- tor-relays - lists.torproject.org

new relays
by a432511 31 Aug '13

31 Aug '13

Hello all, I just spun up 2 relays (1 exit, 1 non-exit) in Amsterdam using DigitalOcean as the VPS provider. It's been up for about 8 hours now. Here was the message I sent to them regarding the servers: /* Quote Hello, I just spun up a couple servers in Amsterdam to act as relays in the Tor network (see https://www.torproject.org/about/overview.html.en) I just wanted to file this ticket so that you were aware of those servers' purpose. One is simply a non-exit relay meaning that all traffic is encrypted and ultimately routed to another tor server before it connects to the destination IP (no risk there). The other is an exit relay that establishes the final connection for the client. This box has a bit more risk because it's IP will be used for the connection. Now, according to law, the exit relay cannot be held responsible for the traffic because it is merely a pass-through server with no knowledge of the traffic - much like any ISP - but there hasn't been a firm legal precedent set yet to my knowledge. The purpose of the Tor server is to facilitate internet traffic for those that might be subject to laws that censor legitimate content (China, North Korea, Iran, etc...). It also acts as a safety net for the press so that they cannot be easily tracked when working on dangerous assignments. I read a couple other forum posts regarding your TOC and saw that you pass the liability on to the customer because you don't have control over what each droplet is used for. This is in essence the exact same case with a Tor relay. I have configured my exit relay to block a large number of ports that are typically used for torrents to reduce the possibility of any complaints. Please let me know if you have any questions. Thanks, Adam End Quote */ And here is there response: /* Quote Hello, While TOR exit-nodes are allowed under our TOS we strong discourage them because of the abuse complaints they generate. As you mentioned, you are responsible for any traffic generated by your droplets. While in the future there may be a precedent that grants safe-harbor status to TOR exit nodes, there is no such precedent under US Law at this time and the responsibility remains with you. You will be responsible to resolve any abuse complaints lodged against you related to this droplet. If we can be of any further assistance please let us know. Thanks Ryan Posted on 08/22/13 at 13:49 Gravatar Ryan Quinn End Quote */ I am based out of the US. Is there anything I should be careful with hosting an offshore Tor exit node? I already used the limited tor port list that was in the wiki. The other thing that I am weighing is just a moral question regarding misuse of the Tor network for despicable things like child porn. I understand that of all the traffic it is a small percentage and that ISPs essentially face the same dilemma, but I wonder if more can be done to make Tor resistant to evil usage. Thanks.

16 19

How to reset AccountingMax stats?
by Steve Snyder 31 Aug '13

31 Aug '13

My relay has become convinced that it has reached its AccountingMax limit, though actually only 71% of it (according to my ISP) has been used. How can I reset the stats so that this miscalculation is not used for future configuration of expected network traffic? Yes, I know I can just erase /var/lib/tor, but that means starting from a new identity. I'm hoping that I can edit the state file to clear the stats. Advice? Thanks.

1 0

???? getting silly now
by That Guy 31 Aug '13

31 Aug '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > >> The Tor devs go to great lengths to try to keep "evil" >> governments from using Tor against itself. Why not devote some >> effort toward keeping "evil" traffic off of Tor? > > >> Given the fact that "we need more relays" is the common mantra, >> it seems to me that if the Tor community could come up with a >> technical answer to address at least some of the most egregious >> abuses of Tor--things like child porn, or even porn in general, >> that either have nothing to do with Tor's foundational mission, >> or (like child porn) are antithetical to it--the result would be >> greater public support for the technology, and a wider depl Never thought I would see the day that Senetor Nanny-State would be participating in a tor-relay related mailing list... Sen. Feinstein? That you? M Bloom? too the guy who said "What the epic fucking fuck?" +1 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBAgAGBQJSIdlsAAoJEGPr8mk3uIZEZosP/iKWY1Y5NXf2cM5IybyqynAx yUt1oCT/3UU9QiOvt8i6OVa26NIOZyNHzprVQwWCDJk+K9A55CFPqbiQmCQBfZgD bl8dr9ybTYjLWgT/v5dQmTxJzsGtmUx7v53nG3zio33DdWZ6A6HnvSAFOM2qmEvq yo2GBC56Eg3p/x1FvqFwrL+4vM+ZtUPKR3bRIJuXBJjl03iJ8dvHKEKdPaGXQmjd 33OyGo+2Dxp6NfRKPgorURpwENQdngAjm0oJTbT8ox0hAOWtUbl88UDr3Urz+QNs p9fe6NetgKu2w7myUeKovckO8CWXzOw0+FCtsj+0/r24FPEJGqUe8b7MyC6xyvDH RgI3e1SYEuUUIwpUFZ8vlKf70qJNpmyseL9CV0snp1gDT5Xy2tUZ7Q3BPsn7Kl2e 0r6ItZ4rNHFnKFpaZNbg21Cdx/W0MKbPB0FEImzHKGxV3XNwKqY+g3VJ8lIasnQ1 GVLUpBEAMB6v0ONF5elfF4lnvvOqhP7c0MhY95s13Tz7YW/QgzOQpxdpgFGI29l7 /VMsjC7smVEHOB2119hVdImMn9p6hYgJlz2XiofnjvNVSWKgc1O6Rdsu0XlzJgKf ChifpDB93NpFoLdsoyNecbjFuNCYjC0JLQerIGI1dCJxSm3lTu/YV5MNuBCiCzs6 F2mx2wNC/STiDetSlMft =Gy6Y -----END PGP SIGNATURE-----

