June 2018 - tor-relays - lists.torproject.org

A general question for relay operators
by arisbe 29 Jun '18

29 Jun '18

Hello George and all, When I was learning to implement Tor I had difficulty wading through the web pages for information. Some pages were obsolete, some poorly maintained (think Tor flow or good/bad hosting companies). The Tor manual is just a huge list of Tor terminology with no aids to help find things. The Tor project site has no site map. I still occasionally have the same problems when I try to find something. I found this very discouraging as I tried to grow my first Tor node without a live person to help me. I can imagine how daunting this would be to someone also trying to learn linux. Hey, thanks so much for asking. I appreciate your interest.

3 3

No IPv6 bridges from bridges.torproject.org
by Roman Mamedov 28 Jun '18

28 Jun '18

Hello, If you select "Do you need IPv6 addresses - Yes", it always results in an error "There aren't any bridges available". No matter if choosing obfs4 or none for the pluggable transport. Is that thing working? There should be at least one available (with obfs4, too), or at least I was under impression that I run one. As a side note, that page always loads in my native language with no way to switch to English -- pages which do this are the worst. In this case it means I can't usefully copy-paste you the exact error messages that I get. -- With respect, Roman

2 1

Is Tor-network protected from using one hop?
by dave levi 27 Jun '18

27 Jun '18

I'm testing few things in Tor and I noticed that if im changing(from the source code) the number of hop's(nodes) to be more then 3 hop's it work's fine(slowly, but still working) and if im sting only 2 hop's its still works great. but, when i'm setting only 1 hop, i can open the Tor-browser but i can't use it(Tor-browser) to visit site(regular site or onion site too). so im thinking maybe the Tor-network have protected from users who are using 1 hop?

6 6

Re: [tor-relays] tor-relays Digest, Vol 89, Issue 49
by dave levi 26 Jun '18

26 Jun '18

first, Thank you all for you answers and help. let me make it a bit harder. now, im running a relay which is Guard and Exit relays. i have defined in my relay(the server that's running the relay in /torrc file) to be "AllowSingleHopExits 1" and set in my computer that running the TOR(in /torrc file) with the 1(one) hop to: "ExcludeSingleHopRelays 0" and "AllowSingleHopCircuits 1" so now every thing needs to be ok right? but, still its not working On Tue, Jun 26, 2018 at 5:34 PM, <tor-relays-request(a)lists.torproject.org> wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Is Tor-network protected from using one hop? (dave levi) > 2. Re: Is Tor-network protected from using one hop? (Logforme) > 3. Re: Is Tor-network protected from using one hop? (Matt Traudt) > 4. Re: Is Tor-network protected from using one hop? (Nagaev Boris) > 5. Re: Is Tor-network protected from using one hop? > (Roger Dingledine) > 6. Re: Is Tor-network protected from using one hop? (Matt Traudt) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 26 Jun 2018 17:16:46 +0300 > From: dave levi <levi72827(a)gmail.com> > To: tor-relays(a)lists.torproject.org > Subject: [tor-relays] Is Tor-network protected from using one hop? > Message-ID: > <CAJUku5hQa5JCk1UCn_CynyVG=kxhXkQpC0-ApW=k7vJxPrTM5g@ > mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > I'm testing few things in Tor and I noticed that if im changing(from the > source code) the number of hop's(nodes) to be more then 3 hop's it work's > fine(slowly, but still working) and if im sting only 2 hop's its still > works great. but, when i'm setting only 1 hop, i can open the Tor-browser > but i can't use it(Tor-browser) to visit site(regular site or onion site > too). so im thinking maybe the Tor-network have protected from users who > are using 1 hop? >

