- tor-relays - lists.torproject.org

Relay not receiving Guard flag
by Norris Thomlinson 04 Mar '17

04 Mar '17

Hi all, I've had a relay running for 41 days, with Flags: Fast HSDir Running Stable V2Dir Valid...but no Guard flag. My impression from "Lifecycle of a new relay" at https://blog.torproject.org/blog/lifecycle-of-a-new-relay is that the Guard flag should be added within about 2 weeks of starting a relay. Is that post out of date? Or am I missing something I need to enable to allow my relay to be a Guard? Atlas entry for my relay: https://atlas.torproject.org/#details/9C2BF9B1E30EBB1A3836FA04BEEE8CC192CC1… Thanks! Norris Thomlinson Deep Green Resistance Webmaster

5 4

Re: [tor-relays] [OrNetRadar] AS: "EDIS GmbH" - Linux (15)
by nusenu 03 Mar '17

03 Mar '17

If you added 15 relays on 2017-02-24 (yesterday) on AS38478, please consider setting ContactInfo and MyFamily in your torrc (and maybe a more recent tor version). thanks ornetradar(a)riseup.net: > 2017-02-24 > ----------------------------------------------------------------------------------------------------------------------- > Up|Ext|JoinTime| IP | CC | ORp | Dirp |Version | ContactInfo | Nickname | eFamlen > ----------------------------------------------------------------------------------------------------------------------- > 1 | 0 |15:31:23| 124.248.229.138 | hk | 9001 | 9051 |0.2.8.9 | None | coast | 1 > 1 | 0 |15:33:47| 124.248.229.140 | hk | 9001 | 9051 |0.2.8.9 | None | crop | 1 > 1 | 0 |15:35:17| 124.248.238.194 | hk | 9001 | 9051 |0.2.8.9 | None | beach | 1 > 1 | 0 |15:39:10| 124.248.238.197 | hk | 9001 | 9051 |0.2.8.9 | None | queen | 1 > 1 | 0 |15:51:44| 124.248.229.142 | hk | 9001 | 9051 |0.2.8.9 | None | castle | 1 > 1 | 0 |17:27:16| 103.44.66.2 | None | 9001 | 9051 |0.2.8.9 | None | tennis | 1 > 1 | 0 |17:39:25| 103.27.126.28 | hk | 9001 | 9051 |0.2.8.9 | None | court | 1 > 1 | 0 |17:48:57| 103.44.66.4 | None | 9001 | 9051 |0.2.8.9 | None | waterfall | 1 > 1 | 0 |17:58:26| 103.44.66.5 | None | 9001 | 9051 |0.2.8.9 | None | camp | 1 > 1 | 0 |18:06:15| 103.27.126.27 | hk | 9001 | 9051 |0.2.8.9 | None | fighter | 1 > 1 | 0 |18:25:53| 43.242.174.35 | hk | 9001 | 9051 |0.2.8.9 | None | burn | 1 > 1 | 0 |18:38:11| 43.242.174.36 | hk | 9001 | 9051 |0.2.8.9 | None | leisure | 1 > 1 | 0 |18:46:30| 43.242.174.37 | hk | 9001 | 9051 |0.2.8.9 | None | clerk | 1 > 1 | 0 |18:55:48| 150.107.44.3 | hk | 9001 | 9051 |0.2.8.9 | None | servant | 1 > 1 | 0 |19:00:45| 150.107.44.2 | hk | 9001 | 9051 |0.2.8.9 | None | mankind | 1 > Fingerprints: > 25214D40CD1747A06FA2E695E48AED0E988ABA61,25214D43D1FDAF97EBCB68C282D7AA247A1BC487,25214D43CF6621FD4FBEB6FC654A29702965094D,25214D42EC6083C31E1709D86CEBEFFCD4BE1958,7053866617EA5FD3AC0B5D4EB8CE6EC792F99AF5,AB559BE305A7A63962944D32A69AEB2AF9EAC7DC,AB559BE25926F720890BDAE88407E1A676883304,AB559BE2CA986C0EDEFBD78B48621DD36C349AD4,AB559BE02A323465AB8C3D0BB18EA04A1F13E32F,203281E1A349FAA241B6A66456A5AFD1C5B49410,203281E3EBC4E8AB7F040AD8A86B8767A5F6F849,203281E0784DE0DFB5C39C714BBBBA39E76AAA61,203281E37E44A5ABCEA7880DA47895197E92D546,203281E1226E3C1EEBA522409109C847AB14A2B9,203281E27627443DB6FE5E06250DDDB6D9718A0C >

