- tor-relays - lists.torproject.org

Google Groups Exit Policy Reject?
by Jonathan Baker-Bates 25 Feb '13

25 Feb '13

Hi All, I've been forwarded a request to block Google Groups IPs due to some abuse or various usenet groups. Is anyone else rejecting from these IPs, and should I do the same? Thanks, Jonathan

4 5

US Investigators seem to learn
by Moritz Bartl 22 Feb '13

22 Feb '13

Hi, I thought I would let you know: Our US hoster is regularly contacted by law enforcement about our exits there. Some agents ask if the traffic pattern is balanced, ie. if the same amount of traffic enters and leaves the box. I always argue that this is a good indicator for Tor traffic, and that it is bad to mix Tor traffic with other traffic for that exact reason. -- Moritz Bartl https://www.torservers.net/

7 9

Problems with Debian package and low ports
by Chris Baines 14 Feb '13

14 Feb '13

I am having some problems with tor (version 0.2.3.25-1), I get warnings when it resumes form hibernation: Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 Can anyone help?

11 11

Re: [tor-relays] Problems with Debian package and low ports (Chris Baines)
by Christian 14 Feb '13

14 Feb '13

Good night Chris, I hope I don't misunderstand your issue, but if you use hibernation, you use a kind of desktop setup, aren't you? If port forwarding running a firewall and tor on the same machine (that's hibernating) behind a normal router looks tricky by means to verify the config, see my suggestion. If my assumption is correct, you have to set port forwarding in your router, say port 443 to 9090, and then use the torrc file to let tor listen on port 9090, but to advertise port 443. This makes tor bind to a higher port than 1024 and thus not needing root privileges if you run tor as the default user debian-tor, but lets your machine be available on port 443 although hibernating might be a bad idea for a tor node. ;-) If you use a home ISP with small bandwidth, maybe you'd better be a bridge (sufficient uptime also appreciated). I hope this could help. Sincerly, christian Am Mittwoch, den 13.02.2013, 19:35 +0000 schrieb tor-relays-request(a)lists.torproject.org: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Problems with Debian package and low ports (Chris Baines) > 2. Re: Problems with Debian package and low ports (Wessel Nieboer) > 3. Re: Problems with Debian package and low ports (Nils Vogels) > 4. Re: Problems with Debian package and low ports (theo(a)caber.nl) > 5. Re: Problems with Debian package and low ports (Roman Mamedov) > 6. Re: Problems with Debian package and low ports > (Christopher Baines) > 7. Re: Problems with Debian package and low ports > (Christopher Baines) > 8. Re: Problems with Debian package and low ports (Roger Dingledine) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 13 Feb 2013 16:41:54 +0000 > From: Chris Baines <cbaines8(a)gmail.com> > To: tor-relays <tor-relays(a)lists.torproject.org> > Subject: [tor-relays] Problems with Debian package and low ports > Message-ID: > <CAGGGvRs=FYNeKX9_7Ymyn1k2r1xPL1qv11BDGVABgmyDMqA9ZQ(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > I am having some problems with tor (version 0.2.3.25-1), I get > warnings when it resumes form hibernation: > Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied > Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 > > Can anyone help? > > > ------------------------------ > > Message: 2 > Date: Wed, 13 Feb 2013 17:44:02 +0100 > From: Wessel Nieboer <weebl(a)weebl.me> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] Problems with Debian package and low ports > Message-ID: <511BC2D2.40507(a)weebl.me> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Op 13-2-2013 17:41, Chris Baines schreef: > > I am having some problems with tor (version 0.2.3.25-1), I get > > warnings when it resumes form hibernation: > > Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied > > Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 > > > > Can anyone help? > > _______________________________________________ > > tor-relays mailing list > > tor-relays(a)lists.torproject.org > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > Does it work when you've just booted your computer? > > -Wessel > > > ------------------------------ > > Message: 3 > Date: Wed, 13 Feb 2013 18:07:53 +0100 > From: Nils Vogels <bacardicoke(a)gmail.com> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] Problems with Debian package and low ports > Message-ID: > <CAEM+PCU-0xVPEA+H2cMBZCeTgJwhAcWqG7N2Ve567t_sbdrGEw(a)mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > Tor has already changed to a non-privileged user, but you are trying to > bind on ports that only root is allowed to bind on. > > Two solutions: > > 1) Run tor as root (really, a bad idea) > 2) Bind to other ports than 80 and 443. Since you are resuming, you are > unlikely to be a stable relay/exit/bridge anyway, so you can basically > choose any port you want and just use it for your own traffic only. > > On Wed, Feb 13, 2013 at 5:41 PM, Chris Baines <cbaines8(a)gmail.com> wrote: > > > I am having some problems with tor (version 0.2.3.25-1), I get > > warnings when it resumes form hibernation: > > Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied > > Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 > > > > Can anyone help? > > _______________________________________________ > > tor-relays mailing list > > tor-relays(a)lists.torproject.org > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > > > > > -- > Simple guidelines to happiness: > Work like you don't need the money, > Love like your heart has never been broken and > Dance like no one can see you. >

