- tor-relays - lists.torproject.org

Relay - Conflicting data (Atlas != log)
by Mark Jamsek 03 Dec '13

03 Dec '13

I am trying to run a restricted exit relay on FreeBSD 9.2-RELEASE in a jail. I tested it out a couple days ago on an old(er) box, and everything worked fine: https://atlas.torproject.org/#details/A5CA10E554124289C1B42B4CCA68F0CACFE50… Decided to get it running on a fresher rig, all appears well according to system data: $ tail notices.log Dec 02 15:49:31.000 [notice] Bootstrapped 90%: Establishing a Tor circuit. Dec 02 15:49:34.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working. Dec 02 15:49:34.000 [notice] Bootstrapped 100%: Done. Dec 02 15:49:34.000 [notice] Now checking whether ORPort 110.146.133.98:9001 and DirPort 110.146.133.98:9030 are reachable... (this may take up to 20 minutes -- look for log messages indicating success) Dec 02 15:49:40.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor. Dec 02 15:49:59.000 [notice] Performing bandwidth self-test...done. Dec 02 15:50:33.000 [notice] Self-testing indicates your DirPort is reachable from the outside. Excellent. Dec 02 15:50:33.000 [notice] Not advertising DirPort (Reason: AccountingMax enabled) Dec 02 15:51:50.000 [notice] Your DNS provider gave an answer for "rmus4fklislhf", which is not supposed to exist. Apparently they are hijacking DNS failures. Trying to correct for this. We've noticed 1 possibly bad address so far. Dec 02 21:49:39.000 [notice] Heartbeat: Tor's uptime is 6:00 hours, with 0 circuits open. I've sent 946 kB and received 7.09 MB. $ ps -aux |grep tor USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND torrelay 86844 0.0 12.1 60532 52796 ?? IJ 3:49PM 0:33.50 tor --RunAsDaemon 1 Apart from the DNS hijacking entry(?), Tor is apparently up and running. However, according to Atlas, it is not: https://atlas.torproject.org/#details/EE16D7A4FBCF6494FEE75C856D76782295CB9… (forgot to backup tor key; hence, the different print) Not sure what to think or do. Is it advertised on Atlas as false due to this entry: [notice] Not advertising DirPort (Reason: AccountingMax enabled) Or is one of the two sources (system or Atlas) wrongly reporting? Thank you. -- 01101101 01100001 01110010 01101011

2 2

Proper bandwidth units [was: Exit nodes on Gandi]
by grarpamp 02 Dec '13

02 Dec '13

On Fri, Nov 15, 2013 at 3:47 PM, Eric van der Vlist <vdv(a)dyomedea.com> wrote: > Without bandwidth limitation that's true. OTH, I currently consume only > ~ 50 Gbits/month and the limit is 500 Gbits. Would a relay limited to > let's say 200 or 300 Gbits/month still be useful for the community? People, can we please mind using the proper units. I know Tor doesn't make it easy because Tor itself incorrectly uses Bytes. But Tor is a network application, and real network apps are measured in 'bits per second', not 'bytes transferred off disk', even if the latter is what silly hosters sell by... mostly due to their presumed need to tie in with their typical customers supposed Apache access_logs. But believe me, what hosters really care about is their upstream bill in bps rate, they're just converting that for access_log presentation to you. Your further mixing of 'giga bits per month' doesn't help *at all*. Please try to use 'bits per second' as the common denominator on this (network application) list. BTW, Gandi is historically a fairly progressive company. The right approach could have some good wins there.

