- tor-relays - lists.torproject.org

Trying Trusted Tor Traceroutes
by Sebastian Urbach 19 Jan '14

19 Jan '14

Dear list members, I would like to encourage you to participate in the "Trying Trusted Tor Traceroutes" project: http://web.engr.illinois.edu/~das17/tor-traceroute_v1.html#description Please consider that this project can take a bit longer, somewhere between 4-24 days. If you run a relay of any kind, youre welcome. * * * * * Important: No Bridge Relays ! * * * * * Quick and dirty manual: 1: Install scamper or use traceroute (not as useful and way slower) 2: Download, extract: https://web.engr.illinois.edu/~das17/traceroute-from-tor-relays-4493e7c2119… 3: Run traceroutes.sh, lean back and wait a few days. More details at the page mentioned above. -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman

1 0

VPS ports impassable
by I 19 Jan '14

19 Jan '14

Hej, [WARNING - if you don't want to see another Tor relay get going stop reading now.] After installing Tor on a VPS running Ubuntu 12.04.4 LTS it reports [warn] Your server (173.208.211.179:9030) has not managed to confirm that its DirPort is reachable. Please check your firewalls, ports, address,... The VPS operator is trying his best but says the ports are open and is asking others. In the meantime does anyone have anything to offer? Robert

3 5

(no subject)
by I 18 Jan '14

18 Jan '14

5 6

Re: [tor-relays] dutch operators and experience with dutch providers (Rejo Zenger)
by Jan Hendrik den Besten 18 Jan '14

