- tor-relays - lists.torproject.org

How does Tor use nameservers?
by Steve Snyder 01 Apr '12

01 Apr '12

I am attempting to load-balance DNS resolution requests. Suppose, in Linux, you have a /etc/resolv.conf with this contents: nameserver aaa.bbb.ccc.ddd nameserver eee.fff.000.111 nameserver 222.333.444.555 How does a Tor exit node use these 3 nameservers? Are they used in a round-robin fashion with the next name resolution request being handled by the next nameserver in rotation? Is the first nameserver ("aaa.bbb.ccc.ddd" above) always used first, with the second being used if the first exceeds some time-out threshold, and the third used only if the first 2 fail? Does a middle node use name resolution at all, or is the relaying based purely on IP addresses? Thanks.

2 1

Questions about exit enclaves
by Jef Heri 01 Apr '12

01 Apr '12

Hello list, I hope this is the correct list to send these questions, if not I apologize and please tell me where I should send this message. I want to setup a Tor node to run as a exit enclave for a web site (WordPress) and message board (vBulletin). However, I have found little documentation on how to accomplish this on a remote server, e.g. https://trac.torproject.org/projects/tor/wiki/doc/ExitEnclave . Is there a more throughout document/manual for exit enclaves? Is it correct that a exit enclave will act as a 'normal' exit node, as well as the exit enclave for its IP address (https://trac.torproject.org/projects/tor/ticket/800)? If so, is it possible to block exit to any IP other than the node's own IP via torrc file? If not, maybe I could only allow exists to white-list IPs, such as Tor Project web site IP, EFF IP, and etc? I believe someone who sends messages to tor-talk maintains a hardened (OS(?) and) Tor, meant to be run as a node only, from remote server space. Does anyone have a link for that software? I looked at the Tor web site but I didn't find information. I am thinking about using that software as the exit enclave. Lastly, is it possible (and smart - re anonymity and resources) to use the exit enclave to offer hidden service address? Thanks!

5 8

Re: [tor-relays] Questions about exit enclaves
by Jef Heri 01 Apr '12

01 Apr '12

Hello Tom and Konstantinos, >>>>> On Mar 30, 2012 14:18:35, "Jef Heri" <jefheri1 at yahoo.com> wrote: >>>>> >>>>> Hello list, >>>>> >>>>> [snip] >>>>> >>>>> Is it correct that a exit enclave will act as a >>>>> 'normal' exit node, as well as the exit enclave for its IP >>>>> address (https://trac.torproject.org/projects/tor/ticket/800)? >>>>> If so, is it possible to block exit to any IP other than the >>>>> node's own IP via torrc file? If not, maybe I could only >>>>> allow exists to white-list IPs, such as Tor Project web site >>>>> IP, EFF IP, and etc? >>>>> >>>>> [snip] >>>>> >>>>> Thanks! >>>> On Mar 30, 2012 14:43:09, "Tom Ritter" <tom at ritter.vg> wrote: >>>> >>>> It's my understanding that if you put the following Exit Policy in your torrc: >>>> >>>> ExitPolicyRejectPrivate 0 >>>> ExitPolicy accept 97.107.139.108 >>>> ExitPolicy reject *:* >>>> >>>> Where 97.107.139.108 is your IP address (that one's mine), you will >>>> Exit Enclave to your site, not allow any other exit traffic, you will >>>> be a normal tor relay (meaning you should check your bandwidth >>>> limits/accounting), and you will become the preferred path for Tor >>>> traffic to your site. >>>> [snip] >>> On 30 March 2012 14:50:49, Konstantinos Asimakis <inshame at gmail.com> wrote: >>> >>> Wouldn't it be safer to accept connections only on port 80? Else he >>> would be exposing the whole machine. >> On 30 March 2012 14:43:09, "Tom Ritter" <tom at ritter.vg> wrote: >> >> Hm. I don't know. If you have a local firewall that blocks access to >> say, samba, from external addresses, but allows it locally - would tor >> allow you to access the port, because it appears that the connection >> from coming locally? >> >> If you're already exposing port 22 on the internet, I would argue >> allowing it through tor exit enclaving isn't increasing your risk any. >> But if tor lets you bypass the firewall - then there's a concern. >> >> -tom > On Mar 30, 2012 15:02:04, Konstantinos Asimakis <inshame at gmail.com> wrote: > > I bet it will bypass the firewall but until someone else answers play it > safe and allow only the ports you need. ;-) Thank you both for the interesting back and fourth. I think I tend to side with Konstantinos, and since my site will only offer SSL (not http), I guess I should setup to only accept connections from 443, correct? Thank you both.

