- tor-relays - lists.torproject.org

Re: [tor-relays] TTTT
by Sebastian Urbach 03 Mar '14

03 Mar '14

Hi, I'm sorry but there is no Windows executable available or planned due to the insignificant number of Windows relays. Is it necessary to run it by scripts or is it possible to create a exe or dmg file -----Original Message----- From: tor-relays [mailto:tor-relays-bounces@lists.torproject.org] On Behalf Of Sebastian Urbach Sent: Sunday, March 2, 2014 2:10 PM To: tor-relays(a)lists.torproject.org Subject: [tor-relays] TTTT Dear list members, The next big data review regarding the "Trying Trusted Tor Traceroutes" project was initiated this week. It will probably take a while (weeks) before we have solid conclusions. We are very close to 100 complete runs from different IP's, in fact 99 right now. I hope that we will reach this goal very soon :-) We are not sure yet if we gathered enough data, but time will tell. We want to thank you for your support and if you want to make sure that we have more data in case the amount we collected turns out to be insufficient, then join us or keep running multiple rounds. Project: http://web.engr.illinois.edu/~das17/tor-traceroute_v1.html Results: http://datarepo.cs.illinois.edu/relay_scoreboard.html I make sure that this list is getting the results from the data review before anyone else. -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat and statesman _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Tor plugin for Nagios
by ramo＠goodvikings.com 02 Mar '14

02 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Heya List I've recently started on developing a nagios plugin for tor, since a cursory google search didn't come up with anything I would describe as 'comprehensive.' Generally speaking, it works by connecting to the control port and running various commands to check the health of the server. You would either drop it on the Tor box and run it with NRPE, or on the monitoring server and open your control port to that IP. So far I've implemented / plan to implement the following checks: * Fetch a page through the socks port * Check if the server is hibernating * Check the current bandwidth (up and down combined) * Check the accounting values (how close to hibernation) * OR / Dir port reachable It's in a very early stage at the moment, but I'm posting here now to ask: Are there any other checks relay operators would want to see implemented? You can check out the code so far at https://github.com/goodvikings/tor_nagios/ Cheers Ramo -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) iQEcBAEBAgAGBQJTEsR5AAoJEAXQWoW8lug/m7AH/iEJ6X1kKcOCkUkhgVHyT6aX Nusu9yADtaRzyNrRUtWIgHw80SQSItr8Sgtt9pGIDZssetUYyxKCPN7YFztBJGL5 Fym/Iv+lF6jCyyWRm4SH84yA3k/rW+gPiiNg0mw5di6V2Bx311GM2YavOnZWs0Yh rdX2ljdqbJuIQIOxhaMVrX3jYFRCYv6LvSZwxh9CA8KVgvosiiQTU76ubekoZoCt XUXLepqgD+sUxeRh7QWrM8BxTkY1Yp0XxXaeU87aO40sBB18dozgXuBsTO43ssvK s82iYorusIPdpjuVIr6FnmPrbwuDEaWVJ6ktcVz9Z9WRMP5AbJISU7LuRSxRNBU= =m/S7 -----END PGP SIGNATURE-----

2 2

is comcast throttling relays?
by Steve Rich 01 Mar '14

01 Mar '14

Hey, I am running the following relay, and never see traffic going more than 250k. Is Comcast throttling non-exit tor proxies? https://atlas.torproject.org/#details/7E6183143778259F025576A5803E3334AB95C…

5 7

Effects of Rebooting?
by Tor Relay 28 Feb '14

28 Feb '14

I am a n00b relay (OnionTorte) operator, and, as such, know lamentably little of what I'm doing. (Yes, I'm one of *those* relay operators.) When I went to bed last night I had an HSDir flag, but it has since disappeared. And since this A.M. my consensus was halved. A bit of promiscuous pokings-about in relay metrics leads me to think that this happened in the wake of my having had to reboot my machine to unwedge it. Speed Test shows that even on the worst of BadHair Days my u/l speed doesn't sink below 15Mb/s (1900KB/s), and almost always cruises at >25Mb/s, so I don't think that it's so much a bandwidth issue as one of perceived reliability. :( I read https://blog.torproject.org/blog/lifecycle-of-a-new-relay but wasn't able to take away as much as I would have liked. If somebody can explain to me, using small words and interpretive dance as befits a callow contributor, what happened I should certainly appreciate it. Thanks, P -- Dirt kicked to the curb goes into the gutter. Professionals kicked to the curb go into retail.

