September 2015 - tor-relays - lists.torproject.org

Bots, love 'em or hate 'em?
by starlight.2015q3＠binnacle.cx 08 Sep '15

08 Sep '15

My relay says it receives about 50k v1/v2/v3 connections each day to the 60k v4 connections that come in. "Entry-ips" says it has about 35k guard- clients. Blutmagie says there are no pre-0.2.4 relays talking anything other than v4. So I'm left thinking that 95% or more of the bandwidth consumption and client count is from crusty old botnet bots running ancient versions of the Tor daemon. But all that bot traffic creates a lot of statistical "background noise," and so may be providing a service in making it more difficult for advanced adversaries to perform traffic correlation analysis. Thoughts anyone?

5 8

My VPS hoster (Zappie Host) understood!
by Billy Humphreys 08 Sep '15

08 Sep '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi all, When I asked my reverse DNS to be added for my Tor exit relay, they said that Tor nodes were disallowed due to the ToS, but didn't stop me. I messaged back a few times (in normal UK time, 3AM over there) and I got this reply: 'Hey there Thank you firstly of understanding our position that in almost most cases the end user that runs the tor exit does without a care in the world leaving the provider fully liable for all the crap that comes with it. In our ToS we state "any tor nodes" simply to cover our asses as its (for the most part) not worth the hassle and misunderstanding later down the track. Yes a relay node is fine. feel free to continue with that. If you want to continue with an exit node what I will do is edit the WHOIS details and put in for that specific IP that you are the operated the IP address as a Tor Exit node. (SWIP the IP) Please let me know if this is something you are interested in this plan or just settle for a relay node as is. Regards and thank you for understanding Adam' If you sign up and are wishing to run a Tor exit relay, PLEASE contact them to set it all up for you so that you will be classified as a Tor relay :P -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJV7kYDAAoJEHukJMVt72wmclEP/1jjw+mvLldLFq0Q38c7+QRl U16jrWdf9r2ngiDFEEJAYo35mZB48K+80KUjLdKdycn2FxjYFZSpTubWuJYQN5/b NV/gHTeLKhIWTTGFBEHwVSvY71BzwrBcWO2M2Np7ax75TgYgd9KglIgyqc5ORzAW NaOtAOIcuRuRbeOd2+TKeoqqYmhyHA+yHRxI6tCE4ZIMdpQmx9JQ5r2uH0OAgxJZ dDxGqjNJEUoBAoftMx2qxCX73F6X4k9FJ5srIMQQHU1RTmbVdD/ehLs0uPCSAdpZ VB4mhtrKx6prZ6kWIpFPucBbhRF7kGzb5Er8n36R1eb50HgbA+ZIfHLoo3lEHUMr OIVLdtkIzENNetpe2dZTbOE5307fuPaAOYgJbJjVeAOBaJ1mirI9CvHGF2VbuiVy PIuyUXqT/UPfaxYP6EnhOX3tFnGeBQwYzp9l8o5NFBsnn+CEOuIh0C2268hd9vny be4xSLsO0wqpE61s+2o8qzx2LEcd1Q+pbLEboa7nP3+iQnz4zA7qvuTmg22vzrlw vSLdsboOslsFEJ9VhCe2j/L7DZVKALGxOHK4XJDBj6Cfab1cDTcQw2hvSaTLOhVC tcxKQiw3twXsNQe3kiIIExcnOp7/XketBkAaYTavFFOlJkGAerkMWQCc2T1V+cdg chO8fJUW9KdXTkiAeCPj =WpHn -----END PGP SIGNATURE-----

1 0

Does Setting Up a Bridge Relay Disable the Browser?
by Kenneth Freeman 08 Sep '15

08 Sep '15

This may be a naïve question, but I've fired up my 64-bit Debian box now that the nights are cool, and editing the torrc to establish a bridge relay borks the browser. I provide anonymity much more than I use it myself, but is the bridge relay copacetic? Thanks in advance.

