April 2017 - tor-relays - lists.torproject.org

ansible-relayor, how to ?
by Petrusko 01 Apr '18

01 Apr '18

Hey! I'm planning to try the "ansible-relayor" to deploy some Tor relay instances. If I'm not wrong, it's a main goal ? 2 instances / IP... (soooory for being really noob about this!!!) But I'm lost... not found a tutorial, step by step, you know the tutorial so loved by all noobs! For now, on a fresh Debian8 install, there are : - tor 0.2.9.8 (fresh install from depo, client is ok when opening log file) - ansible - ansible-galaxy install nusenu.relayor - git clone https://github.com/nusenu/ansible-relayor (the folder is stored in my /home...) Will it configure (automatically) many torrc file per instance ? +every key files /relay ? (I'm not too much lost!) Do have I to do this install on every server built ? Or relayor can manage few servers on different locations ? Command lines list use this tool if available ? Many thx for help !!! (and hard work for this tool :) -- Petrusko C0BF 2184 4A77 4A18 90E9 F72C B3CA E665 EBE2 3AE5

6 9

Monitoring multiple relays
by Xza 01 Nov '17

01 Nov '17

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello, I have a couple relays / exits running. Now my question is : how do you manage them is there any dashboard or CLI tools to manage them ( statistics, ect.. ) I know the cli tool specially for Tor "arm" Thanks alot. - -- PGP : 29A4CE52 -----BEGIN PGP SIGNATURE----- iQI4BAEBCgAiGxxEbyA8eWFuZGVyZXNvbkByaXNldXAubmV0PgUCV0SJlwAKCRBI of/XNyszSvv/D/9VtjI+bmiqK53v//StUbmpYjgQjYheYvwktFld+2XDURh52dmU sbk3lab2RS1eQJxjV0BVXMF9O2JUAlp4NA2UMpj8ZJlCk0h1S6p2o4/sAlsrHr8Z nb67HiaRIyEvi9cQiXFtDtK/onAkEuKskolyvh3ysJRRUubHSX1z8WuNJIc4xyGH ZpSLPGUOO6qI7mM8ztS0muEy1khmkHgtlyHi2l4K/NsW3I90cV3w6Db2AEnV6v1c tsfehqLExsHUdEo0U3hHU7yY1p2fzD5Z+C0tgVKTnP5Zus/Vr9OH/zFwxneo0E7a 5FHdnCZnNIG9W32uQgjDdmBEv/YFEd0um/vMWFGUehFANSt+DIps7E+AjwiJwm2i ov97JJurQkrSMX7ZchTEsy720Ju272olp2eDiHaXXTK2TkxcEq+d1gZfj7CXycPW 6mCrj6L6URJAZ34GJQfFFjv8QbFmKkAvGhxl/O8KXRbXxedbLH7PY73jmFjJcmxO +KnSeyqMe1KbzazYyFydP+VmgI2k1IlO89l8Jq1Gq9f2KOPY9UKFZjGDKLS0xGZW EnqU/KUINcrGejYFT8nYNxA+OFTd/ZGIX5qP4Vo5NsZ/pDLZjdxIcvHx1jjZbER+ 5Ku2bihm2KTNAGoYDqB3LGCm+QdEFG/p573xQCcXPk92GyhMJDi9EMPDgA== =mTa0 -----END PGP SIGNATURE-----

8 8

Re: [tor-relays] Strange behaviour Tor 0.2.9.10
by Geoff Down 18 May '17

18 May '17

Further information. Curl error Failed to receive SOCKS5 connect request ack. and from earlier, Tor log Mar 19 11:52:37.000 [notice] Tried for 32496 seconds to get a connection to [scrubbed]:80. Giving up. -- http://www.fastmail.com - A no graphics, no pop-ups email service

3 12

tornull
by Dirk 01 May '17

01 May '17

Dear all, I was made aware of the Tor Null Advisory BL [1] which is also mentioned in trac here [2]. Block Botnets does not seem like a bad idea in principal. But the page has no listing of a responsible person neither any criteria listed which it chooses to identify "bad" IPs. Looking at some of the links I found 1 which had a date from 2011 [3]. As will I miss information an when and how often it is updated. Therefore it looks slightly suspicious to me. And it surely has an abuse potential. Does anyone have more information on the background or recommendations here ? best regards Dirk [1] https://tornull.org/ [2] https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy [3] https://www.spamhaus.org/sbl/query/SBL113323

