- tor-relays - lists.torproject.org

Relay, bridge, and family members
by Patrick ZAJDA 18 Jan '14

18 Jan '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, Now I created a bridge, I'd like to create a relay on a dedicated server. I read about the FamilyMembers configuration value, to list all relay which are from the same owner. If I create another relay, do I have to put the bridge fingerprint to the new relay and put the relay fingerprint in the bridge configuration? Thanks, - -- Patrick ZAJDA Skype : gansta93 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJS1qH1AAoJEKPVT2DeSPb4+QUIALJNLP9MsGN8FbPEP6EegNV9 gcc66Iz2Z7maJD35pMquQqBqJrK+Zo6brSe2aX0N9+GipV9+jCpMa0hUOfzsf1h8 oebEjDLPgf4nxE6GuztU7Jkm0XwqHFmT1ELFPS2qU/EwGOBhj4l0Pywff7qfhBBC nvM+5O6+DRVD/44RGyhQqaNCDkxYuUkcLMJUX104RCoBQ6WmPYRBEPBm8YbrPKmc eGZNpRggSDRYzITZrT0SneIzExFP5IbTdGlHidyL4it70iJDI+LBZsm/ZGMENv/h lUYHe8RQbmDgt81BB+dq763zIeFMvBMOtJEdVdWPtuzsGypLxWJPMiR0NKqf6ZI= =X0ps -----END PGP SIGNATURE-----

6 7

Bad experience with hetzner.de and "Trusted Tor Traceroutes" experiment
by irregulator＠riseup.net 18 Jan '14

18 Jan '14

Hello there, We're running a Tor relay (not exit) on a virtual private server at Hetzner for about a year. On Wednesday January 8th, we decided to take part in the "Trying Trusted Tor Traceroutes" [1] research experiment. There have been various calls for participation on public mailing lists [2] [3]. The traceroutes were conducted using the scamper package, as suggested in README. We imposed no rate limiting to requests, just run the script with default values. Some hours later, Thursday 9th, we received an email from Hetzner stating that our server was taking part in attacks and they would suspend our instance if we didn't react within 8 hours. As soon as we got the warning we killed scamper conducting the traceroutes, and followed the procedure so as not to get our instance suspended. Hetzner also asked for some explanations about why we think our server was not taking part in the attack. We responded via email with a full explanation about the traceroutes from our server and the "Trying Trusted Tor Traceroutes" experiment from various researchers from University of Illinois [1]. We told Hetzner that our server was making harmless and legal traceroutes to various destinations on the Internet, thus they had no reason to suspend our instance. Twenty four hours later, Friday 10th, Hetzner blocked network access to the IP address of our server, did send us an email about blocking, but ignored our exlanations submitted the previous day. After the blockage of our IP we insisted on trying to resolve the case by sending one more email exlaining the situation and asking to unblock us, and then opening a ticket. Hetner's response to the last email (5 hours later) was that we should open a ticket, which we already had done. Alas, our ticket was marked as duplicate and closed(?). During this loophole support nightmare most responses from Hetzner's part actually seemed to be machine generated. At last Hetzner asked us via email to send them a signed document via fax(!) containing explanations about the incident. Now that was ridiculous, since we had submitted explanations already three times with the first submission only four hours after Hetzner's first warning on Thursday. Nevertheless, we did resend the explanation. After about 7 hours of downtime, Hetzner unblocked network access to our server. More than 36 hours later they sent an email "Dear Mr. xxxx, your server is unlocked." Concluding, - Hetzner considers traceroutes to various internet destinations as attack. All relay operators with machines at Hetzner should be _careful_ when taking part in "Trying Trusted Tor Traceroutes" experiment. - Hetzner has awful customer support. Cheers, Alex [1] https://web.engr.illinois.edu/~das17/tor-traceroute_v1.html [2] https://lists.torproject.org/pipermail/tor-relays/2013-October/003113.html [3] https://lists.torproject.org/pipermail/tor-news/2014-January/000027.html

4 7

Re: [tor-relays] using Curve p25519 cryptography for type 2(Mixmaster) and type 3(mixminion) remailer blocks
by grarpamp 15 Jan '14

