- tor-relays - lists.torproject.org

traffic pattern indicates MITM?
by ea 20 Nov '12

20 Nov '12

For four days the BW graph and usage table of my bridge indicated noticeable traffic and then the graph dropped precipitously to near zero & the table shows no recent usage. Vidalia/tor are working fine. I did try rebooting my router-modem gateway last night, but as far as I could monitor it, the traffic has still been near zero (maybe a few KB every hour or so). If I'm reading it correctly, onionoo is showing that the bridge is still published. I'm not complaining about this pattern, but wondering if the abrupt drop-off in traffic for a still-published bridge is diagnostic of MITM activity. Maybe there's a way to further monitor my bridge from within the network? If MITM is suspected, should I shut down the bridge for a day or so?

2 1

Tor marked as "enforced" process in Apparmor, but also "unconfined"
by Christian 14 Nov '12

14 Nov '12

Dear fellows, I use Ubuntu Precise 12.04 and as I run a Bridge, I find the idea of confining Tor with an Apparmor profile charming. When upgrading Ubuntu and Tor, the Apparmor stuff seemed to be automatically worked out, so I deleted my old handmade usr.sbin.tor profile as I found the new system_tor profile. Wenn I type "sudo aa-status", I get system_tor as "enforced process" with its correct process id and there's no process "unconfined, but with a profile defined". But when I type "sudo aa-unconfined", /usr/sbin/tor ist marked as "not confined". So, what about that being charming? Is everything bad? Or good, and it's just I'm an idiot? I tried to rename the system_tor profile to usr.sbin.tor and adjusted its name in the profile itself, but this only results in Tor being listed under "unconfined processes that have a profile defined" when typing "sudo aa-status". Anybody who can see clear in this issue? Any help is appreciated and thanks in advance. christian P.S.: I really did a "sudo service apparmor reload" ;-)

1 0

Tracking fast Tor exits
by Moritz Bartl 07 Nov '12

07 Nov '12

Hi, I wrote a small script today that keeps track of all "fast exits" as defined in https://trac.torproject.org/projects/tor/ticket/6498 . https://github.com/moba/tor-fast-exits-tracker Hourly updated output: https://www.torservers.net/tor-fast-exits.html Move mouse over dots to see the timestamp. -- Moritz Bartl https://www.torservers.net/

1 0

Fw: Undelivered Mail Returned to Sender
by syrus f 05 Nov '12

05 Nov '12

hello dear sir/madam I download tor (vidalia) on 05 Nov 2012 and I am in IRAN would you please tell me how remove problem step by step.

1 0

Status of NumCPUs >2 in 0.2.3.x?
by Steve Snyder 05 Nov '12

05 Nov '12

In the Tor v0.2.2.x series it was said that it was pointless to set NumCPUs to a value greater than 2. Due to poor scaling, I guess. Is that still the case with v0.2.3.24+ ? Would NumCPUs value of 4 or 8 (on systems with that many CPU cores) actually provide any benefit over a value of 2? Thanks.

2 1

Map of Tor Relays updated
by Moritz Bartl 28 Oct '12

28 Oct '12

Hi, I updated my small Python script that visualize Tor relays on Google Maps/Earth and OpenStreetMap. You can see the results generated today here: - All relays (2668): http://maps.burningsilicon.net/index.php?url=https%3A%2F%2Fwww.torservers.n… http://maps.google.com/maps?q=http:%2F%2Fwww.torservers.net%2Fmisc%2Ftormap… - Exits only (786 plus 153 "fast" exits >2MB/s) http://maps.burningsilicon.net/index.php?url=https%3A%2F%2Fwww.torservers.n… http://maps.google.com/maps?q=http:%2F%2Fwww.torservers.net%2Fmisc%2Ftormap… - Screenshot Exits only: https://www.torservers.net/misc/tormap/tormap.png - Download KML, eg. for use in Google Earth (works best): https://www.torservers.net/misc/tormap/tormap.kml https://www.torservers.net/misc/tormap/tormap-exitsonly.kml - Script: https://github.com/moba/tormap Colors: Red: Exits >2MB/s, Green: Exits <2MB/s, Yellow Star: Stable middle nodes >2MB/s, Yellow: Stable middle nodes <2MB/s, White: Other (unstable) I used the Maxmind GeoIP CityLite database. The markers might give a false impression of accuracy. Most IPs can only be tracked to city level (or even region), ie. the markers are somewhat near, not necessarily at the real location of the relay. -- Moritz Bartl https://www.torservers.net/