1 0

Re: [tor-relays] Questions about exit enclaves
by Jef Heri 01 Apr '12

01 Apr '12

Hello Tom, --- On Mar 30, 2012 5:43 PM, "Tom Ritter" <tom at ritter.vg> wrote: > > On 03/30/2012 04:18 PM, Jef Heri wrote: > > > > Hello list, > > > > [snip] > > > > Is it correct that a exit enclave will act as a > > 'normal' exit node, as well as the exit enclave for its IP > > address (https://trac.torproject.org/projects/tor/ticket/800)? > > If so, is it possible to block exit to any IP other than the > > node's own IP via torrc file? If not, maybe I could only > > allow exists to white-list IPs, such as Tor Project web site > > IP, EFF IP, and etc? > > > > [snip] > > > > Thanks! > It's my understanding that if you put the following Exit Policy in your > torrc: > > ExitPolicyRejectPrivate 0 > ExitPolicy accept 97.107.139.108 > ExitPolicy reject *:* > > Where 97.107.139.108 is your IP address (that one's mine), you will > Exit Enclave to your site, not allow any other exit traffic, you will > be a normal tor relay (meaning you should check your bandwidth > limits/accounting), and you will become the preferred path for Tor > traffic to your site. Thank you. That was very helpful.

1 0

Bad Exit
by Matthias Bethke 31 Mar '12

31 Mar '12

I was wondering whether anyone could explain me how a node gets the "Bad Exit" flag? The thing is this, my router: http://torstatus.blutmagie.de/router_detail.php?FP=6c7c819f808ac125c69e1d98… As you can see, it has the "Bad Exit" flag even though it's not an exit and hasn't been for months. So I suppose that's something manually assigned? To do with POP/IMAP sniffing honeypots maybe? Seeing that quite a lot of people use unencrypted mail protocols over TOR, I wrote script about a year ago to try and warn them about it: - run ulogd and dsniff to capture logins - try and do a login to the account to see if it succeeded, to see whether it's just an unsuccessful hacking attempt (dsniff doesn't tell me and I was too lazy to write something myself to check the response) - if so, guess the full address. Either it's in the login or if not the server probably serves only one domain anyway and I use the reverse lookup - Send them a mail saying, hey, either you've been doing this yourself and it's a bad idea, or someone stole your credentials and is anonymously snooping around in your mail; in any case, change your password. I suppose someone is doing the reverse and has some fake accounts that they access via TOR and then see if there are any logins that are not theirs to flag the respective exit as a bad guy. Still sounds like a good idea to me but obviously it doesn't work when flagged as bad. Maybe someone can convince me otherwise or has an ide on how to coordinate the two things? Or am I completely off the track here and the reason for the flag is something different? cheers, Matthias

2 1

Exit node and VPN relakks.com
by Jonathan 21 Mar '12

21 Mar '12

Hey all, I have a server in a server farm on a 100mbit symmetrical line... I was looking at relakks.com as a VPN service. Anyone has any experience with these guys? Someone I know use it but only gets up to 2mbit on this line... Anyone has different experiences? I run a relay at home, but wanted to contribute with an exit node on the server as it has a big connection which does not get all fully used at the moment... Thanks, Jon

3 4

Re: [tor-relays] [tor] Re: Hosting relays in the Netherlands
by grarpamp 13 Mar '12

13 Mar '12

[sorry, same note, right tor-relays address this time :-] >> I got to a point where I want to make an active contribution to the >> Tor cause starting with running some nodes of my own, but I'm having >> difficulties on finding hosting companies (vps/dedicated) that allow >> running Tor services. >> >> I know that you've been resuming your servers in the Netherlands >> Would like to hear what's your experience with that. > > There is not much advice I can give you. I do not want to recommend any > of our ISPs, not because we're not happy with them (to the contrary), > but because it makes no sense to put more and more Tor exits into few > places. My strategy always is to find appropriate offers (cheap high > bandwidth) and then contact the ISP. This has evolved into a pretty > standardized two-step approach: First, I ask if they were okay "with > Tor" and reassigning IP space, and telling them that we're security > researchers and that we have worked with many ISPs successfully in the > past. Because the reassignment is somewhat of a special case, this > usually helps in reaching someone higher up in the support chain who can > make such decisions. Once they get back to me, I explain Tor a little > more and only then tell them about the caveats, but reassure them that > we have a volunteer team handling abuse around the clock etc. > > Depending on what you're able and willing to spend, a good approach > would be to look for data centers, and ask there for potential partners. > I wrote a small script that puts the GeoIP location of Tor nodes on a > map, which is somewhat helpful in finding "empty spots". A good idea > would be a script that extracts ASNs, sums up "their" Tor bandwidth, and > then not go with those that already have a high bandwidth exit, but > maybe some other AS in the same datacenters? Yes! Far better to look for new diverse holes and fill them than to essentially duplicate existing nodes. Bringing in tor-relays on this, as this topic comes up there once in a while too. I'll add that AS path info is available from route views looking glasses. Think of it like traceroute, but for BGP. It's quite handy. A node map showing current GEO, AS, and provider would be a cool idea. Lots of cities have datacenters and moms/pops of some sort. People could then find a gap near them, then poke around the phonebook, webhostingtalk, datacentertalk, [NA]NOG's, etc to find a diverse fill.

