November 2018 - tor-relays - lists.torproject.org

Questions to ask exit node providers
by F67 Group 08 Oct '19

08 Oct '19

We are thinking of running a Tor Exit Node. Does anybody have a list of questions to ask before purchasing a VPS or colocation? I came up with some basic questions: - Do you allow a Tor exit node? [with explanation] - What are the policies for handling abuse complaints? - How much uplink bandwidth do you provide? Any other questions one should ask? Thanks.

17 49

note to Falback Directory operators: bandwidth wasting bot
by starlight.2018q2＠binnacle.cx 03 Feb '19

03 Feb '19

For the last year a bot of some kind has loaded Fallback Directory relays with excessive directory document requests. Some detail can be found in ticket #27921 at https://trac.torproject.org/projects/tor/ticket/27921. To determine if your relay is affected, look the relay up in https://metrics.torproject.org/rs.html, click the 6-Month history tab, and examine the graph for significantly higher "write bytes per second" relative to "read bytes per second". I find this annoying (since I pay for the wasted bandwidth) and came up with a one-line hack that mitigates the abuse without impairing the usefulness of the DIR service to normal relays and clients. If you compile your daemon from source and are interested contact me directly for the patch.

2 1

Compatibility issue with OpenSSL 1.1.1a
by Nick Mathewson 02 Jan '19

02 Jan '19

Hi, folks! You should know that there is a compatibility issue between Tor and OpenSSL 1.1.1a, when TLS 1.3 is in use. Only OpenSSL 1.1.1a is affected; other OpenSSL versions are not. The effect here is that Tor relays using this version of OpenSSL will not be able to negotiate TLS 1.3 connections with one another. This is caused by a regression in OpenSSL 1.1.1a's implementation of tls13_hkdf_expand() function. For more information, see https://trac.torproject.org/projects/tor/ticket/28616 We're looking into possible mitigations. best wishes, -- Nick

5 7

17 new relays at OVH (2018-10-24)
by nusenu 13 Dec '18

13 Dec '18

Hi, if you are the operator that added 17 new relays at OVH on 2018-10-24 (full list bellow), please set a ContactInfo and especially the MyFamily in your torrc to avoid putting tor clients at risk. kind regards, nusenu > added on 2018-10-24 > > | Up | Ext | JoinTime | IP | CC | ORp | Dirp | Version | Contact | Nickname | eFamMembers | FP | > |------+-------+------------+---------------+------+-------+--------+-----------+---------------------------+--------------------+---------------+------------------------------------------| > | 1 | 0 | 13:43:16 | 145.239.0.204 | de | 443 | 0 | 0.3.4.8 | None | Chief | 1 | 5EF464D06322614A3B8B6C2652C3C616F098EE8A | > | 1 | 0 | 13:43:17 | 54.37.200.155 | fr | 443 | 0 | 0.3.4.8 | None | Dash | 1 | B55F8445569407FBE6BAF205799A9EF8AC8CC256 | > | 1 | 0 | 13:43:18 | 51.68.170.247 | fr | 443 | 0 | 0.3.4.8 | None | Rebel | 1 | E7B036D933D6E0A68983E8E3F664EAA54ACDEA37 | > | 1 | 0 | 13:43:20 | 51.75.82.166 | fr | 443 | 0 | 0.3.4.8 | None | Butch | 1 | 4809E3F9A73F5373734A4D23E7E7807A4743DD8A | > | 1 | 0 | 13:43:21 | 51.75.153.17 | fr | 443 | 0 | 0.3.4.8 | None | Beauty | 1 | B66FBE3B2D9CE257AF75DEA760C69E379F7CDB80 | > | 1 | 0 | 13:43:22 | 51.68.170.74 | fr | 443 | 0 | 0.3.4.8 | None | Killer | 1 | E4CB0C293588C3E5FA7DB94485FF2686E128267F | > | 1 | 0 | 13:43:23 | 51.68.185.141 | fr | 443 | 0 | 0.3.4.8 | None | Arrow | 1 | 707F51E232E0CDAF64EC446609E7112CD3AD11F8 | > | 1 | 0 | 13:43:24 | 54.37.207.82 | fr | 443 | 0 | 0.3.4.8 | None | Dazzle | 1 | B80142DDCF8D6B72929541EFCC643ECCD99BEE36 | > | 1 | 0 | 13:50:41 | 145.239.1.97 | de | 443 | 0 | 0.3.4.8 | None | Memo | 1 | 1C514FA1A4F8A464E1853B70AA5D2F16FF087AD2 | > | 1 | 0 | 13:50:42 | 51.38.107.122 | fr | 443 | 0 | 0.3.4.8 | None | Pitch | 1 | 91B026FA459AE0DA15673AB07A9C6DFF8B41782B | > | 1 | 0 | 13:50:43 | 51.68.186.59 | fr | 443 | 0 | 0.3.4.8 | None | Smasher | 1 | 3B0EFDE689693CFDEC2305F7B99D5B2FA4A77D91 | > | 1 | 0 | 13:50:44 | 51.75.85.114 | fr | 443 | 0 | 0.3.4.8 | None | Landslide | 1 | C953A4C8DF0E233CB0D190C2A71B71F634AB4A14 | > | 1 | 0 | 13:50:45 | 51.68.182.30 | fr | 443 | 0 | 0.3.4.8 | None | Shade | 1 | EBE58DDCC51A9D23EE9DD39791695B608A1DFB29 | > | 1 | 0 | 13:50:46 | 54.37.207.37 | fr | 443 | 0 | 0.3.4.8 | None | Buster | 1 | D10C82E275A2B0121CF4075C92687F0786A72892 | > | 1 | 0 | 13:50:47 | 54.37.200.157 | fr | 443 | 0 | 0.3.4.8 | None | Digger | 1 | 6B29A78EEB42D318290DB60C6A2EDC714F1BAD42 | > | 1 | 0 | 13:50:48 | 54.37.207.84 | fr | 443 | 0 | 0.3.4.8 | None | Pipi | 1 | 150F7C9F4814C4918F4D2DEAA0C7A2255DC8C0E0 | > | 1 | 0 | 13:50:49 | 51.75.153.19 | fr | 443 | 0 | 0.3.4.8 | None | Shrimp | 1 | 51429A0F427A8DCB5B9DE64E35ECBBB76DAB0F7F | -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