15 Jan '14

>> On Tue, Jan 14, 2014 at 2:14 PM, gwen hastings <gwen(a)cypherpunks.to> wrote: >>> ... >>> I am looking at resurrecting >>> >>> mixmaster, mixminion and nym.alias.net nymserver designs from the >>> various code wastebaskets and retrofit them with some newer encryption >>> technology based on curve25519 and poly-1305 libsodium based algorithms >>> and routines. I believe there is sufficient demand to merit deployment of a good mix network. As well as perhaps web/other intake frontends due to the now prevalent a) dwindling free email b) demand by mail providers for phone authentication. As for operators, I'd reach out to the Tor, I2P, Bitcoin, etc operators. It's a shame that one of the hardest things to find these days is anonymous free speech in the simple form of the written word.

1 0

Re: [tor-relays] System Time
by Moritz Klammler 15 Jan '14

15 Jan '14

Hi, if the time difference is too big, NTP will refuse to touch the clock altogether. You can force an update by the '-g' option. However, the adjustment might still be slow. I'd do the following (as root): # hwclock --set --utc --date="2014-01-14 22:05:35" # ntpd -qg The first command manually sets the hardware clock to the approximate correct time (which you should adjust, of course). Note that the date string must specify the time in your local timezone, despite the '--utc' option. The second command tells NTP to do a one-shot sync ('-q') and allow an initial big adjustment ('-g'). Then, for the future, just make sure you have the NTP daemon enabled to keep the clock in sync. On Debian, if you have installed the 'ntp' package, this should be fine. Happy Hacking Moritz Jeroen Massar <jeroen(a)massar.ch> writes: > On 2014-01-14 21:05, I wrote: >> Jeroen, >> >> Thank you. It did that but I can't see a change. > > NTP adjusts slowly, as your clock is 6+ hours off, you should force the > timesync first, eg with with rdate (apt-get install rdate): > > rdate -v ntp.xs4all.nl > > should do the trick. Then after that make sure that ntpd is running: > /etc/init.d/ntp restart > >> The VPS person said it is set to UTC. Previously on another VPS it >> was another relay in the ?circuit which had the time difference. > > UTC is a timezone, and having that is great as it avoids all the > pitfalls and annoyances with summer/winter time. > > Note that some VPSs do not allow changing of the time, one will have to > ask the host to set the time. > > Do note that a VPS can be inspected and controlled easily by the Host, > as such, make sure that you trust that operator. > > Greets, > Jeroen -- OpenPGP: Public Key: http://openpgp.klammler.eu Fingerprint: 80C1 EC79 B554 3D84 0A35 A728 7057 B288 CE61 2235

2 1

Throughput changes?
by Thomas Themel 14 Jan '14

14 Jan '14

Hi, I've been running two nodes on the same machine for some time because I was unable to get enough throughput to blow through my bandwidth budget otherwise. However, something seems to have changed recently, since right now I'm blasting through about double my usual bandwidth (~25 MB/s) with the two tor jobs at only ~60% CPU usage each while previously it was always CPU limited. This doesn't seem to correlate with any software updates on the machine. Here's atlas: https://atlas.torproject.org/#details/3DD2523F1B241F01D54818F327714CDA7F542… ciao, -- [*Thomas Themel*] [Albulastrasse 52] To begin with, GNU will be a kernel [...] [ CH-8048 Zürich ] - RMS announcing GNU in 1983 [*+41 78 9070988*]

4 8

recent OVH feedback?
by Alan Turing 13 Jan '14

13 Jan '14

Dear all, I am currently running a fairly large tor relay (no exit, due to OVH's restrictive policies) and would like to know if other people have made experiences with running non-exit relays using OVH's services. Did any contracts get canceled or did you receive any kind of (legal) threats by OVH for doing so? Have you made positive experience with OVH regarding non-exit relays? I'd be grateful for information. regards, s.