18 Jan '14

Rejo, my encrypted mail tot you does not arrive. See below. Mail Administrator <Postmaster(a)chello.at> schreef: >This Message was undeliverable due to the following reason: > >Your message was not delivered because the destination computer does >not support electronic mail (SMTP). Correct any mistakes in the >address and try sending the message again. > >The following recipients did not receive this message: > > <rejo(a)zenger.nl> > > Please reply to <Postmaster(a)chello.at> > if you feel this message to be in error. > > >------------------------------------------------------------------------ > >Van: "J.H. den Besten" tor(a)janhendrik.eu> >Aan: rejo(a)zenger.nl >Verzonden: Sat Jan 18 16:57:24 CET 2014 >Onderwerp: Re: tor-relays Digest, Vol 36, Issue 23 > >-----BEGIN PGP MESSAGE----- >Version: APG v1.0.9 > >hQEMA/Nqa4fSrms4AQf7BKOj2Jv2RLYipadTb2XFLD7u1U7WgcvJl381cHUcchXZ >bv0jr3/u5gugjyieFXDhC5TQRQLMVCoqtrjP/aIRUWXmOI/X6dp90f4DLDHL0QHo >GFIcUyCkoI2ee7d3fDBi6YMrxf903gJe5w0Wy25CjwaQussqIZyK0w/lGAiFWMJs >2fx4TbJs4AAY1PAMwx8fcX034+uXMni9scml2bXYAMRDrMOXTneUg0QYAyyphGEm >GlGk2bpUKXRZQ+fAMxmKrmQdOama+dKbBPsU7RC3nonOCc9+aYPMa3XneG9OhEEx >pqRhjRUNZmGPnKw2ddk9havSpMT1CZJBonmi1j1cgIUCDAPpghcw8xmKlAEP/jCl >00awlVZsvOeQiCx1BXGQh7cKrhrWN8++qQPwN5qPRRfxKyO1YStxNzqFXvJ1UJ+c >JwK+tEqmvLfvpDO625l7ez3KsbgRXKXiapWYXTj/d6t0ZAotpUdDDNclZ6uQ1kEh >Kp1yQN5x0+bFtMMfA+MEy7R6prWhl81D8JuXEoUjcyp+wQUxxVDPOhphvYBofTWK >3etBN8vdIbaURJATBJbPA9JuslLZ8512XBNmkx21f87ZcAS24vNe8xi2YKeGw+F4 >U/KmfqNHlYc69CytSqw3hHJf4SqeEoojP3nz9tPBWvYLPX9o7h3RNWuEslPaHE29 >0tGVKiD4QHOJ3MJBTOnVoSxaBsobHP5NAddbUe4r3sAdnEKLm2ENuH7I68O/nwmE >h1QJdL+uSBhuymUcNCpQ7uPNw+fO3fQd5v7RI1FryygXOiBEt9SrmUCj/xr4Auqo >HZT4SwN56etZFS41nI0B+gmBRv8kT2HPxrXhWsKolKG9SB3dOXh4BD0W22vl1rqA >AdbpovKnx5oD6rTF3bVzcRBacacvw9KdCwwQHgojXvGkCWPLu+z+liUOogGERj2L >9Uoo5al0xrAaRt21XphtqQPuv9Kwe/tuSuxzHscX0Opx+VCa4He8hdO0Ic0WsC1B >ztFpZ2FCDJGRqyyZsAntq+skYrthrn/NsPjZDqdx0sPQAfFoteeMwSiuLynNWbGu >qTXfcVNv+2hR2A87z8v60A9EGA2T6kCy4B39Ixz/fles36fbN4AAfYwKL/095bXO >fQrG5FvVbiTUVUDFumAwnvKp7Hi31BiyKj0zgQ4aDloXy+6EzbJVrwmMbB2wMJVD >IlxVgHagk2NkvoNb9w+XU8DoJxTxryoGnUkYCWRiAmdbcgyTqMH9Zt0gftg4NewL >Np7WdohiPmZoe6TEjbieOK/UGkR7yGh4rrpHgt+dmnH0dzlkS3RD8FTjr+WKebi+ >u/3ewXUh01EadNz6fOVG8jEid2ulXsYA88JEif9lmfbZ7PDqJeCKkcUl3aPwFsKu >D8NGEU4P85/g7RRRHA3SmG4hkWJjPyCIHHMPAt5Q+FZd7xsX0sn2zXf0jQpvLnno >WgcKVEyCtILhu2IRGzGNVZUvGfFpP5Ja81E788TsHzbqYTWA5XBjX0StIjx+julq >lPHeHs4cJBO+9G/wDuThblxwImRvaDhWAduYm0qmpSLQUZlq1HsJXzLQLze68Iwb >EdipLsLRZk1nQrEbVD7lLEgwSeRSV7MnpQBptyLTqzv2ERYk/rDvPN0grqBzVCgk >JW6Uw1/oVTSJE0wo3grhmU5mFpLXkF0Yh+UYttuiAqLNbrH0kuQe+Gs50A8Zbept >jzKy02QuLxpTkRKmtaMwBdp/GA6VAby3iac5UqzPft6gGunZGjZnYKAEZ0TaP/or >qcMrebAUNjTB9+KoNWIIHp0pJS63izggp9gVxItK6j80Rpkwe374CwEexDwuKkJ1 >tWJUDES0nKd0VbRrweUibZEslpWULfjvSgWldG7NrZEQWFb/77RULvxrAb5LPVNM >1u0VeSj8OotH5/IOWNzCsF1XOdeCAxI9dsLZIgYARfK0LmqVDxAvMtVenIVjL8Jo >ryxa/gT8RTi1mBX1osYEapKXzN2l63kbsiaLVSajb9atBTuY8PflSOqUi3lD9jUd >60iVFxFw10C/DrhpDG0PwzFG1flb1ajz4nyMuPLsYP8tC2bUGVv4nato9s+zpJlN >sgS1aHzzXKTAqnLiBA0BOCLoQu7mmCUShDYwLwzPqGdRiXfmZ0X4vGDbeXq0cxE9 >/IsQv7nJlWZWHyJJaC9K1ubyjUYS7zvodFXd6nL/6w0EIZTnmZ+R+PvZkw9C0z4J >EeUIB6uNVikn2qVCylncQGIsKZuSBz+VZS0281GsM0K+Be/Mx6Q9BEDR7wSqUbx/ >tHZWtvwQwtutnd/sWGsRseHtx5pK79+sgwTDQDgxI4Jnyz2FKupyyXNNm6bzljS4 >qJbvXC+Q1rH/XD1L4zTBYqQsUQrJdpSCnCbqyTR4a+HfZNHcfsxJ4890h0WPE9cC >gGom2XoZ6LeHpMtL+RyNbL9lVVPwbPzl+Nrp1Yf7qLtBjSi0kTUh8tArJLbYMh+z >Tz7Dc4qjj35Eu+5jAV+Nv09yumfq40IfGBZnxy8KUfKMo6GcuII1xsn2RRpx0wrP >8L87xKjRi5l4UFuPhv5aMNixU6JR+VRp7XPKryfsLsac8OaxOqSoU3zeAQB67Wlu >hQ== >=rBPU >-----END PGP MESSAGE-----