10 24

Newly configured relay questions
by Conrad Rockenhaus 01 Dec '13

01 Dec '13

Hello all, I brought a new non-exit relay online: ec2bridgerocks001 D06C B145 56C1 F73A F317 B555 C279 2F7B 105C 95B4 It's been operational for 6 days now, Tor has been reporting bandwidth usage, but when I try to look for it in the TorStatus page, it's not listed. I'm operating this relay on EC2 and I've opened all the usual ports. I've also checked the Tor metric portal, can't find it there either. So, I'm wondering - is there something I missed in the configuration? The torrc is pretty much the default EC2 one. Thank you I appreciate any thoughts/assistance. Respectfully, -- Conrad Rockenhaus http://www.rockenhaus.com/ http://www.lagparty.org/~conradr/

5 6

Named flag
by Sebastian Urbach 29 Nov '13

29 Nov '13

Dear colleagues, Im a bit confused about the "named" flag. My relay is running smooth and i already received the "guard" flag but still no named flag. I also read the directory specification paper. I dont have the unnamed status nor is there another server with that name in use. Im not sure if the authority supports name binding but from what i understand the authority should support it. Maybe someone on this list is able to look into that matter ... Router Name: ParEpistemenTaksis Fingerprint: 3C82 285F AC21 71FA 5178 340A 82B0 5F21 90AB 68E9 -- Mit freundlichen Grüssen / Sincerely yours Sebsstian Urbach ----------------------------------- Religion is a symptom of irrational belief and groundless hope. ----------------------------------- Gregory House, M.D.

3 4

Huge harrassment by Irdeto and IP-Echelon, 83 mails, in 2 weeks, need your help
by julien.robin28＠free.fr 20 Nov '13

