October 2019 - tor-relays - lists.torproject.org

ns consensus directory issue
by Badger 16 Oct '19

16 Oct '19

Hi, Would appreciate if anyone could let me know how to resolve the warning below: 07:19:01 [WARN] Unable to load ns consensus directory downloaded from server '154.35.175.225:80'. I'll try again soon. [5 duplicates │ hidden] │ 07:19:01 [WARN] Unable to parse networkstatus consensus [11 duplicates hidden] │ 07:19:01 [WARN] Unable to compute digest of network-status [11 duplicates hidden] │ 07:19:01 [WARN] couldn't find start of hashed material "network-status-version" [11 duplicates hidden] │ 07:18:01 [WARN] Unable to load ns consensus directory downloaded from server '131.188.40.189:80'. I'll try again soon. Thanks a lot --

2 1

list of actually rejected fingerprints? (from 2019-10-08)
by nusenu 15 Oct '19

15 Oct '19

Dear Tor Directory Authorities, since there is a minor confusion about how the rejection list actually looked like, would you mind publishing the actual list of fingerprints you rejected this time (2019-10-08) like you did the last time during the removal of heartbleed relays? [1] thanks, nusenu [1] https://lists.torproject.org/pipermail/tor-relays/2014-April/004336.html https://lists.torproject.org/pipermail/tor-relays/2014-April/004342.html -- https://twitter.com/nusenu https://mastodon.social/@nusenu

2 1

Re: [tor-relays] Problem with authorities?
by teor 14 Oct '19

14 Oct '19

Hi, > On 14 Oct 2019, at 22:23, tschador(a)posteo.de wrote: > > On 2019-10-14 11:48, teor wrote: > >>> what's about the autorities maatu., tor26, bastet, gabel., and farav.? >> >> They either: >> - check IPv6 reachability, or >> - have a high stable MTBF (mean time before failure): >> https://consensus-health.torproject.org/#flagthresholds > > Thank you for the reply. What does the 'stable MTBF' mean? Time in > seconds (18 .. 48 days) before my relay get the stable flag back? It's a measure of the stability of your relay. A MTBF is an average time before your relay is next expected to fail, based on its past failures. For more details, see: https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n1800 > Downtime was from 2019-09-24 10:00 - 2019-09-26 06:00. > >> Keep your relay up, and its IPv6 address reachable, and you should be fine. > > The ReachableIPv6 flag is set and usage is ~5500 connections. If your IPv6 address becomes unreachable, that counts as a failure. I don't have exact data, but it does seem that the IPv6 authorities think your relay has a lower stability. T

1 0

Newbie qustion installing relay on Linux Mint
by Dag N 14 Oct '19

14 Oct '19

I followed the instruction on following sites: [projects/tor/wiki/TorRelayGuide/DebianUbuntuUpdates]and[https://trac.torpro…] trac.torproject.org/projects/tor/wiki/TorRelayGuide/DebianUbuntu but I think it don't work. I tried to do relay search:No Results found!No Tor relays matched your query :( Uptime now is 10 hour. Best RegardsDAG

2 1

Questions about Fallbacks
by [REDACTED] 14 Oct '19

14 Oct '19

Hi, when i setted up my relays i choosed 443 as the ORPort. My thought behind it was that 443 is most likely not blocked and less likely observed because the ISP could expect to anyway only see encrypted data so a Tor connection will more likely slip through it. I let the DirPort on 9030 because i read that clients anyway only use the ORPort and i thought if a authority will connect to me it makes no difference because none of my ports is blocked. Now some of my relays are Fallbacks. Would it be a benefit for the network if i change the DirPort to 80 or is the DirPort still not used by clients? Is it necessary to opt-out the relay as a fallback if it was shut down by the provider and already is long gone from metrics?

2 1

Firewall rules as a "replacement" for MyFamily on a bridge?
by Marco Gruß 14 Oct '19

14 Oct '19

Hi, I have been running 2 middle relays for a while and now fired up an obfs4 bridge (in a relay-free AS no less ;) as well. I've been thinking, as MyFamily is a no-no for bridges, how about firewalling the bridge from my nodes? If I add rules on my bridge that prevent it from connecting to my other relays and prevent my other relays from connecting to it (using iptables' -j REJECT, which results in a "connection refused", as if the tcp port was closed), it would be technically impossible for my bridge to inadvertently build a circuit through one of my other relays. (Well, it could of course still choose them as the second hop.) Does this make any sense at all? Will this break stuff? Thanks! Best, Marco

2 2

Re: [tor-relays] Problem with authorities?
by teor 14 Oct '19

14 Oct '19

Hi, > On 7 Oct 2019, at 17:37, tschador(a)posteo.de wrote: > > what's about the autorities maatu., tor26, bastet, gabel., and farav.? They either: - check IPv6 reachability, or - have a high stable MTBF (mean time before failure): https://consensus-health.torproject.org/#flagthresholds Keep your relay up, and its IPv6 address reachable, and you should be fine. T > Only longc., dizum, moria1 and danne. show the Guard, HSDir and Stable > flag for my relay [1]. > > Uptime: 11 days > > Regards > > [1] > https://metrics.torproject.org/rs.html#details/6A7551EEE18F78A9813096E82BF8…

1 0

Some newbie questions
by skarz 14 Oct '19

14 Oct '19

Hello all, I have a few newbie questions on some topics that I would like to clear up... What is the proper way to stop/start/restart a relay? I’ve ‘corrupted’ a few relays during this process, for example a relay had a new fingerprint after restarting the machine. Actually my biggest problems thus far are all based around Tor behaving weird after a restart. Also, after I make changes to the torrc file, is pressing ‘x’ in Nyx an acceptable way to enable the changes or is there a preferred method? Last, if I’m running a bridge at home do I need to configure iptables / fail2ban or is my firewall sufficient? And specifically which ports need to be forwarded to my bridge? Just the ORPort or others as well? Thanks! Sent from ProtonMail Mobile

4 4

The Iranians are coming!
by potlatch 09 Oct '19

09 Oct '19

This morning I noticed my exit/back-up directory VPS in Finland was down. One minute after I restarted it I had 1411 Iranian inbound connections and 43 other (Tor) inbound connections. Just saying..... Sent with [ProtonMail](https://protonmail.com) Secure Email.

1 0

Bridge Sees 100x Clients Starting 2019-08-31
by Porcelain Mouse 09 Oct '19

09 Oct '19

Tor Operators, It's been about a year since I switched my middle node to a bridge. Since then, usage on that node has increased and I have the bandwidth for it, so that's good. But, 16 days ago, this node started moving a lot more data, hitting the bandwidth limits, constantly. And its serving many more clients, more than 100 times the recent average. On this list, I see some messages regarding SSH abuse traffic using Tor. I also see a call from Phillip W. about more obfs4 bridges. 1) Can we be pretty sure the bulk of this sudden increase in users is abuse traffic? If not, is this a problem? 2) What should I do about it, if anything? 3) Would using obfuscation help this problem? Thanks, -- PMouse

4 6