3 2

404: /tor/keys/fp-sk/print-print not found
by nano 12 Jan '14

12 Jan '14

I haven't looked into this at all yet, thought I would share it here first. Both my exit relays [0] received these repeated warnings around the same time yesterday: timestamp [warn] Received http status code 404 ("Not found") from server 'server1IP:port' while fetching "/tor/keys/fp-sk/A1B2C3D4E5F6G7H8I9J0K1L2M3N4O5P6Q7R8S9T0-A1B2C3D4E5F6G7H8I9J0K1L2M3N4O5P6Q7R8S9T0". timestamp [warn] Received http status code 404 ("Not found") from server 'server2IP:port' while fetching "/tor/keys/fp-sk/A1B2C3D4E5F6G7H8I9J0K1L2M3N4O5P6Q7R8S9T0-A1B2C3D4E5F6G7H8I9J0K1L2M3N4O5P6Q7R8S9T0". timestamp [warn] Received http status code 404 ("Not found") from server 'server3IP:port' while fetching "/tor/keys/fp-sk/A1B2C3D4E5F6G7H8I9J0K1L2M3N4O5P6Q7R8S9T0-A1B2C3D4E5F6G7H8I9J0K1L2M3N4O5P6Q7R8S9T0". timestamp [warn] Received http status code 404 ("Not found") from server 'server4IP:port' while fetching "/tor/keys/fp-sk/A1B2C3D4E5F6G7H8I9J0K1L2M3N4O5P6Q7R8S9T0-A1B2C3D4E5F6G7H8I9J0K1L2M3N4O5P6Q7R8S9T0". Only one timestamp and serverIP was consistent on both relays. All fingerprints, however, were consistent on both. Hasn't appeared before or since. Anything to worry about? Thanks. [0] https://atlas.torproject.org/#details/799B025E25850A88CD133276301FAFB731C2E… -- syn.bsdbox.co

3 4

Re: [tor-relays] One relay shown as two
by Andy45 11 Jan '14

11 Jan '14

Thanks to everyone who replied to my question. I guess I'll just be patient then! The funny thing is that I never did reinstall Tor/Vidalia... although I got one working then the other with different configs for a while. That may have been it. Thanks! Andy

1 0

One relay shown as two relays in Atlas
by Andy45 10 Jan '14

10 Jan '14

Hello all! My question is related to Atlas. I asked this question on Tor help and I was referred to here. Here are my questions: I run a small exit relay on my computer. (Nickname is Andy45 and IP address is 108.249.221.251 if you want to look at this problem on Atlas for your self.) When I look up my relay on the Atlas, the relay is displayed as two separate relays with differing bandwidths and different uptimes. I'm not sure what's up with that - but my best guess is that it is splitting the amount of bandwidth I donate in half? The one of the average bandwidths listed on Atlas is a fair amount less than what the bandwidth monitor shows I give. (70 kbps rather than 100+ kbps.) Thanks, Andy

3 2

Hidden Service web design to speed load times
by Gordon Morehouse 09 Jan '14

09 Jan '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hey folks, I've been off the list for quite a long time due to personal reasons, and I'm aware I have a couple irons still in the fire WRT RasPi and the SYN flood stuff - I'll get to it. Today, though, I came across this article: http://csswizardry.com/2013/01/front-end-performance-for-web-designers-and-… tl;dr you can add a 'dns-prefetch' link tag in the HEAD of HTML documents to do DNS lookups ASAP, instead of later on when the browser parses the content which does it, or your Javascript (yeah, I know) does it, etc. I'm wondering if this would have any value for Tor hidden services - would a "DNS lookup" of a .onion force Tor to start building a circuit to the hidden service in question? I suppose one could deliberately request a nonexistent file or a 1x1 pixel PNG or something, too, to get the circuit built, but this is obviously a little cleaner and probably a little better for privacy versus an HTTP request which may be logged even if the user never takes an action to *actually* request real info. Just a thought for hidden service operations. It's always easier to get one's message out the less time it takes to load. Best, - -Gordon M. -----BEGIN PGP SIGNATURE----- iQEcBAEBCgAGBQJSztxfAAoJED/jpRoe7/ujrx8IAJyREaH6TZ2z5GjBPrZfZcir fWi5zfwO/t/we/uQzn0IriM8DIMvLQOHS1Z9ly/qzUyoBLPRxzUqPpkzmtzXgXOy l2bAhmRCSyGZXDgE4GAXpVXP8w2w3fb7ijJADqy+I/nqQYZX7MMzlcT8hlsqqon9 I39ITwbDoUuem+y/XG/IICcbTVBsrH3m2auhRBfHawAJW8iO6xooltyUS6JExxLB fALfaG64YOy8mv+eyOT4tYoP67r8miEDlmTnplARUKw458lihqlnZ1TrCN+AVaJt OJCXiDnqghvBAJE+v/5JWJOMDr90ucI/+9mitOmbbQh03JOSRsSryeffPmUN08c= =gl1d -----END PGP SIGNATURE-----

