- tor-relays - lists.torproject.org

Tor-Tshirts
by Nchinda Nchinda 24 Mar '15

24 Mar '15

Is there still someone at Tor Weather managing tshirt distribution? I've been running a two fairly large relays for a couple months, although I also wouldn't mind paying for an official tor shirt. My email to Tor Weather went unanswered. https://atlas.torproject.org/#details/C1CFB375BED9D7506569E07B01753BC67EE87… https://atlas.torproject.org/#details/CAB78BF9BD73536DCB55E5BC98D5F3AAB45CF… Nchinda^2 -0.1743*kg^6 m^4 mol s^-14 Computer Scientist the light flares at this node

7 9

Help finding relay bottleneck
by James Murphy 24 Mar '15

24 Mar '15

I'm running the relay https://globe.torproject.org/#/relay/18EAAF7CB6C2ABE8583841D305C06A509F8C1C… and am getting substantially lower rates than expected after almost 3 months. I'm on a 1Gbps down/1Gbps up line but my middle relay is just barely creeping upwards of 5Mbps. This is NOT a problem of less bandwidth after receiving the guard flag, and I have read the lifecycle of a new relay documentation. I cannot find the bottleneck in my setup and was wondering if there are any good tools I could use to find where it is. I've read https://www.torservers.net/wiki/setup/server and https://wiki.archlinux.org/index.php/tor for tips on speeding things up, but nothing has proven successful. Things I have considered: CPU usage: hovers around 5-10%, using NumCPUs 2 Mem usage: 195 MB (10%), using DisableAllSwap 1 Using AvoidDiskWrites 1 to avoid SSD stress Rate/Burst limits at 20MB (160mbps) Using dd if=/dev/urandom of=rand bs=64M count=16 iflag=fullblock to create a 1GB file I test copying this file to/from another machine on my LAN using scp 100% 1024MB 28.4MB/s 00:36 to copy to the relay (307 Mbps) 100% 1024MB 53.9MB/s 00:19 to download from the relay (431.2 Mbps) Okay so not full 1Gbps speeds, but still an order of magnitude higher than the 5Mbps my relay is using, so the problem doesn't look like it is the router or gigabit switch on my LAN. I've also raised the maximum number of open file descriptors for the debian-tor user. In /etc/security/limits.conf I added debian-tor soft nofile 65000 debian-tor hard nofile 65000 I'm not sure if this worked because (even after reboot) sudo -u debian-tor bash ulimit -Hn returns 4096. I would say that is the problem, but looking in /proc/torPID/fd and doing ls -l | wc -l returns 1591, so I'm not hitting the limit of 4096. In any case, if you know why my limits.conf doesn't appear to have taken effect, let me know. I've also added other optimizations from the torservers wiki. My /etc/sysctl.conf is http://paste.debian.net/162765/ Thanks for the help, James Murphy

5 7

Ideas for the further development of TorServers
by Jens Kubieziel 23 Mar '15

23 Mar '15

Hi, during our relay operators meeting in Valencia as well as in IRC/XMPP we were discussing the future way of TorServers. Some of you had some good ideas and I started to put them into a list. TorServers will try to apply for funding this year as our current funding will expire or has expired. So we plan to integrate some or all of the ideas into our application and help you as relay operators. The current version of the list is at <URL:https://pad.systemli.org/p/ukMTrpwf6Yzv>. I'll add some more text in the next days. Feel free to add some comments, ideas, wishes etc. -- Jens Kubieziel http://www.kubieziel.de Ich würde gern leben wie ein armer Mann mit einem Haufen Geld. Pablo Picasso

2 2

Re: [tor-relays] Tor Cloud/AWS relay set up but no Tor installed
by SiNA Rabbani 22 Mar '15