1 0

always this way?
by That Guy 31 Aug '13

31 Aug '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Am not new to Tor bur am to the mailing list and running a relay and I have noticed and endless amount of legal concerns and not just on exit nodes. People running non-exit relays getting booted out by their VPS/ISP provider. I am just curious if it is getting worse or has it been this way for a while. I want to help/encourage others to run relays but a recent submission about the guy who got his friend to run a relay and (not-so)Freenode shut down his VPS. Is this only going to get worse? What happens then? - -- - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.10 (GNU/Linux) mQINBFIaewoBEADTG92hLWpKPhcScBe8VPqSFd+pKWgJ2318AQW1SVJlAbcEOmj7 /lwIKL5lq+cduNMfsFcVreHqGdGLRKuBEyJU0JJsjP07/qO9Iq9mZqBz8VMrtq1R 7GKabb+G+f2uDob1PQvpJmFrttMLzTQeVG0hNrzziIYACj//VZRaheiv/rh8ZBfC 3T5UgMo+Z8ClYvBrThJBLjrchMuKxu14hptcSiCTGWKK4wl7TPvFVvu1mNxIU2iJ Xp9KT+plp1OFbelRzFFH1LHqoaWcpm6ABjtS/FF1XzDFfOf4zf8WScbGm4jU5rXQ ONO90U6fTCuVjbd7Vq0P4XX4wRdpC1NKGMudpqEPAh+0dYT494EmG/yRDSyUKlrR 7MSW1oz1C14sUb4A82ypfC0yRkcrj8cS7RRSGhVIhrrSPECL+Wdt3gKOMu9EnwHW ls+WOJm5eVVG0SbV0TLgnZ723FdlFFZsZSKEVduxbq9wLZu3aCm8nh9UY+STYM5T whAJL4+v5b9zJWtY+YMcH//YWLmxgQjLrMLOKUERRfRJUsC73DRiCvbnVSMelkZk ZnLfFPkq2C1XcAi8zk5oBI0O+iIcNn/1EK9u49ngz/V1NQXj0qHYTN4EsECCihXz r3bB1KyHZmu7yoRsN5m1UPmEXiCm2amuRLMcDKff1SA20rApCbgBvWSOjQARAQAB tCdreWxlIGJ5cm5lcyAoUHJpbWFyeSBrZXkpIDxncmVwQGdteC51cz6JAj4EEwEC ACgFAlIaewoCGwMFCQlmWTYGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJEGPr 8mk3uIZEsMkQAJE+TZDoHmbFx+YHrjPg7EKba5+8jtqyH7sVHETEAHZaU6U2nVAd 135lN3+g0Dgn6y/8OlncJbioleXpWyWLzpYjMBv9mPPHj+2G0jj8Lg7wk1JzN0YN frq7wNEVFJB4Ryh1OUdfU89fY9PHPPl8WuE2E82XrqF6vY5R727ji97ojODi0g6s O5ygMbwccnNIhCSnuf/vZDvc/DVsPUytlkJdk7vaAXTFpYQk++UqG8mXKtWz43PZ p9SFy6gIZ0D4DZi0xxUg79fiKvy2tNDv8nAwXBWPGZicpmTxLJ2eRoYNpIlNgnZ6 Uk0txvS3414A0MZ0x4AC/WXilx6ykNxo9Fz8rS/8LMYfQXjdivg84LevuZkFa+BY nha0Fq1HwJpwbarmyu/BcKEXEBM8RPF0Rjm3ZymXJzkQto57kkzKKeud2Ob8WhDd 6qGv5bmU78KoR3NHgQc8bV+qYSY6ng5O4BcEUwtZjy3y8vTihJkyQ3W+U9dcBm6H kbTl4dL4kvRMJsGimT6iL80YL4tQltvEWuw14I6h7Hiq4YZMky30LI3mC/D+kcK3 5/eTVF9330snVg7yxEhc5CR/oBJoIRYNz1d26wYwm2AA1yqCizWRBYoMnr+M1nyE h/4v3m2v112FRXCpe74MzaSmY3W0jFW7t+l6D0uWUMb8vKNIeAR4v1q1iQEcBBAB AgAGBQJSGnwqAAoJEL/qyBxVCbTi9EgH/RoqiM5LPuZAqHkCx4o/h3Bu1txbTpzq OsXFvyEr8YOybUznu03Z103p7VeO1aHl87IhmEzPVLWLaM9mrk+QH6D0PHecHkti +Xz6RnHHWXZNFPli0ceW/Jx6xFyQCQRSfdsfkk5xRazEeBci4Tu2QWKohfKaVMSt 0oe/C76/WxrRHuwUMgPnfzF+2GnhyGdp/nICsyuENsk1CdSeqfuGqf/onNVdbcNK Nj8/UPdbndvsttqDhWSWn3PtoOhmpQMMEOoYw8FMeXsasNEx2v0NDDb6VboLcng4 UC2Cz5xZSa3nAgoXGhDMEUA8T1nWZT6ownk86EJxL+b1h18+BcXKVUnR1zXXMwEQ AAEBAAAAAAAAAAAAAAAA/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAgGBgcGBQgH BwcJCQgKDBQNDAsLDBkSEw8UHRofHh0aHBwgJC4nICIsIxwcKDcpLDAxNDQ0Hyc5 PTgyPC4zNDL/2wBDAQkJCQwLDBgNDRgyIRwhMjIyMjIyMjIyMjIyMjIyMjIyMjIy MjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjL/wAARCACEAIkDASIAAhEBAxEB /8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUF BAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcY GRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqD hIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW 19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQAAAAAAAAEC AwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMi MoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElK U1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaan qKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6 /9oADAMBAAIRAxEAPwDg8jB6d6cfLyc4qH7JIwzuIppt2HVq6jMn3IDytN8wEFVG OajFsx/iNPFqwGS1ACkr35OKMqBhhzT/ALO3HzfpTksZpnCRKzseAqrkmkBEGXP3 celHyDr16V22l/DO9fT/AO0daluLC3/giitHnnk/7ZqMj8axtZbwzoOTLoHi+fb/ AB3MK2kbfiVJqXNIdmc/5at1zyfWgxRD1qeH4li3dbXw54U063uJmEay3Ra7lJPA A3YUH8K9C+Jmt+IPDc/hbStL07TTqt7b5ulisI5BLN8oKqCDgZz09an2iHynl7iN cgctn/CpYR/eHboK98v/AAZ4c/4RyDU/GcWn2V6kS/a7m0Jt4wx7Yzg+me/6V5v4 28MW2kS217otsraLKn7q9huTOsp9z0U+36+lKaYmrHIEgcbTmmlgGI6kkYpz7um4 UkaY+bPPU5qxBjaCSDnPApV2kknJ/Go3ZicBu/anBGA64HrQBISD0FRbl/2v1qVF IBwah2f5xSYGjvyAPaoGPzVaMQKBuhA/pVJ+DTAsxHNWLe3mu7hLe3iaWWRgqIgy WPoKqQnkV1cV7cfDG3HiHVIEW7nhdNPs3b55GIHzsB91QOvfkDvUydkCRe1xdH+F +gC61eK31HxJdJ/oti/zRw/7bjuB+p4Hc15rJ8YvG5P+j6pFaJ2S2tIkA/8AHc1y etazf+INWuNT1O4a4u523O7foAOwHQCqFYNt7mljth8XfHoOf+Ekuf8Av3H/APE1 Yj+NHj+MYOu+YPSS1hOf/Ha4GnxRSTzJDEjSSOwVEUZLE9ABSA918DT+L9f1nT9X 1rw/pL6Jta6l1BtMh3bEBPysozuyPrXoXib4i6X4a8J6N4pv9I83Ub6NRbwEBJVD Dc3zEEqBx+YrR0HRdZ8M+D9Ls7SRHktdPSD7MUyv2h2XdIx6lVy3APIz7V5L+0pL Kdb0GFjmNbaRh6biwB/kKAMDx/8AFHSfHlkUuNH1KGeNP9GAvx5Mb/3igT5j25P0 xXMeDfHN94UuHgdftujXPy3enynKSL3I/ut6EVp+F/g94s8V6Ump2cNtb2cozFJd S7fMHTIABOPrio9U+EPi/TbKW9js4L+1hLCSWxnWXaVOGGPvcYOeOMUAdT4i8PW9 pa2mu6NI13oN8N1vN/FGe8b+jAgj8K58gEHK4FX/AIOeKo4NUfwdqyfaNG1lvLCM f9VMeFYemeB9cHtWr4w8J3nhTV2t5WZ7VyWt5yOHX0PuO4raEr6Mho5pQMfKvGc5 zTs5JwnQdaUNjADcYo5J5fArQQhcBcBc1U84/wB2rZBIADcetQeV/t0gNxZYFkQT BmjyNyo20kexwf5VoHUfCMXXQNQmYf39QA/klYrHCLkZ98V3dh4P03T0HijxGUt/ D8NlBchc58+RkGVx1+9njvkDpSk0txnSaRqfh3w/8PZvEWp+HobKxVswRuwnlmzw Nu8Dqeg9ielcT4h134XfFLUIrjUNT1PRdSCCJJZ1/dkZOAeWUDk91rz34i/EW98d 6mgCfZdJtci0tB0UdNzY6tj8AOB78TWDdyz2y/8A2drv7GbzSPE1hdW5TzFedDGp XrncpYY968s8R+FdX8K3kdvqtt5fmrvhlRg8cy/3kYcEV0nw4+JWpeDL5bWXfe6J McXFm3zYB6sgPQ+3Q9/Uafxev9fuZbBJ5baXwy4M2kPaW4jiCEY2+oZRwVJpAeX1 9F/ATwBZJpMfi+/iWa7mdlswwyIlUlS/+8SCPYD3r50r2r4VfE+/sdK07wpb20c1 zHeZgV2C+fCxYvECcBXydyknB6emQD3vxN4p0nwlpL6jq90sMQB2J1eVv7qjuf8A Jr5Y1CbV/it4pvtbvp0sdLtRmW5mJ8qzhz8qj+8x7AcsTXSfHXR9Wu/iZYJveWLU Yoo7GMnhGyFZPruOT/vVhfE68t9Ea18CaO2NP0oBrt14NzdEZZ29cZwB25FAFq++ L1/pGhW3hrwc8tnplopRbu4Aa4lySSfRASTgDketZ+i614w8EaZZeMbTUle11W5l WSCVy4mdT8xkU+vPzA5+lcBXremR+EvFvwu0Pw9d+KINJ1nT5Z5FFzGwiO9ycMxA HTbyDxQBjPbR65r0Xi7whp7tJbTJeXukRnL27qwYsgHLRkjqBlc4IAxXsHh/X38X 6JZS+J5be60nxBcSwQRiMK2n3Cs2yLcOuVHDEZzxyGri9G+EeteEv+KstfFukxpY I1ws0BaRHUDJUngEEcfjWt4X1/TrDxraNJaxN4W8WMl5bJKgZLS+BwwGeAQ4x+Kn tQBxuu2CaNrt9pyv5n2aZog+MZANZ25SeRXQfEPTpLTx7q4lO3zJzKuR1VuQf1rm FgJPDV0rVGZZ3oB07dKr5X+6v50vkYPL1X8o/wB6gDdtklu7mC1gG6WZ1jRT3YnA rc+P+statong+3kP2aytlmlA6M2NiZ+gUn/gVbmm2VtYeEPCOvwWayagmq+TtXgz Au5AJ9RtGD71558crqC6+KWoeRMsoiiiifb/AAsFGV/Cspu5SOJ0PRL/AMR6zbaT pkPnXlwxEaFgo4BJJJ6AAE/hXf33h7wb8OpBB4hkfxFrygF9PtZDFbwH0kf7xPsP xFY/w0uJdIv9Z8RxD95pGmSyxMRkCV8RJ+rk/hV7QNG8OePLy4sbKz1qDW5LaW4N xPdpLB5iqWJc7AwUnjOepFZlFy1+OGraURHovh7w/p9sOkUVq2ce5DDNd54d+Jmh fFW3bwj4s0yO1uLriCSJvkaTttJ5R/Trnp3wfnIjBxUtrcy2d3DdQOUmhdZEYdQw OQfzoA6/x/8ADjVPA2oOH/0rTWfbFeRjj2Vx/C3t37VjeEPECeFvFNjrT2KXwtHL iB32gnBAOcHBBOenavUIPFWm+I9F8f6tZaC+nwz6cGvHe7aVZLh3AQhMBQc7jnr9 K8UoA9YsfiLe+Ovi34ZutYFvbWVrej7PCoGItxHVjySSq8n8hXBeL4b+DxjrC6pC 8N613I8qP1yzE/iOeD6ViglWDKSCOQR2r1XULyL4q+DYGWLf400hArqv37+3HUj+ 869SOvXHXgA8popzo0bsjqVdTgqwwQabQA4SOEKB2CnqueDXqfgy5Oq/BjxhpDt+ 8014tRtm7ocjdj0+5/49XlVdz4Oku9L8GeMNRkgdbC5sBYrKeFaZpEwo9SF3HjoB QB6xrEK/ET4baZ4us1EmpWkPlXyL1bb9/j2PzD2avMicDlQKt/BfxJf6frl7odrd mJtSt2+yq4zH9pX5k3D0IBU49fpWh4jsrO6gsvEWloYtN1VWbyev2eZTiSL6A9PY 1rTl0Ja6mHkAA7R61B5g/ufoaeAueWyOlR5T/np+laMk9e8OzpHoPhLzV3W9ob/U JB/1yBK/qa+bby7mv764vLhy888jSyMe7Mck/ma+hrE+X8PTJ/FHoGrMPruUV85V