- tor-relays - lists.torproject.org

Question on warnings
by Santiago Roland 30 May '16

30 May '16

Hi, i have installed a non-exit relay in my home server and for many days i have had this warnings: 20:42:57 [ARM_NOTICE] Unable to prepopulate bandwidth information (unable to read the state file) 20:42:56 [ARM_WARN] Unable to read tor's log file: /var/log/tor/log [1 duplicate hidden] 20:42:56 [ARM_NOTICE] Tor is preventing system utilities like netstat and lsof from working. This means that arm can't provide you with connection information. You can change this by adding 'DisableDebuggerAttachment 0' to your torrc and restarting tor. For more information see... https://trac.torproject.org/3313 20:42:52 [ARM_NOTICE] No armrc loaded, using defaults. You can customize arm by placing a configuration file at '/home/santiago/.arm/armrc' (see the armrc.sample for its options). I just wanted to know if there are safe warnings or should i modify something in my config Best regards, -- Santiago Roland.- --------------------------------- Jabber: santiago(a)undernet.uy GNU Social: http://bit.ly/gnusr openPGP ID: 5ADF0F53 openPGP key: http://bit.ly/pgpun CX1DR - Grid Locator: GF25bf ---------------------------------

2 1

I'm Running A Tor Exit Node And NEVER Initiated It
by Percy Blakeney 30 May '16

30 May '16

Like I stated a few minutes ago, I am and have been running Tor from my location yet I have nothing to do with it. I have been sitting on this for a while. Before anyone comes down on me for it, you have to understand what I've been going through with my network. Tor is only the tip of the iceberg. This is as of today: usr/share/tor/tor-service-defaults-torrc DataDirectory /var/lib/tor PIDFile /var/run/tor/tor.pid RunasDaemon 1 user debian-tor control socket /var/run/tor/control control socket group writable 1 cookie authentication 1 cookie auth file group readable 1 cookie auth file /var/run/tor/control-authcookie log notice file /var/log/tor/log etc/tor/torrc contact info 0xFFFFFFFF Random Person <nobody AT example dot com> #Dirport 80 No Listen #Dirport 127.0.0.1:9091 No Advertise #Dirport front page /etc/tor/tor-exit-notice.html #Exit Policy Accept *:6660-6667, reject *:* #allow irc ports but no more #accept *:119 # accept nntp as well as default exit policy var/lib/tor lock-Mon 16 May 2016 09:48:32 PM EDT (File content is not visible to me) cached-certs-Mon 16 May 2016 09:48:32 PM EDT (File content is not visible to me) cached-microdescs-Mon 16 May 2016 10:18:34 PM EDT (File content is not visible to me) cached-microdescs.new-Mon 16 May 2016 10:18:34 PM EDT (File content is not visible to me) state-Wed 25 May 2016 04:36:02 AM EDT (This one IS visible) cached-microdesc-consensus-Sun 29 May 2016 09:17:15 AM EDT (File content is not visible to me) tor.pid-32156 /var/lib/tor/state #Tor state file last generated on 2016-05-25 04:36:02 local time #Other times below are in UTC #You *do not* need to edit this file. EntryGuard Jans 50586E25BE067FD1F739998550EDDCB1A14CA5B2 DirCache EntryGuardAddedBy 50586E25BE067FD1F739998550EDDCB1A14CA5B2 0.2.4.27 2016-04-28 16:16:20 THERE'S WAY more to the above file but I'm not sure what I should and shouldn't share on here. As a matter of fact, I'm not sure what half of this stuff means so I've spent the last few months trying to educate myself on as much of this as possible. Like I said, I am MORE than willing to talk to anyone out there who may be able to help.