22 Mar '15

Hi allicoder, The images on Tor Cloud website have not been updated for a while. The project is lacking someone that can keep it up to date. I tried to take on the responsibility but so far I have failed to dedicate the necessary time. Sorry for the bad experience. As far as the specific problem with the Cloud image itself, there is a script that is supposed to install the relay on first boot. See /etc/rc.local. You can also find that script here: https://gitweb.torproject.org/tor-cloud.git/plain/ec2-prep.sh There are a couple of issues with the script itself that I noticed immediately: 1) the harcoded pgp key is expired 2) the debian experimental repository is returning a 404 W: Failed to fetch http://deb.torproject.org/torproject.org/dists/experimental-precise/main/bi… 404 Not Found [IP: 38.229.72.16 80] If you wish to do some trouble-shooting, try to get these commands to run without any errors: sudo apt-get -y update sudo apt-get -y upgrade sudo bash /etc/ec2-prep.sh bridge Finally, now that you have a running image and ssh access, you can just follow the Tor relay installations here: https://www.torproject.org/docs/debian.html.en I apologize for the inconvenience and thank you for running a relay. All the best, Sina "Be the change that you wish to see in the world." - Mahatma Gandhi ----- On Mar 21, 2015, at 11:10 PM, aredocilla(a)gmail.com wrote: > Hello, > > I've been trying to set up a tor relay on AWS using the free tier using the > instructions in various places (e.g. https://cloud.torproject.org/, > https://www.fak3r.com/2012/08/11/howto-run-a-tor-node-in-the-cloud-for-free/) > But sshing in from my PC shows clearly that not only is tor not running, it's > not even installed! > > ubuntu@ip-172-31-28-207:~$ aptitude show tor > Package: tor > State: not installed > Version: 0.2.5.11-1~precise+1 > Priority: optional > Section: net > ... > > ubuntu@ip-172-31-28-207:~$ ps -ely | grep tor > ubuntu@ip-172-31-28-207:~$ ls /var/log > alternatives.log auth.log btmp dist-upgrade dmesg.0 dmesg.2.gz > fsck landscape mail.err news udev unattended-upgrades wtmp > apt boot.log cloud-init.log dmesg dmesg.1.gz dpkg.log > kern.log lastlog mail.log syslog ufw.log upstart > > Has something changed, and the images no longer include tor on start-up (I made > sure I followed the gist of the cloud.torproject.org steps, given that the > interface has changed significantly; even went to the previous page from the > linked one to check that the AMI thing mentioned tor)? I've noticed various > people have posted online saying it's not safe to run Tor on cloud services - > has the image been deleted because of this? I wanted to try it anyway because > the main torproject website still says in several places that running a relay > on AWS is A Good Thing. > > Or did I just do something wrong? > > Best wishes, > allicoder. > > -- > PGP key available on request > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Tor Cloud/AWS relay set up but no Tor installed
by aredocilla＠gmail.com 22 Mar '15

22 Mar '15

Hello, I've been trying to set up a tor relay on AWS using the free tier using the instructions in various places (e.g. https://cloud.torproject.org/, https://www.fak3r.com/2012/08/11/howto-run-a-tor-node-in-the-cloud-for-free/) But sshing in from my PC shows clearly that not only is tor not running, it's not even installed! ubuntu@ip-172-31-28-207:~$ aptitude show tor Package: tor State: not installed Version: 0.2.5.11-1~precise+1 Priority: optional Section: net ... ubuntu@ip-172-31-28-207:~$ ps -ely | grep tor ubuntu@ip-172-31-28-207:~$ ls /var/log alternatives.log auth.log btmp dist-upgrade dmesg.0 dmesg.2.gz fsck landscape mail.err news udev unattended-upgrades wtmp apt boot.log cloud-init.log dmesg dmesg.1.gz dpkg.log kern.log lastlog mail.log syslog ufw.log upstart Has something changed, and the images no longer include tor on start-up (I made sure I followed the gist of the cloud.torproject.org steps, given that the interface has changed significantly; even went to the previous page from the linked one to check that the AMI thing mentioned tor)? I've noticed various people have posted online saying it's not safe to run Tor on cloud services - has the image been deleted because of this? I wanted to try it anyway because the main torproject website still says in several places that running a relay on AWS is A Good Thing. Or did I just do something wrong? Best wishes, allicoder. -- PGP key available on request

