November 2018 - tor-relays - lists.torproject.org

Re: [tor-relays] tor relay - impact on e-mail system reputation
by starlight.2018q2＠binnacle.cx 26 Nov '18

26 Nov '18

If you have a good deal on a powerful VPS you wish to run as a relay, suggest you rent a second dirt-cheap low resource VPS for email. MTA softwares tolerate flaky connectivity and system performance well. RBLs are a fact of life. I use them to great benefit on my MTAs. Reason no-port-25 exits are blacklisted is that web-form spammers use them. Here are two excellent resources for viewing the blacklist status of IP addresses (helpful to check IPs, when known, before purchase): http://multirbl.valli.org/lookup/x.x.x.x.html # single IP https://www.senderbase.org/lookup/?search_string=x.x.x.x/24 # block, directs to Talos The lists which matter most are Spamhaus, CBL and Barracuda. Good luck with it! On 2Thu Nov 22 13:08:55 UTC 2018, Artem Dziubenko wrote: > >Hi, > >no its not possible. This is powerful VPS with single IP. I simply do not >want to have blacklisted IP because tor relay is running on it. > >In the past many times IP was blaclisted and afterwards I had >several problems with email delivery. > >I do not understand why rbls blocking tor non exit relay ip's... It stupid... > >Cheers >Dlugasny > >Sent from ProtonMail mobile > >-------- Original Message -------- >On 22 Nov 2018, 08:30, Artem Dziubenko wrote: > >> Is it possible to get a second IP address for that server from your ISP? >> >> ------ Original Message ------ >>> Hi, >>> >>> I haven an e-mail server which has a lot of not consumed >>> resources (CPU/Traffic etc.). Base on my practice I know that my >>> E-mail server will loose reputation if Tor relay will run on the same IP. >>> >>> Is there any other way to utilize resources of that machine without >>>> any reputation impact on the IP. >>> >>> Thanks in advance for any feedback. >>> >>> Cheers >>> Dlugasny

4 5

Raspberry pi 3 relay performace
by tor_manager＠autistici.org 26 Nov '18

26 Nov '18

Hello everyone, I have a tor relay running on a raspberry with raspbian 9 and tor version 3.4.8, everything is working fine for more then a year. I noticed that the average download/upload is just 1.5 MB and the peak 3.3 MB The Bandwidth configuration is the following: BandwidthRate 9 MB BandwidthBurst 10 MB RelayBandwidthRate 9 MB RelayBandwidthBurst 10 MB MaxAdvertisedBandwidth 9 MB It doesn't look the CPU or memory usage are too high. Is this something normal? How can I improve the performance? Thanks a lot

4 8

How To Update The Tor Expert Bundle To Tor 0.3.4.9
by Keifer Bly 26 Nov '18

26 Nov '18

Hello, So I am running an obfscated bridge on Windows 10 via the tor expert bundle, which, even when I tried downloading it today, is running tor 0.3.4.8. I was unaware that tor 0.3.4.9 had been released due to this. Do to being away from where the relay is running, I will not be able to update it for about 4 days, but how could I update the tor expert bundle to tor 0,3,4,9? How could I update the tor expert bundle to the newest tor in general? Thank you.

2 2

Is the public information for relays trustable?
by Gunnar Wolf 25 Nov '18

25 Nov '18

Hi, I just asked a superset of this question to the IRC channel - But I want to be able to better refer to the subset that wasn't answered there ;-) I am working together with some other people to increase the number of relays in Mexico. We have finally started to increase the number - from our usual two active relays to four, still WAY too low, but it's a beginning: https://metrics.torproject.org/rs.html#search/country:mx But there are some issues / questions bugging me: When we set out to pursue this, we faced the reality that most Mexican ISPs block Tor relays in some way or another: The main ISP in the country (Telmex / Infinitum / Uninet, depending on the business branch in question) blocks all communication to seven of the dirauths, thereby making it impossible to operate a relay (although bridges do work); many other ISPs employ a set of nested NAT systems, making it impossible for external computers to reach a server inside it... However, we have at least one relay claiming to be from Uninet (5F6E720D7F0A95D6276B6F6DF8C210735A331B9D - Not currently online, but made it to the consensus at least at several points over the past months). We also have some in an ISP that gives addresses behind multiple layers of NAT and are unworkable (FF3FF664B0811B2E3C237BECA4382966AD9E393C, 6E483A91105C647A65ED04E1CB637AAD84F5943F) So... Is this information right? Can this be in some way spoofed? How should I interpret this? Thanks,