5 14

Descriptor Published: never
by Jivan Amara 03 Mar '17

03 Mar '17

My relay, which was recently restarted has a value of 'never' for 'Descriptor Published'. Is this a problem & if so how would I remedy it? https://atlas.torproject.org/#details/880EA01C702B372843A309AAE71BCBE36213C…

2 2

Remove IP from list of known Tor exit nodes
by Paw 02 Mar '17

02 Mar '17

Dear all, By mistake I routed exit traffic from my Tor exit node through an IP that is used for NAT'ing where I live, for a short time. So now the NAT ip is found on https://check.torproject.org/exit-addresses which is a bit unfortunate, since cloudFlare now does CAPCHA check on my NAT traffic. Is there a way to remove my NAT ip from the list of Tor exit nodes? The NAT address does not see any Tor traffic anymore. Best regards, Paw

3 4

Re: [tor-relays] [tor-announce] Tor 0.2.9.10 is released
by Ralph Seichter 02 Mar '17

02 Mar '17

On 01.03.2017 22:18, Nick Mathewson wrote: > Changes in version 0.2.9.10 - 2017-03-01 > [...] Starting this new version results in the following log entry: This version of Tor (0.2.9.10) is newer than any recommended version in its series, according to the directory authorities. Recommended versions are: 0.2.4.27,0.2.4.28,0.2.5.12,0.2.5.13,0.2.7.6,0.2.7.7,0.2.8.9,0.2.8.10,0.2.8.11,0.2.8.12,0.2.9.9,0.3.0.2-alpha,0.3.0.3-alpha Not sure if this is just informational or if it will affect Tor node operation. -Ralph

2 1

I have an Alleged family member
by Arisbe 28 Feb '17

28 Feb '17

Hello all, I run a variety of Tor relays--most on VPS hosts. I recently added a small relay and updated my family members. Strangely, this last relay is tagged as an "alleged family member," even on itself [0]. It has been like this for over a month. I can't detect a typo. Any suggestions? [0] 04C095E0DAB8C28BC433677C4AE8F65CB7D7083C

4 5

Lost guard flag, IPv6 problem?
by Sebastian Niehaus 26 Feb '17

26 Feb '17

Hi, my relay lost its guard flag and I don't know what might be the reason. The flag was lost before the last reboot (due to kernel upgrade) https://atlas.torproject.org/#details/7A32C9519D80CA458FC8B034A28F5F6815649… Any ideas on that? What bothers me too is: there is no IPv6 "Dir Address" although I did not change configuration. Some days ago, I hat IPv6 connectivity issues but they are resolved. Any hints on this? I am not sure if those problems are related to each other ... Thanks, Sebastian

2 1

ansible relayor v0.2.1 released
by nusenu 26 Feb '17

26 Feb '17

Hi, relayor v0.2.1 has been released. blog post to get you started: https://medium.com/@nusenu/deploying-tor-relays-with-ansible-6612593fa34d GPG signing key fingerprint: pub 4096R/4D705DE9 2016-02-11 [expires: 2018-07-30] Key fingerprint = A7B5 DB91 CE04 C9E0 BE66 446B 8CBE 52BD 4D70 5DE9 regards, nusenu

2 1

Is there a logical limit of MyFamily members?
by John Ricketts 25 Feb '17

25 Feb '17

All, I have 30 nodes now and my year end I intend to run enough to reach 6% of exit probability. I want to know if there is a logical limit per family. Thanks! John