1 0

Re: [tor-relays] IPv6 HiddenServicePort
by teor 21 Mar '15

21 Mar '15

> On Fri, 20 Mar 2015 17:24:11 -0400, Manas Bhatnagar <b.manas.88(a)gmail.com> wrote: > > Hello, > > Hi, I'm looking for some support with accessing a hidden service that is > listening on [::1]:11001 > I am able to connect to the listener locally but the hidden service > doesn't seem to work. any ideas? > The time on the machine is accurate and connections to other hidden > services succeeds. > > Thanks, > Manas I suspect we're going to need some more specific information about what's failing before we can help. It would also help to know how much experience you have configuring hidden services. I'm sorry if I've pitched this at the wrong level, but I just want to start by making sure we have the same setup in mind when we talk about hidden services: Direct Connection: Client connects to [::1]:11001 client -[TCP/IPv?]-> server Hidden Service Connection: Client connects to foo...abc.onion:12345 via a local tor client socks proxy, which connects to a tor hidden service over onion routing, which connects to [::1]:11001 client -[socks/TCP/IPv?]-> tor client ---[onion routing/TCP/IPv4]---> tor hidden service -[TCP/IPv6]-> server Does your configuration match this? Can you answer the following questions about what you see? (It might help to answer them in order, stopping when you find the first error.) Configuration: - Are you using a testing, a private, or the public Tor network? - How is the hidden service configured? (please send us the hidden service torrc) Alternative Configurations: - What happens when you have the server listen on IPv4 rather than IPv6, and change the hidden service to connect to IPv4? - Can you connect to: -- Other hidden services on the same (globally routable) IP? -- Other hidden services in the same tor instance? Observed Behaviour: - Does the hidden service bootstrap fully, without errors? (arm and logs will help here) - What error do you get when you try to connect to the hidden service? -- Does the tor client fail to find a descriptor or introduction point for the hidden service? -- Does the hidden service tor instance refuse connections? -- Does the server refuse connections? -- Is the server accepting the connection but failing to respond? -- (You'll need to look in the client and hidden service logs to find out.) That should be more than enough :-) teor teor2345 at gmail dot com pgp 0xABFED1AC https://gist.github.com/teor2345/d033b8ce0a99adbc89c5 teor at blah dot im OTR C3C57B23 349825DE 929A1DEF C3531C25 A32287ED

1 0

IPv6 HiddenServicePort
by Manas Bhatnagar 20 Mar '15

20 Mar '15

Hello, Hi, I'm looking for some support with accessing a hidden service that is listening on [::1]:11001 I am able to connect to the listener locally but the hidden service doesn't seem to work. any ideas? The time on the machine is accurate and connections to other hidden services succeeds. Thanks, Manas