5 9

Relay Speed
by Billy Humphreys 07 Sep '15

07 Sep '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I'm happy - my Tor relay says it's advertised bandwith is 1.1MB/s and it is. Quote from Atlas: Bandwidth rate: 1073.74 MB/s Bandwidth burst: 2147.48 MB/s Observed bandwidth: 1.11 MB/s Hopefully if I can keep this up, I'll be qualifying for a shirt from Tor . -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJV7aL8AAoJEHukJMVt72wmTUgQAKq0tFA0ArP2LnGXy1/BNVus kpTooYAovokbnRV6PgKZoKGZsjU0AlRDMsRXuCYnyLPTdGZbGi3v5EljrlDdvL22 eCGSU3yryBG2Ity9OgIT/KuqdgL9DqisAsdL77WVMHfkOgMoFHTFwjCvseleMgZc H4tPR4J262PYTgJ1KwByIZYHXfpKwlSdHBlOEdUL1HVLCQZX9QscgGVmTTmOJqkI Qz7Be7HRXI8oGkK60CjnNs87rDTCBIDzc9hFs4MmBL7g3ogDMikQpO5OhoC0eN+/ QdtM31HS7EFIjqn/6cmLJCX8I3EBZ9bTsuvW7VSsC9xp6ZG2iaicv37zcn/lWuEd mMzZ7wqAh7wLQa4FGRTia99PGxYLVb9Sh+9EYVgrT8azjzCmPK+D9cXartXtf1yR pI7ISfhUsZlfz33CGkwiyIQBj8hvpOvaoVKA/4HvtAnnfmAikV+0TXHNn69Hg02a 7EaXjGnhvKhwPs8SRd/JpclUFHVw7N+Ft2zRW+y2GfTLaNtt4yKc3YqvTvO1KZ78 76QC2Lxzqlp0V/+4t4Wis41+g6ayt5DLt48jO8VK12rf5rm3Sg77IBqOqkzseTsm pbi2eUnh/MvXzxASUk44l+qEWUJDq3s+xayzN6O5LqaWvcmZEsoxio/mjw/FrZtg fBqqfYmgj8ct1Q4t7ypT =1BBs -----END PGP SIGNATURE-----

3 4

tor-relays] Experience hosting exit relay with Costa Rica Servers: crservers.com
by starlight.2015q3＠binnacle.cx 07 Sep '15

07 Sep '15

You might check for existing relays in their system. This Robtex seems to have much of their network, which they appear to lease from other providers: https://www.robtex.com/en/advisory/dns/cr/crservers/ And while they advertise many network blocks, it appears it's all slices of just a few large allocations: http://www.cidr-report.org/cgi-bin/as-report?v=4&as=AS3790 http://www.cidr-report.org/cgi-bin/as-report?v=4&as=AS2385 You can download CSV of all relays from https: // torstatus dot blutmagie dot de and look for matches. Otherwise, call or email them and ask how they feel about Tor exits. Hosting is competitive and if you run a relay with proper contact info and reverse DNS they might not mind. Ask them to automatically forward any complaints they receive to you.

1 0

About Tor Weather
by Billy Humphreys 07 Sep '15

07 Sep '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 BTW to all people, I asked yesterday about Tor Weather, and why it wouldn't locate my relay. It now can (https://atlas.torproject.org/#details/9CBD228738FBB0293A348680DF241B606 069E2F9), I just had to wait a day. Hope this helps anyone who had these issues (signup for Tor Weather, so you get email notifications if it's down, if it's not running latest Tor, and even if you've earned a shirt :D - --Poke -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJV7S8ZAAoJEHukJMVt72wmNOAP/Rg1S+y3IU66QUrERPRjQ9mG iHYF5Gb3Ei7Ompp2VMY6AMAbB3MSOwtsgJgSwySDOZIN8Qk+2E/pJ7P/lfk41YJz j4OcyYvEL0fXx0aIAOua2JVZOy+0ATCPAs41zX4vccRW6iOX78oXRXaV24CNLW3z xuCHTsBHKx+5alEzfXMwc/+4oRGVAISYZIco3frn63xGktso2GewdQYm7VnDIqA7 j9FQjDLurNH6SeX9xYUQT9Ypis1hdS5p2Sz0rCvNJ82njhE7XcMEL2B0p9hB/eG0 uYAu0pGNLg5jpoNL5qNnHhM1bBnRiy1+P6a1s801NndbEgBoX3H1yDDRJNHgv1wo JGf7PsYeET+lqNK3hx4eZ/YdaApXxbkI6qMNoyl7FjMn2QG3Hd5W05In0uADNxPd mKy3LevM7BUBgTbgDMBg91Fm5kAu9n/rucWx6jiI9h+59zSqj/LabGDFCuSv4QC7 +pQ0MGyY94Gp5zQRDWQR5BGS9/Y3Yw0R0FV/Bi99ZgBal8Vm59Jk/8/OZqegVpIE e199Mub1tu16eIymxKtVuawY8cleKYpl6Q8lnG3tWTEmpR6L2QHuXcTUSkM6zzXz vUaFNo5v1gHsHsDwyAEchT56sd5OaqcK3CNulGwkIn2RgcBV2WtSV1wlLvouOow7 ZqmQZml9MqnxBHaEQuUi =hmIr -----END PGP SIGNATURE-----

