October 2018 - tor-relays - lists.torproject.org

17 new relays at OVH (2018-10-24)
by nusenu 13 Dec '18

13 Dec '18

Hi, if you are the operator that added 17 new relays at OVH on 2018-10-24 (full list bellow), please set a ContactInfo and especially the MyFamily in your torrc to avoid putting tor clients at risk. kind regards, nusenu > added on 2018-10-24 > > | Up | Ext | JoinTime | IP | CC | ORp | Dirp | Version | Contact | Nickname | eFamMembers | FP | > |------+-------+------------+---------------+------+-------+--------+-----------+---------------------------+--------------------+---------------+------------------------------------------| > | 1 | 0 | 13:43:16 | 145.239.0.204 | de | 443 | 0 | 0.3.4.8 | None | Chief | 1 | 5EF464D06322614A3B8B6C2652C3C616F098EE8A | > | 1 | 0 | 13:43:17 | 54.37.200.155 | fr | 443 | 0 | 0.3.4.8 | None | Dash | 1 | B55F8445569407FBE6BAF205799A9EF8AC8CC256 | > | 1 | 0 | 13:43:18 | 51.68.170.247 | fr | 443 | 0 | 0.3.4.8 | None | Rebel | 1 | E7B036D933D6E0A68983E8E3F664EAA54ACDEA37 | > | 1 | 0 | 13:43:20 | 51.75.82.166 | fr | 443 | 0 | 0.3.4.8 | None | Butch | 1 | 4809E3F9A73F5373734A4D23E7E7807A4743DD8A | > | 1 | 0 | 13:43:21 | 51.75.153.17 | fr | 443 | 0 | 0.3.4.8 | None | Beauty | 1 | B66FBE3B2D9CE257AF75DEA760C69E379F7CDB80 | > | 1 | 0 | 13:43:22 | 51.68.170.74 | fr | 443 | 0 | 0.3.4.8 | None | Killer | 1 | E4CB0C293588C3E5FA7DB94485FF2686E128267F | > | 1 | 0 | 13:43:23 | 51.68.185.141 | fr | 443 | 0 | 0.3.4.8 | None | Arrow | 1 | 707F51E232E0CDAF64EC446609E7112CD3AD11F8 | > | 1 | 0 | 13:43:24 | 54.37.207.82 | fr | 443 | 0 | 0.3.4.8 | None | Dazzle | 1 | B80142DDCF8D6B72929541EFCC643ECCD99BEE36 | > | 1 | 0 | 13:50:41 | 145.239.1.97 | de | 443 | 0 | 0.3.4.8 | None | Memo | 1 | 1C514FA1A4F8A464E1853B70AA5D2F16FF087AD2 | > | 1 | 0 | 13:50:42 | 51.38.107.122 | fr | 443 | 0 | 0.3.4.8 | None | Pitch | 1 | 91B026FA459AE0DA15673AB07A9C6DFF8B41782B | > | 1 | 0 | 13:50:43 | 51.68.186.59 | fr | 443 | 0 | 0.3.4.8 | None | Smasher | 1 | 3B0EFDE689693CFDEC2305F7B99D5B2FA4A77D91 | > | 1 | 0 | 13:50:44 | 51.75.85.114 | fr | 443 | 0 | 0.3.4.8 | None | Landslide | 1 | C953A4C8DF0E233CB0D190C2A71B71F634AB4A14 | > | 1 | 0 | 13:50:45 | 51.68.182.30 | fr | 443 | 0 | 0.3.4.8 | None | Shade | 1 | EBE58DDCC51A9D23EE9DD39791695B608A1DFB29 | > | 1 | 0 | 13:50:46 | 54.37.207.37 | fr | 443 | 0 | 0.3.4.8 | None | Buster | 1 | D10C82E275A2B0121CF4075C92687F0786A72892 | > | 1 | 0 | 13:50:47 | 54.37.200.157 | fr | 443 | 0 | 0.3.4.8 | None | Digger | 1 | 6B29A78EEB42D318290DB60C6A2EDC714F1BAD42 | > | 1 | 0 | 13:50:48 | 54.37.207.84 | fr | 443 | 0 | 0.3.4.8 | None | Pipi | 1 | 150F7C9F4814C4918F4D2DEAA0C7A2255DC8C0E0 | > | 1 | 0 | 13:50:49 | 51.75.153.19 | fr | 443 | 0 | 0.3.4.8 | None | Shrimp | 1 | 51429A0F427A8DCB5B9DE64E35ECBBB76DAB0F7F | -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