1 0

misconfigured advertised bandwidth? (rohan & theoden)
by Nusenu 19 Mar '15

19 Mar '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi, first off, thanks for running tor relays! While playing around with compass.torproject.org I noticed your relays (theoden and rohan) because according to their advertised/observed bandwidth they are the fastest in the entire network: adv bw: rohan: 363.32 MB/s theoden: 191.44 MB/s but the graphs show different values: rohan: ~20MB/s theoden: ~10MB/s So I'm curious how come that their advertised/observed bw is so much higher. Can you share some insights? thanks, Nusenu theoden https://atlas.torproject.org/#details/4EA0464A1B8D4231F176BA2FA1BCBF0A26F12… rohan https://atlas.torproject.org/#details/F528DED21EACD2E4E9301EC0AABD370EDCAD2… There is another relay that has similar characteristics but doesn't have your contactInfo, is this also one of your relays? kraken https://atlas.torproject.org/#details/8901B1D2D4C0D3398C3F8363247B5AABF3136… -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJVCwtqAAoJEFv7XvVCELh0rkoP/joevoducupu6nJAwwmL+nLe 6DgEH9L9zppbucuhFck4B4R745LB+N9mQdNUViU0farKThPjcC0CiSaFuvf+ePso BtucGUBTRcvLlp6ns/Fnc6jJjjflzOs/4OX5a+vUal+CUrStDP1jDCX9QCvqdZZo gAMA668FkUucTdGb48NECtu7qe/riiu3A718jLrNWgXSQ1z7ABedLVRY1bBYMxdn 0WM+ysHerm0aF8qVyHJmKto8hxMOyEIxd3D9kgPj/B89vU1hu/R25xKaXkWZVf61 +b4KbQjsMW1fezaWjztMsXxW+uM2xQP7GHUDhDIdLrGC36tjq9oODJ8USYBtlnz1 LDB8hv5TWoDI7H+XngD6z5GgGBf7lW1ePrRKyxywoBZwdNXHgJzZcYQHh6kPs8Mx L3+48TcNhSutZvY1pgBsuJq08oWki/0XVOdZUQYEV5N4P5fvvvmjASK/p3qW1tGB gRw0p9KbtSOoeeW/e7rq/9ilxRbEZ/HAgp7sfKSHYEcFLK+TyYJkexPs0xKTPHtx pAU0ehpYGtT/H+XAWPPV4WrPlCd4V2Lm82Ibhx7QaBEmaXoBGWnF4vOewUX3gkKp GDSi5rRu0bXaDo18WlEZU5FiwUGKuSetASjlteIq4dSBKWszEF5uu29XIOYR7x/K zNzjzegm3jfe8rmBCaur =2SgD -----END PGP SIGNATURE-----

1 0

tor network "marked share" - tor relays grouped by contact
by Nusenu 19 Mar '15

19 Mar '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi, I'm playing a bit with compass to add additional grouping functionality (#6675, ..). Group by based on MyFamily would be important but for now here a sample output of the poor version based on the contactInfo field. (json data from today) These files are hand-crafted since ContactInfo fields tend to be rather long.. https://raw.githubusercontent.com/nusenu/misc-files/master/tor-relays_by_co… https://raw.githubusercontent.com/nusenu/misc-files/master/tor-relays_by_co… Kudos to torpids (aka diversity master?) for running 35 relays in 30 unique /16 networks and 29 unique ASes! After seeing 'ipredator' and 'becks' CW vs. BW values I'd like to have sorting based on 'observed_bandwidth' rather than CW.. -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJVChekAAoJEFv7XvVCELh0taUP/1rF3366BWuQkmP22jo2dPhL SfP0Bol5XYEJsYn2Ras2CEhDNLDTwuQ3VplS2KKjAuMqEHo9xlQaIU9/vR2kQOQg M/A+vtstif79R/Xt7IwQNK9Cn/o0ADMq3q81CmvcUkGc61v1bPnPeDIb53MWLUmK PP7NTh1vYREbM/wBy+UOQtQ/MNm/6SIy6oMWO8eUR6rrx1pLDdxkc6YwITgrwKeW 25il+WI7LOHJ0mP9Bw1m6XkDVAZOjYlJgY6P8FL6ZwgXKy+5sLEBjmDqlo3K2gj+ UpmMjYE4BJaZeYvbQcomRhj8Rhcv3HXFTi+5mgOU3OM3cPY1OCCQl1JmGmA64pEy sRWb+Qi00gba20IGw9OfXTJjnvve4Le8MKsC8XVR8lq5OJH0l0bkL9duS3ABF3Lo jnSfpPAGaEs8KxBmHQVkSNs2FwzbrCcbEE62ef3eC3cTwkXprjeoEhd169AEy7iE GOLVuubkIENPrW38iJ9Klsh633Nyo+/GjQLZbZlmrwgvA10LaKTGnekFe6qOWGP2 qLJckuNjNITpCHafhyWx/snjc4KnUg+adtEXdVvFnTG10Yu/LSbCVrHzbbhjtBoN 0xO4lgaTEocQLCoPX8Z9Mqsm1Dej3N7ypQtkEdyw7ykU2IGsIwDbwoUdve3Tbp51 8r6jPBzLkudrE9jWe7k0 =p2dX -----END PGP SIGNATURE-----

1 0

Meeting notes of the relay operators meeting in Valencia
by Jens Kubieziel 17 Mar '15

