- tor-relays - lists.torproject.org

Is there any problems for users of my exit node if I have DNS lookups go out on a different interface?
by Anders Andersson 01 May '17

01 May '17

I plan to set up a Tor exit node (again), and the server has two external interfaces each with a dedicated IP. I'm going to use one of these exclusively for Tor. I also run a validating Unbound on the same machine, and all DNS lookups that are not cached will go out on the *other* interface by default. internet <--> IP 1 <--> unbound internet <--> IP 2 <--> tor, talking locally to unbound IP 1 and 2 should have the same routing path otherwise, because it's on the same network. I can't imagine how this could be problematic, but there has been so much talk about DNS lookups over the years, so I thought I'd better check with people who know more about this.

2 1

(no subject)
by Alex 29 Apr '17

29 Apr '17

-- реклама ----------------------------------------------------------- http://FREEhost.UA - мы размещаем больше 100 тыс. сайтов! Качественный хостинг для новичков и профи - http://goo.gl/EcgF4I

1 0

Law Enforcement Request
by teor 28 Apr '17

28 Apr '17

Hi all, Last week, we were contacted by Australian law enforcement, on behalf of German law enforcement, about one of our relays. It appears that some law enforcement agency had performed a guard discovery attack on a hidden service. One of our relays was that hidden service's guard. They requested that we provide a detailed network capture of that guard's traffic. We refused. (We do not keep detailed logs.) We also shut down the guard. T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------

3 3

bind DNS Crash on Exit
by teor 26 Apr '17

26 Apr '17

Hi all, Are you using bind as a local caching resolver on your exits? The DNS resolver on our exit crashed over the weekend due to this bug: https://kb.isc.org/article/AA-01466 It hasn't been patched yet in Debian: https://security-tracker.debian.org/tracker/CVE-2017-3137 So I have added a file: /etc/systemd/system/bind9.service.d/restart-on-abort.conf With the text: [Service] Restart=on-abort This should work for any systemd/bind9 Linux system. T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------

2 1

Re: [tor-relays] [tor-talk] TOR problems - seriously PLEASE HELP ME!
by Jonathan Marquardt 26 Apr '17

26 Apr '17

On Mon, Apr 24, 2017 at 12:16:23PM +0200, unpublished wrote: > 1. Many web pages display information that I do not support "TOR > connections"? Not sure, what you mean here. Perhaps THEY don't support (i.e. block) connections from Tor users, because they are afraid of spam or other stupid reasons. Nothing you can really do here. Websites blocking Tor is a huge problem. > 2. How to increase (amazon) the number of relay nodes? Because standard > only two redirect point? There are always three nodes. The amazon node should be your guard relay (where you enter the Tor network). Then there are two relays after that. There isn't really any way to change that. Three hops should be sufficient for decent anonymity, no real need to worry here. > 3. How to change the end node of the country (eg country from which I am > POLAND)? Here's a simple guide on how to do that: http://www.wikihow.com/Set-a-Specific-Country-in-a-Tor-Browser -- 4096R/1224DBD299A4F5F3 47BC 7DE8 3D46 2E8B ED18 AA86 1224 DBD2 99A4 F5F3

2 1

Relay traffic went to ~zero
by Jan Jancar 21 Apr '17

21 Apr '17

Hi all, I have been running my relay for about a year now and about two weeks ago my relay traffic went close to zero [1]. Any ideas as to why? Is it my ISP silently throttling my ORport after founding out I run a relay? Is it some misconfiguration on my part? My consensus weight went down from ~400 to 10, over the last few days. [1]: http://imgur.com/YOMxU66 [2]: https://atlas.torproject.org/#details/1673C036756D2800D2BD0F7C20DEE3FB934F9… [3]: http://torstatus.blutmagie.de/router_detail.php?FP=1673c036756d2800d2bd0f7c… Cheers, -- Jan ______________________________________________________ /\ # PGP: 362056ADA8F2F4E421565EF87F4A448FE68F329D /__\ # https://neuromancer.sk /\ /\ # Eastern Seaboard Phishing Authority /__\/__\ #

5 7

maatuska's bwscanner down since 2017-04-14 -> significant drop in relay traffic
by relayoperator＠openmailboxbeta.com 20 Apr '17

20 Apr '17

Hi Tom! since maatuska's bwscanner is down [1] I see a significant drop of traffic on many of my relays, and I believe this is related. Do you have any update to [2] on when maatuska will report bwscan results again? thanks, a concerned relayoperator [1] https://lists.torproject.org/pipermail/tor-consensus-health/2017-April/0078… https://consensus-health.torproject.org/graphs.html#bwauthgraphs [2] https://lists.torproject.org/pipermail/tor-consensus-health/2017-April/0078…

1 0

Reducing Exit Node Connections
by Colin 18 Apr '17

18 Apr '17

Hello all, I'm having difficulties running exit nodes on VPS provided by Pulse Servers. Conntrack shows the number of connections climbing to 30,000 and this is untenable (at least for the cheap vps from this provider). I have tried MaxAdvertisedBandwidth at many settings with the same results, number of connections eventually climbs to around 30k. I'm interested in input regarding: * is it possible to reduce the number of connections, how does one achieve this? * given I have no other points of reference, is 30k connections on a typical low-cost VPS unreasonable? * anything else I should be considering? Thanks all. -- Colin

2 1

[warn] circuit_mark_for_close under (Linux 4.4.0-21-generic) Tor 0.2.9.10
by Paul 18 Apr '17

18 Apr '17

[warn] circuit_mark_for_close_(): Bug: Duplicate call to circuit_mark_for_close at ../src/or/onion.c:238 (first at ../src/or/command.c:579) (on Tor 0.2.9.10 ) Can this warning be neglected - I thought it is a BSD and not a Linux issue? Got nearly a hundred of them today - all with the same time stamp. Thanks - Paul

1 0

Some n00b questions about exits
by Mirimir 14 Apr '17

14 Apr '17

I'm thinking about running an IPv6 exit. I've found a Tor-friendly VPS provider, but they have metered bandwidth. And 500GB per month is about my limit. So I could have a 40Mbps/80Mbps exit that was up for maybe a week per month, or a much slower persistently stable exit. For exits, speed is better than persistence, right? Also, I can choose VPS in UK vs DE vs US. Which is needed most? And am I right that a DE exit will generate the least hassle? Thanks.

2 1