January 2015 - tor-relays - lists.torproject.org

Average packaged cell fullness - decreasing recently
by Kees Goossens 22 Jan '15

22 Jan '15

Dear all, According to the log file of freshhumbug, the average packaged cell fullness always decreases after restarting my relay. This seems to have initiated mid/late October 2014,:-before then the packaged cell fullness was more or less constant. Whatever the measure exactly means, this doesn’t seem right. Hibernation has no impact, i.e. the fullness decreases from before to after hibernation. Could anyone comment on whether this is true but not to worry, or true and to worry, or not true (and not worry)? Graph enclosed (start=23 July 2014, end=today, running more or less all the time, apart from a little hibernation), showing the Nth ‘Averaged packaged cell fullness’ message in the logfile on the X axis and its value on the Y axis. (i.e. X axis does not exactly represent 6 hour intervals due to occasional hibernation.) The steep increases coincide with restarting the relay. Thanks. Kees

1 1

uptime and connections for my middle node relay
by Malte Ketelsen 20 Jan '15

20 Jan '15

Hi, I am running a relay about 5-6 weeks. I have read the 'lifecycle-of-a-new-relay' and I am not over the 86 days, but I still wonder me, at most, I have only inbound connections. Sometimes outbound too, but rarely. Can someone tell me why? And I have another question: Can someone tell me how many hours a day uptime is minimum requirement for a standard middle relay? I have reed many posts, but there are not a exactly answer. Sorry for my english ... greets Malte

2 2

MiB / metrics
by Sebastian Urbach 20 Jan '15

20 Jan '15

Hi, Karsten, thank you very much for your outstanding performance. I never expected that my wish/ticket would be implemented that fast ! -- Sincerely yours / Sincères salutations / M.f.G. Sebastian Urbach ----------------------------------------- Religion is fundamentally opposed to everything I hold in veneration - courage, clear thinking, honesty, fairness, and, above all, love of the truth. ----------------------------------------- Henry Louis Mencken (1880 - 1956), American journalist, essayist, magazine editor, satirist and critic.

1 0

MiB/s / metrics
by Sebastian Urbach 20 Jan '15

20 Jan '15

Hi, I opened a ticket recently with the intention to use a more common unit than MiB/s for metrics. Karsten basically agrees but is waiting for more input. If someone is interested : https://trac.torproject.org/projects/tor/ticket/14257 -- Sincerely yours / Sincères salutations / M.f.G. Sebastian Urbach ----------------------------------------- Religion is fundamentally opposed to everything I hold in veneration - courage, clear thinking, honesty, fairness, and, above all, love of the truth. ----------------------------------------- Henry Louis Mencken (1880 - 1956), American journalist, essayist, magazine editor, satirist and critic.

4 3

Mismatched fingerprints
by Patrick Scharmer 20 Jan '15

20 Jan '15

Hi, I’ve been running a bridge for over a year and noticed recently that the fingerprint shown in ARM (and that actually works when connecting to the bridge) differs from the fingerprint displayed for my bridge on both Atlas and Globe. Any thoughts on why this would happen and how to fix it? I’m assuming the fingerprint published on Atlas & Globe is the same fingerprint that will be distributed by bridges.torproject, is that correct? Apologies if this is a common question… I’ve only recently joined the mailing list and couldn’t find a way to search the archives other than browsing. Regards, -Pat

4 4

New Arris TG1672 Cable Modem, relay not reachable...help!
by Kurt Besig 19 Jan '15