2 1

dutch operators and experience with dutch providers
by Rejo Zenger 18 Jan '14

18 Jan '14

Hi, Are you a Dutch relay operator or do you have experience with hosting a Tor node with a Dutch ISP? Please get in touch with me! I'm colaborating with a journalist from one of the leading technology media websites on one or more stories that will describe the environment for Dutch Tor relay operators. What are the main problems you are facing, are Tor relays a problem to the average Dutch ISP, etc? -- Rejo Zenger . <rejo(a)zenger.nl> . 0x21DBEFD4 . <https://rejo.zenger.nl> GPG encrypted e-mail preferred . +31.6.39642738 . @rejozenger

1 0

Irony and inconsistency
by I 18 Jan '14

18 Jan '14

In this morning's messages - One about three relays paid for a year in advance. “Something Solutions LLC has decided to ban the usage of TOR.“ despite “We DO Allow Tor Relays" being in their current AUP. One about downloading Tor and installing it as an exit for me when I couldn't. “This issue has now been resolved. root@XXXIX:/# tor Jan 02 23:51:53.668 [notice] Tor v0.2.4.20 (git-0d50b03673670de6) running on Linux with Libevent 2.0.19-stable and OpenSSL 1.0.1c. Best Regards," Robert ____________________________________________________________ FREE 3D EARTH SCREENSAVER - Watch the Earth right on your desktop! Check it out at http://www.inbox.com/earth

5 6

Tor listenes to UDP ports?
by Wollomatic 18 Jan '14

18 Jan '14

Dear all, i run a tor relay (version 0.2.4.20) on debian wheezy. Today I noticed Tor uses some UDP ports: # netstat -tulpen tcp 0 0 0.0.0.0:9030 0.0.0.0:* LISTEN 0 46692311 26643/tor tcp 0 0 0.0.0.0:9001 0.0.0.0:* LISTEN 0 46692310 26643/tor [...] udp 0 0 0.0.0.0:33915 0.0.0.0:* 104 46692315 26643/tor udp 0 0 0.0.0.0:56554 0.0.0.0:* 104 46692316 26643/tor udp 0 0 0.0.0.0:34821 0.0.0.0:* 104 46692317 26643/tor udp 0 0 0.0.0.0:49463 0.0.0.0:* 104 46692314 26643/tor Since I thought Tor only uses TCP may this be a security problem with my server? Best regards, Wollomatic -- PGP 0xC1BF1482

4 4

Tor Cloud: still not listed
by Patrick ZAJDA 18 Jan '14

18 Jan '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, I have set up an Amazon EC2 instance to run a Tor Relay, I chose Obfsproxy Bridges. First, I am blind and I am not to read the "How to" in the Get started page of cloud.torproject.org, so I though all was configured, and had a surprise with the security group I have to define by myself. :) So my question is: would it be possible to make the step by step instructions accessible please ? Less pictures or more text in all cases, having text doesn't require to remove images. The second point is: I looked at the configuration, and noticed bridge is set to 1. I though it made the tor relay private, do I have miss-understood something? If I didn't miss-understand, that explains why it is still not listed on atlas.torproject.org, and there is a problem with the provided EC2 image. Else, how long in my relay will be listed? And which reasons could make my relay unavailable on atlas? I opened all four ports I found on the get started page but half an hour latter, it is still not listed. Thanks, - -- Patrick ZAJDA Skype : gansta93 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJS1o1vAAoJEKPVT2DeSPb41WYIAKc3PWOf5RB0dUdo/Rcru2iF 8LceynqNjYbqyjJxwQbBIdpXkUHfoD1t2D9Tv8DYYrm0pLHrPWDzRZbbKHKPCiKI VlvrUy7TKyLPl6CKV3QztMMx62jGYsxitEOjy2b7GS2XyA1VnWu5JR8TgDNBeh4L KeP3CQOLKGS3dyqOfEjXzBpSb3sQQwJbzVjZJIZBaGMgqYbEVU7YsPdP/+e+1/0H V0T/uDTgquCE2eo7tXjgQLp97IAKIxrufJewaVnwJjTNDVwAxh5VigFhMbebf7yW rLo3PRGZMrCrJ5I9niGziGglmnnqWHmLxLIHRHx00TH1E+2fV+fPlWY3ssMwEuk= =SfE2 -----END PGP SIGNATURE-----