hLctHo/we1mytNdv9H1PTY76w1O2bzlfoohVpRkdx8v8qzta+JepahZz6fpWn6do OnzjbLDptuI2lX0d+pH5A034Wappel+OIDrDCOzuoZbRpicCIyKV3H25x7ZzWP4p 8Kap4R1iWw1K3dQGPlTAfJMnZlPQgj8qkZh1Na2s99dxWtrC81xM4SONBlmY8AAV Eqs7BVBLE4AA5Jr2zwxo9v8ADXT1vLiOKfxldRbooZBuXTY2HDOP75Hb8OBkmoQl N8sdxNqKuzI8Y2qeCfBFh4BtCJ9b1CZLzVfJ+Yhv+WcQx15wce2f4qdafDTSvDnh ObxJ4qe51FoJBFLpulyKfIf+7NJzt7Zx0yOtLowOkeIJvEDt9v1ZxIRcXZ3bZGGN 4A6EHp1xWN4G1y+8IeNEt9UUzaZqj/Zr+KT5kmRzjcc9SM59eo71tVw1SkryWhEK sJ6I0fCmteE9e8XaZoi+AtOhtbydYS73U0kig98lhz+FX9dk+HGi+LbvTpdF1/QL 2xuWSO8sLnf0PyuA5yARg8eta+kfDSx0v4xQtoGt2c8GmXazXNlOzJPAnXAyMOBk cg+mazNX+KE8nj7Ura68P6L4gSC9lisZp7dfMRVchcOByo9x+NYJNuyNDa1aDwzr VqJ9X+xeIHDiJ7uzBsdSjP8A01iPyuR6nH0rCuPh18PWjMyeKNWsExkpcWfnFfqU GKUeZLc3V7clGvLyVp7h1GAXY5OB6DoKcCQevHevXhlsXD3nqcEsW+b3VoZyeFPh VZus1149uruNDuaGCxdWcegODjNYnj7x1B4kjs9H0Sx/s7w7p/Ftbd3b++/v+fU8 nNdjL/wjC6M6a9o2kGziAHm27/Z7/wCZuWTtLtyMg849a898aeEW8LXtvJbXIvtI v4/PsL1RgSp6H0YdCK8urTdObg+h2wkpxUkZOg6vcaBr1jq1q2JrSZZV98HkfQjI /GvoHxbp9uvhzxL9jRVtY9Tt9RgCjACzwqGI9i2TXzbX01oF1Drf7P0l7KoN1HZr azP3IgkOzP0B/WojuNnkwRyMBeB3qv8AZnq2GB4GcetR/J/tV0Mg9ILiH4ctk436 HqaD/vsH+lfO9e/6rBczfD/SYbUbpri01CJV/vd8fU9q8ArCe5aCvRvD/wAZNc0P w5Foc9hp+q2kRxH9vjaQqvZeuCB2/KvOaKkZ6WPjFNCxltfBvha2uByk8djhkbsw 56g80mi3E97pxvruZ57q7kaWaVzlnYnGT+Vea10nhbVbr7daaSkfnLcTLFEo4IZm wMfia68FVhSqXmY14OcLI7U+1RSwxTKFljV1DAgEdCO9SSYEksQZWaKRo32sGwyn BH50gDYwRya97SS7o83VM5vx1DqWs+ILzxBIFka5KmQRKRtwoXp6cVb8LaJ9gt/t lwuLiUfKD1Rf8TXY6XYeY3mOBgfrV280tZPniGG9OxrkhhaVOrzo0niJSjysxN3f pmhnVI2ZmAVRkseg96WWF4mKsCD3qhqumT654X1WTSL2KW500q93ZLnzTDjlx6gH GQPf8eivWjShzMzp03UlZHCeIdYOrXvyH/R4srGPX1P412vgR08ZeENT8B3Tg3iB r7Rmc9JVHzxg+jD+prze3tbi7l8q2glmkxnZGhY/kKntbm/0PVYLuBpbS9tpBIjE bWRhyODXzk5ynJyluz1oxUVZFWWN4ZXilRkkRirKwwQR1Br3X4YXm/4GeKbZj/qJ 2I9gyp/UGvPfiZLDfazpesx20cE2raXDe3SxDCmZiyswHbO2uo+F84/4Vh46hJ4X 7M3/AH0zD+lStyjF81RjBHSoPO/2h+VOEa571B5X1roMz0vQ7yaHSIJnYtFpeowz jP8ACjkhx9Mqv5mvHvHWiDw5441jS1XbFDcsYh/0zb5k/wDHSK9y8E2kWqWGt6OS POu7QGEHuyHI/UivO/jFa/apPD3iJQf9PsBBOf8AptCdrZ/MflWU9ykeYUUUVmUF dt8J7Nbj4gWd3KuYNNjlv5T6CJCwP/fW2uJr03wJb/2R8LvG3iVxhpoF0u3PqZCN +PwZfyoA4G31e8tb6S6jlO+Ryzg8hsnPIr0Dw3qUGvNsRSk68uh5AHrn0rzOGGSe ZIolLO5woHc16p4dsE0KyEQw0j4aVx1J9M+gr0svdVtpfCceL5FHzO0hiWGJUQcC pM8VStrsOoyc1YllWOMtke3Nei07nnlDWBEbV1LbJCvDgcr71zvgKw03wdqF54s1 3WpY/sLbYbS2UNJebwQQQ3GPUfjkYGbV/cmeVvm+UH8zVJ40mUxyKGQjBVh1qK+G VaNm9Ub0KrpnR2k+jaT8MvGHjPwq1xp39oSxwQREhZbVxINyqwP3SHBx2HHauQsP G+neKvDV7onjmQy3kcTPpmrmPdLHIBwjkDJUn+fPYjWjh01vh9feF3mns4Zb4X6z RxedghQpTbkHHGc5NYWg2/w50G+S/wBX1fUNZeBtyWMNgYlZh0Dl25HtxXiVaM6T tJHpQnGauil8R7N9Pl8MWcqlZYtBtvMU9VZmdsf+PVsfC+Qnwj44tweWtbZ/++ZD /jXLePPFr+NfFlzrLW/2aN1WOKHdu2IowMn17/jXa/AGK1v/ABTq+k3sYktrzTm3 oSRu2yIe31NZrRlmV8ykkY5qt+9/ur+dWZAiyyDBwGIX6VBx/cNdBmbVv4hutK1C C9sX2TwNuU9j7H2I4/Guy8YaXaeMfhLqmrafsRLe4/tJIieYJMYni+nVx65Feast dr8PdQsUs/EWkayX/si6095LgL1ULgFh7hWJ/wCA1E1dFI8KorrfHfgK/wDBGpRr K63Wm3I32d7H9yZev4HBHH5VyVYlBXrPxAA8LfCvwp4QHy3dyDqd6vcFs7Qf++iP +AVyXw18PJ4m8faZYTbTbiTzplYgb0T5ioz1zgD8a6XVoR4r8Z65rXiy7TSpoJVi tdLn4lk5ARAv90Dkt0JPvTiuZpCbsrmR4R0P7PCNSuF/eyD9yp7L6/jXVA44xk0p GwgdB2x6Up9a+mo0o0oKMTx6k3OXMxY5DF8yttxyc1u31rDB8NLjxN9ojvPNeFbJ LVySSzbXRhj73fj0rBvPC2r6vpfmi4tdK0l8+fqV7MEQL3VR1Y/T6ZrHbx5p/gbR 59D8Dz3F1LMwa41a6GAWAxmGI8J1+8ef0rzcbi2pclN7bnXh8Omuaa3L1zbXNs6R 3dvLbTNGsnkzDa6q3TcvUVEvSvM11S+GoNfG6le6dizyuxZnJ65J6/jXZ6P4lt9Q 2wzhYbn/AMdf6f4VthsbGp7s9GTVw7jrHVG0pO7iuG8XpGmt/IACYlLY9ef/AK1d bqGr2OmxF5ZkaXHEaHLE/wBK87vryS/vJLmX7znOPQdhWeYVY8nItysLB83N0K9e 1fBrw6+k6FrHj27Zo0gt5YLJc4EjYwWPqM4Ue+fSvHbGzm1HULaytk3z3EqxRr6s xwB+Zr6Q+Ilza+GPCWkeCbAjbFCjT7eCVXpn3Zst+FeTFXZ2s8rOVOdw9DUPmP6i pSUwSAfzqDcPRvzroIJzytbvgiJLnxDLaSjMVxY3UUg9VML0UUpbMaIfAss3jbwH rXhnWp5JbHSYRe2TqR5kTjI2hjn5cE8Y78EV5MwwxHoaKK5yxUd4pFeNmR1OVZTg g12WnfFXxbYxJDNfx6jAnSPUYVuP/HmG79aKKAOl0vUZNV09L2WKKJ5Cx2RAhV56 DJJ/Wn6jO9rp1zPHjfHGzLnpkUUV9NBv2SfkeRJLnt5nll3qF7fspu7uefYML5sh baPQZ6Cq1FFfMnrhRRRQAUUUUAehfBOygvfippQnXcIRJMo/2lQkH8Dz+FXvFd/c an4r1O6uX3SNcOvsApwAPYACiitKe4mY/aoaKK1JP//ZiQI+BBMBAgAoBQJSGnvg AhsDBQkJZlk2BgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRBj6/JpN7iGRE8R D/9KemwRcbhCG2fGMGmoTKC8ig1vcmabOVYg5z6FmeR2XY/HmBRYVCa70wxXeJWa QLPYE55MlA8vFvwnxfc3Z4Q+DPkDWbIdSZS+ioWMdO5omtMP4wD6gHCnBpBrmQaH yP0CLhsJFKfVZ0c+V0N+pTezgxwI2lB6zTggM6JOK4IvvOQ9QjAvhqlu8wbq3F93 10g6ON+W6Z2Bj5lKuczfAicHLTMHafc2g9zC0XMvV2o0gqTWHGl+/f8sfBu8D8W7 xUQbkatURa+/UCkU4fv1EJ/ILIfsPuJy2H8nq8awx6iDOMJxbifZXT3pTe8Jngmi n66+7rH4iaopvH+lJTfQXXWtLv3d7cny1SdU0Zg26TxEnYy7ZX9oAagxlGl6krLh yATOyYzFQ1SRkIJA4wb4g3BHDy9bvgI+Z0X5JwTicwue1pdj3WrpSXhDd7xjldba 2JYUeRYUSCD3qsPnCeBJw5sgi74PCVf+5fa6SWFeSTliRA7cfhMsMMGD+2jBeGia pVw5ILKoi/RztWyzdX6M2VPwZLgrt7Drp0lGbi7TnouOIUlUa7NkuDS9zgYoK1kP xpKOPZLa/m4B0hPxfcKJg80YkYgJhGeqVBh1jLiawPKHRlTDNCXx98iOSuO8GOym 0YdZQJuqoiJXug0CeR7kz5qQZtseP3C58vwg5DzozjgIDLkCDQRSGnsKARAAsl9R VFbiFepi0pV+/ye7YiQst77aUomCvhsXzJGxQAGLCqBs5zE/a1hIJpXXP+4VDZCW ku5YSkZZkyzjGdjgUAcqHZxLTJ9eOwJDrjsWfr79zNlrNALj8npIzRuqr0GGCBU0 ZttfbRSWaKIMfJMXlHJ7c/9y3DhDLpDbwieFp1B4r6AF0L1BFCMPt+MtzoJZZ7hy 7IlQXouWK/luSQOzi7K1h+MDs9vFMxsf0IvGWNcpig2hiD7J0SAS47Lf7M16e2/q ABVO4BnnyZpUOFOA/9AvLsq/A9178MFuKifuNzGhGACJylAGC25EwAvmbYL4oiIo Yj6yO2ggzPNSr0zzmWzSeVU8/uEOm7dRiU+sjMxUttYNQrKnbggqAd87Dd+g2tXT sEqB6RVKu6PqKT6syR9acdlMSXmNllgRQOclwshrm1aS2em8d0xFa/fF3F028uhc 3nQRkseLU1FZup3hM9850kypo3q5UgYEdZZzYfBbvNWYaHvkHvRzWYEGWS1klVlE 1X4a6/8KrLWcCLxfWikwjAgIEx5+WN6ZDcscmx62EGIhfuOj8WWxsK2h1D6Y/kc4 N3nOuyyotbAWm67mOKc+TeZmm8mGVnorbq0s1GpEuHDM4c4+QioDPdy/AANsJJn0 E+AJN3AQK/jNom9X6Nhc4V8oo7u8Dp+vUS+87hEAEQEAAYkCJQQYAQIADwUCUhp7 CgIbDAUJCWZZNgAKCRBj6/JpN7iGRKdhEACR2GhG4ZGYQ0nFCI2KaNm3Ys2KmpGr n2QvzT0jLEQxshCoYjJhLwuySEWUTyVxn+J3BnapR0/4YmUSSoQKgGw1WorIfn8n 2jkXduXs9Dxv1DZab3x1NVBuhCFQQ/RnFrR19up9shWkAfdzat245rANm8jxQhEb pMauMGTe8opLWV7di9j+LjY6Dc7Aqo6i25PjkbVy8CMBzXyVk3X4qflzKJpkdxLo VCzN43VxGWOaEKSY3cTC5qrMShgiRi7zhsil2h0w5oJt1D3B0hx4VWUipcf1mBUy H76m5Dy9pQYd4/5TeQsGFIUwGh37wz9zkFHpxinnCFt9FrFNbpH/H0liYZps76jN 6c9CM0EUw7waOtfeswCZGdLFKfCu1zlNfe2U16QxHOLE7v4cjKeE6zvh1xkC26Im vGON7PLFlrSkGdpTr+Zm/vjtRJNiTMCQ1S7zNhg20Ee/0jLYY85qFiqqyAKKaANR 4hvMWK0cQLI1xL73DCtnjObUc2bDG0hZVUCMkjIPCwVseh8p7acRzQnELh+FUHWU EjI1FpFO5Lan551byPMz23E+LQQvXlHrtfI/TQz2Y5hieps7Pxpc1o+5QPpNu+9+ 9tcQkdANJo0rhky387RTrdu6Oyh4Mib1YphkPCb2vnJpmjjOBkMgiBHVt77BhgD6 LmV01hrApV+zGg== =r/sW - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBAgAGBQJSH+8gAAoJEGPr8mk3uIZELucQAJOQDVHRr1NhX8vrNZXA6bPF RKA2wINgY0mMglvZmWwKCzMYhoimFr51GBn1alrUDsKzbXYoZ4YOoeCwWcv7+tIp lALq5HHVWwjgakjBTzL4QOMdDu9f8HuOehW+jU4BOqcaOwCidekC4zbg/zXZyqa8 /7lwySKoCYPYNzKc0dSH13RD0C5UUKHzncwkqDNdiLUAQtZZgQAzaTHi62IMZEnq 9cj7VWnMZqsYa9y+hZ6XQet5HqikmG+WuBHqIVG8KJBovnKGYI3Jo5wvsTuEGYrc 2wtXMwWQ1hRTJbglBPRCtO7BpXpaPjAfZIxTpGkXmiTJTRrtBm6OuOG5UV9iZC+p 2xMBsaVRl1BlupbBKKkrWxuAAYjldJ0Vu84nrsRLhDO29VNLd6VOKc9YjCb+zLdC oCPwtYl2XoK8KranPTn6LAbAooabAZp9rOyV+bdB4QmAlWML2UBQh+2Nmk4cznL6 D1/7/UhJhX2pscMdO+U1d9mlx9xijWYqQF1VcgiMMHxOdXRdFt2ZqULZrt8FUmDt giSWCP4ORr9K3nENHm4jDRStofXyLQCYcst3ooV22iQ56DY2r5fXFsHH54BeArwN 9Ctnwc51klErHYJKnLzl6OA28AQPqFd4V/FZ4/RxHcaVzn0HjXMD+yK4lmlU4g9N XQovGx13V5CAPdyzBHPr =o+bX -----END PGP SIGNATURE-----