1 0

VPS ports closed
by I 09 Jan '14

09 Jan '14

Is there a way to open ports for Tor as an VPS account holder? Robert ____________________________________________________________ FREE ONLINE PHOTOSHARING - Share your photos online with your friends and family! Visit http://www.inbox.com/photosharing to find out more!

5 7

How to force VPS to update to current release?
by I 08 Jan '14

08 Jan '14

Anyone, On a new VPS putting the right entries in the sources.list won't get the current release. apt-get update or upgrade gets with more Ign http://torproject.org tor-experimental-0.2.5.x-precise/main Translation-en W: Failed to fetch http://torproject.org/torproject.org/dists/precise/main/binar y-i386/Packages Undetermined Error [IP: 38.229.72.14 80] Either could someone tell me how to force an update from the very old Ubuntu held one I managed to get or tell me how to get to the current package some other way? Searching for help for Linux without sufficient jargon is hard. Robert ____________________________________________________________ FREE 3D MARINE AQUARIUM SCREENSAVER - Watch dolphins, sharks & orcas on your desktop! Check it out at http://www.inbox.com/marineaquarium

5 11

Fwd: How to force VPS to update to current release?
by Zack Weinberg 08 Jan '14

08 Jan '14

On Tue, Jan 7, 2014 at 9:33 PM, I <beatthebastards(a)inbox.com> wrote: > Err http://deb.torproject.org experimental-precise/main i386 Packages > 404 Not Found [IP: 86.59.30.40 80] > Ign http://deb.torproject.org precise/main Translation-en_US > Ign http://deb.torproject.org precise/main Translation-en > Ign http://deb.torproject.org experimental-precise/main Translation-en_US > Ign http://deb.torproject.org experimental-precise/main Translation-en > W: Failed to fetch http://deb.torproject.org/torproject.org/dists/experimental-precise/main/bi… 404 Not Found [IP: 86.59.30.40 80] It appears that the experimental-* distributions are no longer available. I think this is probably an intentional change associated with Tor 0.2.4.x having been promoted to stable release, and I think you want to replace *all* your existing 'deb ...' lines in /etc/apt/sources.list that mention torproject.org with one of these two: # Tor 0.2.4 official builds deb http://deb.torproject.org/torproject.org precise main # Tor 0.2.5 experimental builds deb http://deb.torproject.org/torproject.org tor-experimental-0.2.5.x-precise main You should need only one or the other, not both. And of course you need Ubuntu's source in there too. (To be clear, this is *not* an issue with your VPS, this is a change to the package server you are using. If this was an intentional change, it sure woulda been nice if it had been announced here, hint hint.) zw

1 0

[Feedback?] Multiple Tor processes on one host
by Johannes Fürmann 05 Jan '14

05 Jan '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello *, I wrote a short "HowTo" on running multiple Tor processes on one host [1]. Feedback and improvements are greatly appreciated! Johannes Link(s): [1]: https://gist.github.com/waaaaargh/8271499

2 1

Tor Relay Operators Meeting at 30c3 Chaos Communication Congress
by Moritz Bartl 30 Dec '13