20 Nov '13

Hello everybody, My 2 exit nodes servers are ArachnideFR35 and ArachnideFR35v2, with respective observed bandwidth of approximately 100Mb/s and 30 Mb/s (12 200 KB/s and 3800 kB/s). They are momentarily down since I have decided today to put them down while I will be trying to solve this enormous Irdeto/IP-Echelon problem. I want to keep my servers alive but I realize that it will not be possible if harassment doesn't stop quickly. My ISP is just transmitting to me a huge amount of abuse complaints every day (and never makes any comment) but they are too many and the incredible patience of my ISP cannot be unlimited. And all this, despite of the fact that my reverse DNS are set, since the first day, to http://digi00277.torproxy-readme-arachnide-fr-35.fr and http://digi00433.torproxy-readme-arachnide-fr-35.fr with the Tor Exit Notice on port 80. And it is this address that appears into the Tor Relay lists. I have decided to temporarily shut down my servers today (November 13, 2013, 14:50 UTC) while I'm trying to solve this enormous Irdeto/IP-Echelon problem, and to send a mail to my ISP to tell them that I will try to fix this problem before to restart my servers. Since August 18, 2013, the two machines that I'm running as Tor Relays are full exit nodes (reject *:25, *:26, *:27, accept *:*) (before it, since May 2013, they was only Relays nodes) because I was thininking that : if there is abuse complaints, I will be able to face them. I'm not the only one in this case (accept *:*), But as I see in this mailing-list it seems that the amount of abuse complaint I'm receiving is completely abnormal. My service provider is Digicube.fr, it's a really little company that doesn't seems to be able of handle everything in time. I not sure if there was no abuse complaints before end of October, but if there was, I never seen them. I have tried everything: by mail or by the Web Interface that figures in the mails, with all these arguments: - Since 08/18/2013, 95.130.10.70 and 95.130.9.89 are dedicated high speed Tor Exit Router, they do not host or share anything, they are just international network routers with empty hard disk drives. - All reports you sent about these permanent IP Addresses (95.130.10.70 and 95.130.9.89) for several weeks are wrong: the IP Address that appears into your reports is the IP Address of the router, not the user. - These routers and his responsible are NOT infringing any copyright. Neither technically nor legally. - You got to understand that the goal of such a network is a way much fair goal than movies on the Internet. In March 2011, the Tor Project was awarded the Free Software Foundation's 2010 Award for Projects of Social Benefit on the following grounds: "Using free software, Tor has enabled roughly 36 million people around the world to experience freedom of access and expression on the Internet while keeping them in control of their privacy and anonymity. Its network has proved pivotal in dissident movements in both Iran and more recently Egypt." But for both Irdeto and IP-Echelon, they don't care, and every day, the harassment procedure continues. I think they don't read my emails, I hope they can receive them; I never had any answers from them. I told them that if there is no answer, I will not have any reason to keep watching their emails... may be I need to ask my ISP to put a spam-filter about that, but I think that such a proposal have no chance to be welcome into an abuse service ! Don't be horrified: here is, below, the list of all abuse complaints I've received from them. You will understand why I love my ISP, and why I need to quickly find a solution! The olders ones are from October, 29 2013. 1 - IP-Echelon part : notices.sony(a)ip-echelon.com : Unauthorized Distribution of the Copyrighted Motion Picture Entitled "White House Down" - Case ID 131400838 Unauthorized Distribution of the Copyrighted Motion Picture Entitled "White House Down" - Case ID 131396212 Unauthorized Distribution of the Copyrighted Motion Picture Entitled "White House Down" - Case ID 131732460 notices.warner(a)ip-echelon.com : Notice of Claimed Infringement - Case ID 130362722 Notice of Claimed Infringement - Case ID 130296727 Notice of Claimed Infringement - Case ID 130308292 Notice of Claimed Infringement - Case ID 131314345 Notice of Claimed Infringement - Case ID 131160950 Notice of Claimed Infringement - Case ID 131049815 Notice of Claimed Infringement - Case ID 131044521 Notice of Claimed Infringement - Case ID 130778319 2 - Irdeto part : activision(a)copyright-compliance.com : 290-117780660 Notice of Unauthorized Use of Activision Property 290-117744045 Notice of Unauthorized Use of Activision Property 290-117740528 Notice of Unauthorized Use of Activision Property 290-117895342 Notice of Unauthorized Use of Activision Property 290-117877594 Notice of Unauthorized Use of Activision Property 290-117854157 Notice of Unauthorized Use of Activision Property 290-117818254 Notice of Unauthorized Use of Activision Property 290-118018138 Notice of Unauthorized Use of Activision Property 290-117983726 Notice of Unauthorized Use of Activision Property 290-117965572 Notice of Unauthorized Use of Activision Property 290-117961867 Notice of Unauthorized Use of Activision Property 290-118628905 Notice of Unauthorized Use of Activision Property 290-118491174 Notice of Unauthorized Use of Activision Property 290-118453073 Notice of Unauthorized Use of Activision Property 290-118398863 Notice of Unauthorized Use of Activision Property 290-118374287 Notice of Unauthorized Use of Activision Property starz_media(a)copyright-compliance.com 314-117685560 Notice of Unauthorized Use of Starz, LLC ("Starz") Property 314-117684996 Notice of Unauthorized Use of Starz, LLC ("Starz") Property 314-117666358 Notice of Unauthorized Use of Starz, LLC ("Starz") Property 314-117666311 Notice of Unauthorized Use of Starz, LLC ("Starz") Property 314-117663952 Notice of Unauthorized Use of Starz, LLC ("Starz") Property 314-117653783 Notice of Unauthorized Use of Starz, LLC ("Starz") Property 314-117780831 Notice of Unauthorized Use of Starz, LLC ("Starz") Property 314-117509673 Notice of Unauthorized Use of Starz, LLC ("Starz") Property 314-117452028 Notice of Unauthorized Use of Starz, LLC ("Starz") Property 314-117258420 Notice of Unauthorized Use of Starz, LLC ("Starz") Property 314-117005314 Notice of Unauthorized Use of Starz, LLC ("Starz") Property 314-117827226 Notice of Unauthorized Use of Starz, LLC ("Starz") Property 314-118012162 Notice of Unauthorized Use of Starz, LLC ("Starz") Property teachingcompany(a)copyright-compliance.com : 120-117780245 Unauthorized Use of The Teaching Company Limited Partnership Property paramount(a)copyright-compliance.com : 22-116418467 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-116390947 Notice of Unauthorized Use of Paramount Pictures Corporation/Dreamworks Animation SKG, Inc. Property 22-116289727 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-116462954 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-116463639 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-116468964 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117784969 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117784422 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117668962 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117637379 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117360665 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117326212 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117319457 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117260566 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117206174 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117194860 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117194189 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117174717 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117143821 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117049672 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-116899426 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-116897671 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-116892769 Notice of Unauthorized Use of Paramount Pictures Corporation/Dreamworks Animation SKG, Inc. Property 22-116887099 Notice of Unauthorized Use of Paramount Pictures Corporation/Dreamworks Animation SKG, Inc. Property 22-116847203 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117909973 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117903528 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117858364 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117857551 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117815491 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117978380 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117946018 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117933311 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117930244 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-117916165 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-118620584 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-118611592 Notice of Unauthorized Use of Paramount Pictures Corporation/Dreamworks Animation SKG, Inc. Property 22-118607311 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-118523821 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-118519781 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-118369725 Notice of Unauthorized Use of Paramount Pictures Corporation Property 22-118369726 Notice of Unauthorized Use of Paramount Pictures Corporation Property ----------------------------------------------------------------------- I wanted to die when my fingers have typed this sentence : /etc/init.d/tor stop And watching my server slowly going down... :( I understood that a solution is to put a restricted exit policy, and only enable people to browse the web and nothing else, but before to do this and become something like "quarter of an exit node" (I'm kidding but you see what I mean ^^) I want to know if the amount of abuse complaint from Irdeto and IP-Echelon are normal with a full exit policy, or if I have a chance to make them stop while keep operating full exit nodes. Thank you in advance, Arachnide needs your help ! Best regards, Julien ROBIN PS : I will be at work the entire day tomorrow, sorry if I don't answer before tomorrow evening.