2 1

UbuntuCore relays
by nusenu 02 Dec '18

02 Dec '18

Roger Dingledine wrote: > Btw, all of these UbuntuCore relays are from snap packages run by Tor > enthusiasts Do you indeed mean "all"? Since there have also been other hypothesis about at least some of these "UbuntuCore" relays in the past (see bad-relays ML archive from 2017-11-13), it would be great if you could elaborate on how you came to that conclusion. thanks, nusenu -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

3 5

Conrad Rockenhaus
by torix＠protonmail.com 30 Nov '18

30 Nov '18

Dear All, Has anyone news of Conrad? His servers at greypony have been down a week, which is worrying. TIA, --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 1

Re: [tor-relays] Relay with VPN
by deadcow＠tuta.io 30 Nov '18

30 Nov '18

Hi thanks for the answers. I understand your answers. I can not agree or disagree because I have no idea about it so I believe you and I wont do Relay with VPN :) I am using VPN all the time and I wanted to try run relay.... what you say make sense, so for the time I try, i'll disconnect VPN. I just want to see that my internet is good enough to run it 10/1 but as i've read in the instructions maybe bridge would be better for me ... i have access to internet 120/10 so i could set up relay on that but i need a PC with linux and remote control so getting complicated ... first try out what i have, if cool, later try more and more :) I love the concept of tor, I'd like to promote it :) question: can be laptop ? i think why not, but maybe i'm wrong thanks for helps :) --- Google, Facebook, The government and others are spying on your emails! DO YOU LIKE IT? If not, CHANGE! Securely sent with Tutanota. Claim your encrypted mailbox today! https://tutanota.com Nov 28, 2018, 11:53 PM by tor-relays-request(a)lists.torproject.org: > Send tor-relays mailing list submissions to > > tor-relays(a)lists.torproject.org <mailto:tor-relays@lists.torproject.org> > > To subscribe or unsubscribe via the World Wide Web, visit > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays> > or, via email, send a message with subject or body 'help' to > > tor-relays-request(a)lists.torproject.org <mailto:tor-relays-request@lists.torproject.org> > > You can reach the person managing the list at > > tor-relays-owner(a)lists.torproject.org <mailto:tor-relays-owner@lists.torproject.org> > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Re: Relay with VPN (s7r) > 2. Compatibility issue with OpenSSL 1.1.1a (Nick Mathewson) > 3. Re: Relay with VPN (Roger Dingledine) > 4. Re: tor relay warning - what is mean ? (> dlugasny(a)protonmail.com <mailto:dlugasny@protonmail.com>> ) > 5. Re: Relay with VPN (teor) > 6. Re: tor relay warning - what is mean ? (teor) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 28 Nov 2018 14:23:38 +0200 > From: s7r <> s7r(a)sky-ip.org <mailto:s7r@sky-ip.org>> > > To: > tor-relays(a)lists.torproject.org <mailto:tor-relays@lists.torproject.org> > Subject: Re: [tor-relays] Relay with VPN > Message-ID: <> eba112e6-f60b-6278-2bf3-e86c34dc0dc4(a)sky-ip.org <mailto:eba112e6-f60b-6278-2bf3-e86c34dc0dc4@sky-ip.org>> > > Content-Type: text/plain; charset="utf-8" > > 11:18 PM, > deadcow(a)tuta.io <mailto:deadcow@tuta.io>> wrote: > >> Hi everyone, first time ever using mailing lists. Please let me know if something I'm doing wrong. >> >> I'd like to run a middle relay. >> I'm using Linux mint 19 >> >> The question. Can i set up relay through VPN? (nordvpn) >> Or if i want relay i have to stop using vpn? >> Thank you for help >> >> >> --- >> Google, Facebook, The government and others are spying on your emails! >> DO YOU LIKE IT? If not, CHANGE! >> Securely sent with Tutanota. Claim your encrypted mailbox today! >> https://tutanota.com <https://tutanota.com> >> > > Hello, > > Thanks for your interest in running a relay. > > You say you want to run a middle relay, why do you want to run it behind > a VPN in this case? Middle relays get no abuse complaints or anything as > they can not be used as exit points. Maybe you can explain to us why you > think you need to run your middle relay behind a VPN, do you have a > particular reason? Because for Tor running a relay behind a VPN is not a > + on security or privacy at all, instead it just complicates things. > > Secondly, if you have justified reason to still want to use a VPN on a > middle relay, here are some things you need to take into consideration > as well as disadvantages: > > - you will have higher latency; > - the bandwidth of your relay will be of the speed of the VPN itself, > and shared VPN usually are slow for high grade server connections that > run 24x7 with constant bandwidth usage; > - when the VPN tunnel will fail, due to an endpoint problem or internet > connectivity problem or route to destination problem, etc., the relay > will update its descriptor with the real IP address instead of the VPN > address, and when the VPN tunnel connects again change again and so on > until clients will be confused. One way around this is for your to > specify 'Address' in torrc and bind to explicit <address>:<port>. > > - you don't need just any VPN, you need a VPN with a public and static > IP address, so that you can actually open ports on that IP address > applications can bind and listen to certain ports. A normal shared VPN > that just changes the IP address for browsing is not sufficient, because > that does not assign a public static IP address directly. > > There are VPN services out there that offer public and static IP > addresses, but they are more expensive. > > - you should tell the VPN provider that you plan to use the maximum > available bandwidth 24x7, because all say it's unlimited because they > think "nobody will use that much", but when running Tor relays this is > not true. > >