6 5

Re: [tor-relays] A bit more evidence on circuit creation storms
by tor＠t-3.net 31 Aug '13

31 Aug '13

I added a second core to my server and it's still getting "Your computer is too slow..." error messages. Top shows cpu for the Tor process hanging around 60-75%, which is where it was before. Top's system total is hanging around "Cpu(s) 25.9%". That plus the VM manager's graph suggest that the server's not doing much with the second core. Also see a repeat of the odd log message with the 154.x net address someone else described with the huge hexidecimal string (40 hex chars, + sign, 40 more, on and on). On Friday 30/08/2013 at 4:09 pm, David Carlson wrote: > On 8/29/2013 11:09 PM, Andreas Krey wrote: >> >> On Thu, 29 Aug 2013 19:35:37 +0000, Gordon Morehouse wrote: >> ... >>> >>> Aug 29 18:19:14.000 [notice] Your network connection speed appears to >>> have changed. Resetting timeout to 60s after 18 timeouts and 172 >>> buildtimes. >> Random data point: I had these yesterday on a VPS-based relay. >> >>> >>> My main question: How do circuit creation requests on one's Tor relay >>> cause load on one's network infrastructure? Is it DNS requests? Is >>> it TCP connection state entries? It's not bandwidth, we observed that >>> above, and my router can handle far faster pipes than the one it's on >>> currently. The DNS failing is a sign that the router is under severe >>> stress. >> Possibly your uplink is full (supposing you're on some DSL), and is >> starting to build up ping time; then DNS requests to the outside can >> start to timeout. >> >> Andreas >> >> > > Over roughly the same time frame I received an incredibly high number > of > spam e-mails in one e-mail account that normally gets 20 or so a day > on > quiet days. Perhaps this is another example of mal-ware in action. > > David C > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