17 Mar '15

Hi, below you find my notes for the relay operators meeting we had in Valencia. Those just some short notes. If you have any questions or remarks, please don't hesitate. * Introduction Several Tor relay operators met at Tor Developer meeting in Valencia, Spain. At our meeting we had operators from the following countries: - Germany - Netherlands - France - Spain - India - Costa Rica This document gives a short overview what we discussed. If you have any questions or comments don't hesitate. * DDoS attacks: One questions which was raised is what to do against DDoS attacks. Several ISPs complained about DDoS attacks against Tor relays. There were also shutdowns of servers. It was suggested to employ DDoS mitigation tools. Other operators suggested to don't do anything. It is better to educate the ISP about Tor. Do you have any experiences with this topic? * Abuse TorServers has templates for different cases of abuse. See [[https://www.torservers.net/wiki/abuse/templates]] The Tor Project offers also some advice in their wiki. See [[https://trac.torproject.org/projects/tor/wiki/doc/TorAbuseTemplates]] Furthermore several organisations developed their own templates. Someone at the meeting offered to review others templates. As a general advice one should start with thanking the person and acknowledge what they do. TODO: We should rephrase some of the templates and generate some hice, good example documents. * Bridges The current alpha release of Tor Browser Bundle 4.5 comes with support for obfs4. Currently there are only few bridges which use obfs4 and everyone is asked to enable the new protocol. Obfs3 doesn't really work in China and obfs4 is the current best bet. If you have any questions about obfs4 you should have a look at the documentation or write an email to Yawning (<yawning(a)torproject.org>). Some links: - How to run an obfs4 bridge: https://tor.stackexchange.com/q/6370/88 - Debian package: https://packages.debian.org/search?keywords=obfs4proxy - Post at tor-relays: https://lists.torproject.org/pipermail/tor-relays/2014-September/005372.html * Tor relays in Japan It is legal to run relays in Japan, but practically it depends on ISP. So if you know a person in Japan, encourage them to run a Tor relay. It was said that relays from SE asia went online for some time and slowed down the overall network. Jens talked to Mike Perry who couldn't remember such incident and also couldn't believe that this is true. * Relays in India There are some relays in India, some of them probably in universities and some very slow. A home connection is 60/60MB/s and capped at 8GB/80GB per month. I couldn't really understand what the correct numbers were. * How to make nodes faster Someone had a 10Gig which link was not used. It was recommended to use multiple processes; one process per core. So also hints at https://blog.torproject.org/blog/lifecycle-of-a-new-relay * Tor wheather Several peopel work on Tor weather. The status is not clear. However there is some need for a working version. * ARM devices We found out that several organisation have utilised some ARM device. Juris from Torservers runs a Bananapi at a data center and gets 30-40MB/s. DFRI has a router which they give away to interested persons. Jacob Appelbaum made a combination of Relay and Router. Merlijn suggested that Hardkernel has some faster ones which fit for exit relays. We want to work more closely together to create some neat device. * Stats on exits Someone asked if it is OK to run statistics on exit relays. As long as the tools only monitor the amount of traffic this is OK. Looking into exit traffic or even messing with the traffic would instantly qualify you as a bad exit. * Legal issues + Germany has no data retention law in place + data retention in the Netherlands: court case said illegal, try to make a law + France: https://netzpolitik.org/2015/franzoesischer-patriot-act-ueberwachungsmassna… (yes, data retention since 2011) + article 12 of ecommerce directive + Costa Rica has no data retention law * World Hosting Days + Who is interested to go there? * TODO - Work on templates - How many DMCA notices do you get? Can you give Jens some monthly numbers together with the exit probability of your relays? An EFF person wanted to collect some numbers. Jens will relay those numbers. - run obfs4 bridges -- Jens Kubieziel http://www.kubieziel.de

2 2

Tor-node/relay: System installation vs. TorBrowser
by Lars Edman ＠ LinuxSuSE 17 Mar '15

