December 2015 - tor-relays - lists.torproject.org

problem with new and old exit relays
by Larry Brandt 01 Jan '16

01 Jan '16

Recently I have been receiving warnings on notices.log shown below. Today I started a new exit relay and immediately received a similar message. Is this familiar to anyone? What's my problem? Dec 31 03:26:35.000 [warn] Malformed IP "???" in address pattern; rejecting. Dec 31 03:26:35.000 [warn] Couldn't parse line "[???]:*". Dropping Dec 31 03:26:35.000 [warn] Malformed policy 'reject [???]:*'. Discarding entire policy list. Dec 31 03:26:35.000 [warn] append_exit_policy_string(): Bug: Unable to parse internally generated policy reject [???]:* (on Tor 0.2.7.6 ) L Brandt

2 1

Problem starting tor after upgrading to ubuntu 15.10 / tor 0.2.7.6
by James Moore 31 Dec '15

31 Dec '15

Hello all, I've been running two exits for quote some time now and today I decided to update my OS and tor version but it didn't go too well. I was updating from ubuntu 15.04 / 0.2.6.10 to 15.10 / 0.2.7.6. I'm using the apt feed from deb http://deb.torproject.org/torproject.org wily main It appears that something about the AppArmor configuration is incorrect but I don't know enough about systemd/apparmor to properly diagnose it. Here are some log snippets: http://pastebin.com/8jzEiz3T It seems to come down to this tor(a)default.service: Failed at step EXEC spawning /usr/bin/tor: Operation not permitted I discovered that commenting out the Hardening section of /lib/systemd/system/tor(a)default.service get's it working again but I'd prefer not to run out-of-band configuration files. Can anyone shed light on this problem? I'm happy to provide more info. James

1 0

tor hidden services & SSL EV certificate
by Benoit Chesneau 31 Dec '15

31 Dec '15

I was at the talk this afternoon at the 32c3 and <i am wondering where can get a certificate for a .onion. Any service to suggest? Also where I should see to configure it correctly? - benoit

9 14

Tor Relay Meetup at 32c3 moved to 18:00
by Moritz Bartl 31 Dec '15

31 Dec '15

Sorry, due to some scheduling conflicts the meetup had to be moved to day 2 18:00. https://events.ccc.de/congress/2015/wiki/Session:Tor_Relay_Operators_Meetup Starts at 2015/12/28 18:00 Ends at 2015/12/28 20:00 Location Hall 13 See you! -- Moritz Bartl https://www.torservers.net/

2 1

'bug' bounty for weaknesses in Tor announced
by I 31 Dec '15

31 Dec '15

2 1

Delete
by Terry Mitchell 30 Dec '15

30 Dec '15

Please delete me from this list!! I probably should never have joined. Many thanks T.N.Mitchell -- T.N.Mitchell Binixica 195 07712 Mahon Menorca Spain Tel. 0034 971 153312 Mobile 0034 971153312

4 3

Sustained large spike in outbound traffic - what might be going on?
by David Tomic 29 Dec '15

29 Dec '15

Hello everyone, I noticed something a little bit "odd" on one of my exit relays recently, and I just wanted to ask whether anybody might be able to account for what was actually happening, and whether it's likely to warrant any further investigation? TLDR; I noticed a fairly significant spike - in excess of 30MB/s (yes, megabytes) - of outbound traffic compared to inbound. http://s2.postimg.org/cvfzqvrsp/graph.png It persisted steadily for just over an hour, until I noticed what was going on and restarted Tor (not the whole server, only Tor), at which point my traffic appeared to return to normal again. I have this relay running a a dedicated machine, with multiple physical NICs, and the ONLY thing which should be touching this NIC is my Tor traffic. Thoughts?

4 6

firefox display issue at https://globe.torproject.org
by Toralf Förster 21 Dec '15

21 Dec '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 This is the second time in a row that I suddenly can't see any longer anything on that side using my current ff profile. With an emptied/new profile it works well. B/c it happens now again I do wonder about the culprit. - -- Toralf, pgp: C4EACDDE 0076E94E -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iF4EAREIAAYFAlZ4Zy8ACgkQxOrN3gB26U418AD/ZXdK/zMvVpJZuAnGeUOlbiKh fk6JTrg/Kfdlnzd3N1EBAI7YERw1W6dG9x5uWR/RQO5Kg4ZhbV8+KvUL4txGnAnE =2DqN -----END PGP SIGNATURE-----

1 0

Very unbalanced inbound/outbound connections
by Jannis Wiese 21 Dec '15

21 Dec '15

Hi operators, for a couple of days, I see a little bit more than twice as much inbound than outbound connections on my (non-exit, non-guard) relay [0]. I have no real concern about this but I want to explain it to myself somehow. As my relay has the HSDir flag, I started looking at the statistics: The graph for relays with HSDir flags went down by approx. 500 relays in the past days [1], but that’s pretty much traceable to a lot of relays updating from Tor 0.2.6.x to 0.2.7.x (there’s a similar behaviour around Nov 23rd [2] where the updates started as well as around June 08th [3] where updates from 0.2.5.x to 0.2.6.x started). On the other hand, the number of HSDir flags was fluctuating quite a lot looking at the year up to now [4] which never had this effect on my relay. After all, looking at the graphs in atlas (as well in arm) shows no significant (= something like twice as much) difference between the inbound and outbound traffic - so I’m scratching my head now. Another open question would be if HSDir connections are considered as in- or outbound. Up to now, I held the HSDir flag responsible for the slightly higher outbound traffic… So, again: Still no real concern from my side (as my relay is running fine - if it would be an attack, I would be able to feel that, right?), but I would like to understand what’s going on. :-) Maybe one of you here has an idea about this or experienced something similar. To all of you an early “happy holidays”! Cheers, Jannis [0] https://atlas.torproject.org/#details/8827944C4BDCBDAC9079803F47823403C11A9… [1] https://metrics.torproject.org/relayflags.html?graph=relayflags&start=2015-… [2] https://metrics.torproject.org/relayflags.html?graph=relayflags&start=2015-… [3] https://metrics.torproject.org/relayflags.html?graph=relayflags&start=2015-… [4] https://metrics.torproject.org/relayflags.html?graph=relayflags&start=2015-…

2 2

Allow user to provide feedback?
by Eric Hocking 21 Dec '15

21 Dec '15

Would it be possible for there to be a way for users to provide feedback on the current tor relay/server they are using? Ex: users submit feedback such as let's say "relay is slow" when another user uses the proxy, they could see the user provided feedback of the relay

2 1