2 1

How to diagnose lack of traffic on bridge?
by Steve Snyder 27 Oct '12

27 Oct '12

I have a bridge that gets no traffic. I don't mean "hardly any" traffic; I mean none. The contents of bridge-stats are always empty except for the date, which advances once per day. In the state file the last date, apart from daily accounting entries, is a EntryGuardAddedBy entry from 09 Sep 2012. Yeah, that's six weeks ago. The log file contains only a weekly notice of log file rotation and a daily notice of bandwidth self-test. I never see errors or even warnings in the log. My bridge is not unstable. It has been running continuously for the last 25 days, which is pretty typical for this bridge. I understand that bridges can be identified and their IP addresses blocked. But I am not lacking traffic just from China, or just from Iran, or just from any other entity. It doesn't seem likely that my IP address has been blacklisted by *everybody*. I am also aware that the bridge authorities seem to favor handing out some addresses more than others. Really, though, this IP address is never given out at all? What are the odds of that? On the rare occasions that I restart the bridge, I see in the log that my ORPort is reachable from outside and that my server descriptor is being published. That's nice. Also, I am running the current stable version of Tor, so it is not a matter of obsolete software. How can I diagnose the failure of my bridge to garner any traffic? Thanks.

4 5

Need help: High capacity exit relay does not get traffic
by tor-admin 26 Oct '12

26 Oct '12

Hi, I am operating two 1 GBit/s servers which host 7 exit nodes. One server is located in GB with torland1 https://atlas.torproject.org/#details/4E377F91D326552AAE818D5A17BC3EF79639C… torland2 https://atlas.torproject.org/#details/332895D092C2524A3CDE8F6E1498FFE665EBF… torland1 is configured to run at maximum bandwidth, torland2 runs trottled to ensure not to exceed the 100TB contractual traffic limit. The nodes on this server get traffic as expected and are at the top of the Blutmagie Tor Status http://torstatus.blutmagie.de/index.php?SR=Bandwidth&SO=Desc. The second server is located in RO and hosts torland3 https://atlas.torproject.org/#details/E5DB403858511BB166405E4C43776D933A7B8… torland4 https://atlas.torproject.org/#details/E0D2F8B2A18516A5C935477B06048D7BD2E7E… torland5 https://atlas.torproject.org/#details/D2F1745C11843BC5AF09CB9D4027AD2BE5F1B… torland6 https://atlas.torproject.org/#details/43F9022028F8AB0F7420F702CB079DF0CA0C8… The configuration for the GB and RO nodes is: Nickname TorLandX ORPort 443 DirPort 80 Address a.b.c.d ORListenAddress a.b.c.d DirListenAddress a.b.c.d OutboundBindAddress a.b.c.d RelayBandwidthRate 30 MBytes # max 30 RelayBandwidthBurst 100 MBytes # max 100 MaxOnionsPending 250 NumCPUs 4 On both servers AES-NI is used by openssl. Although the server in RO has the same configuration, same operating system and a similar hardware, it does not get traffic as the server in GB. At the moment Atlas shows for torland3-6 only an advertised bandwidth rate of less the 3 MB/s. The GB node torland1 shows more than 30 MB/s. In order to test if there are any traffic limits I did several speed tests by doing up and downloads of a large 4GB iso image. Downloading simultaneously with 10 curl instances from different debian mirrors I measured around 1 GBit/s. To measure upload I stored the debian 4GB iso image on the webserver of the RO server and used curl on the GB server to download it from RO. The maximal measured upstream speed on the RO server was around 750 Mbit/s. Therefore I looks for me as there are no traffic limits inplace by my ISP or their upstream. One of the servers operated by Torservers.net is located in the same data center and runs wau, gorz and sofia at high speed. I am wondering why the directory authorities only measure such a small fraction of the available bandwidth for the RO nodes. Because I am paying personally for the server I would like to get most out of the server. Can someone who runs a tor authority please help me to understand what is the reason for the low observed bandwidth. Thanks, Torland

2 2

Announcing the Walla Walla Project
by admin 24 Oct '12

24 Oct '12

Hi, I'm representing the Walla Walla Project, a volunteer initiative that aims to support the Tor network by contributing (exit-)relays and bridges to the network, and I would like to quickly announce today's (initial) launch of our humble project to the Tor relay operator mailinglist. Without any further ado, our project website is available at http://wallawallaproject.org/ We certainly very much welcome questions, comments and suggestions! Have a great day. On behalf of the Walla Walla Project team, Thomas

5 10

Running relay on OpenBSD ulimit problems
by Gijs 19 Oct '12

19 Oct '12

Hey guys, I just created a new relay on my new firewall box thats running openbsd, however I'm running into issues with ulimits: Failing because we have 991 connections already. Please raise your ulimit -n. I tried editing login.conf (might be doing it wrong) to no avail Anyone able to help me out ? Gijs

2 2