1 0

Re: [tor-relays] [tor-talk] Legal problems: TOR relay & Torrents in .de
by grarpamp 11 Feb '13

11 Feb '13

> I've snail-mailed them a letter based on what Moritz had posted. They > replied with a standardized letter without even commenting on my > statements. It's basically saying "Last chance to pay or we'll go to > court." > > So I'm a little unsure whether or not it's now time to actually > consult a lawyer or wait until FOX makes it's next move. I believe what some others were saying is to simply ignore any initial complaints that come in which appear to be automated or are in some way not sufficiently personalized, lacking in real data, or stamped by a court. Just because someone complains from getting emailspam or can scrape peers off a tracker could just be a courtesy or idle probe. If such first notices bother you, sure, have an initial consult with a lawyer for potential future engagement if needed. But now that you have snailmailed them, it is raised on different level. One for which some would surely say a five minute chat with a prospective lawyer is wise. Also, if other people on the list get such first notices and don't know what to do with them, redacting any identifying material and posting the remaining full text [from an anonymous account if prudent to further avoid confirmation] would let others get a sense of what is out there and offer any experience. Just saying 'I got a mail about filesharing from my node and I mailed them back' doesn't help the poster or others. Then again, we're not lawyers, consult a real one as needed.

1 0

EC2 IP vs Region & Does this matter in the Tor network?
by David Gilbert 11 Feb '13

11 Feb '13

Hello, I'm operating 6 relays in the EC2 where 4/6 claim to be located outside the US but only 1/6 show up as outside of the US based on the IP address and report on atlas (https://atlas.torproject.org/#search/relay1org, don't heckle, I'm getting an idea of pricing and boosting speed over the next 5 months). Now, I'm curious if the IP address vs region it's supposedly operating in matters at all. Will people in the middle east be less likely to connect to my Tokyo/Singapore based relays because the IP address shows its in the USA? Or any other issues? Also, if this does in fact affect the effectiveness of my relays in those regions, has anyone had experience being able to acquire an IP from Amazon for other regions? I do not have a support contract, since I'm paying for this out of my own pocket so I'm unable to contact tech support. I would be inclined to pay whatever fees it costs to get it done, if I knew exactly what it is I need to do. - David

3 4

Possible bug on Tor 0.2.4.8-alpha and 0.2.4.9-alpha
by Jon 06 Feb '13

06 Feb '13

I started the Tor alpha yesterday, and now have numerous instances of " " Bug/Attack: unexpected sendme cell from client. Closing circ." Anything to be concened about Jon

1 0

Newbie question
by Chuck Bevitt 05 Feb '13

05 Feb '13

I'm running an exit node using my home ISP (yes, I've read the warnings). My question is: what happens when my ISP changes my IPAddress? Will existing connections to my node be lost and will the node reestablish itself? Thanks, Chuck Bevitt Sent from my iPad

5 5

My Relay has slowed significantly.
by Matthew Harrold 04 Feb '13

04 Feb '13

Hello all. This is my first time using a mailing list, so apologies if Im not doing it right! I have ran a couple of Tor Relays now for a few months, one was steady and reliable, and providing about 2MB/s of bandwidth. Of late, its slowed down dramatically. A reboot resolved it temporarily, but its slowed right down again, below 500KB/s. You can see the graph here- https://atlas.torproject.org/#details/2DAEE4EBA687A517F8B473894341A56820CDD… Does anyone have any suggestions? I have checked with my ISP and they are not throttling or managing the traffic in anyway, and my CPU and RAM isnt under heavy load. Ive uploaded my torrc here- http://pastebin.com/ZCnLQF0w I have read that file discriptors can also be a problem, Im not sure if this is relevant but- $ sysctl fs.file-nr fs.file-nr = 832 0 199036 Thanks in advance for your help, keep up the good work!

