- tor-relays - lists.torproject.org

Re: [tor-relays] Problems with Debian package and low ports (Chris Baines)
by Christian 14 Feb '13

14 Feb '13

Good night Chris, I hope I don't misunderstand your issue, but if you use hibernation, you use a kind of desktop setup, aren't you? If port forwarding running a firewall and tor on the same machine (that's hibernating) behind a normal router looks tricky by means to verify the config, see my suggestion. If my assumption is correct, you have to set port forwarding in your router, say port 443 to 9090, and then use the torrc file to let tor listen on port 9090, but to advertise port 443. This makes tor bind to a higher port than 1024 and thus not needing root privileges if you run tor as the default user debian-tor, but lets your machine be available on port 443 although hibernating might be a bad idea for a tor node. ;-) If you use a home ISP with small bandwidth, maybe you'd better be a bridge (sufficient uptime also appreciated). I hope this could help. Sincerly, christian Am Mittwoch, den 13.02.2013, 19:35 +0000 schrieb tor-relays-request(a)lists.torproject.org: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Problems with Debian package and low ports (Chris Baines) > 2. Re: Problems with Debian package and low ports (Wessel Nieboer) > 3. Re: Problems with Debian package and low ports (Nils Vogels) > 4. Re: Problems with Debian package and low ports (theo(a)caber.nl) > 5. Re: Problems with Debian package and low ports (Roman Mamedov) > 6. Re: Problems with Debian package and low ports > (Christopher Baines) > 7. Re: Problems with Debian package and low ports > (Christopher Baines) > 8. Re: Problems with Debian package and low ports (Roger Dingledine) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 13 Feb 2013 16:41:54 +0000 > From: Chris Baines <cbaines8(a)gmail.com> > To: tor-relays <tor-relays(a)lists.torproject.org> > Subject: [tor-relays] Problems with Debian package and low ports > Message-ID: > <CAGGGvRs=FYNeKX9_7Ymyn1k2r1xPL1qv11BDGVABgmyDMqA9ZQ(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > I am having some problems with tor (version 0.2.3.25-1), I get > warnings when it resumes form hibernation: > Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied > Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 > > Can anyone help? > > > ------------------------------ > > Message: 2 > Date: Wed, 13 Feb 2013 17:44:02 +0100 > From: Wessel Nieboer <weebl(a)weebl.me> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] Problems with Debian package and low ports > Message-ID: <511BC2D2.40507(a)weebl.me> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Op 13-2-2013 17:41, Chris Baines schreef: > > I am having some problems with tor (version 0.2.3.25-1), I get > > warnings when it resumes form hibernation: > > Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied > > Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 > > > > Can anyone help? > > _______________________________________________ > > tor-relays mailing list > > tor-relays(a)lists.torproject.org > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > Does it work when you've just booted your computer? > > -Wessel > > > ------------------------------ > > Message: 3 > Date: Wed, 13 Feb 2013 18:07:53 +0100 > From: Nils Vogels <bacardicoke(a)gmail.com> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] Problems with Debian package and low ports > Message-ID: > <CAEM+PCU-0xVPEA+H2cMBZCeTgJwhAcWqG7N2Ve567t_sbdrGEw(a)mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > Tor has already changed to a non-privileged user, but you are trying to > bind on ports that only root is allowed to bind on. > > Two solutions: > > 1) Run tor as root (really, a bad idea) > 2) Bind to other ports than 80 and 443. Since you are resuming, you are > unlikely to be a stable relay/exit/bridge anyway, so you can basically > choose any port you want and just use it for your own traffic only. > > On Wed, Feb 13, 2013 at 5:41 PM, Chris Baines <cbaines8(a)gmail.com> wrote: > > > I am having some problems with tor (version 0.2.3.25-1), I get > > warnings when it resumes form hibernation: > > Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied > > Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 > > > > Can anyone help? > > _______________________________________________ > > tor-relays mailing list > > tor-relays(a)lists.torproject.org > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > > > > > -- > Simple guidelines to happiness: > Work like you don't need the money, > Love like your heart has never been broken and > Dance like no one can see you. >

1 0

Re: [tor-relays] [tor-talk] Legal problems: TOR relay & Torrents in .de
by grarpamp 11 Feb '13

11 Feb '13

> I've snail-mailed them a letter based on what Moritz had posted. They > replied with a standardized letter without even commenting on my > statements. It's basically saying "Last chance to pay or we'll go to > court." > > So I'm a little unsure whether or not it's now time to actually > consult a lawyer or wait until FOX makes it's next move. I believe what some others were saying is to simply ignore any initial complaints that come in which appear to be automated or are in some way not sufficiently personalized, lacking in real data, or stamped by a court. Just because someone complains from getting emailspam or can scrape peers off a tracker could just be a courtesy or idle probe. If such first notices bother you, sure, have an initial consult with a lawyer for potential future engagement if needed. But now that you have snailmailed them, it is raised on different level. One for which some would surely say a five minute chat with a prospective lawyer is wise. Also, if other people on the list get such first notices and don't know what to do with them, redacting any identifying material and posting the remaining full text [from an anonymous account if prudent to further avoid confirmation] would let others get a sense of what is out there and offer any experience. Just saying 'I got a mail about filesharing from my node and I mailed them back' doesn't help the poster or others. Then again, we're not lawyers, consult a real one as needed.