2 2

PuTTY 0.68 released on 2017-02-21
by I 24 Feb '17

24 Feb '17

http://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html

1 0

Provider Suggestion, Scaleway
by Volker Mink 24 Feb '17

24 Feb '17

Hey there J I just want to name a good provider for TOR Relays and Exits. I am running a small VPS on Scaleway.com , which costs me about 3€ a month. Unlimited traffic! Scaleway is running ARM-systems, so ArchLinux is recommended. Check my Exit on Atlas: https://atlas.torproject.org/#details/2D31C2099EB65577F5106154DDCAA6C3EAD6B… best, volker

9 11

New Relay Operator: Hostname
by colin＠awakening.io 24 Feb '17

24 Feb '17

Hello! I have just started up a new exit node using nusenu's wonderful Ansible scripts (thank you kindly). I would like the hostname to be public, I wonder if I have misconfigured as the hostname does not display here: https://torstatus.blutmagie.de/router_detail.php?FP=b0a8f23372309d3589e70bd… I have the following in my configuration: ORPort 198.100.159.72:9000 DirPort 198.100.159.72:9001 Address tor-exit-01.awakening.io Any thoughts? - Colin

7 8

New Tor relay
by Luca Tortiglione 22 Feb '17

22 Feb '17

Hi all! I'm paying a VPS to run a tor relay. I hope it will go well. Glad to belong to the family by helping the community. Of course, I'm runnin Tor 0.2.9.9 on Debian. Thank you. -- L.

3 2

large server farms
by contact＠charlieluna.com 21 Feb '17

21 Feb '17

I'm highly interested in us creating a large server farm for Tor services. The only question is how to get the coaxial cable ran from the server facility to each subscriber. The power requirements could be handled by solar and wind systems and any water needs can be created by means of water collection systems and solar heat collectors for hot water. I think it's totally feasible. What do you guys think? Also, I'm very hardcore about taking back the internet for the people. No more of this for-profit stuff where we get throttled and our freedom of speech is abridged. Internet for the people is a means of freedom of speech. Let's take it back.

7 6

Bandwidth Measurement
by Marcobr 20 Feb '17

20 Feb '17

Hey everyone, as far as I know, the DAs running the bwauth scripts conduct hourly bandwidth measurements. Depending on the advertised bandwidth of the relay node, a smaller/bigger file gets transmitted on a custom 2-hop-circuit and the transmission time determines the actual bandwidth. Now, here is my problem: Assuming that my relay node advertised 50MB/s, and is currently at 98% load (49 MB/s). To conduct the measurement, the bwauth script will send a 8MB file over my relay, but since it can only serve another 1MB/s, how will the bwauth script determine that my advertised 50MB/s is correct?

3 2

Re: [tor-relays] tor-relays Digest, Vol 73, Issue 29
by contact＠charlieluna.com 20 Feb '17

20 Feb '17

On 2017-02-20 04:00, tor-relays-request(a)lists.torproject.org wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. large server farms (contact(a)charlieluna.com) > 2. Re: large server farms (teor) > 3. Re: large server farms (Duncan) > 4. Re: large server farms (I) > 5. Re: large server farms (niftybunny) > 6. Re: large server farms (anondroid) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 19 Feb 2017 16:44:25 -0800 > From: contact(a)charlieluna.com > To: tor-relays(a)lists.torproject.org > Subject: [tor-relays] large server farms > Message-ID: <457551c757ee4a355917f577d2f9a7ba(a)charlieluna.com> > Content-Type: text/plain; charset=US-ASCII; format=flowed > > I'm highly interested in us creating a large server farm for Tor > services. The only question is how to get the coaxial cable ran from > the > server facility to each subscriber. The power requirements could be > handled by solar and wind systems and any water needs can be created by > means of water collection systems and solar heat collectors for hot > water. I think it's totally feasible. What do you guys think? > > Also, I'm very hardcore about taking back the internet for the people. > No more of this for-profit stuff where we get throttled and our freedom > of speech is abridged. Internet for the people is a means of freedom of > speech. Let's take it back. > > > ------------------------------ > > Message: 2 > Date: Mon, 20 Feb 2017 11:47:46 +1100 > From: teor <teor2345(a)gmail.com> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] large server farms > Message-ID: <E696CA8C-A1A6-4D14-8B3C-E901C81E7D55(a)gmail.com> > Content-Type: text/plain; charset="utf-8" > > >> On 20 Feb 2017, at 11:44, contact(a)charlieluna.com wrote: >> >> I'm highly interested in us creating a large server farm for Tor >> services. The only question is how to get the coaxial cable ran from >> the server facility to each subscriber > > Tor is a decentralised network, that's designed to be secure even if > users aren't directly connected to their network entry points. > > Can you tell us what you're trying to achieve for users by centralising > Tor services like this? > > (And what services you intend to provide?) > > T > > -- > Tim Wilson-Brown (teor) > > teor2345 at gmail dot com > PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B > ricochet:ekmygaiu4rzgsk6n > xmpp: teor at torproject dot org > ------------------------------------------------------------------------ > > > >

