- tor-relays - lists.torproject.org

IPv6 not provided, guard relay
by digitalist00 08 Apr '19

08 Apr '19

Hello! I have read that it's recommended to enable IPv6 for a tor middle relay. But my provider doesn't offer IPv6. Is IPv6 required to become a guard middle relay? Yours Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2

Relay C19B33758B3A5144894233EC4C95D7985B9FD101
by ylms 08 Apr '19

08 Apr '19

Hello, I just setup a new exit, I know it takes time to "train", but I would be interested in tips on how to tweak it. I just replaces a old exit that used the same IP, but unfortunately we lost that config/key. So any tips are welcome in general. I also have some questions. Atlas does not show any IPv6 address, is this normal? WHat loglevel can I set to see if there is any problems, to find possible improvements? I know the logging should not be changed, but I want tot make sure tor works fine, so I would like to see some more information for now. Thanks for your help. yl

6 14

Re: [tor-relays] Relay C19B33758B3A5144894233EC4C95D7985B9FD101
by ylms 08 Apr '19

08 Apr '19

On 4/5/19 12:36 PM, torgate(a)linux-hus.dk wrote: > hi, the adress is in use check what is running on your system and check > also the ports sudo lsof -i -P -n | grep LISTEN does not show any ports used twice for the same address. yl

1 0

is a good idea to run a ssh honeypot?
by caioau 07 Apr '19

07 Apr '19

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, I been running a relay for almost 1,5 year, and in the beginning I didn't change the default 22 ssh port but a lot of people were trying to login , no worries I only allow public key authentication. So I was wondering if I could record the attacks, so I find this https://haas.nic.cz/ service and I'm running on my relay, is it a good idea? Thanks Sent with ProtonMail Secure Email. -----BEGIN PGP SIGNATURE----- Version: ProtonMail Comment: https://protonmail.com wsBcBAEBCAAGBQJcqlUBAAoJEO6drAP5JZWbZ30H/i5UlyLceKIKB1osoA16 W0x2YZWoLw8Lvifxt0ijwQSLdzU5H1CTXxHoQJLpygESdGJMbBYiOGirRnWR nnlHqnbHHwUbZDUsxUBZTBrutwVaXXmswYyfrgZvJo17ocSaT2goaPJ0F9oK JHpzDegTOIE6hbwUI3BnDLI6u7/gCE1ZvgrzSbIvXebZ8XKC67j0AwhKMX0Q zUjLpXQ2eq5XLKPlOnXUc/i6xYCIoNjoBRSHX95hd2N4zy7xuZ3UhrVn0ZBi 7ZRjo77h7BeRsB3F9bA61DfgN9pM+J+R9sPU3qYClXPB/cOJmyVqVFtcT7NK 0Tz+mfbFNI8KfhN9ZHMS16Q= =FsLz -----END PGP SIGNATURE-----

