March 2016 - tor-relays - lists.torproject.org

Please enable IPv6 on your relay!
by Moritz Bartl 28 Jan '17

28 Jan '17

Hi! We still have a depressingly low number of relays that support IPv6 (currently only ~120 of ~1900 relays). If your host supports IPv6, please enable it, especially if you run an exit! This has to be done explicitly. https://trac.torproject.org/projects/tor/wiki/doc/IPv6RelayHowto In short, you add: ORPort [IPv6::address]:port IPv6Exit 1 ExitPolicy reject6 *:* (or a more open exit policy respectively) Thanks! -- Moritz Bartl https://www.torservers.net/

30 42

Netflix overblocking non-exit Tor relays
by Gero Kuehn 16 Dec '16

16 Dec '16

tl;dr: Even paying customers sharing IPs with non-exit Tor relays are now blocked from accessing Netflix Hello everyone ! After two very fruitless attempts to get the issue silently resolved through proper Netflix support channels, the time has come to make this public. As some of you have probably already read in the news, Netflix recently announced a crackdown on what they call "VPN Pirates" and what I call "paying customers using the same benefits of globalization that global companies like Netflix (ab)use for their taxes". They have now obviously changed their strategy regarding the Tor network. I am operating (among others) a middle-relay on a German residential fixed-ip VDSL-50 line (dc6jgk1/486740353B905AA4731F82C0B4CC25821A62C6E3) behind a NAT. Until 2 days ago, none of the devices sharing the same external IP address had any problem connecting to Netflix and there never was a Tor exit relay on that IP as far as I can tell. It is also obviously not possible for users of the Tor network to connect to Netflix through middle relays. As a consequence they should not be classifying such IP addresses as VPNs/Proxies and they should not be blocking them. This has been escalated and explained twice to "technical supervisors" in their callcenters. They did however not leave the impression that they a) care or b) intend to fix this at some point by parsing the Tor network information properly instead of using whatever cheap&wrong hack they use now. The official response from Netflix is that you now need to make a choice between operating that Tor relay (of any type) and the ability to watch Netflix. They also strictly refuse to refund any remaining credit in the customer account. My personal choice with regards to that blackmailing is as clear my next steps (conditional cancellation, 14 day deadline for refund and a legal challenge of their German AGB with regards to this issue). I am allergic to being blackmailed like that and being called a pirate by a service I legitimately paid for. For those of you who just would like to contribute to the Tor network without having trouble like that, please do not let this nonsense stop you. A more diversified Tor network is a more healthy network and I would really like to see more normal users operating tor relays operating in as many different locations as possible - including DSL lines "that are there anyways". If you do not want to be put into a position where you have to choose between your contribution to the network and some legal and paid-for entertainment, you might want to operate only a bridge until the issue has been resolved. If you already have the same problem, make it as expensive for Netflix as possible and spread the word about why this block (and geoblocking in general) is wrong. Thanks ! Kind regards, Gero / dc6jgk

14 21

Exit relay funding
by Michael McConville 04 Aug '16

04 Aug '16

Hi, everyone. I'm an experienced Tor relay operator and a mostly dormant community member. My main relay these days is on a dedicated server running OpenBSD and moving 3-4 MB/s. It costs me $35/month. https://atlas.torproject.org/#details/CDAB3AE06A8C9C6BF817B3B0F1877A4B91465… Sadly, I have to shut it down at least temporarily if no one can help me pay for it. Is anyone interested? You can search the mailing lists to see that I've been contributing for a few years, and I can give more verification if you'd like. Thanks for your time, Michael McConville

