- tor-relays - lists.torproject.org

Re: [tor-relays] Legal implications of tor relays
by Lars Kumbier 20 Jan '14

20 Jan '14

(Copy to the list) Hi there, runing a non-exit relay is usually deemed safe, a separate abuse-handling is not necessary (because no exit-connections happen, that might infringe laws, but only connections to other tor nodes). You should however check the terms of service of your provider to make sure, that running an anonymization service is covered and allowed - some providers are calculating their prices and traffic allowances with very small profit margins and might suspend your account, if you produce too much traffic or use too much VPS resources. You can find several lists online[1][2] for some TL;DR-Shortcuts. If you still do need assistance, feel free to contact me on the mailaddress lars+tor(a)kumbier.it. You might also want to check out Zwiebelfreunde e.V. or other local tor groups like the Torrorists e.V.[3]. Best Regards, Lars _________________________________________________________ [1] https://www.torservers.net/wiki/hoster/experience [2] https://wiki.raumzeitlabor.de/wiki/Torrorists/Hoster [3] http://torrorists.de Am 20.01.2014 17:08, schrieb tor(a)gmx.info: > Hi list, > > I have set up a tor relay with no exit functionality yet. Having read > through the documentation and general legal hints, I am still unsure > of the legal situation in Germany. Are there some of you guys who > had contact with hosting providers because of abuse claims? > Is there anything you can share? Are pure relays safe to use or > are the hosting providers still clueless? > > Thanks and best regards. > > > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Re: [tor-relays] Trying Trusted Tor Traceroutes
by Sebastian Urbach 20 Jan '14

20 Jan '14

Hi Konrad, Please check if your files looks like this: slash24-220.ips slash24-220.scamper It would be a lower value than 220 though, just an example. You could check if there is a scamper and or traceroute process running. The speed and the filename documented on the site are indicating that you are running traceroute and not scamper. If we need to dig deeper i would suggest that we do this via private mail and inform the list if there is something relevant. -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman

1 0

Re: [tor-relays] System Time
by Sebastian Urbach 20 Jan '14

20 Jan '14

Good Morning, I really tried very hard to stay calm but at least someone has to say it. I think operating relays / bridges can be described as a cutting edge job or experience. It seems that everybody wants to be an node operator these days but sadly enough there is absolutely no test or qualification that proves that one has at least something like minimum admin skills or other capabilities to do the job. Anybody who wants to drive a car needs a license though. Honestly, its great that it is getting a little bit easier to operate a tor node but when there are discussions over a period of days on how to adjust a VPS clock or basic lectures about udp / tcp ports, 100 % cpu load and so on then there is only so much to say: If you don't know what you are doing, then be honest to yourself and stop doing it ! Neither is this mailing list nor the tor project in general the right place to make first steps as an admin. This project needs serious people with serious skills in this serious time which are capable to operate reliable, stable and when possible of course fast systems. There is a reason why most operators are it professionals with years and years of experience in operating different systems all over the world. And further, i strongly disagree with the text Robert wrote today that the project should provide more material for newbies because there is already more than enough material. And if you feel that this is insufficient then thats just proving my point that you and others are way out of your depth and i seriously doubt that flooding the relay list with "linux for dummies" questions is helping the project with its limited personal and technical resources in any way. I would like to propose a new list which may or may not be called "tor-relays-new" or so. New operators should start there for a certain period of time and if everything seems to be in order they may be transferred to tor-relays. Of course this is just a very rough proposal, there may should be other criteria involved, like uptime, received flags etc. Im sure that there could be a reasonable list of achievements for new relay operators. I expect a bit of resistance and a bit of a shitstorm right now. Please feel free to direct this straight to me and not to the list. I also would like a discussion regarding the facts of the matter to take place on this list very much. Keep in mind that i'm just the messenger and probably just saying out loud what a lot of people are thinking ... -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ------------------------------------ In time of war, the first casualty is always truth. ------------------------------------ Hiram Warren Johnson (1866-1945) US Senator, California Moritz and Jeroen, Thank you both. I tried both your ideas but the system is set to prevent the time being changed as you thought. Another plea to the VPS controllers and it was corrected. So the lesson there is presume it is the VPS set-up first and foremost. You both should know that the concise and clear advice like yours is what this list needs rather than mysterious jargon and code. Anyone finding the instructions you gave would also see the complete explanation with them. I don't know how but it would be good to facilitate the search for or extract such advice for keen newboys. The subject line isn't always the best label as I demonstrated. Robert _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