19 Jan '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've been running a middle relay for nine months with great success, however yesterday my ISP, TWC, upgraded my cable modem and everything went south. Then unfortunately there was a firmware upgrade for my Asus RT-N66U router. Perfect storm, now My relay is down, DirPort[80] and ORPort[443] unreachable. The new router admin interface looks like something written in Greek to me and although I've forwarded 443 and 80 there's still no joy. After almost a year of seamless connectivity I may have forgotten some important setup fact, but other than the modem and router firmware update my setup hasn't changed same computer, same Ubuntu LTS 14.04, same Tor 0.2.5.10... Anyone familiar with this Arris TG1672 modem, Assus' latest RT-N66U firmware 3.0.0.4.376.3754, or any general help would be most appreciated.. horizons3 My old IP:76.91.226.105 New IP:108.185.28.227 dhcp -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQEcBAEBAgAGBQJUvDFDAAoJEJQqkaGlFNDPIroH/1iXuYVs/aktiL8OhsCoKUbd uarWayXPQSh6DXT+OMFSpy/qkE1kQVP3dNqwuaP9GVwxrJ7Qqr6Suhrmlak7Npel 6BvgQGcTwhsGGtI+KiS4IyVAjjkPcltXOyHCgOELeE8tBjyWsaYuoRJkI48CnZM9 GE+dWy2MXribEZ75IpCl3/qmE1vqdSU4LONtqfMNZ+buFkCp5BhQ5QkiRH+qpOBG tbEuV2CK+2smlWOnK84v0bqfgcj08iWGOOSMu3+Cwc+8j2XI4fi2qMfsbfrq9Qqp spwOhlTtafxJvgf57ul5gY5Vdo9HH5OtZYBwd+SjVGOE0f4qNgXjqRxostKRSmE= =XGLP -----END PGP SIGNATURE----- --- This email has been checked for viruses by Avast antivirus software. http://www.avast.com

5 5

How to get NAMED Flag
by webmaster 18 Jan '15

18 Jan '15

Hello people out there, whats the actually procedure to get a NAMED Flag? -- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2.0.17 (MingW32) mQENBFHMmT8BCAC0smvU7Bq1ABxAhvBRn7d4ekkk95aCE4TTQo4wy1z/rGLhQfdt dhiD+Vy61vGrsdK3ei5sW6rBvX2m8+YmBi+8AAgSiZmS0JM3Zz3cmTi5oh0D/yM8 4aDj7wQYfJyzSmYN8InAQ5eA77lwIdqG27kR9wga2szeJwCnWReta0R+7YFkpUW+ zUlf4SWcUx5SmBsaiELQpm+Qcn+fyopo12RX6YVmoNPBvN2nDXDnRhUCKGc+0xhD UrBpCHrApK6sTnMsD34ClCLTL2L1gckQ0AsQqY3PJlx3R8kIJxlmr6R3WnjPMIG0 lqrukB9PcOrHM1MZXK1gK6AtypHBN98lr8Z9ABEBAAG0KndlYm1hc3RlciA8d2Vi bWFzdGVyQGRlZmNvbi1jYy5keW5kbnMub3JnPokBPgQTAQIAKAUCUcyZPwIbIwUJ CWYBgAYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AACgkQcN1vxvRQl+0SEwf+KXjf YtiSUSVS11uqeQ/8g46NwmNa91P3toZvEd7vhLSbjnL9bi/vApzNnUTGT3VP4/NA dg9SbR4qKlSr8T+YikRMV3tiuiVq8m7g00qM9y8MIomwJTounz8VdO/aJXFSOxAK Bb6ElREADspCzr2qSZCnozWUzbd+b8owbGeRRq3e33Aa5Nlm/xDRxGDWANbaIA8q Gkibvy3vWEwrxiwsakvHGaEZnPEtlNm3M1xcmFAuyl73qzUMkLN0u9E/2igo4EB5 EdMb5Ab5hfWdljxBqJr0tsvMfSK4VkzMCbKYkTqHZIRPQnhiSBE6Yo1Q6RCl/Hht bkvU4RA0J+NkXMZljrkBDQRRzJk/AQgA0HojJnK0uhEkAnbmszYsf477DV+LD02s ZEAlLGhJlf9qYaDiPMPwaZ3nK8/PYKzPpBWfHgRQP97rLHPIVJYl3BHDa/nWeZ2b e/HzYhpX0djbK9qe6W/CTfGbXmC/y+4dDGB8dvtTAW3JILm7xEdwiWtywozEVy7V lnMK4JQvlfOh+3XO6qv71FXyuRkObvkYzqvxUYHewtvvObcVxXHP0C0O6LB44iAW 2boZVVuiHdudnyNAezJajPMUT8SnI0bwL6+0TgnHL4cKNUEPQljIrrvi+9nCkq7V uBtnsYtyoo2reoxmCbX/Z1zZsxdUcKpeJHlc5AypyN8DUJ+APJ9NnwARAQABiQEl BBgBAgAPBQJRzJk/AhsMBQkJZgGAAAoJEHDdb8b0UJftOY0H/1TChmQrJC/qzefW PK7EqFlBg3TIEXdu8JHjF42ZOgzQRfp7E2wWzEx0Y45lNXMs6Yg15hWCEDaUDF6F 5WZKNrP8xIldyR9Aw7fyKqjZ9UuKovqofHsCiaSO7nWzGM6GF3nBDNI9NcFve/wN wggyjAbohOJrJGal3N0HlG3cakqjEmjBe1gQEMC0ZPlWstb/cqqr49TNPrRmQc4P SyGffh8Xqhw94m1LDBXFEaYe7AxjNk1sPAVfO1rOdLF6GOun/UwgbhDQX/Rb9C3t AhjSgyFEiR/gfrUZ7R6SY51qOUf1lN5ZN85C/x27XoZWYlsNaH3Ei6nG+yeswBMk ZRMbezQ= =Med3 -----END PGP PUBLIC KEY BLOCK-----