2 1

tor-browser still fails on FreeBSD 9.2-STABLE
by Scott Bennett 28 Feb '14

28 Feb '14

I just downloaded tor-browser-linux32-3.5.2.1_en-US.tar.xz and tried it. It fails on FreeBSD 9.2-STABLE exactly the same way the previous version did: [hellas] 128 % ./start-tor-browser Launching Tor Browser Bundle for Linux in /home/hellas/bennett/src/tor/tor-browser_en-US XPCOMGlueLoad error for file /usr/home/hellas/bennett/src/tor/tor-browser_en-US/Browser/libxul.so: libasound.so.2: cannot open shared object file: No such file or directory Couldn't load XPCOM. Tor Browser exited abnormally. Exit code: 255 [hellas] 129 % So I guess it did *not* get statically linked. I checked the ports tree, but didn't find any port named libasound or just asound, so I don't know where to get the library that the browser wants and is lacking. Is there much likelihood of having a secure browser for FreeBSD anytime soon? Using firefox 27 turns out to be several orders of magnitude more identifiable than firefox 3.51, which was already bad enough in that respect, so I'd really like to have something that's much safer. Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at sdf.org *or* bennett at freeshell.org * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************

2 1

procedure for TBB to use localhost relay
by Zenaan Harkness 28 Feb '14

28 Feb '14

I am running a tor relay - gracemissionstor - and have begun providing the relay name to friends who would like to use TBB. What I have not been able to google yet properly, is what startup/connection procedure is "best" for those using TBB, _and_ are on the local network - many people come and go here and there, and connect to the Internet from the LAN/internal network. Should those connecting in this way, simply select the default connection options, and add "gracemissionstor" into the final "I need to use a bridge relay" screen, or is there a preferred way to connect - I am running the TOR SOCKS proxy for example. I would like to be able to explain to people how to use TBB and connect to the local TOR relay when they are connected to the LAN - either via SOCKS or otherwise - but of course, it does not make sense to have TBB connect through TOR relay SOCKS (on the local network TOR relay), just to thereafter be tunnelled through the TOR network, just to thereafter establish _another_ connection back to the "gracemissionstor" relay, thereby having all Internet access travelling multiple times through the TOR network unnecessarily. Does this make sense? There ideally ought be a TORButton config option, or similar, to "connect using local TOR relay SOCKS port" and an easy way to let the TBB know (perhaps on each startup default to safety option) that (eg on next boot) we are no longer on a trusted local network. E.g. when TBB starts up (at least first time, and there SHOULD be option to have TBB ask _every_ time), and the user chooses "use SOCKS proxy to connect to Internet", then when TBB connects to the SOCKS proxy, the TOR relay which is that SOCKS proxy ought notify the TBB that it is in fact connected to the desired (if the TOR relay name matches of course) TOR relay. Of course, it would _also_ make sense for TBB to SSL encrypt its connection to the local tor relay SOCKS port. This might all be wishful thinking and pie in the sky, but please forgive my enquiry if so - I don't yet have a full understanding of these things. TIA Zenaan

1 1

tor is not connecting
by Rupesh Kumar 28 Feb '14

28 Feb '14

in my collage tor browser is blocked in proxy server what can i do how can i connect the tor browser help me

4 4

Named status
by John Ricketts 27 Feb '14

27 Feb '14

All, At what point does the router acquire "Named" status? My exit node is called "QuintexSJT" and has been up for 20 days. I suspect it requires some sort of human intervention? John