7 11

Relay, bridge, and family members
by Patrick ZAJDA 18 Jan '14

18 Jan '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, Now I created a bridge, I'd like to create a relay on a dedicated server. I read about the FamilyMembers configuration value, to list all relay which are from the same owner. If I create another relay, do I have to put the bridge fingerprint to the new relay and put the relay fingerprint in the bridge configuration? Thanks, - -- Patrick ZAJDA Skype : gansta93 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJS1qH1AAoJEKPVT2DeSPb4+QUIALJNLP9MsGN8FbPEP6EegNV9 gcc66Iz2Z7maJD35pMquQqBqJrK+Zo6brSe2aX0N9+GipV9+jCpMa0hUOfzsf1h8 oebEjDLPgf4nxE6GuztU7Jkm0XwqHFmT1ELFPS2qU/EwGOBhj4l0Pywff7qfhBBC nvM+5O6+DRVD/44RGyhQqaNCDkxYuUkcLMJUX104RCoBQ6WmPYRBEPBm8YbrPKmc eGZNpRggSDRYzITZrT0SneIzExFP5IbTdGlHidyL4it70iJDI+LBZsm/ZGMENv/h lUYHe8RQbmDgt81BB+dq763zIeFMvBMOtJEdVdWPtuzsGypLxWJPMiR0NKqf6ZI= =X0ps -----END PGP SIGNATURE-----

6 7

Bad experience with hetzner.de and "Trusted Tor Traceroutes" experiment
by irregulator＠riseup.net 18 Jan '14

18 Jan '14

Hello there, We're running a Tor relay (not exit) on a virtual private server at Hetzner for about a year. On Wednesday January 8th, we decided to take part in the "Trying Trusted Tor Traceroutes" [1] research experiment. There have been various calls for participation on public mailing lists [2] [3]. The traceroutes were conducted using the scamper package, as suggested in README. We imposed no rate limiting to requests, just run the script with default values. Some hours later, Thursday 9th, we received an email from Hetzner stating that our server was taking part in attacks and they would suspend our instance if we didn't react within 8 hours. As soon as we got the warning we killed scamper conducting the traceroutes, and followed the procedure so as not to get our instance suspended. Hetzner also asked for some explanations about why we think our server was not taking part in the attack. We responded via email with a full explanation about the traceroutes from our server and the "Trying Trusted Tor Traceroutes" experiment from various researchers from University of Illinois [1]. We told Hetzner that our server was making harmless and legal traceroutes to various destinations on the Internet, thus they had no reason to suspend our instance. Twenty four hours later, Friday 10th, Hetzner blocked network access to the IP address of our server, did send us an email about blocking, but ignored our exlanations submitted the previous day. After the blockage of our IP we insisted on trying to resolve the case by sending one more email exlaining the situation and asking to unblock us, and then opening a ticket. Hetner's response to the last email (5 hours later) was that we should open a ticket, which we already had done. Alas, our ticket was marked as duplicate and closed(?). During this loophole support nightmare most responses from Hetzner's part actually seemed to be machine generated. At last Hetzner asked us via email to send them a signed document via fax(!) containing explanations about the incident. Now that was ridiculous, since we had submitted explanations already three times with the first submission only four hours after Hetzner's first warning on Thursday. Nevertheless, we did resend the explanation. After about 7 hours of downtime, Hetzner unblocked network access to our server. More than 36 hours later they sent an email "Dear Mr. xxxx, your server is unlocked." Concluding, - Hetzner considers traceroutes to various internet destinations as attack. All relay operators with machines at Hetzner should be _careful_ when taking part in "Trying Trusted Tor Traceroutes" experiment. - Hetzner has awful customer support. Cheers, Alex [1] https://web.engr.illinois.edu/~das17/tor-traceroute_v1.html [2] https://lists.torproject.org/pipermail/tor-relays/2013-October/003113.html [3] https://lists.torproject.org/pipermail/tor-news/2014-January/000027.html

4 7