1 0

Is my relay alive?
by Ian Zimmerman 18 Feb '17

18 Feb '17

Hello, I started running a relay on my server [1] about 10 days ago. I checked the log to see about the self test and everything lloked OK. But even today there is only one file in the stats subdirectory: dirreq-stats. Is that normal? The "lifecycle" document tells me I should see normal traffic beginning around day 8. Is there a human-readable realtime (or close) list of relays? I see people posting here tables like the following, where do they come from? > 1 | 0 |01:02:35| 64.137.243.13 | ca | 9001 | 9030 |0.2.8.8 | noah.holland(a)aol.com | phenomenamomentaryh | 1 > 1 | 0 |02:24:58| 64.137.172.121 | ca | 9001 | 9030 |0.2.8.8 | enriquehanson56(a)gmail.com | UwFrNxQgYtBeMv | 1 > 1 | 0 |04:10:09| 45.62.244.240 | ca | 9001 | 9030 |0.2.8.8 | kmjapiji(a)mail.com | 9U5Cs7gu3XTORY | 1 > 1 | 0 |04:17:13| 45.62.252.66 | ca | 9001 | 9030 |0.2.8.8 | jjzwpy(a)yahoo.com | 8z4w2t6qteADFfb6 | 1 > 1 | 0 |12:45:39| 64.137.197.233 | ca | 9001 | 9030 |0.2.8.8 | malvina.maybury(a)gmail.com | CHWMSRVU | 1 > 1 | 0 |13:20:17| 64.137.189.77 | ca | 9001 | 9030 |0.2.8.8 | pwcrack(a)pwcrack.com | CACpwcrackgnt4 | 1 [1] 173.255.215.69 -- Please *no* private Cc: on mailing lists and newsgroups Personal signed mail: please _encrypt_ and sign Don't clear-text sign: http://cr.yp.to/smtp/8bitmime.html

4 3

Proselytizing Tor at the General Strike
by Kenneth Freeman 18 Feb '17

18 Feb '17

On February 17, the day before Presidents Day, a general strike shall be held against any and all things Trump. If Boise is having an activists workshop, then there are plenty of tranches of fertile ground nationwide to plant Tor browsers, relays, and exit nodes. http://sfist.com/2017/02/02/nationwide_general_strike_gains_tra.php http://strike4democracy.com/ https://www.facebook.com/events/1756631744665376/ There's activism, and then there's activism. I would steer clear of actual OpSec unless you're in the right milieu. I have been told in introducing Tor that it can be difficult to conceptualize. I always tell people that your privacy is more configurable than you may realize, and that privacy horizons differ. Get down. Get encrypted.

1 1

Shutdown of TorLand1
by tor-admin＠torland.is 16 Feb '17

16 Feb '17

Hi all, after 5 years of operation I will shutdown TorLand1 (https://atlas.torproject.org/#details/E1E922A20AF608728824A620BADC6EFC8CB8C…) on February 17 2017. During the time of operation it pumped almost 6 PetaByte of exit traffic. Compared to the amount of traffic, the number of complains were quite low. Around 1-2 complains per week with a reduced exit policy. Two times I was contacted by LE via email. When I started the exit relay there were around 20-30 high capacity relays available. Today compass shows 180 95+ MBit/s exits. TorLand1 was operated and paid by me without an organization like torservers, nos onions, etc. I hope others will step up and run high capacity exits. The Tor network needs your help. I will continue to run a meek bridge. Regards, torland