2 1

weather torproject buggy?
by elrippo 17 Jan '15

17 Jan '15

Hy all, i wanted to list my relay on weather.torproject.org. When i submit, i get a 403FORBIDDEN [CSRF verification failed. Request aborted] What does that mean? Kind regards, elrippo -- We don't bubble you, we don't spoof you ;) Keep your data encrypted! Log you soon, your Admin elrippo(a)elrippoisland.net Encrypted messages are welcome. 0x84DF1F7E6AE03644 -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.11 (GNU/Linux) mQINBFH797MBEAC0Y0NeI7lmDR9szTEcWuHuRe0r/WjSRC0Nr5nXsghuMcxpJ3Dd BOBimi4hdMMK4iqPVMwNw6GpKYR3A9LHHjbYRXHUKrJmB+BaJVyzJXN5H6XvxTTb UfX+DaXAGJW/G+3cBB3qm/QaU8QGkBKfXq0DLTaTGPkGKxEAldj/8onGZhawdJs+ B92JrW+S2HDh15pIuXzSqe7eCcIOdvvwfWe0fJi2AraA7LYGpxP6GcC/b9JJpbq5 Y6DfE2Aun9ZK3iHqURyrms0Whbv1CgmUahL2MVYCsTsXwe0GwlAxxKvjXAiXuo+R 9wO5wsXvVVSVNqsk9Yqi+wYzdPKndTU0GyxSApQHroF+cxaZ8Lk0xloj18+LdCSs e5IiTSXH0MMsDdWWdHlrgk+bgDG+0Gu3ne4vMwGdKO7AhYgQW/ueMy4RnkG/nsV9 jry5BO4gGAI1Ij8KvqUzEnvJFGE3ptJogU+zazWWDUWmL3ecKb3aDRlJFnZ3kJ5h q8GolZVjpk99V+4B5WVRPXdej/p5J19tXycK/jdNmr4oC8NyUhIpe8xHELnfoB4z +rxiTx+KMnW0rY8EQg8O2ixEYt5my90IwQkxcxIxextVrqjJjYn8extc2/v8yGzI KmTEJxdADB5v/Jx4HiLHNDSfBUb8gfONCkNSTYvTcSwTjWzHOkXeE/9ZbQARAQAB tD5lbHJpcHBvIChrZWVwIHlvdXIgZGF0YSBlbmNyeXB0ZWQpIDxlbHJpcHBvQGVs cmlwcG9pc2xhbmQubmV0PokCOAQTAQIAIgUCUfv3swIbLwYLCQgHAwIGFQgCCQoL BBYCAwECHgECF4AACgkQhN8ffmrgNkT8+BAAoAXBqu4/O2Cs5FSWWZpzgScNEgq7 uHhOKeYmRfgKlOUPoYlPB1DBqdOAXSKb9OvsmyOvpoGnqijB7aAJBoyQYW/OCQgd U8L4eTCf4yRZnfFLdgskcPfN1p0Rs/yinGEooBJFtYa7mT6J0UTW2JjCLZK2AFCW oF+KBu5JICXGBXigb2ZbX1jWjxP5H1RidQw6HF5z4z34SjLWAOOeZ8B/Xfz6Fs0s IAuLu2O4HE4DI8Qu196LhSVHHgr3uMTkvN1t5nKwyjrRQztwXXk9qIomII3ydNYb BYAGdWNNMfLb1kmDwC5wQHAFvSP1aiMF3aKAY+gl2wXSGO6JqM0SteJS3dytIljI kzu0atc9HuGs/HDQgdmpAS4WU2YefEr/WieltSiAKlwuC+3wg+CONJ6TE1vgNDU/ axerttb0jq7UQb/nAp05bsrB7XH1Vs+1ON9lUPEfWRmwQcrVK5JUrUWa/4tA/UeM XvFcPFtFluGTlLewgJIqcvjPXFwpbDZprXJsMkwew/A6B6n3+0sbgf7p3QSGkVbi dwQAymTbHdYqLnbcnKZhjto3Wjw1J5QB2wuiRYlpjV3i7AWTGlqoSTOWCCV+HamQ qeFYNYAWNFx3+J/oi7xDi8t9bHVNA205equ+y2sj3G5uGJ6LSHQ8AXp9uOipUUvU 1MJN0yLXr9PIwvi5Ag0EUfv3swEQAL0+MnxHGrTjSYdfdua4SBpmytDONM1EngeY