April 2016 - tor-relays - lists.torproject.org

DDoS on middle nodes?
by Lukas Erlacher 19 Apr '16

19 Apr '16

Hi, my hoster notified me about nullrouting due to packet floods (?) against two diffferent relays on April 12 and April 17. Has this been happening to other people in the same time frame? Best, Luke

3 2

dutch tor relay operator meetup
by Jurre van Bergen 18 Apr '16

18 Apr '16

Hey everybody, I'd like to invite you to the first Dutch Tor relay operator meetup organized by Bits of Freedom and stichting HVIV(https://hartvoorinternetvrijheid.nl/) The first meeting[1] will take place on the 11th of May in Utrecht, in the center of the Netherlands. The cafe where we'll meet and the program will be e-mailed later. It would be great if you could let me know in a private e-mail if you'd like to come so we can find an accommodating cafe where this will take place. First drink' on us! Best, Jurre [1] https://bof.nl/2016/04/18/11-mei-cafe-avond-voor-tor-node-beheerders/

1 0

Re: [tor-relays] [tor-dev] prop224: HSDir caches question with OOM
by Tim Wilson-Brown - teor 18 Apr '16

18 Apr '16

> On 18 Apr 2016, at 20:18, George Kadianakis <desnacked(a)riseup.net> wrote: > > PS: We could also in theory imagine writing those descriptors on disk, and only > caching the ones that we have received requests for lately. This way we > would not utilize our RAM that much… Hmm, there is a disk DoS risk here, particularly for relays with smaller disks. Tim Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP 968F094B ricochet:ekmygaiu4rzgsk6n

1 0

List Problem
by stealth＠nym.mixmin.net 17 Apr '16

17 Apr '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am no longer getting updates to this email address as I used to. Can someone please let me know what I need to do to get these started again? -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (MingW32) iQIcBAEBAgAGBQJXEmjLAAoJEH1gNwhiMDZuHx8P/ibfH9ORF2n7oxpleuF9mK5V R1r8m6rGOPN01h3Zvi9dJQ+fBsmc0R2xbuIXzXBQhw4ehIWTenSmqA44inbqTlLk gBEsUKkuy4bLAqP1QHwg84l6uN34N4j8Ss46HMJGHgJNqdOjouoVC5zGD7lQ1zsg HA19zKndKUvP421sWx9Ds0cUHJ0g2XTlrSU2w0mMVY1yP0RSPPDGNhtdm7U4doQy c21cIWGyGE0p9vHBh7S8Tph1OMRCxvMblhmNksc5zemOJ+HYjAjeTFBrpK9nc4Er wqrd1vRVSDhyFQD/IfsFm2BvB1YuVOpNamvRFEH8CpqPUlQ4xkd5TsYhBssZiHZQ jsI1mTzHHEEqVoTHKg3wDIAk7FmCcZemTlukASmYLZGub71+FRp+qAd0vbj71AKX O04H6SrOno3XCX+zNf9BpRiNGiVA7dwkEHEkSHa949OhIKdffsdioSrRm9zj8ghD vY/boZbgVE4YN4Lp3Ywl9qWELdpUoH/l1Za9MCjyyRD8Ie547EYx72cT/XorQyTs xr1Qhk6ShVt4y7yfpTDbE3lj8ZAbfOkoO2OSX+11C7xfwSC65xaMJfUbmnwMYR8z 3EycBr4/VMEshagTTiU4eeIwb4jaZPvCBvNNdH+9RcMdqsxHr1OaFOaVlO0L2Yf0 ZynlXsHKKvgaZClMQ7Am =ZvhG -----END PGP SIGNATURE-----