10 9

Connectivity issues; disabling my relay
by Steven Chamberlain 15 Feb '17

15 Feb '17

Hello! My non-exit Tor relay "4pyro2eu3org0" in the United Kingdom is served by a consumer FTTC broadband line. It had a rare, unexplained outage on 2016-01-19 between 00:00 and 02:00 UTC. Two other lines with the same provider, terminating in the same local telephone exchange, were unaffected. When it came back, latency was different (lower) than before, to the first hop (the LNS in Birmingham) suggesting ATM traffic maybe taking a different (faster) route through BT's network *or* just my modem having resynced with different modulation. (Smokeping graph attached). But what concerns me, are intermittent bursts of packet loss (for about 3 seconds, happening every 10-60 seconds) which have been happening for more than 24 hours since. My ISP has checked with BT and assures me no maintenance work was scheduled that night; they see in their logs that my PPP session dropped at that time but believe no other customers at my local telephone exchange were affected. I consider that - whatever may be causing this - this kind of interruption to Tor relay traffic, could make timing attacks easier for an observer. So I'm shutting down my relay until this can be explained and fixed. At the very least, I should replace the BT Openreach-supplied VDSL modem (Huawei HG521) or its firmware with something I have more control over (and third parties have less control over...) Here's how the issue looks in mtr (at 1-second intervals); it affects all IP traffic. Maybe this is something benign, but I encourage other relay operators to be vigilant nonetheless. 1. 217.155.40.118 (Tor relay) ................................................................................... 2. 62.3.80.17 (LNS) .........................???......................???............???............... 3. x.x.x.x (test machine on same ISP) .........................???......................???............???............... and in reverse: 1. x.x.x.x (test machine on same ISP) ................................................................................... 2. 62.3.80.17 (LNS) ................................................................................... 3. 217.155.40.118 (Tor relay) .........................???......................???............???............... Regards, -- Steven Chamberlain steven(a)pyro.eu.org

3 4

[OrNetRadar] loskiq exit relays
by nusenu 14 Feb '17

14 Feb '17

Hi Amir, thanks for adding so many tor exit relays. You might want do consider rejecting port 25 in your ExitPolicy, that is the default: https://www.torproject.org/docs/tor-manual.html.en#ExitPolicy Also please set the MyFamily in your torrc https://www.torproject.org/docs/tor-manual.html.en#MyFamily If you need help with that let us know. thanks, nusenu ornetradar(a)riseup.net: > 2017-02-11 > ----------------------------------------------------------------------------------------------------------------------- > Up|Ext|JoinTime| IP | AS | CC | ORp | Dirp | OS | Version | Nickname | eFamlen > ----------------------------------------------------------------------------------------------------------------------- > 1 | 1 | 09:34:02 | 13.94.150.167 | Microsoft Corpo | nl | 8080 | 21 | Linux | 0.2.9.9 | loskiq | 1 > 1 | 1 | 13:20:08 | 13.74.174.90 | Microsoft Corpo | ie | 8080 | 21 | Linux | 0.2.9.9 | loskiq | 1 > 1 | 1 | 10:30:29 | 13.81.62.91 | Microsoft Corpo | nl | 8080 | 21 | Linux | 0.2.9.9 | loskiq | 1 > 1 | 1 | 15:10:13 | 40.69.73.77 | Microsoft Corpo | ie | 8080 | 21 | Linux | 0.2.9.9 | loskiq | 1 > 1 | 1 | 20:00:54 | 40.118.98.190 | Microsoft Corpo | nl | 8080 | 21 | Linux | 0.2.9.9 | loskiq | 1 > 1 | 1 | 11:37:42 | 13.73.158.253 | Microsoft Corpo | nl | 8080 | 21 | Linux | 0.2.9.9 | loskiq | 1 > 0 | 0 | 11:56:32 | 104.47.155.162 | Microsoft Corpo | nl | 8080 | 21 | Linux | 0.2.9.9 | loskiq | 1 > 1 | 0 | 17:03:54 | 13.69.10.96 | Microsoft Corpo | nl | 8080 | 21 | Linux | 0.2.9.9 | loskiq | 1 > 1 | 0 | 15:36:37 | 52.164.227.83 | Microsoft Corpo | ie | 8080 | 21 | Linux | 0.2.9.9 | loskiq | 1 > 1 | 1 | 09:49:38 | 104.46.34.192 | Microsoft Corpo | nl | 8080 | 21 | Linux | 0.2.9.9 | loskiq | 1 > 1 | 0 | 16:34:04 | 13.81.114.52 | Microsoft Corpo | nl | 8080 | 21 | Linux | 0.2.9.9 | loskiq | 1 > Fingerprints: > EBCFE46B8B756B44EC93BD833804C80341EB61CC,4896D07700198BE676543CC7F29A117C9DB8EE41,425C84600D0FD3781A553BD29D4E8782AB580120,4FAFBB649045A5C466ABBE6D702A55914DA2BEA7,05DBC69C4E392F83AF5C3F803913A3907E91DD6D,5245785C5CEBB51DD7CD9BBBB649AFE3FF5A85AD,1BFA55620CFC63B6ECE80877E282526E6F493903,7CCC661464AA0A954D2584B06D411175AFC91533,7E327AC4A36679C2A0A8F694B81CD182DB0E8560,0775CC3939EC0B749377EB53DFFEEA7E41F4CE82,5743EF596F776B20B1F0F551A9BF4EFCCE2E07EE >