4 5

new relay acting strange
by Athena Lester 27 Feb '14

27 Feb '14

Hello, This is the first tor relay I have set up, it has been running for going on 4 days. I was waiting for the 3 day lag period I have read about but still no activity, besides the 30 MBs or so per day. It is running on my vps located in the Netherlands. The thing that is strange is when I search for "windywillow" on the atlas it finds two relays, same ip's, same ports. the thing is they both say that the server has been down for the last 3 days when it has been running and recieving a trickle of activity with no adverse log entries. I noticed a day ago that I lost the "Valid" flag. nothing has changed as far as know since it was valid so I'm at a loss. Here are the links to the two atlas pages. Any help would be appreciated. https://atlas.torproject.org/#details/F51A8E6C811D3C8F2436BE0029E95E67CB0DF… https://atlas.torproject.org/#details/90B97451822C0881C0652A7DA7430A73BCAF3… ---

3 2

How long from enabling ExitPolicy's to getting the Exit flag?
by David Serrano 26 Feb '14

26 Feb '14

Hi, I finally decided to accept some ports in my ExitPolicy and I'm curious about how much time does it take to get the Exit flag. I'm in no rush to know this of course, but I haven't found anything in a couple of searches and I thought it might be useful to someone else, hence me asking. -- David Serrano GnuPG id: 280A01F9

2 2

Compile Tor Debian package with UPNP support
by Patrick ZAJDA 25 Feb '14

25 Feb '14

Hi all, I want to compile Tor on my Raspberry Pi. I added --enable-upnp \ in debian/rules, but it returned an error about documentation. config.status: error: cannot find input file: `doc/torify.1.in' make[2]: *** [doc/torify.1] Error 1 libminiupnpc-dev is installed, and libminiupnpc package too. MiniUPNP is found when checking for depencies. How can I compile Tor Debian package with UPNP support enabled? Does someone know why this error is displayed? Thanks, -- Patrick ZAJDA Skype : gansta93

1 0

(no subject)
by Zenaan Harkness 25 Feb '14

25 Feb '14

I saw a hint of some interesting output by arm: flags: Exit, HSDir, Running, V2Dir, ValidleDebuggerAttachment 0' to your torrc and restarting tor. For more information see... This bit "leDebuggerAttachment 0' to your torrc and restarting tor. For more information see..." disappeared pretty quick. Any ideas what that would be? TIA Zenaan

3 6

[WARN] crypto error while checking RSA signature: padding check failed
by Zenaan Harkness 24 Feb '14

24 Feb '14

Occasionally (such as just now) I have seen these two errors in arm: │ 13:21:25 [WARN] crypto error while checking RSA signature: padding check failed (in rsa routines:- │ RSA_EAY_PUBLIC_DECRYPT) │ 13:21:25 [WARN] crypto error while checking RSA signature: block type is not 01 (in rsa routines:- │ RSA_padding_check_PKCS1_type_1) Are they anything to worry about? Zenaan

2 1

ExtORPort notice
by Delton Barnes 24 Feb '14

24 Feb '14

Upon upgrading obfsproxy to 0.2.6 and Tor to 0.2.5.1-alpha-dev (git-f63b394d90583b77+96972c4) for scramblesuit, I got this in the Tor log: Feb 15 04:40:03.000 [notice] We are a bridge with a pluggable transport proxy but the Extended ORPort is disabled. The Extended ORPort helps Tor communicate with the pluggable transport proxy. Please enable it using the ExtORPort torrc option. How should this be set? What does it do? I saw some web pages suggesting "ExtORPort 6699" for statistics-gathering purposes. Thanks, Delton

3 2

TTTT, multiple runs
by Sebastian Urbach 23 Feb '14

23 Feb '14

Dear list members, The "multiple runs" question is now added to the FAQ at the "Trying Trusted Tor Traceroutes" project site. Right now we are at 95 ip's with at least 1 completed run. Hopefully we can add another 5 to that number and reach the "100 milestone" before the next data review in 03/2014. Multiple run's from the same ip are very welcome as well. Thank you for your support ! Want to help ? Project site: http://web.engr.illinois.edu/~das17/tor-traceroute_v1.html Want to see the results ?: http://datarepo.cs.illinois.edu/relay_scoreboard.html -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat and statesman