7 9

privoxy, port 8118 scans
by Mateusz Błaszczyk 20 Jan '14

20 Jan '14

Hey I am wondering if this is a coincidence but since I started the tor relay, I see a lot of TCP/8118 connections attempts on my relay's external IP. I run the offending source IPs (aggregated to /24s) through cymru's ip-to-asn decoder and here are results of only today: Bulk mode; whois.cymru.com [2014-01-19 15:16:19 +0000] 15003 | 108.177.181.0 | 108.177.180.0/22 | US | arin | 2012-03-15 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 142.91.245.0 | 142.91.240.0/21 | US | arin | 2012-06-08 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 172.240.255.0 | 172.240.0.0/16 | US | arin | 2013-04-08 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.208.16.0 | 173.208.16.0/21 | US | arin | 2009-12-17 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.208.57.0 | 173.208.56.0/22 | US | arin | 2009-12-17 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.208.85.0 | 173.208.80.0/21 | US | arin | 2009-12-17 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.12.0 | 173.234.12.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.153.0 | 173.234.152.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.235.0 | 173.234.232.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.247.0 | 173.234.244.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.33.0 | 173.234.32.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.41.0 | 173.234.40.0/22 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 173.234.60.0 | 173.234.56.0/21 | US | arin | 2010-02-12 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.130.0 | 23.19.128.0/22 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.50.0 | 23.19.50.0/23 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.54.0 | 23.19.52.0/22 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.67.0 | 23.19.64.0/20 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.75.0 | 23.19.64.0/20 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 23.19.89.0 | 23.19.88.0/21 | US | arin | 2011-04-25 | NOBIS-TECH - Nobis Technology Group, LLC 15003 | 70.32.43.0 | 70.32.43.0/24 | US | arin | 2008-07-25 | NOBIS-TECH - Nobis Technology Group, LLC 18450 | 173.231.54.0 | 173.231.0.0/18 | US | arin | 2010-03-19 | WEBNX - WebNX, Inc. 20248 | 74.82.191.0 | 74.82.176.0/20 | US | arin | 2010-01-26 | TAKE2 - Take 2 Hosting, Inc. 40676 | 216.24.204.0 | 216.24.192.0/20 | US | arin | 2010-10-14 | AS40676 - Psychz Networks 46475 | 192.169.84.0 | 192.169.80.0/20 | US | arin | 2012-11-02 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 192.169.86.0 | 192.169.80.0/20 | US | arin | 2012-11-02 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 208.115.203.0 | 208.115.192.0/18 | US | arin | 2010-01-06 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 208.115.228.0 | 208.115.192.0/18 | US | arin | 2010-01-06 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 216.245.222.0 | 216.245.192.0/19 | US | arin | 2008-01-28 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 63.143.33.0 | 63.143.32.0/19 | US | arin | 2011-10-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 63.143.36.0 | 63.143.32.0/19 | US | arin | 2011-10-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 63.143.52.0 | 63.143.32.0/19 | US | arin | 2011-10-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 64.31.43.0 | 64.31.0.0/18 | US | arin | 2010-12-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 69.162.116.0 | 69.162.64.0/18 | US | arin | 2008-06-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 69.162.74.0 | 69.162.64.0/18 | US | arin | 2008-06-27 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 74.63.226.0 | 74.63.192.0/18 | US | arin | 2008-08-29 | LIMESTONENETWORKS - Limestone Networks, Inc. 46475 | 74.63.249.0 | 74.63.192.0/18 | US | arin | 2008-08-29 | LIMESTONENETWORKS - Limestone Networks, Inc. There were almost 200k SYN packets sent for the last 15h from the 228 unique IP addresses. Would that be part of tor project? I have never run privoxy on my network and I am not really sure what the relation between tor and privoxy is? Can somebody shine some light on that? [0] https://www.team-cymru.org/Services/ip-to-asn.html Thanks, -mateusz

2 1

Re: [tor-relays] Trying Trusted Tor Traceroutes
by Sebastian Urbach 20 Jan '14

20 Jan '14

Hi, Of course there are systems still working on the task and probably there will be a few more wit a complete set of results. Considering the fact that this project is running for a few months now and based on the starting dates you can see it does not look good so far. >From what i can see you run the script with traceroute and not with scamper. That will take roughly 1 month to finish. You started yesterday and submitted the data from phase 1,2 and 7 runs from phase 3. Since you are in an early stage i would suggest stopping the script and install scamper as recommended. ETA will go down from about 30 days go 4 days ... -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman Am 20. Januar 2014 13:21:44 schrieb Konrad Neitzel <konrad(a)neitzel.de>: > Hi! > > Am 2014-01-20 12:36, schrieb Sebastian Urbach: > > > Just made a count and the sad truth is that 35 out of 167 systems in > > total completed the task ending with a regular slash24-220.scamper > > entry. Thats even worse than i expected and way more completed test > > results are necessary... > > I am just wondering: My understanding is, that the webpage also shows "work > in progress". Maybe I missed something, but on my system (idkneitzel, > 81.7.11.129) the process is still running and the results inside > Traceroute-results/ are still growing and up to date. > > And I am running a tor node on a low end system so from what I read I > wouldn't expect the job to finish the work in less than a day (just started > yesterday evening after receiving a reply from my provider). > > If there is something wrong then I am willing to do more investigations. > Right now I would expect that everything works as it should. > > With kind regards, > > Konrad > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