2 1

bridge installation help please
by I 26 Jun '18

26 Jun '18

4 11

Relay Guide - IPv6 Connectivity Testing
by Matthew Finkel 26 Jun '18

26 Jun '18

Over the last few days I've started thinking more about IPv6 and, inevitably, I started thinking about how we can improve support within the Tor network. Within the last few months, there were a few instances of relay operators seeking answers for why their relay did not have the running flag in the consensus. After some investigation, in some cases this was because the relay had an IPv6 ORPort configured but a majority of the IPv6-enabled directory authorities did not believe it was running. Unfortunately, despite IPv6 connectivity being a necessity now, ISP rollout is slow and on-going in some geographical areas and network peering arrangements are sometimes sub-standard or not stable. The Relay Guide[0] has a section describing how an operator can enable an IPv6 ORPort, and there's a supplementary page[1] specifically describing additional information about it. Considering there are potential critical failures when the IPv6 ORPort is configured, should the relay guide suggest the operator confirm they have IPv6 connectivity to all of the IPv6-enabled directory authorities[2] before enabling it ("Please ping6/telnet/nc to these hosts before enabling this.")? It would also be nice if the relay, itself, performed self-checks of this connectivity and printed a warning log if some failure-threshold is reached (and possibly disabling the IPv6 ORPort). But, in reality, this is a hack around a broken internet - and I hesitate advocating for something like this in tor. Maybe there is a compromise we can find between the relay operator manually testing connectivity periodically and tor automatically doing-smart-things. Thoughts? - Matt [0] https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#IPv6 [1] https://trac.torproject.org/projects/tor/wiki/doc/IPv6RelayHowto [2] https://gitweb.torproject.org/tor.git/tree/src/or/auth_dirs.inc

3 5

Number of connections on dir port
by Logforme 25 Jun '18

25 Jun '18

After reading this post https://lists.torproject.org/pipermail/tor-relays/2018-May/015277.html I started looking into what is happening on the dir port on my relay (855BC2DABE24C861CD887DB9B2E950424B49FC34) The bandwidth ratio of dir/or traffic is around 3% to 4%. Not excessive according to the linked post. Looking at the conntrack table I see many IP addresses (usually from Ukraine or Russia) with 100+ connections. Atm there are around 10 IP addresses with 100+ connections and around 30 with 10+ connections. None of the IP addresses I've looked at are Tor relays. Some questions: Is this expected behaviour against on a fallbackdir flagged relay? Does the DoS prevention implemented recently address abuse against the dir port? I read that newer Tor clients don't use the dir port. Correct? Do Tor relays use the dir port? Can I remove the dir port from my relay without reducing my relays usability to the network? Thank you for any answers.

2 1

Re: [tor-relays] Alleged Family Members
by Paul Templeton 25 Jun '18

25 Jun '18

> How long is the timeout for 'Alleged Family Members' to disappear on > 'metrics.torproject.org'? Can I force it? Shouldn't take long, but did you leave the relay finger print in the MyFamily section in the torrc file? P 609662E824251C283164243846C035C803940378

1 0

I get sad when :-(
by Paul Templeton 24 Jun '18

24 Jun '18

I get sad when I lose control over one of the bare metal systems I run and help desk is slow to respond over the weekend. Then you have to throw in the time differences, then the language - its a wonder anything runs... Just wanted to know if there is anyone I can hook up with to talk about some config/stability issues. I have two systems one a VPS the other bare metal and both will drop out of the consensuses about once a day(2 to 3 hours) but are running the whole time. I have 4 bare metal systems but none are at capacity and would like to find the best approach to get more out of them. Consensus is one issue that's limiting capacity usage. I would love to meet up but in a remote part of AU and I just quit my job after 15 years so haven't time to fly anywhere at this time... P 609662E824251C283164243846C035C803940378

3 4

Prepping bridges for censorship
by Keifer Bly 23 Jun '18

23 Jun '18

Hi, So I had a thought. It seems like a lot of the relays run off of various port numbers (of course). However if all of the relays and bridges are running off of various port numbers (ie 9001, 10000, etc.), couldn’t this stop censored users (who’s isp or local firewall only allows certain ports like 80 and 443) from being able to connect to the tor network even when using bridges due to the port that the bridge of guard relay being run on a port number that is blocked by the isp or local firewall? Just a thought.

4 6