4 3

Obfsproxy help
by I 23 Feb '14

23 Feb '14

3 3

Repeated "failed to get unique circID." in the log
by Patrick ZAJDA 23 Feb '14

23 Feb '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, I updated my tor relay to Tor 0.2.5.2-alpha (git-7d29e36edb6d0cf0) yesterday, using Tor repository for Ubuntu. I checked the log, and see the following message repeated again and again: "Feb 20 09:52:38.000 [warn] No unused circ IDs. Failing. Feb 20 09:52:38.000 [warn] failed to get unique circID." In fact, this message is repeated so often that I can not even find the last different message in the log... :) I looked for some informations about this message but I didn't find my answer... I read something about used threads, (NumCpu in torrc) and another about bandwidth, so nothing precise. What does this message means? Thanks, - -- Patrick ZAJDA Skype : gansta93 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJTBcTdAAoJEKPVT2DeSPb4ZfkIAKSK5aWvRyBh3uNhWwRegARG QkjoXSgkSBCxQcIFfLPTjBYk+dVNJVTsFvQGstTIQt10/Xu62eMu5DD1yNcAroa7 aFIKHaJkQNwel7j92dyIbZgJ2Vsoe1xIQK2Az3YJGc5S6os116H8dpsmr+jxoH+z Aeh7wneCpiHjXkeD37neXUlbCt4O9WG+Otf5d3gVmJ3eGvixmfY+2KH9WpKs9laA ijt2fu8vwPCseN0spEC9abOo+mLDF0mloxU9w872bhKfig4IpyFt+DqF6VZApUHv Sx6kpN34zFsTzbdzSJovfz6yk6BGekQiMN3v4t30q8c1cfk14EQaFPSdvfIlv3g= =NxPQ -----END PGP SIGNATURE-----

2 1

Tor relay failure
by starwars1070＠gmail.com 22 Feb '14

22 Feb '14

Hello I am experiencing errors I recently upgrade my computer system and os to windows 8.1 pro an now I am having trouble with the tor relay I was running I have configured the firewall and my router to forward traffics to the tor relay port I have centry link for my ISP I am able to establish an or connection to the directly servers but I keep on getting a server error saying your server port can not be connected and now the past three days I have been getting both my or and server port unable to connect to the tor and my relay will not relay traffic

1 0

Make your obfsbridge faster by installing python-gmpy
by George Kadianakis 22 Feb '14

22 Feb '14

Greetings, here is a tip if you are running an obfs3/scramblresuit bridge: If your bridge is feeling too slow or flooded by too many connections, you can help it by installing the python-gmpy package. If you do that, obfsproxy will use python-gmpy opportunistically to perform some crypto operations (modular exponentiations) much much faster. FWIW, in future packages of obfsproxy, the python-gmpy will be installed as a recommended package.

1 0

schedule tor relay uptime/ bandwidth
by Zenaan Harkness 22 Feb '14

22 Feb '14

I know tor relay bandwidth usage per period can be configured, but is it possible to schedule a tor relay to sleep during business hours, and only operate after hours? TIA Zenaan