9 15

Re: [tor-relays] I'm Running A Tor Exit But Never Initiated It
by david.carlson.417＠gmail.com 29 May '16

29 May '16

Two thoughts: I did not see mentioned whether your Wi-fi is secured.If your running a guest machine in a vm you will not know about the host.Have you tried booting into a rescue DVD? David C Sent from my LG G Pad 7.0 LTE, an AT&T 4G LTE tablet ------ Original message------From: ng0Date: Sun, May 29, 2016 12:36 PMTo: tor-relays@lists.torproject.org;Subject:Re: [tor-relays] I'm Running A Tor Exit But Never Initiated It On 2016-05-29(04:32:12+0000), krutt(a)anche.no wrote:> Hey there,>> This situation sounds really weird. Could you try running> sudo cat /var/lib/tor/fingerprint> on one of your Tor-machines? Then we can determine whether you are> really running an exit relay.>> As Arjen stated before, you can probably remove the Tor package with> sudo apt-get install torCorrection: apt-get remove tor> Best regards,> KRutt>> Percy Blakeney:> > There is NO ONE else in this house that uses my computers other than my 13> > year old daughter who plays Minecraft on hers. I have one Dell desktop> > that runs Linux Mint Rosa, however, sometimes when I turn it on a black> > screen appears with a message stating "VirtualBox restarting." Neither my> > child nor myself installed VirtualBox on the desktop. I also have an Acer> > laptop that runs Linux Mint Mate and a Lenovo that runs Windows 10. When I> > try to install the Tor browser on my Acer it tells me I already have it and> > it's running, however when I try to open it I'm told I don't have it. Yet> > my folders and files tell me otherwise. I have so much to get out that> > once again I'll apologize for my ADD responses.> >> > On Sun, May 29, 2016 at 11:23 AM, krutt(a)anche.no wrote:> >> >> Hey percy,> >>> >> I can't image a single reason why Tor should be configured to run a> >> relay without the system admins knowledge. Are there any other useres> >> with root access at those machines?> >> You could issue "(sudo) ls -al" on that folder to find out when the Tor> >> configs were created. Are there any other settings set in your torrc?> >>> >> I'm not quite sure but this could be a "good" crypto locker too.> >>> >> Best regards,> >> KRutt> >>> >> Percy Blakeney:> >>> According to files and folders I have on two separate computers in my> >>> house, I am running a Tor exit but I absolutely have nothing to do with> >>> it. I am only able to physically view certain files ie; var/log/tor,> >>> etc/tor/torrc, while other files like var /lib/tor/lock the content is> >>> invisible. I am MORE than willing to talk to anyone who may be able to> >>> help.--♥Ⓐ ng0 | http://www.n0.is/u/n4096R/13212A27975AF07677A29F7002A296150C201823_________… mailing listtor-relays@lists.torproject.orghttps://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

Fwd: Enable relay as trusted directory & entry guard
by Tim Wilson-Brown - teor 26 May '16

26 May '16

> Begin forwarded message: > > From: Austin Holiday <aholiday(a)yahoo.com> > Subject: Enable relay as trusted directory & entry guard > Date: 25 May 2016 at 23:24:42 GMT-3 > > Hi, > > I have the extra capacity/bandwidth would like to upgrade my relay to an entry node and directory server: > https://atlas.torproject.org/#details/1523C502A9754B6B42CCA5EB402A833CFF0E4… > > Is there anything I need to do? Hi, This question is best answered on the tor-relays list, I've cc'd the reply there. Your relay may be recommended as a "Guard" (entry node) by the directory authorities if it has enough stability and bandwidth over time. For more information, please read: https://blog.torproject.org/blog/lifecycle-of-a-new-relay Your relay is already a directory mirror, because you have configured a DirPort. Tim Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP 968F094B ricochet:ekmygaiu4rzgsk6n

1 0

Re: [tor-relays] VPS for Exits
by Neel Chauhan 25 May '16

25 May '16

> An exit node could be expensive ... Well, I'm still sticking with CoolHousing/Virtual Server Lite because I hardly ever get abuse complaints. For ITL, I may leave after my term expires. But a few other companies I found were: https://hostmaze.com/ https://www.lcsnet.eu/index.php https://serverastra.com/ https://blazingfast.io/ Thanks, Neel Chauhan https://www.neelc.org/

4 3

TOR router install without access to root
by Markus Koch 25 May '16

25 May '16

possible or do I have to ask my hosting company for the install on a shared server? Markus