3 2

Please unsubscribe me
by Joshua Norvell 17 Apr '16

17 Apr '16

Please unsubscribe me -------------------------------------------- On Fri, 4/15/16, tor-relays-request(a)lists.torproject.org <tor-relays-request(a)lists.torproject.org> wrote: Subject: tor-relays Digest, Vol 63, Issue 26 To: tor-relays(a)lists.torproject.org Date: Friday, April 15, 2016, 1:07 AM Send tor-relays mailing list submissions to tor-relays(a)lists.torproject.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays or, via email, send a message with subject or body 'help' to tor-relays-request(a)lists.torproject.org You can reach the person managing the list at tor-relays-owner(a)lists.torproject.org When replying, please edit your Subject line so it is more specific than "Re: Contents of tor-relays digest..." Today's Topics: 1. Using your own Relay as Entry Node (fr33d0m4all) 2. Re: Using your own Relay as Entry Node (Yawning Angel) 3. Re: Using your own Relay as Entry Node (Tristan) 4. Re: Using your own Relay as Entry Node (starlight.2016q1(a)binnacle.cx) 5. Hiding or masking running tor process.. (rush23(a)gmx.net) 6. Re: Hiding or masking running tor process.. (dawuud) 7. Re: Hiding or masking running tor process.. (k0nsl) ---------------------------------------------------------------------- Message: 1 Date: Thu, 14 Apr 2016 21:38:15 +0000 From: fr33d0m4all <fr33d0m4all(a)riseup.net> To: tor-relays(a)lists.torproject.org Subject: [tor-relays] Using your own Relay as Entry Node Message-ID: <57100DC7.9080905(a)riseup.net> Content-Type: text/plain; charset=utf-8 Hi, I've seen some time ago a discussion about using your own Tor Relay as an Entry Node, but I'd like to have your opinion in the following two scenarios (if it makes any difference switching from 1 to 2): 1) You point at your node when you're in the same network where the node resides (I mean always by setting EntryNodes in torrc, not by using it as a SOCKS proxy) 2) You point at your node from a different network than the one in which the relay is I think that if your node is being used by others, you would simply be one of the lots of users passing through it, with the advantage of removing the risk of a bad Entry node, what do you think about that? And about using it as a SOCKS proxy to enter the Tor network? Do the same considerations apply or is it even worse to use a relay as a SOCKS proxy? I'm sure that I've read about reasons to avoid using your own node, but I don't remember the considerations about this argument... Best regards, Fr33d0m4All -- _____________________________________________________________ PGP Key: 0DA8 7293 D561 3AEE A3C0 7F63 101F 316A F30E ECB4 IRC Nick: fr33d0m4all (OFTC & Freenode) _____________________________________________________________ ------------------------------ Message: 2 Date: Thu, 14 Apr 2016 22:24:30 +0000 From: Yawning Angel <yawning(a)schwanenlied.me> To: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] Using your own Relay as Entry Node Message-ID: <20160414222430.78b9255e(a)schwanenlied.me> Content-Type: text/plain; charset="us-ascii" On Thu, 14 Apr 2016 21:38:15 +0000 fr33d0m4all <fr33d0m4all(a)riseup.net> wrote: > And about using it as a SOCKS proxy to enter the Tor network? Do the > same considerations apply or is it even worse to use a relay as a > SOCKS proxy? This is horrible and should *NEVER* be done, assuming any network not physically controlled by you is between you and the SOCKS proxy server[0], simply based on the request (and authentication if you chose to use such things) being in the clear. Regards, -- Yawning Angel [0]: So, SOCKS over an internal network to a VM/magical anonymity box may be ok (depending on your threat model). SOCKS to a VPS somewhere is essentially always a bad idea.

2 1

Re: [tor-relays] Opt-In Trial: Fallback Directory Mirrors
by hwertiout695＠Safe-mail.net 15 Apr '16

15 Apr '16

Hi. > TL;DR: Stable non-exit relays can help tor clients use the Tor > network. Please opt-in! My relay is on the list and I want to opt in! eriador 6DE61A6F72C1E5418A66BFED80DFB63E4C77668F

2 1

Re: [tor-relays] Using your own Relay as Entry Node
by Fr33d0m4all 15 Apr '16

15 Apr '16

> Message: 2 > Date: Fri, 15 Apr 2016 11:54:33 +0200 > From: Michael Armbruster <tor(a)armbrust.me> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] Using your own Relay as Entry Node (Yawning > Angel) > Message-ID: <5710BA59.5040303(a)armbrust.me> > Content-Type: text/plain; charset="windows-1252" > > Hi Fr33d0m4All, > > In my opinion, you could use your own tor relay as an entry node, > although you should think about it this way, too: Browsing through the > tor network usually establishes a route through 3 nodes from your side. > Always going through your own relay as an entry node means, only two of > the three nodes are changing each time you establish a new route to a > server. > > In my opinion, you are just moving the "trusted entry node" problem to a > "trusted middle node" problem, although traffic will be more obfuscated > for the middle node because other users could use it over your relay as > well. A think that a bad middle node is not really a big problem, compared to a bad entry or exit node... Furthermore by having at least a fixed trusted node, your own (unless someone compromises it..), you are sure that you don't have any bad circuit, i.e. 3 bad ORs. Then I agree that a list of trusted entry nodes can be better than a single entry node.. But I wait for some comments by people that know the whole picture better than me, which I'm still in the learning process. Thank you very much for your opinion! Fr33d0m4All