17 Mar '15

Hi! I was referred to you from help(a)rt.torproject.org. when asking them if they discouraged from using tor as a client or node/relay with tor in a system installation. By "system installation" I mean installation of tor, libevent, libgeoip (and ev vidalia) together with openssl. I found they today absolutely discouraged from the use of such a "system installation" when using tor as a client. When it came to using tor as a node/relay or running a server they referred the question to you. My reason for asking is that I have been running a "system installed" tor node in my Slackware server for 3 years now. subsequently updating/grading them. It has served well and I monitor the log continously for warnings or errors correcting the when they very rarely occur (usually by updating/_grading). My reason for using a system installation for node/server use is that I've found it easier to configure the way I wanted than the BrowserBundle. Do you consider this kind of installation insecure? Best regards Larse

6 5

List of longest lived Exits and Relays
by grarpamp 17 Mar '15

17 Mar '15

Is there a list somewhere (preferably on metrics) of exits and relays sorted by longest period of service (years) on the same IP? Preferably this would subset by exit policy... whether open, or using some published, named, and adopted "standard" exit policy. Such as "reduced" (whatever that means, each version should be reflected in the name "reduced-N").

2 1

connection problems
by Malte Ketelsen 17 Mar '15

17 Mar '15

Hey, I have connection problems with my relay. Can someone tell whats this mean: Mar 16 23:59:12.000 [debug] TLS error: unexpected close while reading (SSL negotiation finished successfully) Mar 16 23:59:12.000 [debug] channel_close_for_error(): Closing channel 0x7fe72b1a41c0 due to lower-layer error Mar 16 23:59:12.000 [debug] channel_change_state(): Changing state of channel 0x7fe72b1a41c0 (global ID 79) from "closing" to "channel error" I get a lot of these news.

1 0

Tor server received reload signal
by cmar433＠yandex.com 17 Mar '15

17 Mar '15

Hi all, its normal situation ? every day on 2:49:02 AM my server received HUP signal. I checked all possible logs but i have no idea why. https://globe.torproject.org/#/relay/9DCF76179FCF47224D235ECD4A6165FED22ECE… Thank in advance for proposal :-) Cmar

2 2

Many inbound and outbound connections but no circuits
by mattia 16 Mar '15

16 Mar '15

Hello, I've been running a relay for some weeks. It has now earned the stable flag. Despite this I always have more than 500 inbound and outbound connections but no circuits at all. Is this normal?

2 3

keeping tor relays operational
by Larry Brandt 15 Mar '15

15 Mar '15

Sorry if this question has been answered dozens of times before. I have a middle relay that has been operational since last summer. I wish to make some alterations to my torrc file and make these changes operationally active without stopping and restarting tor. Is this possible? I experience a bit of down time whenever I up bandwidth, change contact info, etc. I'm also disapointed when ubuntu sends updates that require a server restart. What is the best method to handle this on a stand-alone server? LB

5 5

IP Address change detected wrongly (Our IP Address has changed)
by Sasikantha babu 14 Mar '15

14 Mar '15

Hi all, Today on my relay I observed the below messages 2 hours back. Tor reported address change from IP_IN_INDIA to IP_IN_FRANCE from SRC_1. The next second SRC_2 reported address change from IP_IN_FRANCE to IP_IN_INDIA . How could it be possible?. Is this a normal behavior?. Mar 10 08:06:52 NoNameForHost Tor[27279]: Our IP Address has changed from <MY_IP_INDIA> to <IP_IN_FRANCE>; rebuilding descriptor (source: SOURCE_IP_1__). Mar 10 08:06:53 NoNameForHost Tor[27279]: Our IP Address has changed from <IP_IN_FRANCE> to <MY_IP_INDIA>; rebuilding descriptor (source: SOURCE_IP_2__). PS: I'm not posting IP addresses but If you somebody wants the IP address too I will post them. Thanks

3 4

Using /dev/hwrng
by Imse Vimse 14 Mar '15

14 Mar '15

Hello. Would enabling the hardware random number generator on a relay node be usefull in terms of increased performance? If so, is it enough to activate /dev/hwrnd or is some configuration and/or recompilation required? Regards