4 4

Is there any problems for users of my exit node if I have DNS lookups go out on a different interface?
by Anders Andersson 01 May '17

01 May '17

I plan to set up a Tor exit node (again), and the server has two external interfaces each with a dedicated IP. I'm going to use one of these exclusively for Tor. I also run a validating Unbound on the same machine, and all DNS lookups that are not cached will go out on the *other* interface by default. internet <--> IP 1 <--> unbound internet <--> IP 2 <--> tor, talking locally to unbound IP 1 and 2 should have the same routing path otherwise, because it's on the same network. I can't imagine how this could be problematic, but there has been so much talk about DNS lookups over the years, so I thought I'd better check with people who know more about this.

2 1

(no subject)
by Alex 29 Apr '17

29 Apr '17

-- реклама ----------------------------------------------------------- http://FREEhost.UA - мы размещаем больше 100 тыс. сайтов! Качественный хостинг для новичков и профи - http://goo.gl/EcgF4I

1 0

Law Enforcement Request
by teor 28 Apr '17

28 Apr '17

Hi all, Last week, we were contacted by Australian law enforcement, on behalf of German law enforcement, about one of our relays. It appears that some law enforcement agency had performed a guard discovery attack on a hidden service. One of our relays was that hidden service's guard. They requested that we provide a detailed network capture of that guard's traffic. We refused. (We do not keep detailed logs.) We also shut down the guard. T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------

3 3

bind DNS Crash on Exit
by teor 26 Apr '17

26 Apr '17

Hi all, Are you using bind as a local caching resolver on your exits? The DNS resolver on our exit crashed over the weekend due to this bug: https://kb.isc.org/article/AA-01466 It hasn't been patched yet in Debian: https://security-tracker.debian.org/tracker/CVE-2017-3137 So I have added a file: /etc/systemd/system/bind9.service.d/restart-on-abort.conf With the text: [Service] Restart=on-abort This should work for any systemd/bind9 Linux system. T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------

2 1

Re: [tor-relays] [tor-talk] TOR problems - seriously PLEASE HELP ME!
by Jonathan Marquardt 26 Apr '17

26 Apr '17

On Mon, Apr 24, 2017 at 12:16:23PM +0200, unpublished wrote: > 1. Many web pages display information that I do not support "TOR > connections"? Not sure, what you mean here. Perhaps THEY don't support (i.e. block) connections from Tor users, because they are afraid of spam or other stupid reasons. Nothing you can really do here. Websites blocking Tor is a huge problem. > 2. How to increase (amazon) the number of relay nodes? Because standard > only two redirect point? There are always three nodes. The amazon node should be your guard relay (where you enter the Tor network). Then there are two relays after that. There isn't really any way to change that. Three hops should be sufficient for decent anonymity, no real need to worry here. > 3. How to change the end node of the country (eg country from which I am > POLAND)? Here's a simple guide on how to do that: http://www.wikihow.com/Set-a-Specific-Country-in-a-Tor-Browser -- 4096R/1224DBD299A4F5F3 47BC 7DE8 3D46 2E8B ED18 AA86 1224 DBD2 99A4 F5F3

2 1

Relay traffic went to ~zero
by Jan Jancar 21 Apr '17

21 Apr '17

Hi all, I have been running my relay for about a year now and about two weeks ago my relay traffic went close to zero [1]. Any ideas as to why? Is it my ISP silently throttling my ORport after founding out I run a relay? Is it some misconfiguration on my part? My consensus weight went down from ~400 to 10, over the last few days. [1]: http://imgur.com/YOMxU66 [2]: https://atlas.torproject.org/#details/1673C036756D2800D2BD0F7C20DEE3FB934F9… [3]: http://torstatus.blutmagie.de/router_detail.php?FP=1673c036756d2800d2bd0f7c… Cheers, -- Jan ______________________________________________________ /\ # PGP: 362056ADA8F2F4E421565EF87F4A448FE68F329D /__\ # https://neuromancer.sk /\ /\ # Eastern Seaboard Phishing Authority /__\/__\ #

5 7