1 0

Re: [tor-relays] Hiding or masking running tor process..
by rush23＠gmx.net 15 Apr '16

15 Apr '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Yeah k0nsel you got me.. My provider always locks my vps cause I supposed to breach there SLAs running Tor! I tried to explain but they suddenly after years refer to some SLA paragraphs that I disagree with...I terminated my agreement but they won't leave me out before 09/2016 so I always start Tor after unlocking system until locking..looping process😬 Regards Am 15. April 2016 10:07:42 MESZ, schrieb tor-relays-request(a)lists.torproject.org: >Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > >To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > >You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > >When replying, please edit your Subject line so it is more specific >than "Re: Contents of tor-relays digest..." > > >Today's Topics: > > 1. Using your own Relay as Entry Node (fr33d0m4all) > 2. Re: Using your own Relay as Entry Node (Yawning Angel) > 3. Re: Using your own Relay as Entry Node (Tristan) > 4. Re: Using your own Relay as Entry Node > (starlight.2016q1(a)binnacle.cx) > 5. Hiding or masking running tor process.. (rush23(a)gmx.net) > 6. Re: Hiding or masking running tor process.. (dawuud) > 7. Re: Hiding or masking running tor process.. (k0nsl) > > >---------------------------------------------------------------------- > >Message: 1 >Date: Thu, 14 Apr 2016 21:38:15 +0000 >From: fr33d0m4all <fr33d0m4all(a)riseup.net> >To: tor-relays(a)lists.torproject.org >Subject: [tor-relays] Using your own Relay as Entry Node >Message-ID: <57100DC7.9080905(a)riseup.net> >Content-Type: text/plain; charset=utf-8 > >Hi, >I've seen some time ago a discussion about using your own Tor Relay as >an Entry Node, but I'd like to have your opinion in the following two >scenarios (if it makes any difference switching from 1 to 2): > >1) You point at your node when you're in the same network where the >node >resides (I mean always by setting EntryNodes in torrc, not by using it >as a SOCKS proxy) > >2) You point at your node from a different network than the one in >which >the relay is > >I think that if your node is being used by others, you would simply be >one of the lots of users passing through it, with the advantage of >removing the risk of a bad Entry node, what do you think about that? > >And about using it as a SOCKS proxy to enter the Tor network? Do the >same considerations apply or is it even worse to use a relay as a SOCKS >proxy? > >I'm sure that I've read about reasons to avoid using your own node, but >I don't remember the considerations about this argument... > >Best regards, > Fr33d0m4All > >-- > >_____________________________________________________________ > > PGP Key: 0DA8 7293 D561 3AEE A3C0 7F63 101F 316A F30E ECB4 > IRC Nick: fr33d0m4all (OFTC & Freenode) >_____________________________________________________________ > > >------------------------------ > >Message: 2 >Date: Thu, 14 Apr 2016 22:24:30 +0000 >From: Yawning Angel <yawning(a)schwanenlied.me> >To: tor-relays(a)lists.torproject.org >Subject: Re: [tor-relays] Using your own Relay as Entry Node >Message-ID: <20160414222430.78b9255e(a)schwanenlied.me> >Content-Type: text/plain; charset="us-ascii" > >On Thu, 14 Apr 2016 21:38:15 +0000 >fr33d0m4all <fr33d0m4all(a)riseup.net> wrote: >> And about using it as a SOCKS proxy to enter the Tor network? Do the >> same considerations apply or is it even worse to use a relay as a >> SOCKS proxy? > >This is horrible and should *NEVER* be done, assuming any network not >physically controlled by you is between you and the SOCKS proxy >server[0], simply based on the request (and authentication if you >chose to use such things) being in the clear. > >Regards, > >-- >Yawning Angel > >[0]: So, SOCKS over an internal network to a VM/magical anonymity box >may be ok (depending on your threat model). SOCKS to a VPS somewhere >is essentially always a bad idea. >