9 17

Re: [tor-relays] VPS for Exits
by Neel Chauhan 23 May '16

23 May '16

>Do you know of a VPS for an exit? I have two exits on VPS servers. One is on ITL (https://itldc.com/) and the other one is on CoolHousing using their Virtual Server Lite brand (http://virtualniserverlite.cz/en/) My experience with both hosts has been very good. For the latter, you WILL need a Reduced Exit Policy, and have to remove IRC ports. I also previously had a VPS with Verelox (https://verelox.com/) when they had unlimited bandwidth, and they allow Tor exit nodes as well. I don't know about other providers, but a good place to ask for a Tor friendly VPS is vpsBoard (https://vpsboard.com/) -Neel Chauhan https://www.neelc.org/

4 3

New month, new TOR exit servers, need ELI5 pls
by Markus Koch 22 May '16

22 May '16

As I told you guys ITLDC.com kicked 3 of my exit servers last month. Just got 3 new ones, hosted by DigitalOcean, Hostwinds and soon virtualniserverlite. If things go wrong (and with my luck they will) how many and which ports do I have to forward to be useful as a exit node? eg: I get lots of abuse of port 22, can I close it and the TOR network will for itself find out that sending me ssh traffic is a bad idea? markus

4 7

Re: [tor-relays] New month, new TOR exit servers, need ELI5 pls
by Tristan 22 May '16

22 May '16

You can close port 22 by adding it to your exit policy. The syntax would be something like ExitPolicy reject *:22 You should put this towards the top of the exit policy rules so it isn't overridden by other rules. On May 22, 2016 8:34 AM, "Markus Koch" <niftybunny(a)googlemail.com> wrote: As I told you guys ITLDC.com kicked 3 of my exit servers last month. Just got 3 new ones, hosted by DigitalOcean, Hostwinds and soon virtualniserverlite. If things go wrong (and with my luck they will) how many and which ports do I have to forward to be useful as a exit node? eg: I get lots of abuse of port 22, can I close it and the TOR network will for itself find out that sending me ssh traffic is a bad idea? markus _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Port scanning via exit node
by ken＠kenbaker.co.uk 21 May '16

21 May '16

Hi Folks: I got an abuse complaint from my VPS host, because someone was using my exit node for port scanning. Here is the first bit of his (redacted) log. Attack detail : 4K scans dateTime srcIp:srcPort dstIp:dstPort protocol flags bytes reason 2016.05.14 17:13:47 CEST xxx.xxx.xxx.xxx:35008 xxx.xxx.xxx.xxx:22 TCP SYN 60 SCAN:SYN 2016.05.14 17:13:47 CEST xxx.xxx.xxx.xxx:46532 xxx.xxx.xxx.xxx:22 TCP SYN 60 SCAN:SYN 2016.05.14 17:13:47 CEST xxx.xxx.xxx.xxx:41718 xxx.xxx.xxx.xxx:22 TCP SYN 60 SCAN:SYN Hosting dude says he'd appreciate it if I could prevent this, but I'm not sure how. I'm afraid I don't have any logs - the VPS got reimaged. Suggestions how to prevent or mitigate this are welcome. Cheers, K.

3 3

tips-running-exit-node-minimal-harassment
by pa011 21 May '16

21 May '16

This page https://blog.torproject.org/blog/tips-running-exit-node-minimal-harassment cant be found at the moment - anybody holding a copy of it please? There is something similar 6 years old: https://www.facebook.com/notes/tor-project/tips-for-running-an-exit-node-wi… Is this still state of the art? Thanks Paul

2 1

Re: [tor-relays] VPS for Exits
by Neel Chauhan 21 May '16

21 May '16

> I contacted ITL (https://itldc.com/) as well two weeks ago. To me they > refused opening an exit: "We decide to do not allow new public tor > exit > nodes in our network. Existing public tor exit nodes we be kept." Well that's unfortunate. I guess I'll have to hold on to my VPS for a long time. No wonder why someone on this mailing list had trouble with ITL earlier this month. They no longer want exit nodes. -Neel Chauhan https://www.neelc.org/