3 2

huge increase in relay traffic
by mick 31 Aug '13

31 Aug '13

I'm currently seeing more than a doubling of connections (from a mean of c. 2000 established connections to just over 5000) on my relay at 0xbaddad. The log is full of the (expected) messages: "Your computer is too slow to handle this many circuit creation requests!" I guess this is related to the massive jump in connected clients in the past few days and I assume that everyone else is seeing something similar. Mick --------------------------------------------------------------------- Mick Morgan gpg fingerprint: FC23 3338 F664 5E66 876B 72C0 0A1F E60B 5BAD D312 http://baldric.net ---------------------------------------------------------------------

6 5

jump in connections
by That Guy 31 Aug '13

31 Aug '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This new Guy has absolutely seen a huge increase in connections but don't have much history to go by but it seems to have doubled several times in a very short span. interested to sit back & hope to see some of the guru's weigh in. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBAgAGBQJSIS08AAoJEGPr8mk3uIZE3GoQAMMuCT8cByDEKRiOG3sHjUEj iBEJRGjTEsrJ5OehbJvs52muRyyAev7Nn6OQ3e4PsuN0GEiHo1OfsX5Yp16wXSAE VaYCRQ5jb64RQeUlbY4Jci9JJdjsb93FdKbTRnVpR0Ies7eAjpLBxVtk0ihCbtTR inwjHBuDJ+qE1KGsDUUEQYRpeDro6rHbdLqCz5VQllDIJuFVp8EJz+Kdny0H0XLa uU5Tn2aN+PE+DeeOkW+5SXkQHtx8XjMnSw3WtHw/DPrJ6k5Pwlk727Q05iRaK1GG FSPkxvlAjTHzFNJUrz84knE0ChnPuManAZQwec11eJRSi8GXSyAXOZaUsKPxzj26 +AfVH2w/mj238sHZuzYCWhqxHVH4QA/5BbjbeFGnGMTpX9Le+ILg+tC8PvQmNwyX u3czCmLxbMc+WRkNLk6R7MabK+MfSXoquCEc0RlsV+OTwk9vXRefa0mrRj+hjkTe 5F3PAAPLsPKCJPyKHNDcdMCnWgp0uwZDNQ0na1+TfyHoezOuTHktJmdTqVz2tg15 9InOBODLrx29iMW/CfLQhbhxMbnJS7hjTWAyoUV6kGEEYTThaOQXkIIRMSpA8Vzl PcUk1X6CM0WLaRLN4uEKhMSbEUVxG9qz98wdNQ8+a0tVxfMAGNvIWd+luMdnoGhH xEDEjmi4h9swFK5LFDeM =k2t/ -----END PGP SIGNATURE-----

1 0

legal issues past and present
by That Guy 30 Aug '13

30 Aug '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > I run an exit node off of a residential Verizon connection and I > haven't seen a single threat, legal or otherwise so far, I dunno > why you're having so much trouble. Thank you for the reply but I have not either. My comments come from reading many such issues on the mailing list and the many many experiences documented on the Good/bad ISP lists on the torproject websites. I've had zero trouble with the sigle relay I'm running but as I also try to encourage others to run relays I was curious as I don't want to put OTHERS in a bad situation. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBAgAGBQJSILw8AAoJEGPr8mk3uIZEYiwQAJ9ARuz2DYx+sjDcri5s79et cOZBK1q+p63gmcv8rnaam3ROq3syzfU4ICW5FhOPwuEcVtmPXjcOFWFQsupK+9Db oUEIndKSLHz0JnAg6kKj7Wsd8EYAnYIiflMVJUfo+noVARMdvidTGdx14epjErhs H22FXkgQu+B5ac2yzC7bEaIZ27UXKt4X1BGFCvC5wXRAb0Kx6JR7RteLD7RWBYAs fxlOHwVopft4iG49y5L4gnjjqtrQUSwBJHyB4OcYyLQ/83mMtlziFaAnYAHB23iA T3NFr4wuohzH9cX0vKhg67JwyTk7vC8ALHtZJVs/mMA2Aa2Wq8Bb5ZdiKRJuNoPV QPWkXQSvL42iE7Xhww5Yasz2A/gWQE5GYzBTIGf3Wr2UBS0dxeXJLXUyxaeMtygM sFXWb3KMkw5wijpFzVHc4wBmqSlLFOzf1he9+FVFvO/9OFZ1Lh5IX+LXs8xZmOC+ CV2r9BqufCNWP8F4Ounbc8ogCHAI5I8SiVHjWMqDwn9qw/oX31rVFUPyLGXXw2yp kxANmPcHFO/WKz1IEQM3gNum89mp2eEEOVAIEZ0RsvzSBctp1BJXseazBKZFwsf7 LegCIe+P/AqUk5XiMi5VWhJXnvFE1a6i0lrAufW8KfRwa069VlioT8kJ+UYmhTtR l+tpY0bjM+NVyFzBD3Qh =PyZa -----END PGP SIGNATURE-----

4 3

Re: [tor-relays] huge increase in relay traffic
by tor＠t-3.net 30 Aug '13

30 Aug '13

Our relay is a few weeks old and I think it is still in the process of ramping up its utilization to its configured max. Because of that, I find it hard to judge what may be excessive on it. The last log on our server had it at 13,110 circuits open. Yesterday it hit 10,000 once but seemed to be more hanging around 8,000. The server's CPU is around 75% utilization. I don't see any error messages in the logs indicating inability to accommodate circuit requests. Traffic is higher today than yesterday but looking at it in the context of the past week and the steady increase, it's not way out of line. Only odd thing I saw this in the logs was this. I've put in XXXXXXXX to cover the IP address, as I don't know what the log is about. "Aug 30 12:07:02.000 [warn] Received http status code 504 ("Gateway Time-out") from server 'XXX.XXX.XXX.XXX:80' while fetching " And then there is a very long string designating a path which starts with "/tor/server" and then has a whole bunch of 40-digit hexadecimal numbers separated with + signs, and then the whole thing ends with a single ".z". Then the line says "I'll try again soon." . . . On Friday 30/08/2013 at 12:38 pm, Stracci wrote: > I can also confirm that I'm seeing that message on all 4 of my exit's > too. (as well as nearly double the amount of connections). > > -Stracci > > ----- Original Message ----- > From: "mick" <mbm(a)rlogin.net> > To: tor-relays(a)lists.torproject.org > Sent: Friday, August 30, 2013 9:27:12 AM > Subject: [tor-relays] huge increase in relay traffic > > I'm currently seeing more than a doubling of connections (from a mean > of > c. 2000 established connections to just over 5000) on my relay at > 0xbaddad. The log is full of the (expected) messages: > "Your computer is too slow to handle this many circuit creation > requests!" > > I guess this is related to the massive jump in connected clients > in the past few days and I assume that everyone else is seeing > something similar. > > Mick > > --------------------------------------------------------------------- > > Mick Morgan > gpg fingerprint: FC23 3338 F664 5E66 876B 72C0 0A1F E60B 5BAD D312 > http://baldric.net > > --------------------------------------------------------------------- > > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

Re: [tor-relays] huge increase in relay traffic
by tor＠t-3.net 30 Aug '13

30 Aug '13

Right after I finished sending my first reply to this thread, messages about too many circuit requests became visible in the logs. We'll see if adding cores helps ... On Friday 30/08/2013 at 12:38 pm, Stracci wrote: > I can also confirm that I'm seeing that message on all 4 of my exit's > too. (as well as nearly double the amount of connections). > > -Stracci > > ----- Original Message ----- > From: "mick" <mbm(a)rlogin.net> > To: tor-relays(a)lists.torproject.org > Sent: Friday, August 30, 2013 9:27:12 AM > Subject: [tor-relays] huge increase in relay traffic > > I'm currently seeing more than a doubling of connections (from a mean > of > c. 2000 established connections to just over 5000) on my relay at > 0xbaddad. The log is full of the (expected) messages: > "Your computer is too slow to handle this many circuit creation > requests!" > > I guess this is related to the massive jump in connected clients > in the past few days and I assume that everyone else is seeing > something similar. > > Mick > > --------------------------------------------------------------------- > > Mick Morgan > gpg fingerprint: FC23 3338 F664 5E66 876B 72C0 0A1F E60B 5BAD D312 > http://baldric.net > > --------------------------------------------------------------------- > > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Rebooted Relay, Got a Warning
by Samuel Walker 30 Aug '13

30 Aug '13

I just rebooted my relay after reducing the RelayBandwidthRate and RelayBandwidthBurst parameters. Upon checking the log-file, I see the following messages: Aug 25 13:40:00.000 [notice] Bootstrapped 90%: Establishing a Tor circuit. Aug 25 13:40:05.000 [warn] Problem bootstrapping. Stuck at 90%: Establishing a Tor circuit. (Connection refused; CONNECTREFUSED; count 10; recommendation warn) Aug 25 13:40:05.000 [warn] 9 connections have failed: Aug 25 13:40:05.000 [warn] 9 connections died in state connect()ing with SSL state (No SSL object) Aug 25 13:40:05.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working. That's a new message to me, is there any reason to be concerned? It obviously eventually managed to establish a circuit, but it still has me slightly concerned. Many Thanks Samuel Walker PGP/GPG Key ID: B2AD23C1 (Full: 2E72E17CB2AD23C1) http://www.samuelwalker.me.uk/pgpgpg-key/

2 2

How to block IP address on exit node relay
by Piotrkowska 30 Aug '13

30 Aug '13

I am running an exit node under reduced exit policy on a VPS. My provider requested that I block a specific IP address due to spam issues. I'm guessing I should add a line in the torrc file. Can anyone tell me the exact line I have to add to the torrc file to block the address? Something like: "reject 12.34.567.89" ?

4 3

Tor exit notice
by Pascal 29 Aug '13

29 Aug '13

The Tor exit notice at https://gitweb.torproject.org/tor.git/blob_plain/HEAD:/contrib/tor-exit-not… contains the word "server" exactly once. It should probably be changed to "router" to match the rest of the document and avoid the common assumption that servers host data. -Pascal

2 1

tor-bridge life cycle
by Trigger Happy 28 Aug '13

28 Aug '13

Hi list, Greetings from Poland, i have a question about tor bridge life cycle. 1) I'm running a bridge 2) Someone from china gets bridge id 3) Bridge gets banned 4) what now ? do i receive an email about it , so i could change tor-bridge to tor-relay ? or change tor-bride ip ? Thanks in advance -- Trigger Happy jabber: triggerhappy(a)jabber.ccc.de otr: BD0E1860 569B3888 657BC5C1 517532A3 A83EA214

1 0

Hello List
by Kevin C. Krinke 28 Aug '13

28 Aug '13

Hi Everyone, I've just gone through most of the steps outlined in https://blog.torproject.org/running-exit-node over the last week, though I couldn't get the SWIP setup I did manage to get the reverse DNS configured for me by my ISP. It's taken me a while to decide to run a Tor Exit Node and part of the reason for hesitation is that I wanted to research it well and do it right. So, there's basically a few things: First, I'd like to say that my ISP is TekSavvy (Ontario, Canada); they are absolutely great and have been immensely helpful throughout this whole process. I would highly highly recommend their VDSL service to anyone in Ontario, Canada who's looking for an ISP that does all it can to protect the privacy of it's subscribers. Not to mention that they do offer unlimited bandwidth plans. Second, my Tor Exit Node is permanently located at tor-proxy-readme.onest8.ca (206.248.189.157). That's a static IP and I plan on running this service for as long as I possibly can. Pretty much the only reason I'd shut it down is if either A) TekSavvy changes their AUP and requests that I shut it down (highly unlikely) or B) I'm forced by legal means (again unlikely because I've followed the Tor guide and use the recommended Exit Policies). Third, and probably the most relevant part of this email for the list… I want to help more. What services (other than Tor) can I host? What else is needed in the general community? Thanks! My best, Kevin