4 4

Tor ContactInfo generator
by Eran Sandler 23 Nov '18

23 Nov '18

Hi everyone, I've build a small website with nusenu's help to generate the Tor ContactInfo field value based on nusenu's specification: https://github.com/nusenu/ContactInfo-Information-Sharing-Specification Check out the website here: https://torcontactinfogenerator.netlify.com/ The code is in Github (there is a link to the repo at the end of the website). Feel free to send pull requests for changes/fixes/updates. Thanks, Eran

3 6

notices.log: "[warn] Rejecting DNS request from disallowed IP"
by petrarca＠protonmail.ch 23 Nov '18

23 Nov '18

Hi, on a small server I did try to force local DNS requests to the local Tor via iptables/ferm (Nat, Output-Chain, protocol udp dport domain REDIRECT to-ports 5300). Torrc has the following included: 'DNSPort 127.0.0.1:5300'. Unfortunately, it doesn't work as expected, but I get a warning in Tor's notices.log stating "[warn] Rejecting DNS request from disallowed IP" for each DNS request and even after hours of searching around and trying different configs I could't find the root cause yet. Question: what does "disallowed IP" really mean, i.e. what IPs are allowed by Tor and which ones are not? Any ideas and hints on how to investigate further are highly welcome! :-) to

2 2

tor relay - impact on e-mail system reputation
by dlugasny＠protonmail.com 22 Nov '18

22 Nov '18

Hi, I haven an e-mail server which has a lot of not consumed resources (CPU/Traffic etc.). Base on my practice I know that my E-mail server will loose reputation if Tor relay will run on the same IP. Is there any other way to utilize resources of that machine without any reputation impact on the IP. Thanks in advance for any feedback. Cheers Dlugasny Sent with [ProtonMail](https://protonmail.com) Secure Email.

5 5

Blutmagie retired
by starlight.2018q2＠binnacle.cx 22 Nov '18

22 Nov '18

The operator of Blutmagie Torstatus, Olaf Selke has retired the service. For years Blutmagie has been a fantastic resource for the Tor community and I am writing to express my gratitude to Olaf for his wonderful contribution and the time and effort he expended maintaining it. Thank you Olaf!

9 17

tor relay on freebsd - how to upgrade it
by dlugasny＠protonmail.com 21 Nov '18

21 Nov '18

Hi, since few days nyx showing that my Tor relay is outdated. (Tor 0.3.4.8) This relay is running on Freebsd. I have not so big expirience with BSD systems... Does any one could help me to update my tor relay ? Thanks in advance for any support. Cheers Dlugasny Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2

Updating tor relay software to 0.3.4.9 through google backup and sync on Windows 10
by Keifer Bly 19 Nov '18

19 Nov '18

Hello list, So I am in a bit of a dilemma. I am currently away from the computer where my obfs4 bridge at https://metrics.torproject.org/rs.html#details/148BD64BED9F2C27637D986DE032… runs off of and will be so for the next two weeks. I had set up TeamViewer so I could remote administer my bridge while I could not physically access the machine. But then, like a complete dork, I forgot TeamViewer automatically changes the connection password every few days or so, I am waiting to hear back from them if they can reset it for me. I am trying to access it because my bridge is currently running tor 0.3.4.8 (via the tor expert bundle) and am trying to update it to tor 0.3.4.9, but now may not be able to do so because the TeamViewer password changed (smacks face for forgetting it does that). I am running my relay via the tor expert bundle, which is just checked and is still on tor 0.3.4.8 (I am guessing the tor expert bundle is updated on a somewhat different schedule). I use Google Backup and Sync to automatically backup my tor bridge keys, etc, and tor.exe is also backed up. Probably not, but I wonder if there would be a way to upload tor 0.3.4.9.exe in place of 0.3.4.8 and sync it to my computer? Probably not as this bridge is running on a Windows machine, but thoughts are appreciated. Thank you.

1 0