2 2

Relay unresponsive
by Zenaan Harkness 22 Feb '14

22 Feb '14

Somewhat regularly, I get "relay unresponsive" with a heartbeat delta of about 12seconds. Could this mean my upload pipe is still saturated and I need to throttle back slightly? recent arm log: 13:12:56 [ARM_NOTICE] Relay resumed [6 duplicates hidden] 13:12:31 [ARM_NOTICE] Relay unresponsive (last heartbeat: Sat Feb 22 13:12:20 2014) 12:11:34 [ARM_NOTICE] Relay unresponsive (last heartbeat: Sat Feb 22 12:11:20 2014) 11:10:33 [ARM_NOTICE] Relay unresponsive (last heartbeat: Sat Feb 22 11:10:20 2014) 09:30:24 [NOTICE] Heartbeat: Tor's uptime is 2:18 hours, with 146 circuits open. I've sent 14.23 GB and received 9.69 GB. 09:09:20 [ARM_NOTICE] Relay unresponsive (last heartbeat: Sat Feb 22 09:09:07 2014) 09:08:30 [ARM_NOTICE] Relay unresponsive (last heartbeat: Sat Feb 22 09:08:19 2014) 07:16:39 [NOTICE] Self-testing indicates your DirPort is reachable from the outside. Excellent. 07:12:43 [NOTICE] Performing bandwidth self-test...done. 07:11:31 [NOTICE] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor. 07:11:26 [NOTICE] Your IP address seems to have changed to 203.158.36.137. Updating. 07:09:25 [ARM_NOTICE] Relay unresponsive (last heartbeat: Sat Feb 22 07:09:12 2014) 07:08:04 [ARM_NOTICE] Relay unresponsive (last heartbeat: Sat Feb 22 07:07:51 2014) 03:30:24 [NOTICE] Heartbeat: Tor's uptime is 5:52 hours, with 189 circuits open. I've sent 12.95 GB and received 12.78 GB.

1 0

[WARN] Your system clock just jumped 100 seconds forward; assuming established circuits no longer work.
by Zenaan Harkness 22 Feb '14

22 Feb '14

My tor logs (running on Debian) are showing this warning: [WARN] Your system clock just jumped 100 seconds forward; assuming established circuits no longer work. I tried running openntpd as well as ntp packages (debian), and both display the same problem - once or twice a day I get this jump in time of in the order of a couple of minutes. Any idea why? TIA Zenaan

7 18

Multi-instance Tor init script
by Alexander Dietrich 20 Feb '14

20 Feb '14

Hello, the recent thread on this topic prompted me to make a multi-instance init script: https://gist.github.com/7adietri/9122199 It's basically the current official init script and torservers.net's "instances" mechanism frankensteined together. Maybe other people will find it useful too. Config files should be layed out as described on torservers.net: https://www.torservers.net/wiki/setup/server#multiple_tor_processes Best regards, Alexander -- PGP Key: 0xC55A356B | https://dietrich.cx/pgp

1 0

^null$ httpd requests
by phrag 20 Feb '14

20 Feb '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, So I've been receiving a few of these httpd requests on my SSL web server. The webserver runs on the root domain of a subdomain hosting a tor relay. From a whois, i see rgnx is owned by Jacob Appelbaum. The webserver in question is running a good ssl setup according to https://www.ssllabs.com/ssltest/. Any information as to what this could be? ###### ## httpd log ## rgnx.net - - [20/Feb/2014:17:29:46 +0100] "\x16\x03\x01" 301 217 "-" "-" ## logwatch ## Attempts to use known hacks by 1 hosts were logged 62 time(s) from: rgnx.net: 62 Time(s) ^null$ 62 Time(s) A total of 1 sites probed the server rgnx.net A total of 1 possible successful probes were detected (the following URLs contain strings that match one or more of a listing of strings that indicate a possible exploit): null HTTP Response 301 ###### -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlMGPOgACgkQceRvMfxmL+0jMwCgr3zMBm7GngflSXiHB2WzJG/d 7ucAoJDOhmcOeIGUwNZzuaHwTcG/QntN =yDA4 -----END PGP SIGNATURE-----

1 0

Re: [tor-relays] TTTT, multiple runs
by Sebastian Urbach 19 Feb '14

19 Feb '14

Hi Sanjeev, Basically yes. Here are the details: http://web.engr.illinois.edu/~das17/tor-traceroute_v1.html#q-canrunelsewhere Feel free to ask if anything is unclear. -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat and statesman On Wed, Feb 19, 2014 at 6:53 PM, Sebastian Urbach <sebastian(a)urbach.org>wrote: > Right now we are at 95 ip's with at least 1 completed run. Hopefully we > can add another 5 to that number and reach the "100 milestone" before the > next data review in 03/2014. Multiple run's from the same ip are very > welcome as well. > Sebastian, Does this have to be run on a Tor Relay? I thought so, for my first run, but re-reading it now I am not sure. If running this on a non-relay would help, I can add a few more servers tonight. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane

1 0