1 0

New Tor Relay
by Billy Humphreys 06 Sep '15

06 Sep '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, I got a new Tor relay running on my server. https://atlas.torproject.org/#details/9CBD228738FBB0293A348680DF241B606069E… is it's details. However, I have been having issues with Tor Weather saying that it cannot find my node. Is this normal? - --Poke -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJV7HEIAAoJEHukJMVt72wmYFMP/3MF7z04Z8EoZmCBSeB9zkUP ZIdDIc0wiZxJugwOko0qJugcMz63/A+BuOeWA6fQ4KMq6OYyVulz5E3yiS+cE+mR bj3rJ37gLwtINun/j/9ve/uHx2cF1ZfQ/7eCVxKPCKu1nAtKpciHwhRVeV3EbYWB DAufC/GbVIqvsZYoTvocAMHZEsjWstjGTZWh2rY5jcah5bASyE0cXkYcpCO36nKq q01BDGimfrVgTDtgvwHJeX9CKdUjkb6qh57H5mqaNzHrx0V23L6dMbakClsIr5uY pUUes3SL/J1QB0SJV/x/ruVshdDeXkTy5tJt6DrZHupjPRDYkhzqgVuvNHgf38+U dGSLI/v+KcVM00yj9MxSAlWhsWOxNakqnWFf4FXVI+8gWOrm/taxKF/Y/KpXyDqY WT3T7CSUn96wvOMsAFxwJPGgxl2kZvkjEduJoZI4ou0ji8m04/gn157v/eR7hOr5 Dkil4y5mw9Kn5PbBToherLesW5XXPJgFlV+/Zq6eUUjxUN/uBSWLGetjaxAF1w8G FhDkq5WprAV5X813YAOYPIehlFfYgGkfQ2eBpZOIBgSHqgoJaAyE/AR6P4jMJwn9 uwe4ZbtFLfqrEnoZ15hcBIq8dhNnwnvD4FLoJLPnDvTuMgdRNobtzyKCTMd3JYqo l1cJWImHgTKTHFq+cTQn =+TEW -----END PGP SIGNATURE-----

2 2

New Tor Relay
by Billy Humphreys 06 Sep '15

06 Sep '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, I got a new Tor relay running on my server. https://atlas.torproject.org/#details/9CBD228738FBB0293A348680DF241B606069E… is it's details. However, I have been having issues with Tor Weather saying that it cannot find my node. Is this normal? - --Poke -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJV7HEGAAoJEHukJMVt72wmsJIQAMFvjoRtktt0Mrt+wMU1/CF7 +00QSg1vKnIcM6ztljK+DgJhi+NLiETTkcmzgkTod40+aLVkqPuupy8+jt5Q7O+I IXFOn38zePPkk17W3nkDUiuYFSWsIB9TOS58iUVLmu6LJizB9O2SVz+yIRtLeLgl z0zucRYeMtqvhaiRROElqnJ87xnESjQA+9wDazkSUoN5tP9Vlzurf61NQJJayvC6 gJO2LWmbmiXr/e4SWtyBvXlC9dhHJY3WS8q6s/4nnb/JMXOhXDAwqHG0r9/YFt2a YVoK/X1cdqd901+2vyWFd2rNRLEYC+3S94i9laEEq5fGj14UVCYdoIunGGjVzYo2 GRmcvEo6CCt1dOCQmH+fwzlU7mPfNO+8FluLAUpgyTpCYe5Bjubb3OyMe758zjhP 5kiQ+oHqhitMHTH6gs8MSVRye4JgcH1/Jgyv2g5/cQyh0E8s/X2HmXlplpnz81Vf WPJYnR2GradGPRxCJlggpeqxlnXkWPbJPONAUpMqPG1Hvp+UKAic9uHs5PASobT+ zEIOSXCISwd2Nl4K0dKfy6sHvPQ+UjBlYpEp5skTkMrRfNitXYr2zcXN3NPD8Vbq 3k4peCh3E8IpXb5jxVwQ2r/WovRZWBYwpbeLFAFLtMmgeft4NKWhvWdpKV9BmD+R 6iWdeUqqvzeXT+kbvQqq =rOHr -----END PGP SIGNATURE-----