1 0

Tip: Cheap fast dedicated servers for exit relays
by fatal 21 May '16

21 May '16

Ahoy! they are not in chiapas, they don't have a classy AS and (mostly) no esoteric operating systems. But they are cheap, fast and can be run as exit relays: the budget servers from Oneprovider (http://oneprovider.com/dedicated-servers/budget-servers) Oneprovider resells dedicated servers around the world and they handle all the 'sale' servers from online.net. Following the good/bad isp wiki page Online.net themself don't allow tor relays for quite some time. But oneprovider is "vpn friendly" (email from sales person) and I'm running a couple of exit relays with them for a couple of months. The abuse handling varies and depends on the provider they are reselling from. With the online.net servers I get one abuse mail every (!) monday for every server which states something about stopforumspam. I log in to the managment panel and reply that I'm running a tor server and can do nothing about this because stopforumspam doesn't provide more information and they close the ticket. That's it, never got any other abuse mails (running a reduced exit policy). The VIA Nano U2250 powered dedicated servers (Paris) cost 7€ a month (no setup fee, no ipmi, unlimited transfer) throughput max. is 82 Mbit/s in and out (throughput limit is the cpu, 1 core, no aes-ni, with iptables as in the arch wiki) with linux and max. 74 Mbit/s with freebsd (no pf, libressl, with openssl it's sightly faster¹). The Intel Atom C2350 powered dedicated servers (Paris and Amsterdam) cost 15€ a month (ipmi but no custom iso mount, only linux and windows are offered², unlimited transfer) and pushes ~180 Mbit/s in each direction with one tor instance (linux, stateles iptables and kernel tweaks for 100mbit+ relays from arch wiki and torservers.net, grsecurity kernel). The CPU (2 cores, aes-ni) isn't fully utilised so there is room for another tor instance (I'll move one of my relays there for testing when one of my VIA Nano contracts expire). Running more of these dedicated servers won't help making the tor network 'better' as in diversity (et al.) bus as in citius, altius, fortius. So if you would like to have a new, cheap, fast and easy to care mainstream (exit-)relay: go for it \o/ ¹ I'm no BSD expert and am wondering why stateless pf uses so 'much' more cpu power than statess iptables. Maybe someone can enlighten me :) ² Which I really feel sad about, I was hopeing for beeing the one with the fastest openbsd exit relay in the world - and that for 15 € a month ;)