1 0

Re: [tor-relays] Using your own Relay as Entry Node (Yawning Angel)
by fr33d0m4all 15 Apr '16

15 Apr '16

> Date: Thu, 14 Apr 2016 22:24:30 +0000 > From: Yawning Angel <yawning(a)schwanenlied.me> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] Using your own Relay as Entry Node > Message-ID: <20160414222430.78b9255e(a)schwanenlied.me> > Content-Type: text/plain; charset="us-ascii" > > On Thu, 14 Apr 2016 21:38:15 +0000 > fr33d0m4all <fr33d0m4all(a)riseup.net> wrote: >> And about using it as a SOCKS proxy to enter the Tor network? Do the >> same considerations apply or is it even worse to use a relay as a >> SOCKS proxy? > > This is horrible and should *NEVER* be done, assuming any network not > physically controlled by you is between you and the SOCKS proxy > server[0], simply based on the request (and authentication if you > chose to use such things) being in the clear. > > Regards, > > -- > Yawning Angel > > [0]: So, SOCKS over an internal network to a VM/magical anonymity box > may be ok (depending on your threat model). SOCKS to a VPS somewhere > is essentially always a bad idea. Hi Yawning, I perfectly understand your point... I'm using it as a SOCSK proxy only within my own LAN, which is only used by me. If I ever need to reach it from the outside I would do it by tunnelink the SOCKS connection within an SSH connection to my LAN. But I'm far more interested in what you think about using your own Tor relay as Entry Node, which I think should decrease the risks because it is for sure a not-bad Entry Node. What do you think about this point? Thank you for the answers. Fr33d0m4All -- _____________________________________________________________ PGP Key: 0DA8 7293 D561 3AEE A3C0 7F63 101F 316A F30E ECB4 IRC Nick: fr33d0m4all (OFTC & Freenode) _____________________________________________________________

2 1

Hiding or masking running tor process..
by rush23＠gmx.net 15 Apr '16

15 Apr '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hey everybody, is there any way to hide running a tor process on a server?? My vps hoster monitors which processes consume most of the resources, so just hiding would be best especially when it looks like a 'not tor' process..😉 I appreciate any helpful hints... Cheers 0x23 - -- -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFhwweDIzIDxydXNoMjNAZ214Lm5ldD4FAlcQgJkACgkQOKD1ON7f MNhrpA/+KH3CXchdIH5ZpXsYe4rDUO2bCAo0lAtZHOogzngmqtJg22Tb9aKnSLBQ sLrtRLHgvGS17Ru3bzSqcSh7SE5vlKi3fFuRqB4f7aWHBreBKLCuOXOsp8YLjf2n f/KZxa0h9lATtjvhG8dKNUVZ7pBEX1awQPO56fkapbArqAg/dKPgggAlmcAhLgO+ 4jjPuk8B+fUlgVtRPaK3Igq4YTyRTkrQmiozM0q7A/4Jj1Sw2Bi8QBoUk1vCOR9y CBbrH7t/kkvts7DhmngjJX6Dc1bPCMkHAAisu+NhUXMVH6SMRrfVzJNR1sgD6BYO oq8J35xYQKCmppLrHRCQ/6YMqDnX27rk3z672AD8EiqZz4uynlrljsNnodmzIzbe eFog7KXaOjIcVH+EUpU1wAXIb0klg3mI9GfA6CYq342xPnNXVoyVqZOTdt3BlZpx rbF6M6ihF1YH2/RQluckCyUkxaO6sG9zPbtCY1LVLvppOHCRjNIPVxJ/pWhBbyQz Q4SH7VSJwS8KVtxa/yZe4sX4+h0lY/Opkg0F20Rsmf4522YCsn2rEYk5VveNj1yd NJ7mHqldfghp4IRROhneLX9tXz2S/hZtcibsWpnuaVC6n83yosAiErSEUbCHHmDI ZCFlfCO1UhvFGFiGanpLez62b1GGn/KHq0BeUzuIpHkXVK6mxRg= =Ovl+ -----END PGP SIGNATURE-----

3 2