4 10

help with bridge
by s 03 Feb '13

03 Feb '13

hello i am not sure this goes here but ill give it a shot i want to be able to configure a nas as a bridge is it posssible and what would i have to do? as well as run one on my desktop if yall can shoot me line it would be helpful

1 0

Moritz in January
by Moritz Bartl 01 Feb '13

01 Feb '13

Hi, - Was invited as a speaker at CryptoParty Luxemburg. Gave two talks about Tor, one basic introduction/overview, and one about operating Tor exits. Afterwards, I helped starting Frënn vun der Ënn, a Luxemburg copy of Torservers.net by local members of the CCC -- some of which I already met at Haxogreen 2012, a Luxemburg hacker camp. They are awaiting official approval by the government, and then I will probably sign over our Luxemburg exit to them ( www.enn.lu ) - Wrote a German article about Tor by request of the CCC for their printed magazine "Datenschleuder". It will also be published on the web. - Wrote a small Python script that stores relay contact info from Onionoo data in a local database, together with "first seen" and "last seen" dates. I am currently limiting it to relays faster than 25 MBit/s. This will help me to welcome new relay operators, as well as contact "missing" operators to ask why they are gone. I am currently not publishing the database itself, but the script is at https://github.com/moba/tor-contacts-tracker - I became more accustomed to editing the Torproject website. Pushed some changes, most importantly a completely revised set of install instructions on Mac OSX using the unsafe Homebrew. https://trac.torproject.org/projects/tor/ticket/7989 - Most of my time again went into Help Desk and IRC. For number of closed tickets, see Runa's report which will come soon. - Was offered 2-3 Gbit/s of spare bandwidth at a friendly CH ISP. Passed the offer to the Swiss Privacy Foundation to avoid running more high bandwidth nodes as Torservers.net. -- Moritz Bartl https://www.torservers.net/

1 0

ESMTP Filtering by Santrex
by Moritz Bartl 31 Jan '13

31 Jan '13

-------- Original Message -------- Subject: ESMTP Filtering by 46.166.163.163 Date: Wed, 30 Jan 2013 18:57:53 +0100 From: Moritz Bartl <moritz(a)torservers.net> To: abuse(a)santrex.net Hi, Your customer at 46.166.163.163 runs a Tor exit relay (hooray! great!). The server should be configured in a way that does NOT tamper with outgoing or incoming traffic, but it looks like Santrex (you guys) are at least actively filtering/redirecting ESMTP Port 587 traffic. Trying 74.125.137.108... Connected to smtp.gmail.com. Escape character is '^]'. 220 spamfilter.santrex.net ESMTP Postfix Trying 192.0.43.10... Connected to example.com. Escape character is '^]'. 220 spamfilter.santrex.net ESMTP Postfix Please turn that off, or at least let your customer know about it so they can block the affected ports. Thanks! -- Moritz Bartl https://www.torservers.net/

1 0

Public Munin Graphs: Security Risk?
by Moritz Bartl 31 Jan '13

31 Jan '13

Hi! I finally deployed Munin across our exit nodes. The graphs are currently public, and I don't see an obvious reason for not doing that. Any objections? https://www.torservers.net/munin/ -- Moritz Bartl https://www.torservers.net/

3 2

iptables for relays not behind a nat
by Chris Baines 31 Jan '13

31 Jan '13

Can anyone help with equivalents of the iptables rules given here https://trac.torproject.org/projects/tor/wiki/doc/TorFAQ#HowcanImakemyrelay… but for a relay on a vps with a static ip? Thanks, Chris

3 2

University Exit Node Success Stories
by Patrick R McDonald 27 Jan '13

27 Jan '13

All, I am working with various PoC for US universities in an attempt to get them to run fast exit relays. While I am making progress on the universities running a Tor node, most are very hesitant to run an exit node. From several, I received the impression that this was the result of not wanting to be first. To counteract this fear, I am hoping this list can provide some success stories for the above scenario to provide the universities. Looking forward to receiving your feedback, Patrick

1 0

Re: [tor-relays] Contents of tor-relays digest...
by syrus f 27 Jan '13

27 Jan '13

my country block all websites and let see few sites. I use tor . I add some additional bridge but It stop in level:"load relay information" what I must to do?