30 Dec '13

Torservers.net invites Tor exit relay operators and organizations to a meetup. If possible/relevant, for example if you're a member of one of the 'Torservers partner organizations', please prepare some slides on your activities. We will do quick presentations on recent and future activities around Torservers.net. Afterwards, the official members meeting of German Zwiebelfreunde e.V. will be held in this room. https://events.ccc.de/congress/2013/wiki/Session:Tor_Relay_Operators_Meetup Starts at: 2013/12/27 03:00:00 PM Ends at: 2013/12/27 05:00:00 PM Duration: 120 minutes Location: Hall 13 -- Moritz Bartl https://www.torservers.net/

4 5

Problem installing latest tor on a raspberry pi (ARM arch).
by aowenson＠neomailbox.ch 30 Dec '13

30 Dec '13

I was directed to this mailing list by a user on #tor IRC, so I'm hoping it's ok to ask for help here. For the past 2 to 3 months I've been running tor on my pi without any problems. The repository has been great, pulling out the correct ARM binaries, and it setup fine. This morning I tried updating the software, but the step "Checking if tor configuration is valid" fails; there are also 2x seg faults in the terminal output, not sure if this is a repository issue (fetching an x86 binary instead of ARM). The terminal output is here: http://pastebin.com/9Re2jrRe.

16 22

Re: [tor-relays] tor-relays Digest, Vol 35, Issue 25
by Oliver Schönefeld 30 Dec '13

30 Dec '13

i don't know, who knows how tor-weather sends the t-shirt e-mail. i took a look at the code and found that the mail is sent after 1464 hours of uptime (=61 days), checking every hour. according to this the downtime due to updates is really not that relevant. i'd guess that there are approx. 3 or 4 updates in the required 2 months, which would "cost" you an equivalent amount of hours. i don't think that it matters whether you get your mail 3 or 4 hours later. so i think the algorithm is fine. Am 30.12.2013 um 13:00 schrieb tor-relays-request(a)lists.torproject.org: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > Today's Topics: > > 1. Re: Tor Weather getting T-shirt email. Problem > (Random Tor Node Operator) > > Von: Random Tor Node Operator <tor(a)unterderbruecke.de> > Betreff: Aw: [tor-relays] Tor Weather getting T-shirt email. Problem > Datum: 30 .Dezember 2013 12:48:16 MEZ > An: tor-relays(a)lists.torproject.org > Antwort an: tor-relays(a)lists.torproject.org > > > Signierter PGP Teil > On 12/28/2013 01:26 AM, I wrote: > > I think two months is a bit short to be rewarded with a t-shirt > > from donated resources. > > > > It makes more sense to extend the time but include the total time > > running ignoring minor disruptions. > > I agree with that point, because currently, relay operators have the > incentive to not update to the latest Tor version whenever a new > version is released, in order to keep the consecutive uptime high. > That is probably not in the best interest of Tor. > > Maybe Tor Weather could look at the flags instead of the consecutive > uptime instead. For example, you typically don't lose your Guard or > Stable flag due to a reboot. > > > > > > > Robert > > > > > >> : i noticed a problem with tor weather. I should have recieved a > >> email : -Uptime is nearly 100%, > >> > >> Tor weather needs some updating, however it continues to email > >> plenty of relay operators. The reason you didn't get an email is > >> tor weather didn't see your relay matching the uptime > >> requirement, > > > > ____________________________________________________________ GET > > FREE SMILEYS FOR YOUR IM & EMAIL - Learn more at > > http://www.inbox.com/smileys Works with AIM®, MSN® Messenger, > > Yahoo!® Messenger, ICQ®, Google Talk™ and most webmails > > > > > > _______________________________________________ tor-relays mailing > > list tor-relays(a)lists.torproject.org > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > > > > > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

Inspiration
by I 28 Dec '13

28 Dec '13

Roger Dingledine and Jacob Applebaum speaking on Tor at 30C3 https://www.youtube.com/watch?v=SscFfzD_his ____________________________________________________________ FREE ONLINE PHOTOSHARING - Share your photos online with your friends and family! Visit http://www.inbox.com/photosharing to find out more!