2 1

Reg : Torperf measurements
by Sambuddho Chakravarty 11 Mar '12

11 Mar '12

Hi all The section on Performance data in the Tor metrics page https://metrics.torproject.org/data.html , says that you are recording data by running Torperf on 'moria', 'torperf' and 'siv'. I know 'moria' is a exit node. But what are 'torperf' and 'siv' ? Tor directory listing doesn't list them.

2 2

pluggable transport proxy
by Scott Bennett 19 Feb '12

19 Feb '12

A recent posting--sorry, but I deleted it before realizing that I had something to say as a followup--referred to proposal #180 (see https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/180-pluggabl… for the text), and after reading the section titled "Notes on plugins to write", it seemed to me that the first note might be satisfied by tcpproxy with little or no modification. The developers might wish to look at its description at http://www.spreadspace.org/tcpproxy/ It handles IPv4, IPv6, and cross-protocol tunneling, as well as optionally doing remote DNS resolution. FWIW, I like the mentions of possibly allowing the use of such proxies with ordinary relays, too. This might provide an opening to allow unpublished, extra ORPorts of ordinary relays to be distributed and used in a manner similar to bridges. Allowing pluggable proxies for ordinary relays ought also to facilitate development and testing of UDP- and SCTP-based transports for tor in a way that would avoid disrupting existing tor network operation. Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at cs.niu.edu * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************

1 0

30% drop in exit throughput since Feb 8
by Andy Isaacson 19 Feb '12

19 Feb '12

Noisetor is showing a significant, sustained drop in bandwidth usage starting approximately February 7-8. We've checked our setup and logs and there doesn't appear to be any sign of a causative factor here. Throughout January and the first week of February we were averaging 400-500 Mbps. There was a pretty smooth decline down on the 8th, stabilizing at a "new normal" of 200-300 Mbps which we've maintained since then. (All these numbers are based on Munin graphs of eth0 throughput using the if_ plugin.) I have some hacky Python that summarizes the torstatus.blutmagie.de data, and it appears that other exits didn't see a similar drop; but our drop came a few hours to days after torservers added a significant amount of new bandwidth. (However, total exit BW reported in torstatus did not increase much; if anything it seems to have gone down slightly.) Around the same time, Amunet rose from ~150 Mbps to ~450 Mbps and has remained in that range since. Thoughts? -andy

3 3

Can bridge run in tiny VPS
by tor-relays＠nickcoleman.org 15 Feb '12

15 Feb '12

After reading on Hacker News about Tor's request for bridges for Syria and Iran, I thought perhaps I could use my el-cheapo VPS for this. I use it to run an anonymous forwarding proxy for my own use. It gets very little use, so I can do without the proxy for a few months. Mem is limited to 128MB, with bursts to 256MB. Bandwidth is 500GB up and down per month. Tor can have half of this (note the up *and* down). The caveat is that, because it is a dirt cheap VPS, I don't get a warning about any violation of the TOS. If I go outside the guidelines, they cancel my account. So I need to be fairly certain, or somehow limit Tor, that its memory use in normal circumstances will not exceed ~100MB. Is it feasible to run a bridge within these limits? If so, any suggestions on config options welcome. thanks, Nick

5 4

HardwareAccel
by Sebastian Urbach 04 Feb '12

04 Feb '12

Hi, Does anyone know how to use the HardwareAccel feature correctly ? Somehow im not able to get this working on my Intel cpus wit the hardware AES engine built in. It would be great to get it up and running because 24 cores could do some nice work for tor ;-) Thanks in advance -- Mit freundlichen Grüßen / Yours sincerely Sebastian Urbach -------------------------------------------------------- Religion is something left over from the infancy of our intelligence, it will fade away as we adopt reason and science as our guidelines. -------------------------------------------------------- Bertrand Arthur William Russell (1872-1970), British philosopher, logician, mathematician, historian, and social critic.