1 0

[warn] Tried to establish rendezvous on non-OR or non-edge circuit.
by Samuel Walker 26 Jan '13

26 Jan '13

Hi, I've started receiving this message on my relay (non-exit, non-hidden-serivce) > [warn] Tried to establish rendezvous on non-OR or non-edge circuit. I've had a look in the bug tracker, and it looks like it was previously noted under 4171, with the cause being 4641. Both now fixed. Should I be concerned over this? Many Thanks

2 1

Can I enable IPv6?
by cmeclax 26 Jan '13

26 Jan '13

I just upgraded to version 0.2.3.25 from the latest pkgsrc quarterly, and I have an IPv6 address. Can I tell other relays that they can connect to me on IPv6? The port number will be different, as I'm forwarding one port on the router to a different port on the Tor box. cmeclax

2 1

mouseHouse - Why not used more?
by Sina Eetezadi 23 Jan '13

23 Jan '13

Hi all, I am wondering why my TOR server "mouseHouse" is not used more? I configured 40k and 60k burst, buts its only barely used. Any hints? Thank you.

2 1

running relay severely degrades network performance eventually
by Nicolas Bock 22 Jan '13

22 Jan '13

Hello list, every time I run a relay on a Comcast cable connection, after a while (a few hours to days) other network operations such as DNS lookups slow down to such an extent that the network becomes unusable. Unfortunately I don't know how to exactly pinpoint what the problem is, but found that the only reliable solution at such a point seems to be to reset the cable modem. Is that a known issue? Could you suggest how I can diagnose this more accurately? Thanks, nick

4 3

Exit relaying: What regulations exist in your country?
by Moritz Bartl 20 Jan '13

20 Jan '13

Hi, I have revised https://trac.torproject.org/projects/tor/wiki/doc/TorExitGuidelines some more, adding the most relevant legal paragraphs for Germany and USA. What are the exact regulations in your country? If you know which sections, paragraphs etc, add it to the wiki or let me know. -- Moritz Bartl https://www.torservers.net/

2 1

DigitalOcean, cheap VPS that's ok with middle relays
by Micah Lee 13 Jan '13

13 Jan '13

FYI, I just discovered a VPS provider DigitalOcean, and they seem fine with people running non-exit nodes: https://www.digitalocean.com/community/questions/tor The cheapest plan is $5/month (256mb ram, 1 core, 20gb drive) with unlimited bandwidth. They give you New York and Amsterdam IP addresses. I haven't tried running a relay on it so I don't know how much bandwidth you can practically use, but it looks promising. -- Micah Lee https://twitter.com/micahflee

12 14

What's wrong with TorStatus?
by Steve Snyder 12 Jan '13

12 Jan '13

The TorStatus pages at rueckgr.at and all.de have stopped reflecting the actual state of the Tor relays. The page at rueckgr.at displays uptime as the length of time between 04 Jan and now, regardless of the actual history of the relays. The page at all.de is even worse, calculating uptime as the days since 06 Dec 2012. The former shows no less than uptime of 6 days and the latter shows every relay as having 35+ days of uptime. The page at blutmagie.de has an accurate representation of relay uptimes, but their bandwidth stats are always inaccurate, so there really is no single TorStatus page that one can look at to get an accurate view of Tor relays. What's going on with TorStatus?

4 3

Hello guys. Is is possible to choose one's Entry Guards?
by Coyo 11 Jan '13

11 Jan '13

I didn't realize the TOR Project had their own mailing list server, though it makes sense. I'm studying tor relays, especially obfsproxy, and I thought I'd go ahead and ask a question. If you have a hidden service, and hide that on Server A, then have it connect via obfsproxy to Relay B, can you configure a manually-chosen list of entry guard relays to enter the wider Tor Network from Relay B? [Hidden Server] -- obfsproxy --> [Bridge Relay] -- tor --> [Specific Trusted Entry Guard Relays] -- tor --> [TOR Network] Is this currently possible?

2 5

Registration of a Tor node at the German Bundesnetzagentur
by tor-admin 11 Jan '13

11 Jan '13

Hi, this is a question more specific for the German jurisdiction. At the 29C3 in Hamburg I attended a interesting talk about open WIFI (http://is.gd/9G8AVA unfortunately in German) who was given by Reto Mantz (http://www.offenenetze.de/) He gave the advice to register open WIFIs which are operated by non-profits at the German Bundesnetzagentur, because this is required under German law for companies (http://is.gd/vcz2pZ) I am wondering if there are Tor nodes operated by Germans who have been registered at the Bundesnetzagentur. >From my layman’s understanding of the law this should at least be required for nodes operated by German non-profits like CCC and Torservers. I am specially interested in the case of a node which runs in a data center outside of Germany but is operated by a German non-profit. As I operate my nodes privately I am unsure if registration of my tor nodes is required. I will check with my lawyer if a registration should be done and could help to run the nodes more securely concerning law enforcement. Having information from others would help to clarify this. Thanks & regards, torland

5 12