- tor-relays - lists.torproject.org

How's your relay doing? Reporting Bad Relays
by Matthew Finkel 08 Nov '14

08 Nov '14

Hi Relay Operators, A few months ago[0], we announced the bad-relays(a)lists.torproject.org mailing list and asked everyone to send reports to that list if they suspected a relay was...bad. We've already received many reports, so please keep them coming. We also want to ask all of you to use that list, as well. If at anytime you think your relay is no longer safe for use, please tell us. Roger tweeted about this yesterday[1][2], too. The Tor network exists because of all of you and we can only keep it safe with your help. Let us know if you have any questions. Thanks! Matt [0] https://blog.torproject.org/blog/how-report-bad-relays [1] https://twitter.com/RogerDingledine/status/530878388605423616 [2] For those who don't want to open Twitter: If your #Tor relay is stolen or you lose control of it, please report it so we can blacklist it: https://blog.torproject.org/blog/how-report-bad-relays @TorProject

1 0

This may be a stupid question to you but how do I unsubscribe from these posts? Graeme.
by Graeme Briggs-White 07 Nov '14

07 Nov '14

As above....

3 2

Re: [tor-relays] FreeBSD's global IP ID (was: Platform diversity in Tor network)
by grarpamp 07 Nov '14

07 Nov '14

On Fri, Nov 7, 2014 at 11:31 AM, Adrian Chadd <adrian(a)freebsd.org> wrote: > ... that's .. odd. > > Let's poke the freebsd crypto and network stack people and ask. I > can't imagine why this is a problem anymore and we should default to > it being on. I don't think there's a crypto@ list, though security@ might represent. > The other thing you could do is have the tor port require > it be turned on before tor runs. That would not cover people who compile and use upstream Tor. Ideally, the Tor client could check for any system parameters it feels are critical before running, or simply delegate them and/or any parameters of lesser importance to platform specific guides on the Tor wiki. > On 7 November 2014 00:20, grarpamp <grarpamp(a)gmail.com> wrote: >> On Thu, Nov 6, 2014 at 8:52 AM, Philipp Winter <phw(a)nymity.ch> wrote: >>> >>> FreeBSD still seems to use globally incrementing IP IDs by default. >>> That's an issue as it leaks fine-grained information about how many >>> packets a relay's networking stack processes. (However, nobody >>> investigated the exact impact on Tor relays so far, which makes this a >>> FUD-heavy topic.) It looks like approximately 50 out of the 131 FreeBSD >>> relays I tested (38%) use global IP IDs. >>> >>> There's a sysctl variable called "net.inet.ip.random_id" which makes a >>> FreeBSD's IP ID behaviour random. FreeBSD relay operators should set >>> this to "1". >>> >>> Note that this issue was already discussed earlier this year in a thread >>> called "Lots of tor relays send out sequential IP IDs; please fix >>> that!". >> >> It's been default off since before it was a sysctl over a decade ago. >> Anyone know what the deal is with that? Some objection, or >> forgotten flag day, or oversight that really should be set to 1? >> https://svnweb.freebsd.org/base?view=revision&revision=133720

1 0

Re: [tor-relays] Unexpected sendme cell from client. Closing circ (window 1000)." error message.
by K. Besig 06 Nov '14

06 Nov '14

Thanks for all the informative responses, they were truly underwhelming...

2 1

Re: [tor-relays] Adding relays with a click
by Nan 04 Nov '14

04 Nov '14

SiNA Thank you -- that looks like the script we need. Even though it was written for Ubuntu it should work just as well on debian. We probably can simplify it because every GoodCrypto server is already a tor proxy. Thanks again, Nan ----- On Nov 4, 2014, at 17:41:37, SiNA Rabbani sina(a)redteam.net wrote: > You mind find this script interesting: > > https://gitweb.torproject.org/tor-cloud.git/blob/ce98487e1174bff3a76c1f9f03… > > --SiNA GoodCrypto warning: Anyone could have read this message. Use encryption, it works.