23 40

Opt-In Trial: Fallback Directory Mirrors
by Nick Mathewson 22 Jun '16

22 Jun '16

TL;DR: Stable non-exit relays can help tor clients use the Tor network. Please opt-in! We want to run a trial of fallback directory mirrors (fallbacks) in Tor. Tor clients contact fallbacks to download the consensus during initial bootstrap, before they contact the directory authorities. Fallbacks allow Tor to bootstrap in networks that block the Tor directory authorities. This allows people to use Tor without manually configuring bridges or pluggable transports. For more information about fallbacks, see: https://trac.torproject.org/projects/tor/wiki/doc/FallbackDirectoryMirrors For this trial, we want to find around 100 stable non-exit relays, as exits currently experience high load. We want relays that expect to be stable for the next 2 years, with: good uptime, the same IP address(es) and port, the same relay identity key, good bandwidth and network connectivity. In December 2015, we created a list of ~400 candidate fallbacks. https://trac.torproject.org/projects/tor/attachment/ticket/15775/fallback_d… If your relay is on this list, and you expect it to be on the same IP address(es) and port for at least 2 years, please consider opting-in for this trial. (Relays that aren't on the list are welcome to opt-in. They will be considered in future releases, or if the selection criteria change.) For the initial fallback release, we will only add your relay if you opt in. Please reply on the tor-relays mailing list, if you are able. (Opt-ins, opt-outs, and fallbacks chosen for inclusion in tor, will be managed using lists in the publicly available tor git repository.) all best wishes, & thanks for running Tor!

19 29

Re: [tor-relays] Opt-In Trial: Fallback Directory Mirrors
by hwertiout695＠Safe-mail.net 15 Apr '16

15 Apr '16

Hi. > TL;DR: Stable non-exit relays can help tor clients use the Tor > network. Please opt-in! My relay is on the list and I want to opt in! eriador 6DE61A6F72C1E5418A66BFED80DFB63E4C77668F

2 1

I would like to help.
by Generalgrievous 03 Apr '16

03 Apr '16

I have a Banana Pi that I would like to use to help the TOR network. I have installed Debian-Jessie and started researching the process for setting up relay, even an exit. I am a total noob, but willing to learn. If someone is willing to help me step by step, I would be excited to help. I've tested my internet speed, Download average 60 mbps, Upload avreage 6 mbps, If I would be more of a hindrance than a benefit, please say so, no hard feelings. Located Central CA. General G. Sent from [ProtonMail](https://protonmail.com), encrypted email based in Switzerland.

6 6

Relays with very slow DirPorts
by Tim Wilson-Brown - teor 31 Mar '16

31 Mar '16

Dear Relay Operators, While I was checking fallback directory mirrors for #17158, I encountered some relays that took more than a minute to serve a consensus. Most took 150 seconds, which could be caused by a RelayBandwidthRate of 10 kilobytes a second. One solution to this issue is to disable the DirPort on relays with a RelayBandwidthRate less than 50 kilobytes a second, or more than 30s to serve a consensus. https://trac.torproject.org/projects/tor/ticket/18688 (This ticket also contains the python / stem code that I'm using to check the consensus download speed.) But I don't actually know if it's the relays' torrc configuration that's causing the issue, or if their provider is limiting their speeds, or if there's some other issue. If you're the operator of one of the relays listed below, can you let me know? And if someone wants to investigate further, or contact these operators on their ContactInfo, that would be great. (I don't have time right now, I'm trying to pull together a list of fallback directories before the 0.2.8-rc.) This is an incomplete list of slow relay IPs and DirPorts, starting with those with the highest consensus weight: 217.198.117.122:80 212.47.250.44:80 158.69.112.86:80 50.7.178.34:80 191.101.251.172:80 51.254.249.177:80 188.165.232.40:80 104.236.38.231:8080 89.163.225.184:9030 185.31.230.69:9030 81.7.14.227:9030 62.210.238.33:9030 164.132.56.137:9030 212.107.149.145:9030 94.23.165.33:9031 Thanks Tim Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP 968F094B teor at blah dot im OTR CAD08081 9755866D 89E2A06F E3558B7F B5A9D14F

1 1

Re: [tor-relays] Relays with broken DirPorts
by Tim Wilson-Brown - teor 31 Mar '16

31 Mar '16

> On 31 Mar 2016, at 11:23, Michael McConville <mmcco(a)mykolab.com> wrote: > > You'll probably get through to more people if you include nicknames with > IP addresses, and if you send an email to the operators who listed their > address in ContactInfo. I was actually hoping that someone else would do that for me, I'm a little snowed under at the moment. Tim > > Thanks for this, > Mike > > Tim Wilson-Brown - teor wrote: >> Dear Relay Operators, >> >> Also while working on #17158, I found some relays whose DirPort responses made my python script hang. It wouldn't even respond to ^C, but that might just be an OS X thing, or a stem thing. >> >> I'm not sure what to do about these relays. I'd like to do a tcpdump / Wireshark check, but I don't have time at the moment. >> Would anyone like to follow this up? >> >> This is an incomplete list of broken relay IPs and DirPorts, starting with those with the highest consensus weight: >> 217.23.14.190:1194 >> 151.80.164.147:80 >> 148.251.255.92:80 >> 78.142.19.59:80 >> >> Thanks >> >> Tim >> >> Tim Wilson-Brown (teor) >> >> teor2345 at gmail dot com >> PGP 968F094B >> >> teor at blah dot im >> OTR CAD08081 9755866D 89E2A06F E3558B7F B5A9D14F >> > > > >> _______________________________________________ >> tor-relays mailing list >> tor-relays(a)lists.torproject.org >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP 968F094B teor at blah dot im OTR CAD08081 9755866D 89E2A06F E3558B7F B5A9D14F