4 6

Re: [tor-relays] new relays
by tor＠t-3.net 27 Aug '13

27 Aug '13

A mechanism which empowers detecting and stopping what you and I consider to be 'evil' could be harnessed and used to target non-evil things, and that's where the problem is. Let's pretend that tomorrow, Tor gained the ability to filter out evil images. Shortly thereafter, governments might start making demands upon the Tor designers to utilize the underlying technical components of that system according to their own designs and demands. Such a scenario could be dangerous for everyone, including the designers personally. What happens to them if/when they refuse a demand like that, or potentially do a Lavabit? What if the existence of such a function can be corrupted and used in a rogue sort of relay to track things it wasn't intended to? Not to mention, at the point where anyone becomes able to note or affect the content, the question of who is in control of and responsible for it comes into play. Assuming Tor could exist in such a state, you may personally choose to filter CP, but then your government or ISP demands that you also filter activists X, Y, and Z, and list of topics A. Your line at 'evil' would be forceably drawn by other people, just like it is on the public internet today. Btw our exit node blocks random unknown ports ('bittorrent') to aid the node's longevity. It wasn't a moral stand. On Tuesday 27/08/2013 at 12:09 pm, Jon Gardner wrote: > On Aug 22, 2013, at 11:56 AM, mick <mbm(a)rlogin.net> wrote: > >> >>> >>> The other thing that I am weighing is just a moral question regarding >>> misuse of the Tor network for despicable things like child porn. I >>> understand that of all the traffic it is a small percentage and that >>> ISPs essentially face the same dilemma, but I wonder if more can be >>> done to make Tor resistant to evil usage. >>> >> Tor is neutral. You and I may agree that certain usage is unwelcome, >> even abhorrent, but we cannot dictate how others may use an >> anonymising >> service we agree to provide. If you have a problem with that, you >> probably should not be running a tor node. > > Then why have exit policies? Exit nodes regularly block "unwelcome" > traffic like bittorrent, and there's only a slight functional > difference between that and using a filter in front of the node to > block things like porn (which, come to think of it, also tends to be a > bandwidth hog like bittorrent--so it doesn't have to be just a moral > question). If someone has a problem with exit nodes blocking things > like porn (or bittorrent, or...), then they probably should not be > using Tor. > > The very idea of Tor is based on moral convictions (e.g., that > personal privacy is a good thing, that human rights violations and > abuse of power are bad things, etc.). So Tor is most definitely not > neutral, nor can it be--because, if it is to exist and flourish, those > moral convictions must remain at its foundation. One cannot on the one > hand claim that human rights violations are "wrong" while on the other > hand claiming that pornography (especially child porn) is "right." If > one wants further proof that Tor has a moral component, one has only > to visit http://www.torproject.org, click the "About Tor" link, and > notice the discussion points. I doubt that anyone could convince the > Tor team to add "...for unfettered access to pornography..." as a > bullet point under "Why we need Tor." > > The Tor devs go to great lengths to try to keep "evil" governments > from using Tor against itself. Why not devote some effort toward > keeping "evil" traffic off of Tor? Given the fact that "we need more > relays" is the common mantra, it seems to me that if the Tor community > could come up with a technical answer to address at least some of the > most egregious abuses of Tor--things like child porn, or even porn in > general, that either have nothing to do with Tor's foundational > mission, or (like child porn) are antithetical to it--the result would > be greater public support for the technology, and a wider deployment > base. > > It's worth discussion. > > Jon > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Re: [tor-relays] Store key files in RAM
by tor＠t-3.net 27 Aug '13

27 Aug '13

If you can execute shell commands directly from the ram folder (ssh, sftp) and therefore pull files straight into it with sftp, this seems exactly right. It sounds like you'll only need the secure connection on an occasional/rare basis. Imo don't try for an always-on connection for that such as a vpn. Whichever way you do, you'll want to pay attention to where the important encryption keys reside. At least in general (and maybe even specifically), we know that encrypted data is being snatched off the wire and retained. In the case of sshd, you would want your sshd daemon keys to live on the machine with the more-secure storage medium and use the vserver as the client. For a vpn or similar you'd need to look at exactly how it works and decide if there is a right way and if so, what it is. Hopefully the only thing you feel there is a need to protect from is improper read access. If someone can write to your vserver as root, that would be a Very Bad Thing (TM). Sorry about the strange/disjointed line feeds in my first email btw, not sure why that happens. I'm trying short lines now, seeing if it works better. If you add linefeeds to what I wrote before where it makes sense, it may be easier to read. On Tuesday 27/08/2013 at 12:38 am, Tony Xue wrote: > > > Thanks for the instructions. > So what if I set up an L2TP VPN connection from my server to my > computer at home which stores the keys and I download the file > directly into the RAM folder? > > The purpose is to avoid storing the file or let the file passing > through the local normal storage system on my vserver which could be > extremely insecure in this situation. > > So will any of these techniques you have described or I stated above > let my data passing through the local ROM storage system of the > vserver? > > > >> >> >> Date: Tue, 27 Aug 2013 00:14:36 -0400 >> From: tor(a)t-3.net >> To: <tor-relays(a)lists.torproject.org> >> Subject: Re: [tor-relays] Store key files in RAM >> Message-ID: <521c27ac.570.f998d700.49849df(a)t-3.net> >> Content-Type: text/plain; charset="us-ascii"; Format="flowed" >> >> IMO cut and paste in the situation you're describing is not the >> perfect way. Better way would be: >> >> Have a secure linux machine running an sshd at your home (or another >> physically-controlled location?). >> Close off iptables and ip6tables for inbound sshd except for your >> vserver's IP >> (hint: "ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_4096_key -b 4096" >> (don't put a password when it asks)) >> and edit sshd_config to point it to the new key. Also in the config, >> force your local sshd >> server to insist upon only using these 2 ciphers ("Ciphers >> aes256-ctr,aes256-cbc"). >> Restart the local sshd (maybe "service sshd restart") and verify that >> you can NOT connect >> from the vserver to the home box using a different cipher (ssh -l >> someuser -c aes128-ctr your.home.ip.here). >> A test ssh connection without the "-c aes128-ctr" should work, the one >> with it should fail. >> >> You would do transfers of important files to and from the vserver via >> an 'sftp' session which you start >> from your vserver, and you are connecting into your home machine (sftp >> someuser(a)your.home.ip.here) >> Don't make the connection in the reverse direction, you can push and >> pull files with the one. And don't >> let anyone steal your ssh_host_rsa_4096_key off the home box. (could >> even shred/delete/regenerate it >> now and then). In general, turn off the home sshd when you aren't >> using it. >> >> The above setup should be pretty good in terms of the network transfer >> if the data hasn't already been >> compromised, of course. The certainty that it hasn't been is not >> necessarily guaranteed if it's already >> been thrown through a network card in a less-solid way, such as the >> contents having been viewed >> via 'cat', 'nano', etc. via a connection in the 'wrong' direction. >> >> If you are deleting files from your vserver's hard drive after copying >> them out for backup, try doing >> "shred" on the file first, and then "rm". It may help do the deletion >> better, depending upon how your vserver >> hosting is set up. >> >> >> >> >> >> On Monday 26/08/2013 at 10:53 pm, Tony Xue wrote: >>> >>> >>> >>> >>> >>> >>> Hi, >>> >>> I have been discovering simple and secure way of protecting the Tor >> > key files recently, in order to achieve the safety of the keys on >> VPS. >>> >> > So I created a folder on Linux called /tor and it is stored in the >> RAM >>> file system. I put my key file into that folder and link it back to >>> the data directory folder of Tor. I also backed up the key files in >> > case my server need to be restarted and the RAM would be cleaned up. >> I >>> left the key in RAM for some undesired failures, errors or >>> configuration which need to restart the Tor software. >>> >> > If the server gets down, I would probably do the simple cut and >> paste >> > in the SSH client to restore my key files. Or in a higher level way >> if >>> cut&paste is not safe enough. >>> >> > I am not sure whether this is a good way to protect my key files on >> a >>> VPS. Does anyone have any comment on that or a better way? >>> >>> >>> Tony >>> _______________________________________________ >>> tor-relays mailing list >>> tor-relays(a)lists.torproject.org >>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >>> >> > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >

1 0

Re: [tor-relays] What if my favorite online store websiteblacklists all Tor Relay IP addresses?
by tor＠t-3.net 27 Aug '13

27 Aug '13

Likely someone was doing credit card fraud/hacking type stuff and choosing Tor as the way to connect for it. That stuff is a pain in the ass for online stores when it happens. Not surprised that outfits handling online payments don't want Tor connections, and I can't blame them tbh. It shouldn't be hard to find a workaround if your purchases are infrequent and anonymity in that particular connection isn't an issue (cell phones have internet these days, 'net from a friend's house, whatever). Not sure where you live but, I read that these days, USA is photographing the fronts of all postal mail. So, mailed merchandise isn't exactly a win on privacy anyway. On Sunday 25/08/2013 at 4:23 pm, David Carlson wrote: > > > On 8/25/2013 2:41 PM, Dave Lahr wrote: > >> >> I'm in the same boat: for example yelp.com and TDBank North >> are blocking us. >> >> >> On Sun, Aug 25, 2013 at 2:30 PM, David Carlson >> <david.carlson.417(a)gmail.com> wrote: >> >>> It seems that at least two 'normal' online store websites >>> that I visit >>> from time to time have apparently decided to block my IP >>> address which I >>> am also using for a non-exit Tor relay. I have had extended >>> discussions >>> with one of them and they considered unblocking my IP >>> address to be a >>> risk greater than the lost income (US $160/year revenue) was >>> worth. >>> They suggested switching to a different IP address, which >>> was like >>> pulling hens' teeth from my ISP. To do that, I had to have >>> a technician >>> visit my house and install a new modem because they do not >>> have a person >>> who understands tech talk available for ordinary users, and >>> I couldn't >>> get sufficiently elevated in their support hierarchy. The >>> supposedly >>> dynamic IP address that I get from them hardly ever changes, >>> probably >>> because I am buying U-verse television service from them. >>> Now, after a couple of months, the "new" IP address is also >>> blocked. >>> >>> My question is this. What if it becomes common practice for >>> commercial >>> entities such as online stores to block all IP addresses >>> that they find >>> on lists of Tor relays such as <https://www.dan.me.uk/tornodes> >>> or the >>> official Tor metrics data? >>> That list is updated every half hour, includes all nodes, >>> and is not >>> limited to exit nodes. It currently lists 4438 nodes. That >>> is a >>> manageable size for a blacklist, but it could represent tens >>> or hundreds >>> of thousands of clients. >>> >>> Wouldn't this eventually either cripple the Tor network or >>> generally >>> discourage Tor clients that can no longer buy products >>> online from store >>> XYZ through the Tor network? >>> >>> David C >>> _______________________________________________ >>> tor-relays mailing list >>> tor-relays(a)lists.torproject.org >>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >>> >> >> >> >> _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays In the short term, it is possible to to circumvent these practices by using one or more of several different methods, but informing the online store that they are shooting themselves in the foot is not one of them. After all, they are experts and we are just ignoramuses, even if we know what an IP address is. > Also, client tactics like going to a public hotspot is either not an > option for someone who wants the Tor anonymity, or problematic at > best if all or nearly all Tor node IP addresses are blocked at the > vendor end. > > That is why I asked the general question. > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >

5 4

efficiency and reachability
by That Guy 27 Aug '13

27 Aug '13

Please excuse any poor wording, networking is not my strong suit;) i understand my ??'s are basic but it wont take me long & I'll be sharing any knowledge I gain here. 1) have 4 extra unused devices, 2 android & 2 older laptops running Xubuntu & Lubuntu that can run full time & my 2 primary machines(android tab and Debian laptop). With only so much bandwidth, what helps best in that situation? a. fewer(1-2) devices offering more BW each, or b. more(4-7) devices each offering less BW to the network. 2) Reachability: The only way I was able to any of the relays I tried to setup to be reachable from the outside was to log into my router(D-link dir-615) & put the device in the DMZ. I don't know how to solve the issue the right way(Port-Forwarding?, etc.) or other means. I'm not worried about my extra devices as I don't use them, but, **I don't know what the security implications are to *users of a relay or bridge sitting in such a vulnerable place & to my network & the box's I do care about. Currently just left one non-exit relay in the DMZ until I can find better solution. Running great. Sorry so long & for anyone who replied to my last post, I had set up a new email and created a new keypair & not paying attention included the wrong key info. thank you all. grep(a)gmx.us -- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.10 (GNU/Linux) mQINBFIaewoBEADTG92hLWpKPhcScBe8VPqSFd+pKWgJ2318AQW1SVJlAbcEOmj7 /lwIKL5lq+cduNMfsFcVreHqGdGLRKuBEyJU0JJsjP07/qO9Iq9mZqBz8VMrtq1R 7GKabb+G+f2uDob1PQvpJmFrttMLzTQeVG0hNrzziIYACj//VZRaheiv/rh8ZBfC 3T5UgMo+Z8ClYvBrThJBLjrchMuKxu14hptcSiCTGWKK4wl7TPvFVvu1mNxIU2iJ Xp9KT+plp1OFbelRzFFH1LHqoaWcpm6ABjtS/FF1XzDFfOf4zf8WScbGm4jU5rXQ ONO90U6fTCuVjbd7Vq0P4XX4wRdpC1NKGMudpqEPAh+0dYT494EmG/yRDSyUKlrR 7MSW1oz1C14sUb4A82ypfC0yRkcrj8cS7RRSGhVIhrrSPECL+Wdt3gKOMu9EnwHW ls+WOJm5eVVG0SbV0TLgnZ723FdlFFZsZSKEVduxbq9wLZu3aCm8nh9UY+STYM5T whAJL4+v5b9zJWtY+YMcH//YWLmxgQjLrMLOKUERRfRJUsC73DRiCvbnVSMelkZk ZnLfFPkq2C1XcAi8zk5oBI0O+iIcNn/1EK9u49ngz/V1NQXj0qHYTN4EsECCihXz r3bB1KyHZmu7yoRsN5m1UPmEXiCm2amuRLMcDKff1SA20rApCbgBvWSOjQARAQAB tCdreWxlIGJ5cm5lcyAoUHJpbWFyeSBrZXkpIDxncmVwQGdteC51cz6JAj4EEwEC ACgFAlIaewoCGwMFCQlmWTYGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJEGPr 8mk3uIZEsMkQAJE+TZDoHmbFx+YHrjPg7EKba5+8jtqyH7sVHETEAHZaU6U2nVAd 135lN3+g0Dgn6y/8OlncJbioleXpWyWLzpYjMBv9mPPHj+2G0jj8Lg7wk1JzN0YN frq7wNEVFJB4Ryh1OUdfU89fY9PHPPl8WuE2E82XrqF6vY5R727ji97ojODi0g6s O5ygMbwccnNIhCSnuf/vZDvc/DVsPUytlkJdk7vaAXTFpYQk++UqG8mXKtWz43PZ p9SFy6gIZ0D4DZi0xxUg79fiKvy2tNDv8nAwXBWPGZicpmTxLJ2eRoYNpIlNgnZ6 Uk0txvS3414A0MZ0x4AC/WXilx6ykNxo9Fz8rS/8LMYfQXjdivg84LevuZkFa+BY nha0Fq1HwJpwbarmyu/BcKEXEBM8RPF0Rjm3ZymXJzkQto57kkzKKeud2Ob8WhDd 6qGv5bmU78KoR3NHgQc8bV+qYSY6ng5O4BcEUwtZjy3y8vTihJkyQ3W+U9dcBm6H kbTl4dL4kvRMJsGimT6iL80YL4tQltvEWuw14I6h7Hiq4YZMky30LI3mC/D+kcK3 5/eTVF9330snVg7yxEhc5CR/oBJoIRYNz1d26wYwm2AA1yqCizWRBYoMnr+M1nyE h/4v3m2v112FRXCpe74MzaSmY3W0jFW7t+l6D0uWUMb8vKNIeAR4v1q1iQEcBBAB AgAGBQJSGnwqAAoJEL/qyBxVCbTi9EgH/RoqiM5LPuZAqHkCx4o/h3Bu1txbTpzq OsXFvyEr8YOybUznu03Z103p7VeO1aHl87IhmEzPVLWLaM9mrk+QH6D0PHecHkti +Xz6RnHHWXZNFPli0ceW/Jx6xFyQCQRSfdsfkk5xRazEeBci4Tu2QWKohfKaVMSt 0oe/C76/WxrRHuwUMgPnfzF+2GnhyGdp/nICsyuENsk1CdSeqfuGqf/onNVdbcNK Nj8/UPdbndvsttqDhWSWn3PtoOhmpQMMEOoYw8FMeXsasNEx2v0NDDb6VboLcng4 UC2Cz5xZSa3nAgoXGhDMEUA8T1nWZT6ownk86EJxL+b1h18+BcXKVUnR1zXXMwEQ AAEBAAAAAAAAAAAAAAAA/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAgGBgcGBQgH BwcJCQgKDBQNDAsLDBkSEw8UHRofHh0aHBwgJC4nICIsIxwcKDcpLDAxNDQ0Hyc5 PTgyPC4zNDL/2wBDAQkJCQwLDBgNDRgyIRwhMjIyMjIyMjIyMjIyMjIyMjIyMjIy MjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjL/wAARCACEAIkDASIAAhEBAxEB /8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUF BAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcY GRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqD hIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW 19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQAAAAAAAAEC AwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMi MoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElK U1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaan qKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6 /9oADAMBAAIRAxEAPwDg8jB6d6cfLyc4qH7JIwzuIppt2HVq6jMn3IDytN8wEFVG OajFsx/iNPFqwGS1ACkr35OKMqBhhzT/ALO3HzfpTksZpnCRKzseAqrkmkBEGXP3 celHyDr16V22l/DO9fT/AO0daluLC3/giitHnnk/7ZqMj8axtZbwzoOTLoHi+fb/ AB3MK2kbfiVJqXNIdmc/5at1zyfWgxRD1qeH4li3dbXw54U063uJmEay3Ra7lJPA A3YUH8K9C+Jmt+IPDc/hbStL07TTqt7b5ulisI5BLN8oKqCDgZz09an2iHynl7iN cgctn/CpYR/eHboK98v/AAZ4c/4RyDU/GcWn2V6kS/a7m0Jt4wx7Yzg+me/6V5v4 28MW2kS217otsraLKn7q9huTOsp9z0U+36+lKaYmrHIEgcbTmmlgGI6kkYpz7um4 UkaY+bPPU5qxBjaCSDnPApV2kknJ/Go3ZicBu/anBGA64HrQBISD0FRbl/2v1qVF IBwah2f5xSYGjvyAPaoGPzVaMQKBuhA/pVJ+DTAsxHNWLe3mu7hLe3iaWWRgqIgy WPoKqQnkV1cV7cfDG3HiHVIEW7nhdNPs3b55GIHzsB91QOvfkDvUydkCRe1xdH+F +gC61eK31HxJdJ/oti/zRw/7bjuB+p4Hc15rJ8YvG5P+j6pFaJ2S2tIkA/8AHc1y etazf+INWuNT1O4a4u523O7foAOwHQCqFYNt7mljth8XfHoOf+Ekuf8Av3H/APE1 Yj+NHj+MYOu+YPSS1hOf/Ha4GnxRSTzJDEjSSOwVEUZLE9ABSA918DT+L9f1nT9X 1rw/pL6Jta6l1BtMh3bEBPysozuyPrXoXib4i6X4a8J6N4pv9I83Ub6NRbwEBJVD Dc3zEEqBx+YrR0HRdZ8M+D9Ls7SRHktdPSD7MUyv2h2XdIx6lVy3APIz7V5L+0pL Kdb0GFjmNbaRh6biwB/kKAMDx/8AFHSfHlkUuNH1KGeNP9GAvx5Mb/3igT5j25P0 xXMeDfHN94UuHgdftujXPy3enynKSL3I/ut6EVp+F/g94s8V6Ump2cNtb2cozFJd S7fMHTIABOPrio9U+EPi/TbKW9js4L+1hLCSWxnWXaVOGGPvcYOeOMUAdT4i8PW9 pa2mu6NI13oN8N1vN/FGe8b+jAgj8K58gEHK4FX/AIOeKo4NUfwdqyfaNG1lvLCM f9VMeFYemeB9cHtWr4w8J3nhTV2t5WZ7VyWt5yOHX0PuO4raEr6Mho5pQMfKvGc5 zTs5JwnQdaUNjADcYo5J5fArQQhcBcBc1U84/wB2rZBIADcetQeV/t0gNxZYFkQT BmjyNyo20kexwf5VoHUfCMXXQNQmYf39QA/klYrHCLkZ98V3dh4P03T0HijxGUt/ D8NlBchc58+RkGVx1+9njvkDpSk0txnSaRqfh3w/8PZvEWp+HobKxVswRuwnlmzw Nu8Dqeg9ielcT4h134XfFLUIrjUNT1PRdSCCJJZ1/dkZOAeWUDk91rz34i/EW98d 6mgCfZdJtci0tB0UdNzY6tj8AOB78TWDdyz2y/8A2drv7GbzSPE1hdW5TzFedDGp XrncpYY968s8R+FdX8K3kdvqtt5fmrvhlRg8cy/3kYcEV0nw4+JWpeDL5bWXfe6J McXFm3zYB6sgPQ+3Q9/Uafxev9fuZbBJ5baXwy4M2kPaW4jiCEY2+oZRwVJpAeX1 9F/ATwBZJpMfi+/iWa7mdlswwyIlUlS/+8SCPYD3r50r2r4VfE+/sdK07wpb20c1 zHeZgV2C+fCxYvECcBXydyknB6emQD3vxN4p0nwlpL6jq90sMQB2J1eVv7qjuf8A Jr5Y1CbV/it4pvtbvp0sdLtRmW5mJ8qzhz8qj+8x7AcsTXSfHXR9Wu/iZYJveWLU Yoo7GMnhGyFZPruOT/vVhfE68t9Ea18CaO2NP0oBrt14NzdEZZ29cZwB25FAFq++ L1/pGhW3hrwc8tnplopRbu4Aa4lySSfRASTgDketZ+i614w8EaZZeMbTUle11W5l WSCVy4mdT8xkU+vPzA5+lcBXremR+EvFvwu0Pw9d+KINJ1nT5Z5FFzGwiO9ycMxA HTbyDxQBjPbR65r0Xi7whp7tJbTJeXukRnL27qwYsgHLRkjqBlc4IAxXsHh/X38X 6JZS+J5be60nxBcSwQRiMK2n3Cs2yLcOuVHDEZzxyGri9G+EeteEv+KstfFukxpY I1ws0BaRHUDJUngEEcfjWt4X1/TrDxraNJaxN4W8WMl5bJKgZLS+BwwGeAQ4x+Kn tQBxuu2CaNrt9pyv5n2aZog+MZANZ25SeRXQfEPTpLTx7q4lO3zJzKuR1VuQf1rm FgJPDV0rVGZZ3oB07dKr5X+6v50vkYPL1X8o/wB6gDdtklu7mC1gG6WZ1jRT3YnA rc+P+statong+3kP2aytlmlA6M2NiZ+gUn/gVbmm2VtYeEPCOvwWayagmq+TtXgz Au5AJ9RtGD71558crqC6+KWoeRMsoiiiifb/AAsFGV/Cspu5SOJ0PRL/AMR6zbaT pkPnXlwxEaFgo4BJJJ6AAE/hXf33h7wb8OpBB4hkfxFrygF9PtZDFbwH0kf7xPsP xFY/w0uJdIv9Z8RxD95pGmSyxMRkCV8RJ+rk/hV7QNG8OePLy4sbKz1qDW5LaW4N xPdpLB5iqWJc7AwUnjOepFZlFy1+OGraURHovh7w/p9sOkUVq2ce5DDNd54d+Jmh fFW3bwj4s0yO1uLriCSJvkaTttJ5R/Trnp3wfnIjBxUtrcy2d3DdQOUmhdZEYdQw OQfzoA6/x/8ADjVPA2oOH/0rTWfbFeRjj2Vx/C3t37VjeEPECeFvFNjrT2KXwtHL iB32gnBAOcHBBOenavUIPFWm+I9F8f6tZaC+nwz6cGvHe7aVZLh3AQhMBQc7jnr9 K8UoA9YsfiLe+Ovi34ZutYFvbWVrej7PCoGItxHVjySSq8n8hXBeL4b+DxjrC6pC 8N613I8qP1yzE/iOeD6ViglWDKSCOQR2r1XULyL4q+DYGWLf400hArqv37+3HUj+ 869SOvXHXgA8popzo0bsjqVdTgqwwQabQA4SOEKB2CnqueDXqfgy5Oq/BjxhpDt+ 8014tRtm7ocjdj0+5/49XlVdz4Oku9L8GeMNRkgdbC5sBYrKeFaZpEwo9SF3HjoB QB6xrEK/ET4baZ4us1EmpWkPlXyL1bb9/j2PzD2avMicDlQKt/BfxJf6frl7odrd mJtSt2+yq4zH9pX5k3D0IBU49fpWh4jsrO6gsvEWloYtN1VWbyev2eZTiSL6A9PY 1rTl0Ja6mHkAA7R61B5g/ufoaeAueWyOlR5T/np+laMk9e8OzpHoPhLzV3W9ob/U JB/1yBK/qa+bby7mv764vLhy888jSyMe7Mck/ma+hrE+X8PTJ/FHoGrMPruUV85V hLctHo/we1mytNdv9H1PTY76w1O2bzlfoohVpRkdx8v8qzta+JepahZz6fpWn6do OnzjbLDptuI2lX0d+pH5A034Wappel+OIDrDCOzuoZbRpicCIyKV3H25x7ZzWP4p 8Kap4R1iWw1K3dQGPlTAfJMnZlPQgj8qkZh1Na2s99dxWtrC81xM4SONBlmY8AAV Eqs7BVBLE4AA5Jr2zwxo9v8ADXT1vLiOKfxldRbooZBuXTY2HDOP75Hb8OBkmoQl N8sdxNqKuzI8Y2qeCfBFh4BtCJ9b1CZLzVfJ+Yhv+WcQx15wce2f4qdafDTSvDnh ObxJ4qe51FoJBFLpulyKfIf+7NJzt7Zx0yOtLowOkeIJvEDt9v1ZxIRcXZ3bZGGN 4A6EHp1xWN4G1y+8IeNEt9UUzaZqj/Zr+KT5kmRzjcc9SM59eo71tVw1SkryWhEK sJ6I0fCmteE9e8XaZoi+AtOhtbydYS73U0kig98lhz+FX9dk+HGi+LbvTpdF1/QL 2xuWSO8sLnf0PyuA5yARg8eta+kfDSx0v4xQtoGt2c8GmXazXNlOzJPAnXAyMOBk cg+mazNX+KE8nj7Ura68P6L4gSC9lisZp7dfMRVchcOByo9x+NYJNuyNDa1aDwzr VqJ9X+xeIHDiJ7uzBsdSjP8A01iPyuR6nH0rCuPh18PWjMyeKNWsExkpcWfnFfqU GKUeZLc3V7clGvLyVp7h1GAXY5OB6DoKcCQevHevXhlsXD3nqcEsW+b3VoZyeFPh VZus1149uruNDuaGCxdWcegODjNYnj7x1B4kjs9H0Sx/s7w7p/Ftbd3b++/v+fU8 nNdjL/wjC6M6a9o2kGziAHm27/Z7/wCZuWTtLtyMg849a898aeEW8LXtvJbXIvtI v4/PsL1RgSp6H0YdCK8urTdObg+h2wkpxUkZOg6vcaBr1jq1q2JrSZZV98HkfQjI /GvoHxbp9uvhzxL9jRVtY9Tt9RgCjACzwqGI9i2TXzbX01oF1Drf7P0l7KoN1HZr azP3IgkOzP0B/WojuNnkwRyMBeB3qv8AZnq2GB4GcetR/J/tV0Mg9ILiH4ctk436 HqaD/vsH+lfO9e/6rBczfD/SYbUbpri01CJV/vd8fU9q8ArCe5aCvRvD/wAZNc0P w5Foc9hp+q2kRxH9vjaQqvZeuCB2/KvOaKkZ6WPjFNCxltfBvha2uByk8djhkbsw 56g80mi3E97pxvruZ57q7kaWaVzlnYnGT+Vea10nhbVbr7daaSkfnLcTLFEo4IZm wMfia68FVhSqXmY14OcLI7U+1RSwxTKFljV1DAgEdCO9SSYEksQZWaKRo32sGwyn BH50gDYwRya97SS7o83VM5vx1DqWs+ILzxBIFka5KmQRKRtwoXp6cVb8LaJ9gt/t lwuLiUfKD1Rf8TXY6XYeY3mOBgfrV280tZPniGG9OxrkhhaVOrzo0niJSjysxN3f pmhnVI2ZmAVRkseg96WWF4mKsCD3qhqumT654X1WTSL2KW500q93ZLnzTDjlx6gH GQPf8eivWjShzMzp03UlZHCeIdYOrXvyH/R4srGPX1P412vgR08ZeENT8B3Tg3iB r7Rmc9JVHzxg+jD+prze3tbi7l8q2glmkxnZGhY/kKntbm/0PVYLuBpbS9tpBIjE bWRhyODXzk5ynJyluz1oxUVZFWWN4ZXilRkkRirKwwQR1Br3X4YXm/4GeKbZj/qJ 2I9gyp/UGvPfiZLDfazpesx20cE2raXDe3SxDCmZiyswHbO2uo+F84/4Vh46hJ4X 7M3/AH0zD+lStyjF81RjBHSoPO/2h+VOEa571B5X1roMz0vQ7yaHSIJnYtFpeowz jP8ACjkhx9Mqv5mvHvHWiDw5441jS1XbFDcsYh/0zb5k/wDHSK9y8E2kWqWGt6OS POu7QGEHuyHI/UivO/jFa/apPD3iJQf9PsBBOf8AptCdrZ/MflWU9ykeYUUUVmUF dt8J7Nbj4gWd3KuYNNjlv5T6CJCwP/fW2uJr03wJb/2R8LvG3iVxhpoF0u3PqZCN +PwZfyoA4G31e8tb6S6jlO+Ryzg8hsnPIr0Dw3qUGvNsRSk68uh5AHrn0rzOGGSe ZIolLO5woHc16p4dsE0KyEQw0j4aVx1J9M+gr0svdVtpfCceL5FHzO0hiWGJUQcC pM8VStrsOoyc1YllWOMtke3Nei07nnlDWBEbV1LbJCvDgcr71zvgKw03wdqF54s1 3WpY/sLbYbS2UNJebwQQQ3GPUfjkYGbV/cmeVvm+UH8zVJ40mUxyKGQjBVh1qK+G VaNm9Ub0KrpnR2k+jaT8MvGHjPwq1xp39oSxwQREhZbVxINyqwP3SHBx2HHauQsP G+neKvDV7onjmQy3kcTPpmrmPdLHIBwjkDJUn+fPYjWjh01vh9feF3mns4Zb4X6z RxedghQpTbkHHGc5NYWg2/w50G+S/wBX1fUNZeBtyWMNgYlZh0Dl25HtxXiVaM6T tJHpQnGauil8R7N9Pl8MWcqlZYtBtvMU9VZmdsf+PVsfC+Qnwj44tweWtbZ/++ZD /jXLePPFr+NfFlzrLW/2aN1WOKHdu2IowMn17/jXa/AGK1v/ABTq+k3sYktrzTm3 oSRu2yIe31NZrRlmV8ykkY5qt+9/ur+dWZAiyyDBwGIX6VBx/cNdBmbVv4hutK1C C9sX2TwNuU9j7H2I4/Guy8YaXaeMfhLqmrafsRLe4/tJIieYJMYni+nVx65Feast dr8PdQsUs/EWkayX/si6095LgL1ULgFh7hWJ/wCA1E1dFI8KorrfHfgK/wDBGpRr K63Wm3I32d7H9yZev4HBHH5VyVYlBXrPxAA8LfCvwp4QHy3dyDqd6vcFs7Qf++iP +AVyXw18PJ4m8faZYTbTbiTzplYgb0T5ioz1zgD8a6XVoR4r8Z65rXiy7TSpoJVi tdLn4lk5ARAv90Dkt0JPvTiuZpCbsrmR4R0P7PCNSuF/eyD9yp7L6/jXVA44xk0p GwgdB2x6Up9a+mo0o0oKMTx6k3OXMxY5DF8yttxyc1u31rDB8NLjxN9ojvPNeFbJ LVySSzbXRhj73fj0rBvPC2r6vpfmi4tdK0l8+fqV7MEQL3VR1Y/T6ZrHbx5p/gbR 59D8Dz3F1LMwa41a6GAWAxmGI8J1+8ef0rzcbi2pclN7bnXh8Omuaa3L1zbXNs6R 3dvLbTNGsnkzDa6q3TcvUVEvSvM11S+GoNfG6le6dizyuxZnJ65J6/jXZ6P4lt9Q 2wzhYbn/AMdf6f4VthsbGp7s9GTVw7jrHVG0pO7iuG8XpGmt/IACYlLY9ef/AK1d bqGr2OmxF5ZkaXHEaHLE/wBK87vryS/vJLmX7znOPQdhWeYVY8nItysLB83N0K9e 1fBrw6+k6FrHj27Zo0gt5YLJc4EjYwWPqM4Ue+fSvHbGzm1HULaytk3z3EqxRr6s xwB+Zr6Q+Ilza+GPCWkeCbAjbFCjT7eCVXpn3Zst+FeTFXZ2s8rOVOdw9DUPmP6i pSUwSAfzqDcPRvzroIJzytbvgiJLnxDLaSjMVxY3UUg9VML0UUpbMaIfAss3jbwH rXhnWp5JbHSYRe2TqR5kTjI2hjn5cE8Y78EV5MwwxHoaKK5yxUd4pFeNmR1OVZTg g12WnfFXxbYxJDNfx6jAnSPUYVuP/HmG79aKKAOl0vUZNV09L2WKKJ5Cx2RAhV56 DJJ/Wn6jO9rp1zPHjfHGzLnpkUUV9NBv2SfkeRJLnt5nll3qF7fspu7uefYML5sh baPQZ6Cq1FFfMnrhRRRQAUUUUAehfBOygvfippQnXcIRJMo/2lQkH8Dz+FXvFd/c an4r1O6uX3SNcOvsApwAPYACiitKe4mY/aoaKK1JP//ZiQI+BBMBAgAoBQJSGnvg AhsDBQkJZlk2BgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRBj6/JpN7iGRE8R D/9KemwRcbhCG2fGMGmoTKC8ig1vcmabOVYg5z6FmeR2XY/HmBRYVCa70wxXeJWa QLPYE55MlA8vFvwnxfc3Z4Q+DPkDWbIdSZS+ioWMdO5omtMP4wD6gHCnBpBrmQaH yP0CLhsJFKfVZ0c+V0N+pTezgxwI2lB6zTggM6JOK4IvvOQ9QjAvhqlu8wbq3F93 10g6ON+W6Z2Bj5lKuczfAicHLTMHafc2g9zC0XMvV2o0gqTWHGl+/f8sfBu8D8W7 xUQbkatURa+/UCkU4fv1EJ/ILIfsPuJy2H8nq8awx6iDOMJxbifZXT3pTe8Jngmi n66+7rH4iaopvH+lJTfQXXWtLv3d7cny1SdU0Zg26TxEnYy7ZX9oAagxlGl6krLh yATOyYzFQ1SRkIJA4wb4g3BHDy9bvgI+Z0X5JwTicwue1pdj3WrpSXhDd7xjldba 2JYUeRYUSCD3qsPnCeBJw5sgi74PCVf+5fa6SWFeSTliRA7cfhMsMMGD+2jBeGia pVw5ILKoi/RztWyzdX6M2VPwZLgrt7Drp0lGbi7TnouOIUlUa7NkuDS9zgYoK1kP xpKOPZLa/m4B0hPxfcKJg80YkYgJhGeqVBh1jLiawPKHRlTDNCXx98iOSuO8GOym 0YdZQJuqoiJXug0CeR7kz5qQZtseP3C58vwg5DzozjgIDLkCDQRSGnsKARAAsl9R VFbiFepi0pV+/ye7YiQst77aUomCvhsXzJGxQAGLCqBs5zE/a1hIJpXXP+4VDZCW ku5YSkZZkyzjGdjgUAcqHZxLTJ9eOwJDrjsWfr79zNlrNALj8npIzRuqr0GGCBU0 ZttfbRSWaKIMfJMXlHJ7c/9y3DhDLpDbwieFp1B4r6AF0L1BFCMPt+MtzoJZZ7hy 7IlQXouWK/luSQOzi7K1h+MDs9vFMxsf0IvGWNcpig2hiD7J0SAS47Lf7M16e2/q ABVO4BnnyZpUOFOA/9AvLsq/A9178MFuKifuNzGhGACJylAGC25EwAvmbYL4oiIo Yj6yO2ggzPNSr0zzmWzSeVU8/uEOm7dRiU+sjMxUttYNQrKnbggqAd87Dd+g2tXT sEqB6RVKu6PqKT6syR9acdlMSXmNllgRQOclwshrm1aS2em8d0xFa/fF3F028uhc 3nQRkseLU1FZup3hM9850kypo3q5UgYEdZZzYfBbvNWYaHvkHvRzWYEGWS1klVlE 1X4a6/8KrLWcCLxfWikwjAgIEx5+WN6ZDcscmx62EGIhfuOj8WWxsK2h1D6Y/kc4 N3nOuyyotbAWm67mOKc+TeZmm8mGVnorbq0s1GpEuHDM4c4+QioDPdy/AANsJJn0 E+AJN3AQK/jNom9X6Nhc4V8oo7u8Dp+vUS+87hEAEQEAAYkCJQQYAQIADwUCUhp7 CgIbDAUJCWZZNgAKCRBj6/JpN7iGRKdhEACR2GhG4ZGYQ0nFCI2KaNm3Ys2KmpGr n2QvzT0jLEQxshCoYjJhLwuySEWUTyVxn+J3BnapR0/4YmUSSoQKgGw1WorIfn8n 2jkXduXs9Dxv1DZab3x1NVBuhCFQQ/RnFrR19up9shWkAfdzat245rANm8jxQhEb pMauMGTe8opLWV7di9j+LjY6Dc7Aqo6i25PjkbVy8CMBzXyVk3X4qflzKJpkdxLo VCzN43VxGWOaEKSY3cTC5qrMShgiRi7zhsil2h0w5oJt1D3B0hx4VWUipcf1mBUy H76m5Dy9pQYd4/5TeQsGFIUwGh37wz9zkFHpxinnCFt9FrFNbpH/H0liYZps76jN 6c9CM0EUw7waOtfeswCZGdLFKfCu1zlNfe2U16QxHOLE7v4cjKeE6zvh1xkC26Im vGON7PLFlrSkGdpTr+Zm/vjtRJNiTMCQ1S7zNhg20Ee/0jLYY85qFiqqyAKKaANR 4hvMWK0cQLI1xL73DCtnjObUc2bDG0hZVUCMkjIPCwVseh8p7acRzQnELh+FUHWU EjI1FpFO5Lan551byPMz23E+LQQvXlHrtfI/TQz2Y5hieps7Pxpc1o+5QPpNu+9+ 9tcQkdANJo0rhky387RTrdu6Oyh4Mib1YphkPCb2vnJpmjjOBkMgiBHVt77BhgD6 LmV01hrApV+zGg== =r/sW -----END PGP PUBLIC KEY BLOCK-----