2 2

PGP-Key for Debian Repo
by Sven Reissmann 12 Mar '15

12 Mar '15

Hi, I'm not able to fetch the pgp key for the debian repo, as described here: https://www.torproject.org/docs/debian.html.en $ gpg --keyserver keys.gnupg.net --recv 886DDD89 gpg: requesting key 886DDD89 from hkp server keys.gnupg.net ?: keys.gnupg.net: Host not found gpgkeys: HTTP fetch error 7: couldn't connect: Success gpg: no valid OpenPGP data found. gpg: Total number processed: 0 Is there a problem on my side? Could anyone check this and give me feedback please? Regards, Sven. -- PGP Key: https://0x80.io/pub/files/key.asc PGP Key Fingerprint: 2DF2 79CD 48DD 4D38 F0B6 7557 2E68 D557 49AA 1D99 Note: I'll be transitioning away from this key in the near future.

4 5

Legal situation of tor in Europe
by oneofthem＠riseup.net 12 Mar '15

12 Mar '15

Hi, Can someone point me to an overview of the different legal situations for running tor relays in European countries? I'm especially interested how the situation differs per country. Best, John

15 25

How to troubleshoot obfs4 bridge?
by Tim Sammut 12 Mar '15

12 Mar '15

Hi. I've configured my bridge to support obfs3 and obfs4 transports using the debian obfs4proxy package from http://deb.torproject.org/torproject.org. Connecting to the bridge using TBB 4.5a4 works for obfs3 but not obfs4. TBB produces this error: [warn] Proxy Client: unable to connect to x.x.x.x:41980 ("server rejected connection") The bridge line I am supplying to TBB looks like: bridge obfs4 x.x.x.x:41980 On the bridge side, it looks like the bridge is listening for obfs3 and obfs4 via the following log entries: Tor[21544]: Registered server transport 'obfs3' at '[::]:51161' Tor[21544]: Registered server transport 'obfs4' at '[::]:41980' The relevant parts of my bridge config are: ORPort 443 ExtORPort auto BridgeRelay 1 ServerTransportPlugin obfs3,obfs4 exec /usr/bin/obfs4proxy Should this be working? How can I troubleshoot this? Thanks! hope you are well tim -- Tim Sammut ~ @t1msammut ~ tim(a)teamsammut.com

2 1

Keeping your obfsproxy up to date
by Linus Nordberg 12 Mar '15

12 Mar '15

Hi list, I just found out that my obfsproxy relays didn't obfsproxy any more. I was apparently running a pretty old version, installed from source. How do you people keep your obfsproxies (and pyptlib) up to date? Are there packages? Is there a list or some other channel where new versions are announced that I'm not paying attention to? Thanks, Linus

2 2

Tor RPM packages now come with multi-instance support (since v0.2.6.4-rc) -- please test them
by Nusenu 11 Mar '15