2 1

Re: [tor-relays] is a good idea to run a ssh honeypot?
by caioau 07 Apr '19

07 Apr '19

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I use ufw as my firewall and it's set to limit ssh so if there's someone brute forcing the ssh it will get blocked for a time Sent with ProtonMail Secure Email. ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Sunday, April 7, 2019 7:54 PM, Elmar Otter <mailer(a)elmarotter.eu> wrote: > Hello, > > Why don't you use Fail2Ban? > > Greatings, Elmar > > Op 07-04-19 om 21:52 schreef caioau: > > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA256 > > > > Hi, I been running a relay for almost 1,5 year, and in the beginning I didn't change the default 22 ssh port but a lot of people were trying to login , no worries I only allow public key authentication. > > > > So I was wondering if I could record the attacks, so I find this https://haas.nic.cz/ service and I'm running on my relay, is it a good idea? > > > > Thanks > > > > Sent with ProtonMail Secure Email. > > -----BEGIN PGP SIGNATURE----- > > Version: ProtonMail > > Comment: https://protonmail.com > > > > wsBcBAEBCAAGBQJcqlUBAAoJEO6drAP5JZWbZ30H/i5UlyLceKIKB1osoA16 > > W0x2YZWoLw8Lvifxt0ijwQSLdzU5H1CTXxHoQJLpygESdGJMbBYiOGirRnWR > > nnlHqnbHHwUbZDUsxUBZTBrutwVaXXmswYyfrgZvJo17ocSaT2goaPJ0F9oK > > JHpzDegTOIE6hbwUI3BnDLI6u7/gCE1ZvgrzSbIvXebZ8XKC67j0AwhKMX0Q > > zUjLpXQ2eq5XLKPlOnXUc/i6xYCIoNjoBRSHX95hd2N4zy7xuZ3UhrVn0ZBi > > 7ZRjo77h7BeRsB3F9bA61DfgN9pM+J+R9sPU3qYClXPB/cOJmyVqVFtcT7NK > > 0Tz+mfbFNI8KfhN9ZHMS16Q= > > =FsLz > > -----END PGP SIGNATURE----- > > > > _______________________________________________ > > tor-relays mailing list > > tor-relays(a)lists.torproject.org > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays -----BEGIN PGP SIGNATURE----- Version: ProtonMail Comment: https://protonmail.com wsBcBAEBCAAGBQJcqlaMAAoJEO6drAP5JZWbQWIH/ilOz3NVPG5J+GpiNDv5 ju59FlI0TaxdS30sR1AwPhEnROGfso0vELw9EXVgmUrZbYYK05pa95FnHEps bHQSTJhkD7bMHzMYs/5O/mWTLA3CNHBGOuJW42pC/5l8EG8/+/vxNMKpfDJD zmft+QketkX/0n0vznmrO4kwn8pKVagqcBvkIMFSA2KvYRW/ldFA2xkNk6oR NbKGUAcCCU29erzwpDPfK4XOf+Qeqmrr1QOCPtX1OYLJSYZJgArPtUrG7Wy9 gcEyHsUO4GfEbhGWMqUiRHR3nlZnzRlFaVyYAJ5h292dZU1hh/Zb11DoCRzS FJXH901okncTHTqzs9PVdx0= =itms -----END PGP SIGNATURE-----

1 0

FallbackDir
by Conrad Rockenhaus 07 Apr '19

07 Apr '19

Is their a need for any more FallbackDirs? Thanks, Conrad -- Conrad Rockenhaus https://www.rockenhaus.com Cell: (254) 292-3350 Fax: (254) 875-0459

2 1

exit operators: tor-exit-notice.html file needs updating to solve 404
by nusenu 07 Apr '19

07 Apr '19

Hi, due to some recent changes on the tor project website some URLs in the default tor-exit-notice html file that many exit operators use result in 404s. To prevent 404 simply add "2019." at the beginning of the URLs. If you are using ansible-relayor this is fixed in v19.1.5 (released on 2019-04-06). and rerunning the playbook should fix it for you unless you use a custom file via 'tor_exit_notice_file'. upstream: https://trac.torproject.org/projects/tor/ticket/30052 -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

3 5

Question about new website
by Keifer Bly 06 Apr '19

06 Apr '19

Hi all, the new website looks nice. I like the look of it. I have one question, where can the tor expert bundle be downloaded from now? Thanks. -- --Keifer

2 5

mailing list tone
by George 05 Apr '19

05 Apr '19

The mailing list is specifically for Tor relay operators and related issues. There's no space for personal attacks. Such attacks debase the main purpose of this mailing list, and set a negative tone for everyone, including those who are just watching the attacks. Additionally, condescending remarks like: >> No one else cares about you and your confused lackeys attempts to >> be big-boy tor relay operators. ...have no place here. Such remarks can discourage newcomers who are still learning, especially those who are not men. It reinforces the outdated idea that the relay operator community is a boys' club for the properly initiated. Let's respectfully help people who are still learning, and let's also be respectful about giving constructive feedback when people behave in ways we might not like. We want a mailing list environment that is conducive to both new and experienced relay operators to engage in fruitful discussions. We ask that you follow those guidelines, or leave. George for the Tor Community Council -- 34A6 0A1F F8EF B465 866F F0C5 5D92 1FD1 ECF6 1682

2 1

High Speed Exit Relay or just a plain Relay?
by Conrad Rockenhaus 05 Apr '19

05 Apr '19

Hello, I have a FreeBSD box on a 1 Gbit/s connection. I'm trying to determine if we need more high speed relays or high speed exit relays. The AS it's on has no plain relays, just exit relays. That's what has me wondering what to do. So, what is the general consensus - should it be an exit or just a plain relay? Thanks, Conrad -- Conrad Rockenhaus https://www.rockenhaus.com Cell: (254) 292-3350 Fax: (254) 875-0459

6 6