2 1

(no subject)
by Bruno Kitzis 27 Aug '13

27 Aug '13

Hello, Can you remove my email adress from your contact list? Thanks in advance.

2 1

Indiegogo campaign: 3771 Euro for Exits and Bridges!
by Moritz Bartl 27 Aug '13

27 Aug '13

Hi! The torservers.net Indiegogo campaign has ended today, and yields 3771.84 Euro to be spread equally across our current seven organizations. Each organization can hand in receipts and get reimbursed, or, alternatively, we can transfer their share up front. I will mail out stickers and posters today and tomorrow to everyone who donated. Within the week, I'll put up the donation website that lists everyone who donated and wanted to be publicly mentioned. Thank you! [ http://www.indiegogo.com/projects/tor-anti-censorship-and-anonymity-infrast… ] -- Moritz Bartl https://www.torservers.net/

1 0

Re: [tor-relays] Store key files in RAM
by Tony Xue 27 Aug '13

27 Aug '13

Thanks for the instructions. So what if I set up an L2TP VPN connection from my server to my computer at home which stores the keys and I download the file directly into the RAM folder? The purpose is to avoid storing the file or let the file passing through the local normal storage system on my vserver which could be extremely insecure in this situation. So will any of these techniques you have described or I stated above let my data passing through the local ROM storage system of the vserver? > Date: Tue, 27 Aug 2013 00:14:36 -0400 > From: tor(a)t-3.net > To: <tor-relays(a)lists.torproject.org> > Subject: Re: [tor-relays] Store key files in RAM > Message-ID: <521c27ac.570.f998d700.49849df(a)t-3.net> > Content-Type: text/plain; charset="us-ascii"; Format="flowed" > > IMO cut and paste in the situation you're describing is not the > perfect way. Better way would be: > > Have a secure linux machine running an sshd at your home (or another > physically-controlled location?). > Close off iptables and ip6tables for inbound sshd except for your > vserver's IP > (hint: "ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_4096_key -b 4096" > (don't put a password when it asks)) > and edit sshd_config to point it to the new key. Also in the config, > force your local sshd > server to insist upon only using these 2 ciphers ("Ciphers > aes256-ctr,aes256-cbc"). > Restart the local sshd (maybe "service sshd restart") and verify that > you can NOT connect > from the vserver to the home box using a different cipher (ssh -l > someuser -c aes128-ctr your.home.ip.here). > A test ssh connection without the "-c aes128-ctr" should work, the one > with it should fail. > > You would do transfers of important files to and from the vserver via > an 'sftp' session which you start > from your vserver, and you are connecting into your home machine (sftp > someuser(a)your.home.ip.here) > Don't make the connection in the reverse direction, you can push and > pull files with the one. And don't > let anyone steal your ssh_host_rsa_4096_key off the home box. (could > even shred/delete/regenerate it > now and then). In general, turn off the home sshd when you aren't > using it. > > The above setup should be pretty good in terms of the network transfer > if the data hasn't already been > compromised, of course. The certainty that it hasn't been is not > necessarily guaranteed if it's already > been thrown through a network card in a less-solid way, such as the > contents having been viewed > via 'cat', 'nano', etc. via a connection in the 'wrong' direction. > > If you are deleting files from your vserver's hard drive after copying > them out for backup, try doing > "shred" on the file first, and then "rm". It may help do the deletion > better, depending upon how your vserver > hosting is set up. > > > > > > On Monday 26/08/2013 at 10:53 pm, Tony Xue wrote: > > > > > > > > > > > > > > Hi, > > > > I have been discovering simple and secure way of protecting the Tor > > key files recently, in order to achieve the safety of the keys on VPS. > > > > So I created a folder on Linux called /tor and it is stored in the RAM > > file system. I put my key file into that folder and link it back to > > the data directory folder of Tor. I also backed up the key files in > > case my server need to be restarted and the RAM would be cleaned up. I > > left the key in RAM for some undesired failures, errors or > > configuration which need to restart the Tor software. > > > > If the server gets down, I would probably do the simple cut and paste > > in the SSH client to restore my key files. Or in a higher level way if > > cut&paste is not safe enough. > > > > I am not sure whether this is a good way to protect my key files on a > > VPS. Does anyone have any comment on that or a better way? > > > > > > Tony > > _______________________________________________ > > tor-relays mailing list > > tor-relays(a)lists.torproject.org > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > > >

1 0

Re: [tor-relays] Store key files in RAM
by tor＠t-3.net 27 Aug '13

27 Aug '13

IMO cut and paste in the situation you're describing is not the perfect way. Better way would be: Have a secure linux machine running an sshd at your home (or another physically-controlled location?). Close off iptables and ip6tables for inbound sshd except for your vserver's IP (hint: "ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_4096_key -b 4096" (don't put a password when it asks)) and edit sshd_config to point it to the new key. Also in the config, force your local sshd server to insist upon only using these 2 ciphers ("Ciphers aes256-ctr,aes256-cbc"). Restart the local sshd (maybe "service sshd restart") and verify that you can NOT connect from the vserver to the home box using a different cipher (ssh -l someuser -c aes128-ctr your.home.ip.here). A test ssh connection without the "-c aes128-ctr" should work, the one with it should fail. You would do transfers of important files to and from the vserver via an 'sftp' session which you start from your vserver, and you are connecting into your home machine (sftp someuser(a)your.home.ip.here) Don't make the connection in the reverse direction, you can push and pull files with the one. And don't let anyone steal your ssh_host_rsa_4096_key off the home box. (could even shred/delete/regenerate it now and then). In general, turn off the home sshd when you aren't using it. The above setup should be pretty good in terms of the network transfer if the data hasn't already been compromised, of course. The certainty that it hasn't been is not necessarily guaranteed if it's already been thrown through a network card in a less-solid way, such as the contents having been viewed via 'cat', 'nano', etc. via a connection in the 'wrong' direction. If you are deleting files from your vserver's hard drive after copying them out for backup, try doing "shred" on the file first, and then "rm". It may help do the deletion better, depending upon how your vserver hosting is set up. On Monday 26/08/2013 at 10:53 pm, Tony Xue wrote: > > > > > > > Hi, > > I have been discovering simple and secure way of protecting the Tor > key files recently, in order to achieve the safety of the keys on VPS. > > So I created a folder on Linux called /tor and it is stored in the RAM > file system. I put my key file into that folder and link it back to > the data directory folder of Tor. I also backed up the key files in > case my server need to be restarted and the RAM would be cleaned up. I > left the key in RAM for some undesired failures, errors or > configuration which need to restart the Tor software. > > If the server gets down, I would probably do the simple cut and paste > in the SSH client to restore my key files. Or in a higher level way if > cut&paste is not safe enough. > > I am not sure whether this is a good way to protect my key files on a > VPS. Does anyone have any comment on that or a better way? > > > Tony > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >

1 0

Store key files in RAM
by Tony Xue 27 Aug '13

27 Aug '13

Hi, I have been discovering simple and secure way of protecting the Tor key files recently, in order to achieve the safety of the keys on VPS. So I created a folder on Linux called /tor and it is stored in the RAM file system. I put my key file into that folder and link it back to the data directory folder of Tor. I also backed up the key files in case my server need to be restarted and the RAM would be cleaned up. I left the key in RAM for some undesired failures, errors or configuration which need to restart the Tor software. If the server gets down, I would probably do the simple cut and paste in the SSH client to restore my key files. Or in a higher level way if cut&paste is not safe enough. I am not sure whether this is a good way to protect my key files on a VPS. Does anyone have any comment on that or a better way? Tony

1 0

What if my favorite online store website blacklists all Tor Relay IP addresses?
by David Carlson 25 Aug '13

25 Aug '13

It seems that at least two 'normal' online store websites that I visit from time to time have apparently decided to block my IP address which I am also using for a non-exit Tor relay. I have had extended discussions with one of them and they considered unblocking my IP address to be a risk greater than the lost income (US $160/year revenue) was worth. They suggested switching to a different IP address, which was like pulling hens' teeth from my ISP. To do that, I had to have a technician visit my house and install a new modem because they do not have a person who understands tech talk available for ordinary users, and I couldn't get sufficiently elevated in their support hierarchy. The supposedly dynamic IP address that I get from them hardly ever changes, probably because I am buying U-verse television service from them. Now, after a couple of months, the "new" IP address is also blocked. My question is this. What if it becomes common practice for commercial entities such as online stores to block all IP addresses that they find on lists of Tor relays such as <https://www.dan.me.uk/tornodes> or the official Tor metrics data? That list is updated every half hour, includes all nodes, and is not limited to exit nodes. It currently lists 4438 nodes. That is a manageable size for a blacklist, but it could represent tens or hundreds of thousands of clients. Wouldn't this eventually either cripple the Tor network or generally discourage Tor clients that can no longer buy products online from store XYZ through the Tor network? David C

2 2