6 8

Apologies for the email about Sugarcube
by Sriakhil Gogineni 19 Nov '13

19 Nov '13

Hello all, I'm very sorry about an email that went out yesterday that some of you received. It was only supposed to go to my contacts, around 2000 people. I exported my contacts and removed all mailing lists from the pool but it seems some people who were cc'd on threads got added in. It seems I have deeply offended about a dozen of you and for that I'm sorry. I know how precious inbox sanity is and I did not intend to spam anyone -- this email was only supposed to go to family and friends. Rest assured there is no 'list' and you will not be receiving any future email from me regarding Sugarcube. Best, Sri

1 0

Re: [tor-relays] which aws ami?
by Ralph Guntermann 18 Nov '13

18 Nov '13

yes, that worked for me & now running - thanks! --- runa.sandvik(a)gmail.com wrote: From: "Runa A. Sandvik" <runa.sandvik(a)gmail.com> To: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] which aws ami? Date: Sun, 17 Nov 2013 16:47:39 +0000 On Sun, Nov 17, 2013 at 2:57 PM, Ralph Guntermann <ralphguntermann(a)swissmail.net> wrote: > Hi! Hi, > I'm trying to set up 2 tor bridge relays on amazon aws. > > I follow the guide on the tor cloud web page at torproject.org but I'm > unable to view the AMI or instance configuration when I get logged-in to my > aws account. > > I've figured out that I can set-up my instance from within my aws account > but I'm uncertain how to proceed. > > This is what I'd like to do: > > Set-up 2 instances on my aws account with 1 instance based in the region > South America (São Paulo) and another instance in the region Asia Pacific > (Singapore) using the AMI for Obfsproxy Bridges. > > I've found 2 tor-cloud AMIs listed in the Community AMIs. These are: > > Tor-Cloud-EC2--us-east-1-04-13-2013-20616 - ami-69d30974 > [Copied ami-4a7c1a23 from us-east-1] > Tor-Cloud-EC2--us-east-1...13-2013-20616 > Root device type: ebs Virtualization type: paravirtual > > & > > Tor-Cloud-EC2--us-east-1-04-13-2013-7427 - ami-6bd30976 > [Copied ami-567c1a3f from us-east-1] > Tor-Cloud-EC2--us-east-1...-13-2013-7427 > Root device type: ebs Virtualization type: paravirtual > > Perhaps there is a choice of 2 AMIs because 1 is for Obfsproxy Bridges & the > other is for Private Bridges? I'm not sure which AMI I should choose for > Obfsproxy Bridges. Correct. For a shared obfsproxy bridge in São Paulo use AMI ID ami-69d30974. For a private obfsproxy bridge in Singapore use AMI ID ami-601c5332. You can find this information on https://cloud.torproject.org/#get_started. > From what I can see, once I've chosen the correct AMI it should be very easy > to finish the configuration. It is, but please remember to open the right ports in the firewall before booting the instances. See https://cloud.torproject.org/#get_started for a list of ports. > Also, am I correct in thinking that I can host 2 instances in different > regions on the same account? It doesn't matter so much if this isn't > possible, I suppose I could host both instance in the same region. This is possible. You should be able to change the location with a drop-down menu somewhere. -- Runa A. Sandvik _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays _____________________________________________________________ Sign up for FREE email from www.swissmail.net at http://www.swissmail.net