s+WyaC/760MughKbaysI/nK2LB1vnwEY7f3NM4fxBx8u2T7VBm6Ez6Fs23Bb8Rkz f97bPSdxCmg64GPHfLA9uwTIXcYS+MpI86WOf6eWY0rRpf7Y9Nl7YoUNvzOyUPqc ggdcnHce8zYv7A/WS8flZDm8tVFPsHrQDEwNMws7ZhiNnHkeZeRJrvCuB7oEVich O/ROYoA5o6NozWYQbjxe1f6Yur4Q10qgVcxVnyLFJSbg6vZSzL7KYh3Z5iBOzPHt 7cwEDrW8W4Kl2Qj8rhJ4Wxs94CAtua7IXK44sVZWQbyHcOXRikgGMZKkEZzVCQa5 KD1u1ZrcBCyuMAir0hsmS3jhCUwpiE2c3SRk8O8CgixhTcBk0X/k9ZFu3Hbi1JMB FLzs/Nq3tYAYvVivhPloSxmYBPsafYHCZM83yBNNsralXh5zjB+di90G+AMXt2PN LTcdovZuWtC0s8/jrx+zv/AA4FAGYU9OVl+YL9ybFX8gSdMEcixyzQcKfiFBjpWv 5iFrwIuDlaXMcheyrhc9aGOxfx44OXc505+VjO/1Q/8EOWlJ6UwOi6GMkj5T+RFJ MDyP0UixS7dt6wTuD5t6PRuyWWxZswgrbL9hjwGFr154Z19TWeNWc23pWtUvQJos UCxl2nFHABEBAAGJBD4EGAECAAkFAlH797MCGy4CKQkQhN8ffmrgNkTBXSAEGQEC AAYFAlH797MACgkQJEPd69lQ0evA+Q/+M7lSFlrQWiRsFqDjh+kTJc+0OEBCvnfo N2KPyXXbfc//qup55PfEygE6C60zvrlv3WE33GZ5GS5MLuDMP82b+a5Yt16NQU7L WtAg1g0S0BvazW+28TgnfO8bhbGaFeE9ccw3xLmlbwZQ3f3LtMKdwFIROiG6hvAs 9U54QYti3tv9DowRYYWpdr0Ga8RqeGNtCKc0v2opy51MpzKWjwUW0i3XlSlyY8Lj 1KT8PyznNPw32nYpmDizz+0OUJNnn/kT+GnFoR3DJnFosTOrnxFJp+N+nejMp/gW r9NM0/E7H+P53IiytBOt5/0vsOaCFGdYGhKEjmJi3dHS4Xk1ObD1mjdD1YDOlWWU 3Md6BDHd4W7Q8gT7oQfTIMLd3HzV+WNPIdocPLBaeA/tRD8Pg5CCmncAmSub4F5T An7FlnACtSOv3cIWQ0TymS42DihDaJ5d1RvNzKw+zHYdPvf471JFZR3TDhkPbLIr 9czR7kbpnXRwchgwXQn306NVWf37TgA8wpbnFTazZ38iOeqcb9oKprqnbgEdr3PN OhKSlMTkzAqf3MEi2Fyua4BADMhS3oBwCRgDTlt6wquEytpNSlZaHnyiyIgOpekF Uy5K3w8NhHqeifRPrNb/UcCbXtXz+puqIEZHMenpv6FRlTTKpdoHoVXSkp1TPMGN /VaCiLbP4Z3xEw/9EbAJJkhmmx1Qw3ueoqc4h1MmhUtIdxSZ/oA9SjwlnY++zvaZ 6w1wTS4P+OUkETNDtItdpxXMJ9qfSy9voAQc2K43WMZCCmpPJYSdqaZZNPFj+Ne8 6FNtNKuUkXREybpHwlVAXnHzInmFOOM9RAmF70r3zEmKt77W1ztBLo2o9X79gPgL u9ThgrH6Oc2k46n+9nc3joccr7miiX/bp976DNWcWdOYThiSSOCb8Zw9/Zs935i1 wUVkYTj24tmBH4H5ov9ib7RPmU21ru458RbUKG0ONAqBtAHNyXHzUnXsrke+D4VW MI06YcXSk8YeYgQ8GxgHQc+W2bb8LIbKN1hEYJ0wzM62vKR2/Oiwuf8lXutIKTuz +v7Vj1PQd66DGHsxtWRaWnr1c54JTL2wICHJYKFH4grp7864+GL/uQ1O/Z/XxVku E1JQ/AnwBGU1M1S6otwWGWVRjzEzQtxsfcCEPvV/9td3FIFQAbGTPb+48XFU+TY9 8AlcXBlDzXq7c5f8Evn/oSIsZDt63K4HNTmMGqOTl/p1aA0e4eyX76LczY06rDP5 GMSNs+AHmYgZiS4RYhRUIvS9uLXMnnDAMYst0SDl2orDUUeHBTzu0rchyknBZMGP p5wQuWQ9CFlV+dj3UYbrBwC1lTkAMXRG2vlhA0V0TZqos7A5D4VHgSUQQjE= =otlL -----END PGP PUBLIC KEY BLOCK-----