3 3

What's this Abuse
by Dr Gerard Bulger 20 May '16

20 May '16

My ISP got a weird Abuse notice with no details. Just said stop. Stop what? When we asked what the "abuse" was they sent a 1mb.gz snapshop of their log files. There were a few references to my IP, but I have no idea what was seen as abuse: Can anyone tell me what they are fussed about? I like to respond in a robust manner. My IP is 5.77.47.142 184.151.178.22 - - [16/May/2016:15:19:40 -0400] "GET /product_imgs/small/R-F35T5-832.jpg HTTP/1.1" 200 23822 "http://www.liteline.com/ALFT5-35-4100-3" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36" 184.151.178.22 - - [16/May/2016:15:19:40 -0400] "GET /product_imgs/small/R-FBT6124-WH-3.jpg HTTP/1.1" 200 23103 "http://www.liteline.com/ALFT5-35-4100-3" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/ HTTP/1.1" 200 1079 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/css/admin_styles.css HTTP/1.1" 200 1892 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/images/Liteline_logo_horizontal.png HTTP/1.1" 200 2610 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/images/px_bgrnd.png HTTP/1.1" 200 3738 "http://www.liteline.com/admin/css/admin_styles.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:42 -0400] "GET /favicon.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 209.29.237.34 - - [16/May/2016:15:19:42 -0400] "GET / HTTP/1.1" 200 7949 "-" "Mozilla/5.0 (iPad; CPU OS 9_2_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13D15 Safari/601.1" 209.29.237.34 - - [16/May/2016:15:19:42 -0400] "GET /styles2.css HTTP/1.1" 200 11384 "http://www.liteline.com/" "Mozilla/5.0 (iPad; CPU OS 9_2_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13D15 Safari/601.1" 209.29.237.34 - - [16/May/2016:15:19:43 -0400] "GET /prettyPhoto.css HTTP/1.1" 200 2769 "http://www.liteline.com/" "Mozilla/5.0 (iPad; CPU OS 9_2_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13D15 Safari/601.1" 209.29.237.34 - - [16/May/2016:15:19:43 -0400] "GET /js/functions.js HTTP/1.1" 200 9264 "http://www.liteline.com/" "Mozilla/5.0 (iPad; CPU OS 9_2_1 like Mac OS X) 6.1; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0" 5.77.47.142 - - [16/May/2016:15:19:56 -0400] "POST /admin/ HTTP/1.1" 302 1079 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:56 -0400] "GET /admin/admin.php HTTP/1.1" 200 1029 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 184.151.179.73 - - [16/May/2016:15:19:56 -0400] "GET /Lighting/Recessed/4-in/4-in-Trims/page/2 HTTP/1.1" 200 4961 "http://www.liteline.com/Lighting/Recessed/4-in/4-in-Trims/page/1" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" 184.151.179.73 - - [16/May/2016:15:19:56 -0400] "GET /styles2.css HTTP/1.1" 200 11384 "http://www.liteline.com/Lighting/Recessed/4-in/4-in-Trims/page/2" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" "http://www.liteline.com/Lighting/Recessed/4-in/4-in-Trims/page/2" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" 5.77.47.142 - - [16/May/2016:15:19:57 -0400] "GET /admin/css/admin_styles.css HTTP/1.1" 200 1892 "http://www.liteline.com/admin/admin.php" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:57 -0400] "GET /admin/images/rt_arrow.png HTTP/1.1" 200 554 "http://www.liteline.com/admin/css/admin_styles.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 216.123.172.226 - - [16/May/2016: 5.77.47.142 - - [16/May/2016:15:20:03 -0400] "GET /admin/admin.php?admin_add_product HTTP/1.1" 200 1271 "http://www.liteline.com/admin/admin.php" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:20:03 -0400] "GET /admin/css/admin_styles.css HTTP/1.1" 200 1892 "http://www.liteline.com/admin/admin.php?admin_add_product" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" HTTP/1.1" 200 9264 "http://www.liteline.com/ATF7630" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0" 5.77.47.142 - - [16/May/2016:15:20:18 -0400] "GET /admin/ HTTP/1.1" 302 1079 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:20:19 -0400] "GET /admin/admin.php HTTP/1.1" 200 1029 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:20:19 -0400] "GET /admin/css/admin_styles.css HTTP/1.1" 200 1892 "http://www.liteline.com/admin/admin.php" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 184.151.179.73 - - [16/May/2016:15:20:20 -0400] "GET. 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/images/Liteline_logo_horizontal.png HTTP/1.1" 200 2610 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/images/px_bgrnd.png HTTP/1.1" 200 3738 "http://www.liteline.com/admin/css/admin_styles.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:42 -0400] "GET /favicon.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 209.29.237.34 - - [16/May/2016:15:19:42 -0400]

7 13

VPS for Exits
by Tristan 20 May '16

20 May '16

Hostwinds is a pretty good US-based VPS. The price is good, and you get 10TB of bandwidth to start with. On May 20, 2016 6:03 PM, "I" <beatthebastards(a)inbox.com> wrote: Do you know of a VPS for an exit? Robert _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

Handling possible abuse requests
by pa011 19 May '16

19 May '16

I am running some pretty good developing relays which I would like to change into exit-nodes over time. As I have no experience how to handle possible abuses I would need some help please? Is there anybody out there who can give me some advice, or even help me doing (answering) these? How many of those abuses are to expect? How to avoid on changing what parameters? Any hints highly appreciated. PA

6 8

Re: [tor-relays] Handling possible abuse requests
by Tristan 19 May '16

19 May '16

I only ever received 1 abuse complaint over a 2-month period. I apologize for the inconvenience and explained that I would block the abused IP range. The abuse report was generated by Webiron, and they had a guide for Tor operators. I imagine other problems can be similarly solved. As others have said, a reduced exit policy will decrease your chances of getting complaints.