2 1

tor relay warning - what is mean ?
by dlugasny＠protonmail.com 28 Nov '18

28 Nov '18

Hi, does any could tell me what is mean that Warn ? 16:32:33 [WARN] {BUG} Bug: 0x1076f25 <_start+0xa5> at /usr/local/bin/tor (on Tor 0.3.4.9 4ec3ccf2863b86e7) │ 16:32:33 [WARN] {BUG} Bug: 0x1077119 <main+0x19> at /usr/local/bin/tor (on Tor 0.3.4.9 4ec3ccf2863b86e7) │ 16:32:33 [WARN] {BUG} Bug: 0x107727c <tor_main+0x4c> at /usr/local/bin/tor (on Tor 0.3.4.9 4ec3ccf2863b86e7) │ 16:32:33 [WARN] {BUG} Bug: 0x107bfe9 <tor_run_main+0xb9> at /usr/local/bin/tor (on Tor 0.3.4.9 4ec3ccf2863b86e7) │ 16:32:33 [WARN] {BUG} Bug: 0x107a221 <do_main_loop+0x411> at /usr/local/bin/tor (on Tor 0.3.4.9 4ec3ccf2863b86e7) ─┘ 16:32:33 [WARN] {BUG} Bug: 0x801b4de1f <event_base_loop+0x51f> at /usr/local/lib/libevent-2.1.so.6 (on Tor 0.3.4.9 4ec3ccf2863b86e7) I extracted that from Nyx. FreeBSD 11.1 Cheers Dlugasny Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 3

Relay with VPN
by deadcow＠tuta.io 28 Nov '18

28 Nov '18

Hi everyone, first time ever using mailing lists. Please let me know if something I'm doing wrong. I'd like to run a middle relay. I'm using Linux mint 19 The question. Can i set up relay through VPN? (nordvpn) Or if i want relay i have to stop using vpn? Thank you for help --- Google, Facebook, The government and others are spying on your emails! DO YOU LIKE IT? If not, CHANGE! Securely sent with Tutanota. Claim your encrypted mailbox today! https://tutanota.com

5 4

Is There A Windows CMD Command To Update Tor.exe?
by Keifer Bly 28 Nov '18

28 Nov '18

Hello, so today when I started my bridge relay, tor popped up with a warning saying this WARNING: According to directory authorities, this version of tor [0.3.4.8] is out of date or no longer recommended. I am running the obfs4 bridge via tor expert bundle, and was told previously that that is updated when the tor browser is updated, but am wondering, seeing as there is a way to do this on MacOS and Linux, is there a way to update the tor process (I guess I would also need to update the obfs4 exe process) via the Windows command line? Thank you.

2 1