1 0

New Tor Relay
by Billy Humphreys 06 Sep '15

06 Sep '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, I got a new Tor relay running on my server. https://atlas.torproject.org/#details/9CBD228738FBB0293A348680DF241B606069E… is it's details. However, I have been having issues with Tor Weather saying that it cannot find my node. Is this normal? - --Poke -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJV7HEFAAoJEHukJMVt72wmgb4P/0ePquz5amcKLfRHeKSL3K6e l161rledwcz5TRRitlkjXktFY7AHT8xRQ9PAKqK32Lx2t3T0KBSAk5NDzk7C24xC DwkBFCuJ2UkQgf87K5pjZcKnKXsBYNyaijTzfjhx+yTFwbBY0djK3t+z/Ye+Adcx 9xnXD/CqZM8R9yv7bVfWVa9lfXtKcXE/P7UpI9IrzmrfTVr025PenoQzYxYRhFmX PY8XhtjE4b1AzlGLX4+DymsBWeJdKe7ylfPLaUQpYWS56SAzXBd5QljZCiZApSwg MLxsZBVEB/1D+nHPOAWMOdg/5qkXOtvdyJE6tOODo3ISbHKAOMnsY98N4k7sQejL ctXj5NrZeUi9T5+NGFFx9ja2DpUGUG6B7LVwmxrA2Ra7IKEMVP6Qna5JbP92uDPV s9CiUz/Bd/5VERF+j2ZNGQZSjjdIQYxrsgtZ6gFFhWPXkUoI1KRTQMF9L7il/7+L 4m+Cqy5U6ozdQVwI/uKNtUpCE2m/OR607HCrH7uspYnleRmnv9SZl3fUSN3Q2x7E fsKGMko0OV0MR21A9KSXc3q+dgI5be+3hrfpwJxJbOfFGw260V5N6AWMs/YYGz8R dLRwDGtnFRnRGvSBts4+zJd9yxpAn24NRXFiztpyWQidFXfRKHLpS+hBgWjTDYvm 0MYLZkvxTeyxPb7o3Q2X =CeMC -----END PGP SIGNATURE-----

1 0

Calling for more Exit Relays
by s7r 04 Sep '15

04 Sep '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hello, In the last 48 hours we went under the 'psychological' threshold of 1000 Exit Relays in the consensus. Right now, Thu Aug 20 23:57:02 UTC 2015, we have: 6234 Running relays 954 Exit relays I think we can improve this balance. Let's do it! This is a call for everyone: Please run Exit relays, or if you are running a middle relay turn it into an Exit relay! I have been running high capacity Exit relays for a very long time, and I tell you it's not a headache and it will not attract any problems if you just take care of the abuse complaints. During this very long time, 98% of the abuse complaints were automated messages which can safely be ignored (fail2ban notifications, portscans, web CMS plugins sending reports about http fetches, etc.) and the rest were from very nice people who didn't know what Tor is and how it works, but after explaining to them they actually liked the idea - gives you a really nice feeling. Only 2 times I have received email from law enforcement agents (which are just normal people like us, doing a hard job) - a complete and clear explanation was all that it took for them to fully understand and eliminate any doubt that the server in question is somehow interesting to them. Tor is _legal_ in all sane countries! We as a community are here and I give you my word that me and others will personally assist, in the measure and ways we can, whoever runs into troubles because of running an exit, which is highly unlikely. It is recommended to reject in your policy port 25 (it's not needed and it will blacklist you for spam messages if you leave it open). Allow all other ports, or use the reduced exit policy from torproject.org if you want to allow only what is highly necessary. Don't think any longer about it ;) - - Email me directly any time if you need technical support in setting things up, hardening the server or need a customized setup adapted to certain conditions. - - Email me directly any time if you have the funds needed to run a Tor exit relay but don't know how to set it up, where to get it from or don't want to rent and run it under your real name. - - Email me directly any time if you need instructions about how to deal with abuse complaints and short templates for replies. For live chat come on IRC, OFTC network, #tor channel. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQEcBAEBCAAGBQJV1m+CAAoJEIN/pSyBJlsRhD8H/3NpZniYVIELenCvxKNKIEeR J6hvSIwsAJUzlk+Hm5v74f7uzeXoLwA8z/FtzKCBVACOvUoCo1b4/2hF3wBMDfcw CsSZC0AkkIdF+4ePSIsjAU8giOr2uXkCS9CSoRyDnIebmyx5RkSnFDXgTg6/QLJT YJBuTrAA2anxqCHmqL9xHEDM40JhTMP6N6CR3aR4CCPkVOeELyyLTSgb637rZzUs EuRkliktZifirhENxOHzvMVv4D4X60lXeSo1i347gdPwTGuNpiL5fPu+ET0E1sTh Ol8Prvi6XP9yBojW7Up0q1y6083JkguLTbxQDomnqEYT7LCCqAFVBwdc1xWUdg0= =kFIY -----END PGP SIGNATURE-----

16 27