1 0

tor buddy is not checking
by himam.himam＠yandex.com 18 May '16

18 May '16

./tor-buddy.sh Tor-Buddy by AfterBurn @ NetSecNow http://learnnetsec.blogspot.com/ To stop script press CTRL+C Checking if Tor is installed... Tor is Installed! Starting Tor :-) /etc/init.d/tor: line 140: ulimit: open files: cannot modify limit: Operation not permitted * Checking if tor configuration is valid

2 1

What are the v1, v2, v3, v4 connections?
by William Denton 18 May '16

18 May '16

"Since startup, we have initiated 0 v1 connections, 1 v2 connections, 0 v3 connections, and 12345 v4 connections." What are these different types of connections? I can't find them in the docs, so I assume I'm not looking in the right place. (And what does it mean that the 1 v2 connection sneaked in?) Bill -- William Denton Toronto, Canada <https://www.miskatonic.org/>

2 1

Confirmed, Mexico largest ISP blocking TOR dir authority nodes
by Ricardo Malagon Jerez 16 May '16

16 May '16

Months of support calls to Telmex and now they are telling me that they are blocking the dir authority nodes because SPAM. Lame excuse, because they don't touch exit nodes. Just making hard to setup a TOR relay in Mexico. We have 6 relays in a country of 100 million inhabitants.

1 0

Tor Stats
by Dr Gerard Bulger 15 May '16

15 May '16

Tor Atlas and https://torstatus.blutmagie.de does not report any activity in graphs for my Tor exit. This data has been missing for some days now. Says online. Not stable yet as I keep it rebooting my new server once a day for 30 mins as checking if there are any errors. Which leads to another question. Is /etc/tor/torrc read on the fly? That is editing torrc will change the server on writing the file, or does it need tor restart with each edit. I had assumed the latter. I am not sure where or how this data collected for the pretty graphs. My server seems busy with many gigs in and out on tor ports and its own IP address according to various iptraffic tools I run on the server, but no data on those graphs at Atlas and elsewhere. Tor 0.2.7.6 on Ubuntu Linux on a VPS. Is this just me and something wrong with torrc ? or a more general problem? Gerry

5 5

Problems with firewall rules - SOLVED
by ludo0565＠dbmail.com 15 May '16

15 May '16

Hello everyone, And great thanks to Moritz Bartl as well as to Petrusko for their replies to help request (05/08/2016 11:06 PM). I needed some time first to implement, then to correct, but after getting there, and waiting for some positive test results (atlas and globe), I can now say : my problem is solved! My relay is working! Cheers! ludo0565

2 1

Re: [tor-relays] Tor Stats
by Dr Gerard Bulger 15 May '16

15 May '16

Really no relay has 3 day 1 week graphs? My exit node had them, then on the 10th read write fell to zero and plotted along the bottom. My server seemed OK and monthly graph seems OK, so perhaps the atlas error was graphing it in the first place. Just now graphs are back on https://torstatus.blutmagie.de So no longer worried ThanksSent from Samsung tablet -------- Original message -------- From: Josef Stautner <hello(a)veloc1ty.de> Date: 15/05/2016 12:23 (GMT+00:00) To: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] Tor Stats Am 15.05.2016 um 13:14 schrieb Dr Gerard Bulger: > Tor Atlas and https://torstatus.blutmagie.de does not report any activity > in graphs for my Tor exit. This data has been missing for some days now. > Says online. Not stable yet as I keep it rebooting my new server once a day > for 30 mins as checking if there are any errors. Which leads to another > question. Is /etc/tor/torrc read on the fly? That is editing torrc will > change the server on writing the file, or does it need tor restart with each > edit. I had assumed the latter. > > I am not sure where or how this data collected for the pretty graphs. My > server seems busy with many gigs in and out on tor ports and its own IP > address according to various iptraffic tools I run on the server, but no > data on those graphs at Atlas and elsewhere. > > Tor 0.2.7.6 on Ubuntu Linux on a VPS. > > Is this just me and something wrong with torrc ? or a more general > problem? > > Gerry > > > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > Hi Gerry, the "3 day" and "1 week" graph on Atlas are disabled. No relays has them. Did you mean that? ~Josef _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Tor authorities blocked by Cisco Senderbase
by Zwiebel 12 May '16

