August 2016 - tor-relays - lists.torproject.org

Monitoring multiple relays
by Xza 01 Nov '17

01 Nov '17

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello, I have a couple relays / exits running. Now my question is : how do you manage them is there any dashboard or CLI tools to manage them ( statistics, ect.. ) I know the cli tool specially for Tor "arm" Thanks alot. - -- PGP : 29A4CE52 -----BEGIN PGP SIGNATURE----- iQI4BAEBCgAiGxxEbyA8eWFuZGVyZXNvbkByaXNldXAubmV0PgUCV0SJlwAKCRBI of/XNyszSvv/D/9VtjI+bmiqK53v//StUbmpYjgQjYheYvwktFld+2XDURh52dmU sbk3lab2RS1eQJxjV0BVXMF9O2JUAlp4NA2UMpj8ZJlCk0h1S6p2o4/sAlsrHr8Z nb67HiaRIyEvi9cQiXFtDtK/onAkEuKskolyvh3ysJRRUubHSX1z8WuNJIc4xyGH ZpSLPGUOO6qI7mM8ztS0muEy1khmkHgtlyHi2l4K/NsW3I90cV3w6Db2AEnV6v1c tsfehqLExsHUdEo0U3hHU7yY1p2fzD5Z+C0tgVKTnP5Zus/Vr9OH/zFwxneo0E7a 5FHdnCZnNIG9W32uQgjDdmBEv/YFEd0um/vMWFGUehFANSt+DIps7E+AjwiJwm2i ov97JJurQkrSMX7ZchTEsy720Ju272olp2eDiHaXXTK2TkxcEq+d1gZfj7CXycPW 6mCrj6L6URJAZ34GJQfFFjv8QbFmKkAvGhxl/O8KXRbXxedbLH7PY73jmFjJcmxO +KnSeyqMe1KbzazYyFydP+VmgI2k1IlO89l8Jq1Gq9f2KOPY9UKFZjGDKLS0xGZW EnqU/KUINcrGejYFT8nYNxA+OFTd/ZGIX5qP4Vo5NsZ/pDLZjdxIcvHx1jjZbER+ 5Ku2bihm2KTNAGoYDqB3LGCm+QdEFG/p573xQCcXPk92GyhMJDi9EMPDgA== =mTa0 -----END PGP SIGNATURE-----

8 8

Please enable IPv6 on your relay!
by Moritz Bartl 28 Jan '17

28 Jan '17

Hi! We still have a depressingly low number of relays that support IPv6 (currently only ~120 of ~1900 relays). If your host supports IPv6, please enable it, especially if you run an exit! This has to be done explicitly. https://trac.torproject.org/projects/tor/wiki/doc/IPv6RelayHowto In short, you add: ORPort [IPv6::address]:port IPv6Exit 1 ExitPolicy reject6 *:* (or a more open exit policy respectively) Thanks! -- Moritz Bartl https://www.torservers.net/

30 42

Netflix overblocking non-exit Tor relays
by Gero Kuehn 16 Dec '16

16 Dec '16

tl;dr: Even paying customers sharing IPs with non-exit Tor relays are now blocked from accessing Netflix Hello everyone ! After two very fruitless attempts to get the issue silently resolved through proper Netflix support channels, the time has come to make this public. As some of you have probably already read in the news, Netflix recently announced a crackdown on what they call "VPN Pirates" and what I call "paying customers using the same benefits of globalization that global companies like Netflix (ab)use for their taxes". They have now obviously changed their strategy regarding the Tor network. I am operating (among others) a middle-relay on a German residential fixed-ip VDSL-50 line (dc6jgk1/486740353B905AA4731F82C0B4CC25821A62C6E3) behind a NAT. Until 2 days ago, none of the devices sharing the same external IP address had any problem connecting to Netflix and there never was a Tor exit relay on that IP as far as I can tell. It is also obviously not possible for users of the Tor network to connect to Netflix through middle relays. As a consequence they should not be classifying such IP addresses as VPNs/Proxies and they should not be blocking them. This has been escalated and explained twice to "technical supervisors" in their callcenters. They did however not leave the impression that they a) care or b) intend to fix this at some point by parsing the Tor network information properly instead of using whatever cheap&wrong hack they use now. The official response from Netflix is that you now need to make a choice between operating that Tor relay (of any type) and the ability to watch Netflix. They also strictly refuse to refund any remaining credit in the customer account. My personal choice with regards to that blackmailing is as clear my next steps (conditional cancellation, 14 day deadline for refund and a legal challenge of their German AGB with regards to this issue). I am allergic to being blackmailed like that and being called a pirate by a service I legitimately paid for. For those of you who just would like to contribute to the Tor network without having trouble like that, please do not let this nonsense stop you. A more diversified Tor network is a more healthy network and I would really like to see more normal users operating tor relays operating in as many different locations as possible - including DSL lines "that are there anyways". If you do not want to be put into a position where you have to choose between your contribution to the network and some legal and paid-for entertainment, you might want to operate only a bridge until the issue has been resolved. If you already have the same problem, make it as expensive for Netflix as possible and spread the word about why this block (and geoblocking in general) is wrong. Thanks ! Kind regards, Gero / dc6jgk

14 21

British Airways website blocking non exit relays IPs?
by Pascal Terjan 11 Sep '16

11 Sep '16

I haven't been able to access BA website from home for the last few weeks. I have failed to get any other answer on the phone that to try using Internet Explorer or to wait for things to maybe get fixed. Twitter support was not more helpful. I am now wondering is this is because I run a (non exit) relay. Can anyone confirm if they also have the problem? http://ba.com/ Error is: The requested URL was rejected. Please contact our support team on Telephone: (+44) 0344 493 0787 option 3 (calls charged at local rate within the UK) Daily 06:00-20:00 UK time. Please quote support ID 13240401227540154825