11 Mar '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi, Tor RPM packages (starting with version 0.2.6.4-rc) now come with multi-instance support [1]. This makes it easier for everyone running more than one tor instance on a system. A short mini how-to for relay ops that would like to use this: service tor stop 1) create the folder: /etc/tor/enabled 2) move all your *.torrc files in this folder (they have to have the .torrc file suffix) 3) create the file '/etc/default/tor' and place the following line in it: MULTI_INSTANCE="yes" 4) make sure you have tor RPM packages v0.2.6.4-rc or higher finally: service tor start will start one tor instance per exiting /etc/tor/*.torrc file (each file is checked using --verify-config first). Note: /etc/tor/torrc will be ignored in multi-instance mode. Maybe we can add documentation to comments in /etc/default/tor.. The init.d script supports "selective" commands: Lets say you only want to restart the instances that are defined in the following two torrc files: /etc/tor/enabled/tor22.torrc /etc/tor/enabled/tor443.torrc you can do that with: service tor restart tor22 tor443 Please consider testing the new packages if you run already multiple instances today. If your instances do not start for unknown reasons please run 'tail -f /var/log/audit/audit.log' while staring them and file a bug (include the log lines and whether it works in SELinux permissive mode). Thanks to Ondrej for merging this! now lets hope for the debian packages [1] before 0.2.6.x is released, Nusenu [1] https://trac.torproject.org/projects/tor/ticket/14996 [2] https://trac.torproject.org/projects/tor/ticket/14995 -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJVALjtAAoJEFv7XvVCELh0Z5EP/1707hburFFHAFlls3KIY0t8 O3g7MDSgB+D0cgTOgwLCow+8+vtvLi4aUIH+ajCVeTRipQCHKtW/yczLVKDrGfnP GDicf7RzQbVwmgYyuKx2aL5d+1euybklWB49Wsq+t0A7Um5VC93BXIY6v3Psx8wS qHGLOEJVmpWP5/hOT4yJ9rjpjnMxUyQFfavD6Tj0+dJhkDRfK3dCmV2bUU7gUjb/ EaQoGbJPsG90OcW2Wel0HRAFQFnRNjPjOVc5E26FD2MKyTXr/d0Em4bR9uJJpHEn z79+I31zcaQu+lluKwkBfqoXOpotgA5uzXjBbstMXQd1LAoBTXdWWEg2dUkMK456 OCJ9KmHo7qXyanHThoSq0wHDDwHu3UCu4g6lOPZNFaCVDaVHGsyF/VbtqyvnzrYz 815wV8Kd/mv/yXumlJ3lSaNjAunAN/ocDTXxhGmDuTBYGiElw9KUlec8As0B8Dfe eo5d25rzTfsbOFcSo+vWj3wFP4D5IqvGoTR/jdVXVl2JgzM9eqD44CuZ3x12xXKS DbMCIdWogvuxNfaFd02JKQbAO9ZUZZvyT7hy5LKGZ1gXgi/eH/tyiBrKPGYDky14 2X87gQ3W3zaAwW0k2bX23WHBhvM0djFBRPDlldxZUdPmUzPh/bwPYRdwLk0Tj5mQ 4EC7l5KB9Sj3nrrkjXAw =kzZi -----END PGP SIGNATURE-----

2 3

Huge drop in consensus and bandwith usage
by mattia 10 Mar '15

10 Mar '15

Hi everyone! I've been running a relay ( 0D14A4498E7D1854696CC07548653EA4CD3CB2DA ) for more about 3 weeks now. Its lifecycle did not follow the path explained in the famous "Lifecycle of a relay" blog post - I think because the same fingerprint was previously used by the same server configured as a bridge. My network capacity should be around 10Mbps (20Mbps nominal) in download. While consensus and bandwith usage have been growing for the first days and then got stable (more than 200KB/s), since two days both values have been dropping extremely (https://globe.torproject.org/#/relay/0D14A4498E7D1854696CC07548653EA4CD3CB2…) The uptime is little because not knowing what to do I tried rebooting the system - it did not help. What could this be caused by? Thanks in advance Mattia

1 0

Yourserver.se - Your TOR exit node generates too many complaints
by Vinicius 10 Mar '15

10 Mar '15

Hello to All, I am currently running two tor exit relays[1] in providor yourserver.se, all of them with restrict exit policy, until now i didnt have any problem with those, except with their's automated system implemented, in use by yourserver.se, but was easy to solve, that happend some month's ago. Recently i receive a couple(2 actually) of complaints comming from Hetzner[2], complaining about port's scans comming from the tor exit relay, and i did reply all of those, but now the operator Michael is telling me that it received to much complaints and i should stop the exit or they will suspend, does someone have any other vps providor that can be recommended for sure that it doesn't do that. I dont mind if the price is more than 100% higher of the currently providor. Thank you. Sorry about my crappy english. [1] - https://atlas.torproject.org/#search/vinicius [2] - http://www.hetzner.de/ On 06/03/2015 04:07 AM, Yourserver.se wrote: > [1] Hello, > > Your TOR exit node generates too many complaints. > Please stop it or we will have to suspend that server. > > Thank you for understanding. > > Michael. > > Links: > ------ > [1] http://yourserver.se

2 5