sn2zXf0jQpvLnno >WgcKVEyCtILhu2IRGzGNVZUvGfFpP5Ja81E788TsHzbqYTWA5XBjX0StIjx+julq >lPHeHs4cJBO+9G/wDuThblxwImRvaDhWAduYm0qmpSLQUZlq1HsJXzLQLze68Iwb >EdipLsLRZk1nQrEbVD7lLEgwSeRSV7MnpQBptyLTqzv2ERYk/rDvPN0grqBzVCgk >JW6Uw1/oVTSJE0wo3grhmU5mFpLXkF0Yh+UYttuiAqLNbrH0kuQe+Gs50A8Zbept >jzKy02QuLxpTkRKmtaMwBdp/GA6VAby3iac5UqzPft6gGunZGjZnYKAEZ0TaP/or >qcMrebAUNjTB9+KoNWIIHp0pJS63izggp9gVxItK6j80Rpkwe374CwEexDwuKkJ1 >tWJUDES0nKd0VbRrweUibZEslpWULfjvSgWldG7NrZEQWFb/77RULvxrAb5LPVNM >1u0VeSj8OotH5/IOWNzCsF1XOdeCAxI9dsLZIgYARfK0LmqVDxAvMtVenIVjL8Jo >ryxa/gT8RTi1mBX1osYEapKXzN2l63kbsiaLVSajb9atBTuY8PflSOqUi3lD9jUd >60iVFxFw10C/DrhpDG0PwzFG1flb1ajz4nyMuPLsYP8tC2bUGVv4nato9s+zpJlN >sgS1aHzzXKTAqnLiBA0BOCLoQu7mmCUShDYwLwzPqGdRiXfmZ0X4vGDbeXq0cxE9 >/IsQv7nJlWZWHyJJaC9K1ubyjUYS7zvodFXd6nL/6w0EIZTnmZ+R+PvZkw9C0z4J >EeUIB6uNVikn2qVCylncQGIsKZuSBz+VZS0281GsM0K+Be/Mx6Q9BEDR7wSqUbx/ >tHZWtvwQwtutnd/sWGsRseHtx5pK79+sgwTDQDgxI4Jnyz2FKupyyXNNm6bzljS4 >qJbvXC+Q1rH/XD1L4zTBYqQsUQrJdpSCnCbqyTR4a+HfZNHcfsxJ4890h0WPE9cC >gGom2XoZ6LeHpMtL+RyNbL9lVVPwbPzl+Nrp1Yf7qLtBjSi0kTUh8tArJLbYMh+z >Tz7Dc4qjj35Eu+5jAV+Nv09yumfq40IfGBZnxy8KUfKMo6GcuII1xsn2RRpx0wrP >8L87xKjRi5l4UFuPhv5aMNixU6JR+VRp7XPKryfsLsac8OaxOqSoU3zeAQB67Wlu >hQ== >=rBPU >-----END PGP MESSAGE-----

2 1

dutch operators and experience with dutch providers
by Rejo Zenger 18 Jan '14

18 Jan '14

Hi, Are you a Dutch relay operator or do you have experience with hosting a Tor node with a Dutch ISP? Please get in touch with me! I'm colaborating with a journalist from one of the leading technology media websites on one or more stories that will describe the environment for Dutch Tor relay operators. What are the main problems you are facing, are Tor relays a problem to the average Dutch ISP, etc? -- Rejo Zenger . <rejo(a)zenger.nl> . 0x21DBEFD4 . <https://rejo.zenger.nl> GPG encrypted e-mail preferred . +31.6.39642738 . @rejozenger

1 0