12 May '16

Hello, I operate three Tor relays on my university's network. All http traffic on that network goes through a transparent proxy which uses the Cisco Senderbase blacklist. I've recently noticed log messages that my relays can't connect to some Tor authorities. Seems like Cisco blacklists the following authorities for serving malware: dizum, tor26, maatuska, urras I've contacted them about this via [1] and explained that these hosts are most likely not malicious and got a replay via e-mail saying that they will remain blacklisted. - Zwiebel [1] http://www.senderbase.org/support/#problem=other

3 2

Mail.ru abuse
by Javantea 12 May '16

12 May '16

Hello, I run an exit node and everything has been going fine. I've recently gotten 3 automated abuse e-mails from mail.ru which say that my node has sent spam over HTTP (silly, I know). I expect that they will continue to e-mail me since they give me no way to block their servers. I wouldn't give it a second thought if my host wasn't forced to relay and occasionally read these e-mails, wasting their time. It is ripe with irony that automated spam reports would become spam itself. Mail.ru own so many blocks that I can't hope to block all of them without spending a lot of time producing a list. Has someone else produced such a list? Should I just continue ignoring these or has someone figured out a different solution? Since I've only received a dozen or so abuse e-mails from all sources, I have been treating them on a case-by-case basis blacklisting any that provide me with a cidr to block that they appear to own (8 blocks so far over 2-3 years). I balance my blocks with the fact that the more of the net we block out of convenience, the more likely someone using tor will be deanonymized -- if we all block mail.ru, a rogue exit node can pick up traffic to mail.ru much more easily than anywhere else. This is more true about SMTP, CIFS, BitTorrent, and other ports, but I haven't found a suitable solution for that problem. One of the e-mails is copied below. Regards, Javantea >From fblbounces(a)senderscore.net Thu May 12 10:43:32 2016 Return-Path: <fblbounces(a)senderscore.net> X-Original-To: report(a)abuse.he.net Delivered-To: report(a)abuse.he.net Received: from he.net (he.net [216.218.186.2]) by abuse.he.net (Postfix) with SMTP id B811D54012B for <report(a)abuse.he.net>; Thu, 12 May 2016 10:43:32 -0700 (PDT) Received: from mrb-fbl.returnpath.net ([66.45.29.179]) by he.net for <abuse(a)he.net>; Thu, 12 May 2016 10:43:46 -0700 Received: from poma02.lan.returnpath.net (poma02.lan.returnpath.net [10.2.0.110]) by mrb-fbl.returnpath.net (Postfix) with ESMTP id 2620561D5F for <abuse(a)he.net>; Thu, 12 May 2016 11:43:30 -0600 (MDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=senderscore.net; s=081107; t=1463075010; i=(a)senderscore.net; bh=q0FgMC02Auq80BHhhbqMTz43Lc55mfe175+So8F2/T4=; h=Date:Subject:To:From; b=yTsgoOykxJDv15EnLPDQYwuv9epiFm7PjelQ+3Gsam6kGCR3ar+3i1woxyWZkpE4b OoAyrWUvPo7VO9r8tFds8Da9nJU97hDm4QxO+mHCtOSxNBTE1P7PmwrUL4Lw23CxJg 5NzY7CfVgtywvj2M/Qn1SzWxasmHP62KIdIQFgIo= Received: by poma02.lan.returnpath.net (Postfix, from userid 106706) id 23CD5602D9; Thu, 12 