- tor-relays - lists.torproject.org

Re: [tor-relays] DSL Router
by Isaac Grover, Aileron I.T. 13 Oct '18

13 Oct '18

Good morning onion, I don't know what your definition of "new to networking" is but I'm going to assume you've been using consumer gear for your network. That being said, there is a learning curve to the Mikrotik though they do come with a working but very vanilla configuration out of the box. If you would like, I would be willing to help you with a working configuration if you decide to go with a Mikrotik for your network. Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" Office: 715-377-0440, Fax:715-690-1029, Web: www.aileronit.com

2 1

Exit Node shutdown
by Tyler Durden 13 Oct '18

13 Oct '18

Hi Our two exit nodes "chulak" and "aurora" will be terminated by the end of this month. Both are listed in the Fallback Directory Mirror list and need to be removed. Fingerprints: 379FB450010D17078B3766C2273303C358C3A442 B0279A521375F3CB2AE210BDBFC645FDD2E1973A The shutdown is due to an internal reorganization. Greetings Sam Grüneisen - President FVDE

3 2

Re: [tor-relays] DSL Router
by Isaac Grover, Aileron I.T. 13 Oct '18

13 Oct '18

Good morning, Both "cheap" and "useful" for running Tor nodes at home won't be found in big box retail ever, so I would take a look at the Mikrotik RB750Gr3 - it will do exactly what you want after it's configured properly. I used to have an RB1200 and recently upgraded to a CCR1009, both from Mikrotik, and have found them to be quite capable under heavy load. Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" Office: 715-377-0440, Fax:715-690-1029, Web: www.aileronit.com

5 4

Documentation on hardening Debian and Tor Bridge?
by Nathaniel Suchy 13 Oct '18

13 Oct '18

Hi, What documentation, if any exists on hardening my Debian install as well as my Tor Bridge? It's using OBFS4 and using IPTABLES NAT Forwarding for access through port 443 to obfuscate the protocol and of course avoid people from getting suspicious based on the port number? Is there a way I can make Tor use even stronger keys and such? I want things to be as hard to hack as possible. Cordially, Nathaniel Suchy

1 0

DSL Router
by onion 12 Oct '18

12 Oct '18

Apparently it looks like the usual router consumer products cant stand the number of connections on a DSL Line with 40Mbit/s upload capability. Could somebody help and share experience or a recommendation for a small, cheap, useful, up to date router, possibly with two WAN channels to get a consumer product combined on one side behind that router with all the DECT and other functionality for a private household and to have the Tor stuff on the second WAN channel. Thank you.

2 1

Which would be more helpful, to run a bridge or normal relay?
by Keifer Bly 12 Oct '18

12 Oct '18

Hi, So I just set up a new relay via the Tor expert bundle and am wondering if running a normal relay or a bridge would currently be more helpful? Thank you.

4 9

FreeBSD Solution Comparable to VyOS (BGP IPv4+6 FW) in Tor Intensive Environments
by grarpamp 11 Oct '18

11 Oct '18

On 10/11/18, Conrad Rockenhaus <conrad(a)rockenhaus.com> wrote: > Hello, > > I’m researching for a new colo, and in order to bring it online until I can > consolidate some hardware, I would like to temporarily run a VyOS Router as > the main router so I can start getting things online sooner than later. This > VyOS Router will be running BGP with the upstream providers, IPv4, and IPv6, > and basic filtering to protect the router and other essential hardware. > > I’ve seen VyOS perform quite wonderfully on 4-6 gbps links with traffic > coming primarily from a CDN. My question is does anyone here have any > experience running VyOS with that much traffic with that traffic primarily > consisting of Tor traffic? Are there any other suggestions for a basic > non-hardware router based solution as a temporary implementation, perhaps > even using FreeBSD? > > Thanks, Conrad FreeBSD can work fine in this application and would be a natural and complementary tool to your efforts in supporting relay diversity towards more BSD (FreeBSD) nodes. Further, Linux's older iptables, even its current nftables, will seem very different compared to the FreeBSD IPFW or PF with which you are surely familiar. You'll probably find more answers as to some BGP, packet filter, and hardware solutions for this on the freebsd-net mailing list above. And or on freebsd-questions , freebsd-isp , freebsd-ipfw , freebsd-pf , ... https://forums.freebsd.org/ See also (note: wikipedia often outdated / trivial)... https://wikipedia.org/wiki/List_of_open-source_routing_platforms Mentioned but not yet linked in above list... https://frrouting.org/ https://wikipedia.org/wiki/List_of_router_and_firewall_distributions https://forum.opnsense.org/index.php?topic=3534 Includes some bits from HardenedBSD, its onions are below... http://dxsj6ifxytlgq33k.onion/ http://3jkjhrvkdbdkqisnwhdpe4afh2j2g3suhsfcewiemsyk5ecd6gadmxyd.onion/ https://wikipedia.org/wiki/Comparison_of_firewalls

1 0

VyOS in Tor Intensive Environments
by Conrad Rockenhaus 11 Oct '18

11 Oct '18

Hello, I’m researching for a new colo, and in order to bring it online until I can consolidate some hardware, I would like to temporarily run a VyOS Router as the main router so I can start getting things online sooner than later. This VyOS Router will be running BGP with the upstream providers, IPv4, and IPv6, and basic filtering to protect the router and other essential hardware. I’ve seen VyOS perform quite wonderfully on 4-6 gbps links with traffic coming primarily from a CDN. My question is does anyone here have any experience running VyOS with that much traffic with that traffic primarily consisting of Tor traffic? Are there any other suggestions for a basic non-hardware router based solution as a temporary implementation, perhaps even using FreeBSD? Thanks, Conrad

2 1

Thank You
by Conrad Rockenhaus 11 Oct '18

11 Oct '18

Thank you everyone for the well wishes. I have been discharged from the hospital and I’m recovering slowly at home. I appreciate all of the kind notes that I received and again, thank you. Regards, Conrad

1 0

tor 0.3.2.x reaching end-of-life on 2018-10-09
by nusenu 10 Oct '18

10 Oct '18

this should also be on this list: https://twitter.com/torproject/status/1045295783812235267 wrote: > Tor 0.3.2.x will be EOL on October 9th. This > means the network team will stop maintaining it, and 0.3.2.x will no > longer receive security patches. Please upgrade before October 9th! > Thank you for helping us keep the network strong please upgrade your relays if you are on one of these lists: https://metrics.torproject.org/rs.html#search/version:0.3.2%20running:true https://nusenu.github.io/OrNetStats/eolrelays -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

2 1