2 1

Raspberry pi 3 relay performace
by tor_manager＠autistici.org 26 Nov '18

26 Nov '18

Hello everyone, I have a tor relay running on a raspberry with raspbian 9 and tor version 3.4.8, everything is working fine for more then a year. I noticed that the average download/upload is just 1.5 MB and the peak 3.3 MB The Bandwidth configuration is the following: BandwidthRate 9 MB BandwidthBurst 10 MB RelayBandwidthRate 9 MB RelayBandwidthBurst 10 MB MaxAdvertisedBandwidth 9 MB It doesn't look the CPU or memory usage are too high. Is this something normal? How can I improve the performance? Thanks a lot

4 8

Become a Fallback Directory Mirror
by Colin Childs 14 Nov '18

14 Nov '18

Hello Tor Relay Operators, Do you want your relay to be a Tor fallback directory mirror? Will it have the same address and port for the next 2 years? Just reply to this email with your relay's fingerprint. If your relay is on the current list, you don't need to do anything. If you're asking: Q: What's a fallback directory mirror? Fallback directory mirrors help Tor clients connect to the network. For more details, see [1]. Q: Is my relay on the current list? Search [2] and [3] for your relay fingerprint or IP address and port: [2] is the current list of fallbacks in Tor. [3] is used to create the next list of fallbacks. Q: What do I need to do if my relay is on the list? Keep the same IP address, keys, and ports. Email tor-relays if the relay's details change. Q: Can my relay be on the list next time? We need fast relays that will be on the same IP address and port for 2 years. Reply to this email to get on the list, or to update the details of your relay. Once or twice a year, we run a script to choose about 150-200 relays from the potential list [3] for the list in Tor [2]. Q: Why didn't my relay get on the list last time? We check a relay's uptime, flags, and speed [4]. Sometimes, a relay might be down when we check. That's ok, we will check it again next time. It's good to have some new relays on the list every release. That helps tor clients, because blocking a changing list is harder. Q. I already have a relay in the fallback list, can I add another? We will pick up to 7 relays per operator to be in the fallback list. Please send any relays that you would like considered for the fallback list. Thanks for considering and/or being a fallback directory mirror! [1]: https://trac.torproject.org/projects/tor/wiki/doc/FallbackDirectoryMirrors <https://trac.torproject.org/projects/tor/wiki/doc/FallbackDirectoryMirrors> [2]: https://gitweb.torproject.org/tor.git/tree/src/or/fallback_dirs.inc <https://gitweb.torproject.org/tor.git/tree/src/or/fallback_dirs.inc> [3]: https://gitweb.torproject.org/tor.git/tree/scripts/maint/fallback.whitelist <https://gitweb.torproject.org/tor.git/tree/scripts/maint/fallback.whitelist> [4]: https://trac.torproject.org/projects/tor/attachment/ticket/21564/fallbacks_… <https://trac.torproject.org/projects/tor/attachment/ticket/21564/fallbacks_…>

8 9

Monitoring exit node traffic by port?
by Isaac Grover, Aileron I.T. 10 Nov '18

10 Nov '18

Greetings fellow relay operators, Do you monitor outbound traffic from your relays by port? I run an exit node relay from my house allowing only "safe ports" that are not likely to generate complaints and I would like to keep an eye on how much traffic is coming from the Tor network through those ports to the Internet. Anyone? Do you use a tool like vnstat on the interface? Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" Office: 715-377-0440, Fax:715-690-1029, Web: www.aileronit.com

5 4

Re: [tor-relays] Running an exit node from home
by Isaac Grover, Aileron I.T. 01 Nov '18

01 Nov '18

Good morning Spiros, You are correct in that I won't maintain the exit flag without ports 80 and 443 open, *and* I lose my eligibility for a free t-shirt, *but* I am not likely to attract attention at my home either. =) Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" O: 715-377-0440, F:715-690-1029, W: www.aileronit.com LinkedIn: https://www.linkedin.com/in/IsaacGrover/ YouTube: https://www.youtube.com/channel/UCqrwZNFKdR-guKtuQzFPObQ

4 6

List purpose and moderation
by Colin Childs 01 Nov '18

01 Nov '18

Hello tor-relays, This message is to make everyone aware of the purpose of this list, and to notify that off-topic posting will result in moderation. This is to allow the list to continue being used as a relay operator support mechanism, and to make sure the people on the list for this purpose are not driven away by off-topic posts. The stated purpose of this list is as follows: Support and questions about running Tor relays (exit, non-exit, bridge) Topics relating to this are encouraged and accepted on the list at any time. However, this does not include: Posts intended to troll / annoy members of the list Acting as a support, publicity or communications channel for specific hosting providers Posts regarding general tech news of the day The tor-relays@ list is primarily a communication forum for current and prospective relay operators to obtain support, plus share stories and experiences. Relevant discussions about specific providers are also germane, although any usage of this list for the purposes of publicity or as a communications / support channel for providers is prohibited. Thank you all for being part of the relay operator community!