1 1

Normal to lose stable/guard flags on relay reboot?
by Jivan Amara 13 Feb '17

13 Feb '17

Hi all, I recently rebooted a server hosting a relay (XOXXOX). Traffic plummeted to zero for five days and the relay lost all its flags except fast/running/valid. The server was down less than a minute. Is this normal?

4 5

My first relay is running
by Juan Guillermo Narvaez 13 Feb '17

13 Feb '17

Hello everyone! I'm start running my Tor relay today. Now what? =) -- J. Guillermo Narvaez @_aran0id

3 2

Reminder: If you are on 0.2.9.x, make sure you are running 0.2.9.9
by Nick Mathewson 12 Feb '17

12 Feb '17

Hi, awesome relay operators! About two weeks ago, we put out 0.2.9.9, to fix a significant problem in our build process that led to an easy remote crash attack: o Major bugfixes (security): - Downgrade the "-ftrapv" option from "always on" to "only on when --enable-expensive-hardening is provided." This hardening option, like others, can turn survivable bugs into crashes -- and having it on by default made a (relatively harmless) integer overflow bug into a denial-of-service bug. Fixes bug 21278 (TROVE-2017-001); bugfix on 0.2.9.1-alpha. If you are on some earlier version of 0.2.9.x, it would be really great if you could update your relay some time soon: I want to put out a fix for the underlying bug here, but I'm hesitant to do so while there are still 700 crashable relays on the network. Also if you are on 0.3.0.1-alpha, you should upgrade to 0.3.0.2-alpha or later, but there are only around 53 relays still on that version, so I'm freaking out less about that. best wishes and many thanks, -- Nick

14 22

Reaching out to webiron
by Andrew Deason 11 Feb '17

11 Feb '17

I run an exit node, and as such, I get abuse emails like this from time to time: <https://lists.torproject.org/pipermail/tor-relays/2015-October/007982.html> Mostly I ignore them, but since their automated report contains the sentence "Please feel free to send us your comments or responses.", every so often I send something to complain about their practices. To my surprise, apparently somebody does actually read these because today I got a reply. I'm not reproducing the entire response here without permission (they seem kinda touchy), but the person that replied did mention that they have some kind of rbl "in beta" regarding tor exits. They seemed to imply that doing so was quite a burden on them, though, which I don't really understand (IME blocking tor exits is easy; intentionally so). I'm trying to keep the conversation going, but I was wondering if anyone from the tor project has tried to reach out to them in some kind of official way? I'm just some random guy, so I don't know if it would be preferable for someone more knowledgeable, or with more access to tor infrastructure, to be conversing with them. (e.g. teor) I assume some people will say this isn't even worth the effort; it's not like it's hard to just ignore those reports. But it doesn't take much effort to just try to talk ot them, and it perhaps helps to give tor a reputation of cooperation and helpfulness. -- Andrew Deason adeason(a)dson.org

11 23