Numbers of circuits are fluctuating
by Jens Kubieziel 20 Jan '14

20 Jan '14

Hi, I found a question at the Q&A site which deals with circuits: <URL:http://tor.stackexchange.com/q/492/88> The guy set up a Tor relay on its DSL connection. According to the Tor logs there are some low numbers of circuits open. From time to time this number jumps up (from 8--1 circuits to 700--850). Do you also see such numbers? What can be the reason for this jump? -- Jens Kubieziel http://www.kubieziel.de

5 4

Re: [tor-relays] tor-relays Digest, Vol 36, Issue 23
by Jack Wilborn 19 Jan '14

19 Jan '14

I have an extra machine that I was hoping to configure for a Tor relay. I'm not a wizard with Linux (Debian), but if there are some more, specific instructions to ensure everything is working, I'd love to do it. My current ISP is Cox and I have about 30 MB/sec Down and about 24 MB/sec up. I understand this is wide enough. If anyone can assist please e-mail me. Thanks Jack On Sat, Jan 18, 2014 at 5:00 AM, <tor-relays-request(a)lists.torproject.org>wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. dutch operators and experience with dutch providers (Rejo Zenger) > 2. VPS ports impassable (I) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 18 Jan 2014 10:22:49 +0100 > From: Rejo Zenger <rejo(a)zenger.nl> > To: tor-relays(a)lists.torproject.org > Subject: [tor-relays] dutch operators and experience with dutch > providers > Message-ID: <20140118092249.GD24192(a)ix.home> > Content-Type: text/plain; charset="us-ascii" > > Hi, > > Are you a Dutch relay operator or do you have experience with hosting a > Tor node with a Dutch ISP? Please get in touch with me! > > I'm colaborating with a journalist from one of the leading technology > media websites on one or more stories that will describe the environment > for Dutch Tor relay operators. What are the main problems you are > facing, are Tor relays a problem to the average Dutch ISP, etc? > > > -- > Rejo Zenger . <rejo(a)zenger.nl> . 0x21DBEFD4 . <https://rejo.zenger.nl> > GPG encrypted e-mail preferred . +31.6.39642738 . @rejozenger >

4 3

Trying Trusted Tor Traceroutes
by Sebastian Urbach 19 Jan '14

19 Jan '14

Dear list members, A little addition to my mail from a few hours ago. I talked to Anupam Das who is one of the responsible people for this project. I just want to quote what he said a few hours ago because its short and precise. It has absolutely nothing to do with the fact that it guys are known as extremely lazy, errr ;-) "Well we did some preliminary analysis which my advisor Prof. Nikita Borisov presented in the 30c3 meeting. Our main conclusion was that we need more data to conclude anything for certain. Previously we had a lot of incomplete traceroutes, so hopefully we'll get some concrete results now. Once we do we'll inform all our participants :)" It would be beneficial for everybody if we all could make an effort. Thanks for your patience -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman

1 0

Trying Trusted Tor Traceroutes
by Sebastian Urbach 19 Jan '14

19 Jan '14

Dear list members, I would like to encourage you to participate in the "Trying Trusted Tor Traceroutes" project: http://web.engr.illinois.edu/~das17/tor-traceroute_v1.html#description Please consider that this project can take a bit longer, somewhere between 4-24 days. If you run a relay of any kind, youre welcome. * * * * * Important: No Bridge Relays ! * * * * * Quick and dirty manual: 1: Install scamper or use traceroute (not as useful and way slower) 2: Download, extract: https://web.engr.illinois.edu/~das17/traceroute-from-tor-relays-4493e7c2119… 3: Run traceroutes.sh, lean back and wait a few days. More details at the page mentioned above. -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman

1 0

VPS ports impassable
by I 19 Jan '14

19 Jan '14

Hej, [WARNING - if you don't want to see another Tor relay get going stop reading now.] After installing Tor on a VPS running Ubuntu 12.04.4 LTS it reports [warn] Your server (173.208.211.179:9030) has not managed to confirm that its DirPort is reachable. Please check your firewalls, ports, address,... The VPS operator is trying his best but says the ports are open and is asking others. In the meantime does anyone have anything to offer? Robert

3 5