2 1

Running an exit node from home
by Isaac Grover, Aileron I.T. 31 Oct '18

31 Oct '18

Good morning, As a followup to my last (and other) posts on this list, I have been cautioned multiple times of running an exit node from my home. After careful consideration and previous direct feedback from this list, I configured an exit node with the following exit policy, which allows traffic on ports that are "safe" in my opinion, meaning that they're not likely to generate complaints or search warrants. accept *:5228 accept *:8333 accept *:9418 accept *:11371 reject *:* Regarding these aforementioned cautions, they all seem to be based on dated posts and/or irresponsible exit policies. I would not open any of the web, email, irc, remote desktop, ssh, etc. ports on an exit node based at home as those would generate complaints and/or search warrants very quickly, so I am open to discussion about modifying the groupthink behind this blanket "don't run an exit node at home" advice. Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" O: 715-377-0440<tel:715-425-0440>, F:715-690-1029<tel:715-690-1029>, W: www.aileronit.com<http://www.aileronit.com/> LinkedIn: https://www.linkedin.com/in/IsaacGrover/ YouTube: https://www.youtube.com/channel/UCqrwZNFKdR-guKtuQzFPObQ

4 3

Re: [tor-relays] freebsd relay doesnt receive any traffic (after 1 month)
by dlugasny＠protonmail.com 30 Oct '18

30 Oct '18

Hi Matt, thanks for Your hints. To build my BSD relay, I used some of the available in the internet BSD tutorials. It seems that I have copied some parameters without understanding what for they are. I would like to run non-exit tor relay. Which parameters should I commented out ? Documentation, in did I have to read it, but it would be much easier (much faster) to have some example which user can copy with some small modifications. Cheers Dlugasny Sent with ProtonMail Secure Email. ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, October 25, 2018 5:11 PM, Matt Traudt <pastly(a)torproject.org> wrote: > On 10/25/18 13:05, dlugasny(a)protonmail.com wrote: > > > Hi, > > few weeks ago ( more than 4) I have installed Freebsd with Tor relay > > service. > > System is connected to Tor network since more than one month but I see > > only 1-2 connections per day. > > I had Tor relay service on my Debian server for many years and I havent > > got any problems. With Freebsd its pain, nothing is working as expected. > > Any how I would like to build more BSD instances in few different > > countries, but first I need to know why its not working. > > Does any one could help me to do some troubleshooting ? > > Maybe some of the parameters in the torrc are blocking traffic ? > > My torrc without Hashedpassword, Nickname: > > ########################### > > SocksPort 0 > > Log notice file /var/log/tor/notices.log > > ControlPort 9051 > > ORPort 9001 > > RelayBandwidthRate 400 KBytes # Throttle traffic to 100KB/s (800Kbps) > > RelayBandwidthBurst 600 KBytes # But allow bursts up to 200KB (1600Kb) > > ContactInfo Dlugas-ny <dlugasny AT protonmail dot com> > > DirPort 9030 # what port to advertise for directory connections > > ExitPolicy reject : # no exits allowed > > PublishServerDescriptor 0 > > CellStatistics 1 > > ExtraInfoStatistics 1 > > ConnDirectionStatistics 1 > > EntryStatistics 1 > > LogMessageDomains 1 > > AvoidDiskWrites 1 > > WarnPlaintextPorts > > HeartbeatPeriod 1hours > > ServerTransportPlugin obfs2,obfs3 exec /usr/local/bin/obfsproxy managed > > ServerTransportPlugin obfs4 exec /usr/local/bin/obfsproxy managed > > ExtORPort auto > > ############################ > > Thanks in advance for any support > > This is a very confused torrc. What are you trying to accomplish with it? > > There's lines indicating you want to run a bridge > (ServerTransportPlugin, ExtORPort) > > There's a line indicating you don't want your bridge to be one > distrubted via BridgeDB (PublishServerDescriptor 0), yet you wonder why > no one is using your bride/relay. > > Please read > > https://trac.torproject.org/projects/tor/wiki/TorRelayGuide > > And don't set any options that it doesn't tell you to set. And don't set > options you don't understand. `man tor` can help you understand what > you're setting > > Matt

4 5

searching the tor-relays archives
by torix＠protonmail.com 30 Oct '18

30 Oct '18

Before I download months of gzipped archives and zgrep them myself, is there a way to search the messages themselves? I'm looking at: https://lists.torproject.org/pipermail/tor-relays/ but maybe there as another setup somewhere else. TIA, --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2

Re: [tor-relays] Monitoring exit node traffic by port?
by Isaac Grover, Aileron I.T. 30 Oct '18

30 Oct '18

Good morning all, My motivation for the traffic graphing per port was simply to get an idea if the ports were even being used, and I would only view them internally - would this still be a violation of user trust? Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" O: 715-377-0440, F:715-690-1029, W: www.aileronit.com LinkedIn: https://www.linkedin.com/in/IsaacGrover/ YouTube: https://www.youtube.com/channel/UCqrwZNFKdR-guKtuQzFPObQ

1 0