- tor-relays - lists.torproject.org

TransPort: Convert iptables to pf _ nat
by Felix 27 Dec '16

27 Dec '16

>>> scrub in all >>> nat pass on $ext_if from $NET_JAIL to any -> $IP_PUB >>> rdr pass on $ext_if proto tcp from any to $IP_PUB port $PORT_TOR_JAIL -> >>> $IP_JAIL_TOR port $PORT_TOR_JAIL >> >> That looks good. >> >> There is no "pass out quick" or "pass out on" statement? > > Sure, there is. > pass out on $ext_if proto { tcp udp icmp } all modulate state Remove 'pass' form 'nat pass' if the packet shall flow through the 'pass out' rule after 'nat'. Otherwise it will pass out without respect to any rule. [] https:// www.freebsd.org/cgi/man.cgi?query=pf.conf&sektion=5#end -- imho, looking forward to 33C3 :)

1 0

George Shuklin relays: please specify MyFamily in torrc
by nusenu 26 Dec '16

26 Dec '16

Hi George Shuklin, thanks for running tor relays. Please do not forget to set the MyFamily parameter in your torrc configuration to tell clients your relays belong to a single operator. If you need help with the MyFamily option let us know. thanks, nusenu https://github.com/nusenu/ansible-relayor https://raw.githubusercontent.com/ornetstats/stats/master/o/potentially_dan…

1 0

neelc.org relays: MyFamily update required
by nusenu 26 Dec '16

26 Dec '16

Hi Neel, one of your relays got a new key, please do not forget to update your MyFamily setting. thank you, nusenu https://atlas.torproject.org/#search/69.126.169.33 https://raw.githubusercontent.com/ornetstats/stats/master/o/potentially_dan… +---------------------+----------------+---------------+ | first_seen | IP | MyFamilyCount | +---------------------+----------------+---------------+ | 2016-08-10 01:00:00 | 89.187.144.122 | 4.0000 | | 2015-04-15 18:00:00 | 107.181.174.84 | 4.0000 | | 2016-09-05 22:00:00 | 108.29.79.159 | 4.0000 | | 2016-12-17 17:00:00 | 69.126.169.33 | 2.0000 | +---------------------+----------------+---------------+

2 2

Re: [tor-relays] 2bithacker.net relays: MyFamily fixed.
by nusenu 25 Dec '16

25 Dec '16

Chip Marshall: > Should be all fixed up now, thanks for the headsup. yes it is fixed now, thanks! +-------------+----------------+ | nickname | eMyFamilyCount | +-------------+----------------+ | 2bitsgsin01 | 12.0000 | | 2bitusnyc02 | 12.0000 | | 2bitusnyc01 | 12.0000 | | 2bitdefra01 | 12.0000 | | 2bitgblon01 | 12.0000 | | 2bitinblr01 | 12.0000 | | 2bitcator01 | 12.0000 | | 2bitusnyc03 | 12.0000 | | 2bitussfo01 | 12.0000 | | 2bitnlams02 | 12.0000 | | 2bitussfo02 | 12.0000 | | 2bitnlams03 | 12.0000 | +-------------+----------------+

1 0

Minimum requirements for becoming a guard
by Rana 25 Dec '16

25 Dec '16

What are the absolute minimum requirements for becoming a guard? [I am not asking about being trustworthy which I am obviously not, only about bandwidth etc. :)]

2 1

FW: Merry Christmas from President Obama and the First Lady
by I 25 Dec '16

25 Dec '16

1 0

Multiple Tor Instances
by Dakota Hourie 24 Dec '16

24 Dec '16

Hi Everyone, Would anyone be able to point me in the right direction to be able to run multiple instances of tor for a multi core cpu. Tor version is 2.9.8 on Ubuntu 16.04. Thanks -- Dakota Hourie --

5 7

iptables stats
by Monkey Pet 24 Dec '16

24 Dec '16

This machine is dedicated as a tor-relay. Is it normal that the INPUT bytes count is much greater than the OUTPUT bytes or did I configure the iptables wrong? iptables -L -v Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 6 328 ACCEPT all -- lo any anywhere anywhere 38 2557 ACCEPT icmp -- any any anywhere anywhere 1135 68123 ACCEPT tcp -- any any anywhere anywhere tcp dpt:http 27432 6416K ACCEPT tcp -- any any anywhere anywhere tcp dpt:https 6274 479K ACCEPT tcp -- any any anywhere anywhere tcp dpt:ssh 93821 129M ACCEPT all -- any any anywhere anywhere ctstate RELATED,ESTABLISHED 1050 54292 DROP all -- any any anywhere anywhere Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 70579 packets, 36M bytes) pkts bytes target prot opt in out source destination

1 0

atx.name relays: MyFamily update required
by nusenu 24 Dec '16

24 Dec '16

Hi Josef, thanks for adding your 3 relays to the tor network! Please do not forget to set the MyFamily parameter in your torrc files so tor clients are not using your non-exit and exit relays at the same time in a single circuit. If you need help with configuring MyFamily, let us know. Since you are running tor 0.2.5.12 you might also want to consider updating to the recently released version 0.2.9.8. happy relaying, nusenu https://github.com/nusenu/ansible-relayor https://github.com/ornetstats/stats https://raw.githubusercontent.com/ornetstats/stats/master/o/potentially_dan…

1 1

"[warn] Cannot make an outgoing connection without a DirPort" under BSD
by pa011 24 Dec '16

24 Dec '16

I am running (FreeBSD 11.0-RELEASE-p2) Tor 0.2.8.11 getting following warnings while Self-testing indicates that DirPort is reachable from the outside? Can these warnings be ignored, while Tor is running properly afterwards ? Merry Christmas! Paul Dec 24 13:20:57.000 [notice] Bootstrapped 80%: Connecting to the Tor network Dec 24 13:20:57.000 [warn] Cannot make an outgoing connection without a DirPort. Dec 24 13:20:58.000 [notice] Bootstrapped 85%: Finishing handshake with first hop Dec 24 13:20:58.000 [notice] Bootstrapped 90%: Establishing a Tor circuit Dec 24 13:20:58.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working. Dec 24 13:20:58.000 [notice] Bootstrapped 100%: Done Dec 24 13:20:58.000 [notice] Now checking whether ORPort x.x.x.x:9001 and DirPort x.x.x.x:9030 are reachable... (this may take up to 20 minutes -$ Dec 24 13:20:59.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Dec 24 13:20:59.000 [notice] Self-testing indicates your DirPort is reachable from the outside. Excellent. Publishing server descriptor. Dec 24 13:21:00.000 [notice] Performing bandwidth self-test...done. Dec 24 13:21:57.000 [warn] Cannot make an outgoing connection without a DirPort. Dec 24 13:21:57.000 [warn] Cannot make an outgoing connection without a DirPort. Dec 24 13:21:57.000 [warn] Cannot make an outgoing connection without a DirPort. Dec 24 13:21:57.000 [warn] Cannot make an outgoing connection without a DirPort. Dec 24 13:21:57.000 [warn] Cannot make an outgoing connection without a DirPort. Dec 24 13:21:57.000 [warn] Cannot make an outgoing connection without a DirPort.

3 2