2 1

How get ARM onto CentOS 6
by I 27 Dec '13

27 Dec '13

2 3

(no subject)
by Sebastian Urbach 25 Dec '13

25 Dec '13

Dear Colleagues, Since i switched to 0.2.4.19 a few days ago i noticed some strange behaviour. Sometimes the data seems to he corrupted i see on torstatus.info. The atlas data seems to be right though. Afaik only the contact and family data seems to be wrong. https://atlas.torproject.org/#details/3C82285FAC2171FA5178340A82B05F2190AB6… http://torstatus.info/router_detail.php?FP=3c82285fac2171fa5178340a82b05f21… Im not sure what to make of it right now. A bitcoin for your thoughts ... -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ----------------------------------- Religion is a symptom of irrational belief and groundless hope. ----------------------------------- Gregory House, M.D.

4 3

Shirt
by Sebastian Urbach 25 Dec '13

25 Dec '13

Hi, As long as you are wearing your NSA shirt im gonna wear my tor shirts (received a green and a black one years ago) ;-) On the other days im wearing my Ellsberg/Nikitin/Manning/Snowden shirt. Got ya ;-) -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ----------------------------------- Religion is a symptom of irrational belief and groundless hope. ----------------------------------- Gregory House, M.D.

2 1

Tor malware!
by I 22 Dec '13

22 Dec '13

They are two words I didn't think would be together. Would any pundit tell me if there is anything an exit or relay operator can do about malware using Tor in the news today e.g. Chewbacca (found by Kaspersky) ? Robert ____________________________________________________________ FREE ONLINE PHOTOSHARING - Share your photos online with your friends and family! Visit http://www.inbox.com/photosharing to find out more!

3 3

running a relay on a home connection
by abhiram 19 Dec '13

19 Dec '13

Hello, I am running a tor relay on a home connection. My connection is assigned a new ip as the lease expires every few days. So far I am fixing this my editing my torrc file with the new address value. Are there better ways of handing this? One thing that puzzled me was that when I first setup my relay it was unable to find the external address of my connection and its log files kept complaining that: "If x.x.x.x:9030 is not your correct IP address and directory port, please check your relay's configuration" Obviously it wasn't my ip address, when I looked it up it was from another country. So my question is why is my relay advertising this specific address? thanks for your time. -- Abhiram Chintangal

6 8

Re: [tor-relays] running a relay on a home connection (abhiram)
by Oliver Schönefeld 19 Dec '13

19 Dec '13

hello to everybody, as there were some alternatives for dynmic DNS handling mentioned, i'd like to add the following: as with most commercial dyndns providers come conditions (paid account, limited number of hosts, and - what annoys me the most - login after x days, etc.) i want to point you to https://nsupdate.info. this is an open-source project which offers dynamic DNS service with some advantages. i.e. they state they state in their "why another one?"-section: nagging its users to make a paid subscription annoying its users with advertisements or spam cancelling hosts or accounts after a short period of non-usage hiding the few free features almost undiscoverably between a ton of commercial-only features so check it out and a nice day to all of you!

2 1

bandwith unit
by Kiss Gabor (Bitman) 17 Dec '13

17 Dec '13

Dear folks, I'm tor relay operator since several years but newbie on this list. I just moved node 'traktor' from physical host to virtual machine. So I revised all settings and checked if all works well. I found a funny thing. My RelayBandwidthRate is set to 1 MB (i.e. 8 Mbps). ## Define these to limit how much relayed traffic you will allow. Your ## own traffic is still unthrottled. Note that RelayBandwidthRate must ## be at least 20 KB. ## Note that units for these config options are bytes per second, not bits ## per second, and that prefixes are binary prefixes, i.e. 2^10, 2^20, etc. #RelayBandwidthRate 100 KB # Throttle traffic to 100KB/s (800Kbps) #RelayBandwidthBurst 200 KB # But allow bursts up to 200KB/s (1600Kbps) RelayBandwidthRate 1 MB However on page https://globe.torproject.org/#/search/query=traktor the "Adverised Bandwith" column shows cca. 125 kB/s. Did I misunderstand the difference between kbps and kBps? Gabor

4 5