May 2016 11:43:30 -0600 (MDT) Content-Type: multipart/report; boundary="_----------=_146307501015312125"; report-type="feedback-report" MIME-Version: 1.0 X-Mailer: MIME::Lite 3.029 (F2.84; T2.04; A2.12; B3.13; Q3.13) Date: Thu, 12 May 2016 11:43:30 -0600 Subject: Mail.ru Abuse Report To: abuse(a)he.net From: feedbackloop(a)mailru.senderscore.net Message-Id: <20160512174330.23CD5602D9(a)poma02.lan.returnpath.net> Content-Transfer-Encoding: 7bit This is a multi-part message in MIME format. --_----------=_146307501015312125 Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Type: text/plain This is a Mail.ru email abuse report for an email message received from IP 216.218.134.12 on Fri, 29 Apr 2016 11:59:18 +0000 --_----------=_146307501015312125 Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Type: message/feedback-report User-Agent: ReturnPathFBL/1.0 Abuse-Type: complaint Arrival-Date: Fri, 29 Apr 2016 11:59:18 +0000 Feedback-Type: abuse Version: 1 Source-IP: 216.218.134.12 Original-Rcpt-To: 5f6e6b0a23986cf15d2db9c7c97927b9(a)inbox.ru Original-Mail-From: oofaakuu45(a)mail.ru Reported-Domain: inbox.ru --_----------=_146307501015312125 Content-Disposition: inline Content-Type: message/rfc822 Content-Transfer-Encoding: 7bit Delivered-To: ***** Return-path: <oofaakuu45(a)mail.ru> Received: from [216.218.134.12] (ident=mail) by f158.i.mail.ru with local (envelope-from <oofaakuu45(a)mail.ru>) id 1aw74o-0000CW-7q; Fri, 29 Apr 2016 14:59:18 +0300 Received: from [216.218.134.12] by e.mail.ru with HTTP; Fri, 29 Apr 2016 14:59:18 +0300 From: =?UTF-8?B?0J7Qu9GM0LPQsCA=?= =?UTF-8?B?0J/Qu9GP0YHQvtCy0YHQutCw0Y8=?= <oofaakuu45(a)mail.ru> Subject: =?UTF-8?B?0JTQvtCx0YDRi9C5IA==?= =?UTF-8?B?0LTQtdC90Yw=?= MIME-Version: 1.0 X-Mailer: Mail.Ru Mailer 1.0 X-Originating-IP: [216.218.134.12] Date: Fri, 29 Apr 2016 14:59:18 +0300 Reply-To: =?UTF-8?B?0J7Qu9GM0LPQsCA=?= =?UTF-8?B?0J/Qu9GP0YHQvtCy0YHQutCw0Y8=?= <oofaakuu45(a)mail.ru> X-Priority: 3 (Normal) Message-ID: <1461931158.311272620(a)f158.i.mail.ru> X-Mras: OK X-Spam: undefined Content-Type: multipart/alternative; boundary="--ALT--d472ac373705efd312fbf64724626ab61461931158" To: 5f6e6b0a23986cf15d2db9c7c97927b9(a)inbox.ru ----ALT--d472ac373705efd312fbf64724626ab61461931158 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 IM6f0J3Qm9CQ0JnQnS3Qms6R0JfQmM6X0J4t0J/QoNCYzpPQm86R0KjOkc6V0KIt0J/QntCYzpPO oc6R0KLQrC3Ol86RLdCUzpXOl9CszpPQmArOl86f0JLQq9CcLdCYzpPOoc6f0JrQkM6cLdCRzp/Q nc6l0KEt0JTQni3QotCr0KHQr9Cn0Jgt0JTOn9Cb0JvQkM6h0J7OkgrQks6nzp/QlC3OoM6fLdCh 0KHQq9CbzprQlQo= ----ALT--d472ac373705efd312fbf64724626ab61461931158 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 CjxIVE1MPjxCT0RZPs6f0J3Qm9CQ0JnQnS3Qms6R0JfQmM6X0J4t0J/QoNCYzpPQm86R0KjOkc6V 0KIt0J/QntCYzpPOoc6R0KLQrC3Ol86RLdCUzpXOl9CszpPQmDxwPjwvcD7Ol86f0JLQq9CcLdCY zpPOoc6f0JrQkM6cLdCRzp/Qnc6l0KEt0JTQni3QotCr0KHQr9Cn0Jgt0JTOn9Cb0JvQkM6h0J7O kjxwPjwvcD7Qks6nzp/QlC3OoM6fLdCh0KHQq9CbzprQlTxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxpbnB1dCBzaXplPTMwIHZhbHVlPSJodHQKcDovL3Rp bgp5dXJsCi5jCm9tL2dycmhjdnIiPjwvQk9EWT48L0hUTUw+Cg== ----ALT--d472ac373705efd312fbf64724626ab61461931158-- --_----------=_146307501015312125--

4 3