1 0

EC2 IP vs Region & Does this matter in the Tor network?
by David Gilbert 11 Feb '13

11 Feb '13

Hello, I'm operating 6 relays in the EC2 where 4/6 claim to be located outside the US but only 1/6 show up as outside of the US based on the IP address and report on atlas (https://atlas.torproject.org/#search/relay1org, don't heckle, I'm getting an idea of pricing and boosting speed over the next 5 months). Now, I'm curious if the IP address vs region it's supposedly operating in matters at all. Will people in the middle east be less likely to connect to my Tokyo/Singapore based relays because the IP address shows its in the USA? Or any other issues? Also, if this does in fact affect the effectiveness of my relays in those regions, has anyone had experience being able to acquire an IP from Amazon for other regions? I do not have a support contract, since I'm paying for this out of my own pocket so I'm unable to contact tech support. I would be inclined to pay whatever fees it costs to get it done, if I knew exactly what it is I need to do. - David

3 4

Possible bug on Tor 0.2.4.8-alpha and 0.2.4.9-alpha
by Jon 06 Feb '13

06 Feb '13

I started the Tor alpha yesterday, and now have numerous instances of " " Bug/Attack: unexpected sendme cell from client. Closing circ." Anything to be concened about Jon

1 0

Newbie question
by Chuck Bevitt 05 Feb '13

05 Feb '13

I'm running an exit node using my home ISP (yes, I've read the warnings). My question is: what happens when my ISP changes my IPAddress? Will existing connections to my node be lost and will the node reestablish itself? Thanks, Chuck Bevitt Sent from my iPad

5 5

My Relay has slowed significantly.
by Matthew Harrold 04 Feb '13

04 Feb '13

Hello all. This is my first time using a mailing list, so apologies if Im not doing it right! I have ran a couple of Tor Relays now for a few months, one was steady and reliable, and providing about 2MB/s of bandwidth. Of late, its slowed down dramatically. A reboot resolved it temporarily, but its slowed right down again, below 500KB/s. You can see the graph here- https://atlas.torproject.org/#details/2DAEE4EBA687A517F8B473894341A56820CDD… Does anyone have any suggestions? I have checked with my ISP and they are not throttling or managing the traffic in anyway, and my CPU and RAM isnt under heavy load. Ive uploaded my torrc here- http://pastebin.com/ZCnLQF0w I have read that file discriptors can also be a problem, Im not sure if this is relevant but- $ sysctl fs.file-nr fs.file-nr = 832 0 199036 Thanks in advance for your help, keep up the good work!

4 10

help with bridge
by s 03 Feb '13

03 Feb '13

hello i am not sure this goes here but ill give it a shot i want to be able to configure a nas as a bridge is it posssible and what would i have to do? as well as run one on my desktop if yall can shoot me line it would be helpful

1 0

Moritz in January
by Moritz Bartl 01 Feb '13

01 Feb '13

Hi, - Was invited as a speaker at CryptoParty Luxemburg. Gave two talks about Tor, one basic introduction/overview, and one about operating Tor exits. Afterwards, I helped starting Frënn vun der Ënn, a Luxemburg copy of Torservers.net by local members of the CCC -- some of which I already met at Haxogreen 2012, a Luxemburg hacker camp. They are awaiting official approval by the government, and then I will probably sign over our Luxemburg exit to them ( www.enn.lu ) - Wrote a German article about Tor by request of the CCC for their printed magazine "Datenschleuder". It will also be published on the web. - Wrote a small Python script that stores relay contact info from Onionoo data in a local database, together with "first seen" and "last seen" dates. I am currently limiting it to relays faster than 25 MBit/s. This will help me to welcome new relay operators, as well as contact "missing" operators to ask why they are gone. I am currently not publishing the database itself, but the script is at https://github.com/moba/tor-contacts-tracker - I became more accustomed to editing the Torproject website. Pushed some changes, most importantly a completely revised set of install instructions on Mac OSX using the unsafe Homebrew. https://trac.torproject.org/projects/tor/ticket/7989 - Most of my time again went into Help Desk and IRC. For number of closed tickets, see Runa's report which will come soon. - Was offered 2-3 Gbit/s of spare bandwidth at a friendly CH ISP. Passed the offer to the Swiss Privacy Foundation to avoid running more high bandwidth nodes as Torservers.net. -- Moritz Bartl https://www.torservers.net/

1 0

ESMTP Filtering by Santrex
by Moritz Bartl 31 Jan '13

31 Jan '13

-------- Original Message -------- Subject: ESMTP Filtering by 46.166.163.163 Date: Wed, 30 Jan 2013 18:57:53 +0100 From: Moritz Bartl <moritz(a)torservers.net> To: abuse(a)santrex.net Hi, Your customer at 46.166.163.163 runs a Tor exit relay (hooray! great!). The server should be configured in a way that does NOT tamper with outgoing or incoming traffic, but it looks like Santrex (you guys) are at least actively filtering/redirecting ESMTP Port 587 traffic. Trying 74.125.137.108... Connected to smtp.gmail.com. Escape character is '^]'. 220 spamfilter.santrex.net ESMTP Postfix Trying 192.0.43.10... Connected to example.com. Escape character is '^]'. 220 spamfilter.santrex.net ESMTP Postfix Please turn that off, or at least let your customer know about it so they can block the affected ports. Thanks! -- Moritz Bartl https://www.torservers.net/

1 0

Public Munin Graphs: Security Risk?
by Moritz Bartl 31 Jan '13

31 Jan '13

Hi! I finally deployed Munin across our exit nodes. The graphs are currently public, and I don't see an obvious reason for not doing that. Any objections? https://www.torservers.net/munin/ -- Moritz Bartl https://www.torservers.net/

3 2