10 16

experiences with debian tor 0.2.8.6 package from deb.torproject.org
by tor relay 08 Sep '16

08 Sep '16

Hi, I'm running a relay on debian jessie using packages from deb.torproject.org. I want to share the problems I had so others are aware of them when upgrading their relays. While upgrading from 0.2.7.6 to 0.2.8.6 via apt-get, I did a tail -f syslog to make sure I notice problems during the upgrade. (I expected a simple restart of all running tor instances) I use debian's multi instance systemd service file. When upgrading, all running tor instances are stopped (not restarted, as expected) syslog shows: Interrupt: we have stopped accepting new connections, and will shut down in 30 seconds. Interrupt again to exit now. Clean shutdown finished. Exiting. (problem is reproducible) Side note (unrelated to the upgrade but also relevant for the debian tor package from deb.torproject.org repo): Stopping the default instance stops all instances due to /lib/systemd/system/tor@.service: [...] PartOf=tor.service ReloadPropagatedFrom=tor.service How about using the same way as the RPM maintainer does - so one can enable the default instance without affecting all others? PartOf=tor-master.service ReloadPropagatedFrom=tor-master.service

7 31

Useful metrics for relay operators
by Alison 04 Sep '16

04 Sep '16

Hello all, After Roger's recent checkin emails to this list, some of the folks from the community and metrics teams have started to brainstorm ways that we could use Onionoo data [1] to give better support and recognition to the relay operators. For example, a weekly mail of all the relays that just passed the "earned a tshirt" threshold, or some other threshold about how much bandwidth they've pushed over a period of time. The community team would then contact the operator(s) and congratulate them, thank them for their service, see if we can offer them help in any other ways, and so forth. I'd like to hear directly from relay operators about what kinds of metrics they might like to see involved in a project like this. Have you achieved milestones with your relays that you wished Tor Project would have given you some recognition for? Have there been specific times you'd wished for a checkin email, like the one Roger sent (eg 3 months after starting a new relay)? Anything else that you think Onionoo could measure that would be valuable for you as an operator? Thank you so much for running relays! Looking forward to hearing from you. Alison [1] https://onionoo.torproject.org/

8 9

#torstrike
by Marcel Krzystek 02 Sep '16

02 Sep '16

What are the thoughts of relay operators on this? https://ghostbin.com/paste/kmnzz I can be persuaded otherwise, and perhaps i'm being naive, but i believe that operation of the network should remain independent from the politics within the organization. mk

12 19

newer version of tor
by shraptor 31 Aug '16

31 Aug '16

I am running an rpi3 with devuan. How to I get a more recent tor package on there? Could I use https://deb.torproject.org or do I have to setup a tool chain for armhf and build it from source? /scooby

3 4

Wrong mode on /var/run/tor
by Alexander Dietrich 31 Aug '16

31 Aug '16

Hello, I just had a tor instance exit with these error messages: [warn] Failed to parse/validate config: Failed to bind one of the listener ports. [err] Reading config failed--see warnings above. For usage, try -h. [warn] Restart failed (config error?). Exiting. Above that, the log contains an endless stream of these errors: [warn] Permissions on directory /var/run/tor are too permissive. [warn] Before Tor can create a control socket in "/var/run/tor/control", the directory "/var/run/tor" needs to exist, and to be accessible only by the user and group account that is running Tor. (On some Unix systems, anybody who can list a socket can connect to it, so Tor is being careful.) When I checked, the /var/run/tor directory had the mode "rwxr-sr-x". After removing the permissions for "other", tor started without problems. Did anyone else see this? I'm using Ubuntu packages from the deb.torproject.org repository. Best regards, Alexander -- PGP Key: https://dietrich.cx/pgp | 0x52FA4EE1722D54EB

2 2

new relay package for Ubuntu 16.04+
by Chad MILLER 31 Aug '16

31 Aug '16

tl;dr: $ sudo apt install snapd; sudo snap install tor-middle-relay Hi. Ubuntu has been working on a new kind of software package* that aims for isolation from the rest of the system, so 1) anyone can create packages for others without review, 2) security is better, and 3) it can be the basis for lots of supposedly single-purpose systems like cars, watches, home security systems, etc. The packages work for desktop and server too. The upshot is that soon, they hope, many devices will run the miniature Ubuntu plus the single package that makes the device do what it does to act like that device. If the mfr doesn't restrict it, we users can add other things that they never intended to make our device do more. Your Wifi Router could also be your print server. Why not? I made a tor-middle-relay package, so the TVs, Wifi Routers, Toasters, Self-driving Cars, Phones... of the world that are running that new kind of Ubuntu (or other OS that implements this package system!) can also help the Tor network. The code that enables that new package system is already in Ubuntu 16.04 LTS, so even existing desktops and servers can already use it. So, if you use Ubuntu 16.04 LTS, this should get you a Tor relay $ sudo apt install snapd $ sudo snap install tor-middle-relay (The ARMHF architecture has an open bug where the new package security rejects the "personality" syscall that Tor calls, so ARMHF doesn't work out of the box right now.) Once you have it installed, try $ sudo /snap/bin/tor-middle-relay.configure to bump up your bandwidth limit over the conservative defaults. There are a few dozen users already. https://atlas.torproject.org/#search/UbuntuCore I'd be happy to have an explosion of devices all over the world. Please send bug-reports privately, not to this list. - chad * https://developer.ubuntu.com/en/snappy/ http://snapcraft.io/ -- Chad Miller chad.org c2c3 0e6c a4ce d49e 79cf 06c61 a806 deac 3042 0066

8 15