1 1

Relays with broken DirPorts
by Tim Wilson-Brown - teor 31 Mar '16

31 Mar '16

Dear Relay Operators, Also while working on #17158, I found some relays whose DirPort responses made my python script hang. It wouldn't even respond to ^C, but that might just be an OS X thing, or a stem thing. I'm not sure what to do about these relays. I'd like to do a tcpdump / Wireshark check, but I don't have time at the moment. Would anyone like to follow this up? This is an incomplete list of broken relay IPs and DirPorts, starting with those with the highest consensus weight: 217.23.14.190:1194 151.80.164.147:80 148.251.255.92:80 78.142.19.59:80 Thanks Tim Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP 968F094B teor at blah dot im OTR CAD08081 9755866D 89E2A06F E3558B7F B5A9D14F

1 0

Tor Exclude Nodes Misbehaving
by stealth＠nym.mixmin.net 30 Mar '16

30 Mar '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have edited my torrc file on my Tor Client to exclude several countries, but I keep getting the United Kingdom in my pathway. My torrc file is below: DataDirectory C:\Users\Myname\Tor Browser\Browser\TorBrowser\Data\Tor GeoIPFile C:\Users\Myname\Tor Browser\Browser\TorBrowser\Data\Tor\geoip GeoIPv6File C:\Users\Myname\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6 ExitNodes {PL}, {RO}, {LU}, {DK}, {CH}, {NO}, {AN}, {LI}, {IS}, {FI}, {NL}, {HU}, {BG} ExcludeNodes {US}, {CN}, {FR}, {UK}, {ES}, {IT}, {AU}, {HK}, {RU}, {PT}, {IL}, {IE}, {DE}, {CA}, {BE}, {NZ}, {PR}, {MX}, {KP}, {KR}, {GR}, {DJ}, {JP} StrictExitNodes 1 When I click on the green onion after selecting a web site, I keep getting the United Kingdom as one of my nodes. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (MingW32) iQIcBAEBAgAGBQJW9eAMAAoJEH1gNwhiMDZusekP/jXnkAkTIHEvytXkoRsPKvYv NY9DG0eX/n6nE4ufBAczoRgaZMCwF5BPlBio9CyiSlL4qiI0xZ9zqY1vV5+kIrYS cewQH62JvS2rj3DRykVytyHXrdRE+zvnhqqY0fqD/7+WehXkG9dQmu5TT8qfmS35 bw12EpVs6yyAR7Rfhnaha0D1fqK1ekOFkpi+bo6j7X6LMW6zPnWhzROZeqEakFtP slcGJlF+OIk2f2pTkYzhq5MHwollZ+bUqkljFLzvzl1HvK2lHMtLLSgnLcU/88hC 7bhJiOfkh7+jmpi+GMzoCRFGWLq75bufJ34acxap3P4bRnYduJ72RvUQ40+LITcj dNmtFTC/+psrdvjHBJP9XDO8FPhmVIOlEr588tjgOPQwDNHbe5t7TMEYk/8S5EzH +7ahYd9MbT03oNnVrQKbSut66LmuukDyIuvR8gP9UU2+VNmKubxVcsRlOQvDmIDR /zqT6nYrc7uCimE37Ny0K8v2R0NSwE/rVPZeP2i0dzgyHOkSPLitRDvkyLgDI+kr Wwn0cAkdzjs4428PdOnEyu+b2vLtXDcV3Q1aH32wQbMXR/o2uaY4VB6iVTjU6tlb bexKHehLYmaK0c0LKLb91mxjequDe4QEdJBUQg/vVvmwPzcvVBHXJgPmPf9uJ9W/ Szr3idQyUm4QZ6WvCAvD =FURP -----END PGP SIGNATURE-----

5 4