2 2

Linode, DigitalOcean
by Dave Warren 16 Jan '15

16 Jan '15

I've got a number of servers on Linode and DigitalOcean that could potentially be candidates for relays or bridges as they have a fair amount of otherwise unused resources. However, I wonder if there are enough people running non-exit nodes on these providers due to their large scale, such that more doesn't really help due to the lack of overall diversity of the network. Thoughts about whether running a few Tor relays in these environments is worthwhile? Neither is friendly enough to run exit nodes, at least as far as my purposes go. And to be clear, my goal is to utilize and share some otherwise unused resources, not to buy new servers to dedicate to Tor. While we're also debating sponsoring or operating exit nodes, they will be on dedicated servers in Tor friendly environments. -- Dave Warren http://www.hireahit.com/ http://ca.linkedin.com/in/davejwarren

2 1

Re: [tor-relays] building Tor against LibreSSL 2.1.1 fails with "undefined reference to `EVP_aes_128_ctr'" error
by teor 15 Jan '15

15 Jan '15

> Date: Fri, 21 Nov 2014 07:22:10 -0800 > From: Seth <list(a)sysfu.com> > > I'm trying to build tor-0.2.5.10 from source against LibreSSL 2.1.1 on a > FreeBSD 9.3x jail system. > > It fails with this message > > ----------------------------------- > > CC src/tools/tor-gencert.o > CCLD src/tools/tor-gencert > src/common/libor-crypto.a(aes.o): In function `aes_new_cipher': > /usr/local/src/tor-0.2.5.10/src/common/aes.c:100: undefined reference to > `EVP_aes_128_ctr' > *** [src/tools/tor-gencert] Error code 1 > > Stop in /usr/local/src/tor-0.2.5.10. > *** [all] Error code 1 > > Stop in /usr/local/src/tor-0.2.5.10. > > -------------------------------------- > > Has anyone has any luck building Tor against LibreSSL? > Yes, on OS X, but it wasn't easy, and it didn't bootstrap for me due to SSL errors. Others have had more luck, but mostly on Linux AFAIK. Do you perhaps have a system-installed OpenSSL 0.9.* which is lacking EVP_aes_128_ctr? See https://trac.torproject.org/projects/tor/ticket/13817 for a similar failure, due to the following issues: configure --with-openssl-dir= detects the wrong bin/openssl if "$OPENSSL_DIR/bin/openssl" isn't in the path before all other openssl executables. configure --enable-static-openssl requires LDFLAGS="$OPENSSL_DIR/lib":$LDFLAGS to link properly, at least on OS X. If you do run into runtime SSL errors, see this bug: https://trac.torproject.org/projects/tor/ticket/13816 teor pgp 0xABFED1AC hkp://pgp.mit.edu/ https://gist.github.com/teor2345/d033b8ce0a99adbc89c5 http://0bin.net/paste/Mu92kPyphK0bqmbA#Zvt3gzMrSCAwDN6GKsUk7Q8G-eG+Y+BLpe7w…

4 11