1 0

which aws ami?
by Ralph Guntermann 17 Nov '13

17 Nov '13

3 3

Re: [tor-relays] Tor relay in Russia/China
by Tony Xue 17 Nov '13

17 Nov '13

> Message: 2 > Date: Sat, 16 Nov 2013 05:20:22 -0500 > From: that guy <grep(a)gmx.us> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] Tor relay in Russia/China > Message-ID: <528746E6.1030208(a)gmx.us> > Content-Type: text/plain; charset=ISO-8859-1 > > On 11/15/2013 06:20 PM, tor-relays-request(a)lists.torproject.org wrote: >> I've heard that some ISPs in China provide uncensored network >> access to foreign companies. But this is hearsay > > You are correct but it is not that simple nor widespread. What I've > seen most often is execs from big companies getting special > considerations so while "uncensored" might be a stretch there is some > truth to the above. I can find out more any time if anyone needs some > info please contact me any time as I don't think it will be a big > topic of discussion here:) I have seen heavy use of VPN's by western > students visiting, or studying in Bejing w/out issue. I'll have very > current info and can get some near instant feedback in the next day or > two. > > And to the guys saying "avoid the ussa like the plague" this wanna-be > expat agrees 100%. Sadly! And for a whole lot more than just Tor nodes. But keep in mind that Chinese people like to do things in a tricky way. They might say not censored network but they didn't say they're not monitoring it. The gov has said that they will be strict on "ideology" in any situation. I did hear about someone in "a famous Finnish mobile phone company which will belong to a US operating system making company" said they can access facebook directly but I haven't got a chance to see whether they are using an enterprise level VPN or uncensored network. > > -- > ----------------------------------------------------------------------- > PGP Fingerprint : > 7770 D186 A06E A329 2217 > 3161 63EB F269 37B8 8644 > > http://pastebin.com/8W8vyNjb > ----------------------------------------------------------------------- > "... Governments are instituted among Men, deriving their just powers > from > the consent of the governed, --That whenever any Form of Government > becomes destructive of these ends, it is the Right of the People to alter > or to abolish it, and to institute new Government, laying its > foundation on > such principles and organizing its powers in such form, as to them shall > seem most likely to effect their Safety and Happiness." > > >From the United States of America's Declaration of Independence > July 4, 1776 > ----------------------------------------------------------------------- > > > ------------------------------ >

2 1

Building on a Udoo Dual
by Richard Budd 17 Nov '13

17 Nov '13

Does anyone know if the Tor Project has sources for top that can be compiled on a Udoo Dual? It's running Ubuntu 11.10 (oneiric) on a ARMv7 processor. I've tried following the instructions on https://www.torproject.org/docs/debian, but I get an Err http://deb.torproject.org/torproject.org/ experimental-oneiric/main tor 0.2.4.17-rc-1~oneiric+1 (dsc) 404 Not Found [IP: 38.229.72.14 80] error when trying to run the "sudo apt-get source tor" command. I had no problem compiling on a Raspberry Pi, but of course this is a different animal. Thanks, Richard

2 2