December 2020 - tor-relays - lists.torproject.org

Question: RAM requirement for an exit relay
by Olaf Grimm 15 Dec '20

15 Dec '20

Hello! I would like to activate a local DNS resolver with unbound at the exit relays, but I am concerned about the RAM size with 1GB. On an example machine I have 2GB RAM and the exit relay occupies 400MB at 22.9 MiB/s according to the metrics. Does anyone have experience with such values? My smaller exit relays only have 1GB of RAM. Well, there is still the problem that simply trying it out is not possible. If I overrun the RAM and it comes to SWAP activities, then already on a local machine almost no access was possible. With a VPS this is a no-go. Kind regards! Olaf

8 11

No port IPv4 80 so not an called exit even when 443 open wide.
by Dr Gerard Bulger 14 Dec '20

14 Dec '20

It is now out of date that Tor servers are required to have port 80 IPv4 open, even if limited to a single Class A network in order that the relay can be labelled as an exit. Port 443 should be enough. For reasons I do not understand, if I open port IPv4 80 to a wider range I get abuse notices within a day, usually DMCA, as if some man in the middle is scanning the html! So far, wide open IPv6 port 80 attracts zero attention from those alleging abuse. http://example.com called as an IPv4 address cannot be reached by my tor exits as port 80 IPv4 too limited. Port 443 IPv4 and IPv6 on my exits are wide open to all, and we should all be on https anyway. https://example.com can be reached from my exits. Example.com does have an IPv6 address so in theory can be reached from my exits on port 80 as IPv6 port 80 is wide open I assume not used as the DNS requested for example.com gives IPv4 address. Can an Exits now be defined as an exit with port 443 open IPv4? And then tested that is an exit with https requests not http. Gerry Bulger

2 2

Re: [tor-relays] reporting Abusive exit nodes
by BRBfGWMz 13 Dec '20

13 Dec '20

It's great. Great content here too: https://wiki.archlinux.org/index.php/Tor Where do you put the configuration file when running a network from real-time distro (tails) that does not allow /etc/tor/torrc modification? On Wed, Dec 9, 2020 at 07:56 PM, lists(a)for-privacy.net <lists(a)for-privacy.net> wrote: > On 04.12.2020 05:21, BRBfGWMz wrote: > > I frequently find abusive exit nodes. Is there any way to report these > > to the > > tor consensus system, so it deprioritizes them? > You can also post here or in tor talk. bad-relays is a closed list. :-( > > > Or can I build a configuration file or list of exit nodes that I don't > > want in > > my chain? > > Of course: > > ## A list of identity fingerprints and country codes of nodes to use for the > first hop in your normal circuits. (nuts, NO address patterns!? > EntryNodes $fingerprint,{cc} > ## A list of identity fingerprints, country codes, and address patterns of > nodes to use as exit node. > ExitNodes $fingerprint,{cc},203.0.113.0/24,[2001:DB8::] > ## A list of identity fingerprints, country codes, and address patterns of > nodes to avoid when building a circuit. > ExcludeNodes $fingerprint,{cc},203.0.113.0/24,[2001:DB8::] > ## A list of identity fingerprints, country codes, and address patterns of > nodes to never use when picking an exit node. Nodes listed in ExcludeNodes > are automatically in this list. > ExcludeExitNodes $fingerprint,{cc},203.0.113.0/24,[2001:DB8::] > > ## A list of identity fingerprints, nicknames, country codes, and address > patterns of nodes that are allowed to be used as the second hop in all > client or service-side Onion Service circuits. > HSLayer2Nodes > ## A list of identity fingerprints, nicknames, country codes, and address > patterns of nodes that are allowed to be used as the third hop in all client > and service-side Onion Service circuits. > HSLayer3Nodes > > I don't have set StrictNodes 1. Please read the man page beforehand! > > Ncknames are unfortunately no longer allowed everywhere. I do not use > country codes the database has some errors. > > Soon you can use multiple lines: > > https://github.com/torproject/tor/pull/2066/commits/bb9707420e87a1efc016aea… > > \-- > p_o Ciao Marco! > > Debian GNU/Linux > > It's free software and it gives you freedom! > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > \-- Sent using MsgSafe.io's Free Plan Private, encrypted, online communication For everyone. https://www.msgsafe.io

3 2

My app which makes running tor relays on Windows Very Simple
by Keifer Bly 12 Dec '20

12 Dec '20

Hi all, So this is a software peice I have been developing which makes running tor relays on Windows very easy. All the user needs to do is write their torrc. The app installs tor, and configures all once the torrc is written by itself. Here is a video showing the app: Features Automatic Tor download and installation (via Choclatey) Type the torrc file, and the app configures and points tor there for you. Attempted automatic firewall configuration. Automatic creation of log file. Cons: Currently only directly support vanilla bridges. OBFS4 will have to be manually downloaded / configured. ATTEMPTED firewall auto configuration. It auto adds a rule to Windows Defender Firewall to allow the traffic, but can't configure router firewalls, etc. Let know what you think. I have successfully gotten tor up and running through this. If chocolatey changes their install scripts, this will need to be updated. I can send the source code if interested. Programming Language: C#/.Net Tor Windows App.mp4 <https://drive.google.com/file/d/1ZJ4EKXbu2Clyzc5WdNdxSWquswhdvSTJ/view?usp=…> --Keifer

1 0

reporting Abusive exit nodes
by BRBfGWMz 09 Dec '20

09 Dec '20

I frequently find abusive exit nodes. Is there any way to report these to the tor consensus system, so it deprioritizes them? Or can I build a configuration file or list of exit nodes that I don't want in my chain? \-- Sent using MsgSafe.io's Free Plan Private, encrypted, online communication For everyone. https://www.msgsafe.io

3 2

Shutdown of my exit relay
by Sarah Harvey 05 Dec '20

05 Dec '20

Hi folks, Through an error on my part, my exit relay got taken down (as12876.tor.shh.sh with fingerprint D7082DB97E7F0481CBF4B88CA5F5683399E196A3). I'm in the process of getting a replacement, but the fingerprint and IP will change as a result, and of course it will take time for it to regain consensus in the network. I believe I had also asked for it to be added to the fallback directory list since at the time it was high-traffic and stable. In this case I recommend removing it from this list until I can find a suitable replacement. Many apologies, -Sarah

1 0

Update on New Australian Law Against Domestic Hosts
by Christian Heinrich 03 Dec '20

03 Dec '20

https://www.smh.com.au/politics/federal/takeover-accounts-federal-police-to… -- Regards, Christian Heinrich http://cmlh.id.au/contact

1 0