1 0

Adding relays with a click
by Nan 04 Nov '14

04 Nov '14

We're considering trying to make it a single click for a sysadmin to add their GoodCrypto server to tor as a bridge or non-exit relay. Any experience with anything like this, especially responses from sysadmins? Nan GoodCrypto warning: Anyone could have read this message. Use encryption, it works.

2 1

CMU exit node IP address will change
by Zack Weinberg 02 Nov '14

02 Nov '14

CMU network operations has decided to move the Tor exit node that my group operates (tor-exit.cylab.cmu.edu) to an isolated subnet in order to minimize consequences for the rest of the campus network. For instance, apparently there have been several cases where third parties blacklisted the entire CMU IP space in response to malicious traffic from the exit node. This is currently scheduled to happen Tuesday (Nov. 4). The new IP address will be 204.194.29.4. I'm sending this message primarily as an assertion that nothing nefarious is going on, but also because I haven't had to change the IP address of a running node before and I would like to ask if there's anything in particular that should be done to minimize downtime. Thanks, zw

1 0

Unexpected sendme cell from...
by Kurt Besig 01 Nov '14

01 Nov '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I this was discussed awhile back through the mailing list and online to some extent, however I never grasped the solutions or any real resolution to the issue. My relay is getting fairly hammered daily and I'd appreciate any input regarding the, "[WARN] Unexpected sendme cell from client. Closing circ (window 1000)." error message. Horizons3 Thanks -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQEcBAEBAgAGBQJUVSJWAAoJEJQqkaGlFNDPKbcH/jZ1H4IAmNZ0PHUHIEvisBJJ oSHPQ6fgmtAHwdo6uJakc5L+f4aeIZrOfCKWQ+cQ/LxkcWmZs7H/0N4w/PV8mJWV xN0lPAso9VZLulLuHhLbIJrq6G2XJ1zmBbkmLrEGhT1ZAvFhjcFtwsVTsB0h52EO da2NWvMpNFESkznkvPZSVa7zIRk4nM4YIdb0jrMa1Jw+Z/JdhfE4IJZ2sCgf9HRu 1fX0318uL1AEN9KKYU4yxwZnboEoyluGALy42e7oGxHryctOHmez0MjXglA2j0BA 4VakJJfF8A4BTkGEzMhi4laDDh1glkRal8nJRONsBlTCulzqEMCCNSLml+Cw6Po= =PQab -----END PGP SIGNATURE----- --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com

1 0

Re: [tor-relays] upgrade tor bridge raspberry-pi
by jchase 31 Oct '14

31 Oct '14

> On Thu, Oct 30, 2014 at 08:30:31PM +0000, jchase wrote: >> On hearing the news that tor 0.2.5.10 was available, I upgraded my >> raspberry-pi tor (obfuscated bridge) to 0.2.4.something. The upgrade >> restarted the tor daemon automatically. I would have rather done it >> myself using a restart. When I used arm to look at my new traffic, I >> noticed that I had been magically turned into an exit relay (besides >> staying a bridge). My torrc was still intact and clearly stated: >> ExitPolicy reject *:* >> I restarted tor by hand and got the same result. I am not interested in >> having an exit relay. So I turned off the bridge and am waiting for >> advice from you. >> rasptorholland > > Is it possible you are being bitten by this arm bug? > > https://trac.torproject.org/projects/tor/ticket/12956 > https://trac.torproject.org/projects/tor/ticket/6430 > > --Roger Thanks! I will assume I was bitten by an arm bug and turn everything on again until the police come to look for me. -rasptorholland

1 0

upgrade tor bridge raspberry-pi
by jchase 31 Oct '14

31 Oct '14

Hello, On hearing the news that tor 0.2.5.10 was available, I upgraded my raspberry-pi tor (obfuscated bridge) to 0.2.4.something. The upgrade restarted the tor daemon automatically. I would have rather done it myself using a restart. When I used arm to look at my new traffic, I noticed that I had been magically turned into an exit relay (besides staying a bridge). My torrc was still intact and clearly stated: ExitPolicy reject *:* I restarted tor by hand and got the same result. I am not interested in having an exit relay. So I turned off the bridge and am waiting for advice from you. rasptorholland

3 2