- tor-relays - lists.torproject.org

Deploy relays using hidden exit IP's?
by grarpamp 29 Nov '12

29 Nov '12

Shouldn't some exit relays (funded or not) be deployed to use an exit IP that is different from it's advertised exit IP in order to prevent a simplistic form of blocking based on scraping the descriptor set? I think this can happen if the default route is out another interface or secondary address. Something of that nature.

10 14

setting up a Tor exit node
by esolve esolve 29 Nov '12

29 Nov '12

I want to use Tor browser bundle to set up a Tor exit node in vidalia, I click "set up relay" -> sharing then there are some options, I checked "Relay traffic for the Tor network(exit relay)" and then click "ok" however, it doesn't work, and the exit relay option is automatically unchecked, while the option "relay traffic inside the tor network (non-exit relay)" is checked how can I set up a Tor exit node? thanks!

5 13

TOR relay and their flags
by androny 29 Nov '12

29 Nov '12

Hello all! My torrc main config: SocksPort 0 RunAsDaemon 1 DataDirectory /tmp/.tor ControlPort 9051 CookieAuthentication 1 ORPort 4999 AvoidDiskWrites 1 BridgeRelay 1 ExitPolicy reject *:* so, its pure relay. Run arm and got: "flags: none" Well, read flags definitions at https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=dir-spec.t… and still don't understand it :-) My tor has almost 4 days uptime, and at logs have: ----- Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor ----- Performing bandwidth self-test...done. ----- Tor has successfully opened a circuit. Looks like client functionality is working ----- Connections (1 inbound, 6 circuit, 1 control) ----- It means, it works well - so, why my tor relay server doesn't have an "Running" flag, "Valid" flag or "Stable"? Regards And-ron

4 3

DFRI is running two sponsored exits
by Linus Nordberg 26 Nov '12

26 Nov '12

Hi Moritz, DFRI [1] is running two relays, DFRI0 and DFRI3, which should qualify as fast relays as defined by sponsor j. (They were just recently bumped From 10 MB to 12.5 MB. They both have an exit policy allowing the ports explicitly required on https://trac.torproject.org/projects/tor/wiki/org/sponsors/SponsorJ.) We'd love to be able to get some funds for this which would make it possible for us to run more exit traffic. We only have one /24 network to run exit traffic from atm though so this is all we can do for now without breaking the stated diversity rules. (Anybody sitting on an IPv4 /24 PI that we can borrow for a year or so? We'd handle it with care!) We could technically run bridges too but we would have to discuss this internally some more first. Do we really want to take money for running entry _and_ exit relays? Isn't that exactly how you'd attack Tor users if you had the power, by controlling entry and exit? If we've missed some public discussion on this topic, please point us at it. [1] https://dfri.se/index.en/ Thanks, Linus, DFRI

4 4

Setting up new Tor relay
by Lance Hathaway 25 Nov '12

25 Nov '12

Hi all, I'm trying to set up a Tor bridge relay as an NT service under Windows 2003 x64. It runs, but only when I -don't- pass it a torrc file. Specifically, I've tried the following: 1. Installed service using "tor --service install". This installed the Tor service, with files located in "C:\Documents and Settings\LocalService\tor". I copied a torrc file into this directory and edited it to correctly set the ports and other options to be a bridge relay. After placing this file into the directory, attempting to start the service results in error 1064: an exception occurred in the service when handling the control request. Renaming or removing the torrc file allows the service to start. 2. After reading some old posts to tor-talk and tor-relays, I ensured that the directory has full permissions assigned to SERVICE and LOCAL SERVICE accounts. No change. 3. I removed the service and created a new directory for the configuration and log files, located at "C:\torsvc". I installed the service again with "tor --service install -option -f "C:\torsvc\torrc". I also ensured the new directory had all permissions set correctly. The service installed as "tor -net-service" without any options and executed successfully. I stopped the service and fixed the path in the registry to include "-f "C:\torsvc\torrc"", but then the service wouldn't start any more. 4. I verified the permissions on the torsvc directory. After removing the -f option from the service, the service starts successfully again, albeit without my configs (including log locations which would tell me what was going wrong). Sorry to be a bother, but could anybody offer me some enlightenment on what I'm missing??? -Lance

2 3

(no subject)
by Znerol2 25 Nov '12

25 Nov '12

Sent from Samsung Mobile

1 0

Akamai running Tor exit relays
by tagnaq 24 Nov '12

24 Nov '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi, I found out about it via Moritz's twitter feed [1] and I think it is great. Am quite curious about it. Does anyone have some insights on why Akamai decided to start 10 fast exit relays? (CC'ing the relays contact address here) Some compass stats [2]: bandwith: 2.75% of the Tor network exit probability: 6.97% [1] https://twitter.com/torservers/status/266669861139255296 [2] https://compass.torproject.org/?family=C3D1F08204E2BF81C6A426F312AE3A2212C7… -----BEGIN PGP SIGNATURE----- iF4EAREKAAYFAlCws7EACgkQyM26BSNOM7YTnQD+L6D2fH6T5QmR0MUh4wJAnan2 Aag6ImaavJeFZS+jihwA/2roYnLDlocvfgoHe4cDk7vJvGctTGgylLi/FdH2tf9r =zf1i -----END PGP SIGNATURE-----

1 0

traffic pattern indicates MITM?
by ea 19 Nov '12

19 Nov '12

For four days the BW graph and usage table of my bridge indicated noticeable traffic and then the graph dropped precipitously to near zero & the table shows no recent usage. Vidalia/tor are working fine. I did try rebooting my router-modem gateway last night, but as far as I could monitor it, the traffic has still been near zero (maybe a few KB every hour or so). If I'm reading it correctly, onionoo is showing that the bridge is still published. I'm not complaining about this pattern, but wondering if the abrupt drop-off in traffic for a still-published bridge is diagnostic of MITM activity. Maybe there's a way to further monitor my bridge from within the network? If MITM is suspected, should I shut down the bridge for a day or so?

2 1

Tor marked as "enforced" process in Apparmor, but also "unconfined"
by Christian 14 Nov '12

14 Nov '12

Dear fellows, I use Ubuntu Precise 12.04 and as I run a Bridge, I find the idea of confining Tor with an Apparmor profile charming. When upgrading Ubuntu and Tor, the Apparmor stuff seemed to be automatically worked out, so I deleted my old handmade usr.sbin.tor profile as I found the new system_tor profile. Wenn I type "sudo aa-status", I get system_tor as "enforced process" with its correct process id and there's no process "unconfined, but with a profile defined". But when I type "sudo aa-unconfined", /usr/sbin/tor ist marked as "not confined". So, what about that being charming? Is everything bad? Or good, and it's just I'm an idiot? I tried to rename the system_tor profile to usr.sbin.tor and adjusted its name in the profile itself, but this only results in Tor being listed under "unconfined processes that have a profile defined" when typing "sudo aa-status". Anybody who can see clear in this issue? Any help is appreciated and thanks in advance. christian P.S.: I really did a "sudo service apparmor reload" ;-)

1 0

Tracking fast Tor exits
by Moritz Bartl 07 Nov '12

07 Nov '12

Hi, I wrote a small script today that keeps track of all "fast exits" as defined in https://trac.torproject.org/projects/tor/ticket/6498 . https://github.com/moba/tor-fast-exits-tracker Hourly updated output: https://www.torservers.net/tor-fast-exits.html Move mouse over dots to see the timestamp. -- Moritz Bartl https://www.torservers.net/

1 0