2 1

reg : problem using the OPAddon script from the torflow package
by Sambuddho Chakravarty 03 Feb '12

03 Feb '12

Hi All I am trying to use the OPAddon script to measure circuit bandwidth. I use the following input configuration for pathrc input configuration: [GENERAL] # Set the host and port where Tor is # listening for control-connections control_host = 127.0.0.1 control_port = 9051 [CIRC_MANAGEMENT] # Size of the maintained pool of circuits idle_circuits = 3 # TODO: Configure ports to use [NODE_SELECTION] # Number of hops to be used in paths and # a minimum-value for advertised bandwidth pathlen = 3 min_bw = 1024 # Percentiles percent_fast = 100 percent_skip = 0 use_all_exits = yes # UniformGenerator with optionally ordered exits, # 'uniform = no' --> bandwidth-weighted selection uniform = no order_exits = no # Make use of guard-nodes (yes|no) or a specific # exit node (nickname or IDHex) for every path use_guards = yes #use_exit = xyz [GEOIP] # Use GeoIP use_geoip = no # yes|no for unique|equal country codes # ! comment out to don't care unique_countries = no # Maximum number of continent crossings: 0-n # ! comment out to enforce distinct continents # ! set >= pathlen to not care about #max_continent_crossings = 2 # Maximum number of ocean crossings: 0-n # ! comment out to don't care #max_ocean_crossings = 1 # If echelon is set, OP-Addon will try to find an # exit in the destination country of the current # request (exit_country may be used as backup) # yes|no # TODO: echelon = yes # Set country codes for single positions #entry_country = DE #middle_country = RU #exit_country = US # TODO: excludes = [".."] [RTT] # Frequently ping the latencies of complete circuits # yes|no ping_circs = no # Tor socks-properties socks_host = 127.0.0.1 socks_port = 9050 ping_dummy_host = 127.0.0.1 ping_dummy_port = 100 # Time interval to wait before triggering # pings and frequency of pings in seconds (float) initial_interval = 10 frequency = 5 # Close a circuit after n timeouts on measurings # Set to 0 to never close circs (int) timeout_limit = 1 [MODEL] # Set to 'yes' to measure latencies of single links # and enable circuit creation from the model # yes|no network_model = no # Min ratio of circs created with the backup-method, # controls growing of the model (float in [0,1]) # 0: no growing # 1: growing only min_ratio = 0.5 # RTT-threshhold in seconds when creating circs (float): # 0: no threshhold, choose from all proposals max_rtt = 0 # Minimum number of proposals to choose from (int) min_proposals = 100 [EVALUATE] # Evaluation mode: close every circuit after measuring performance # yes|no evaluate = yes # Number of latency-tests per circuit (int: 0-n) num_rtt_tests = 1 # Number of bandwidth-tests per circuit (int:0 or 1) # Requires stream-server.pl listening on the same host num_bw_tests = 1 # Total amount of circuits to test (int) num_records = 5 I run op-addon.py with the above config and it terminates throwing the following error pointing to PathSupport.py. WARN[Thu Feb 02 17:45:58 2012]:No event for: 650 STREAM 76 CLOSED 47 128.59.16.165:8041 REASON=DONE Traceback (most recent call last): File "<home directory>/torflow.saved/torflow-3c0dd74/TorCtl/TorCtl.py", line 712, in _eventLoop self._handleFn(timestamp, reply) File "<home directory>/torflow.saved/torflow-3c0dd74/TorCtl/TorCtl.py", line 1337, in _handle1 self._map1.get(event.event_name, self.unknown_event)(event) File "./op-addon.py", line 853, in stream_status_event return self.handle_bw_test(s) File "./op-addon.py", line 823, in handle_bw_test lifespan = stream.lifespan(stream.bw_timestamp) File "<home directory>/torflow.saved/torflow-3c0dd74/TorCtl/PathSupport.py", line 1326, in lifespan return now-self.attached_at TypeError: unsupported operand type(s) for -: 'NoneType' and 'float' NOTICE[Thu Feb 02 17:45:58 2012]:Tor closed control connection. Exiting event thread. Terminated I am not sure how to resolve this ... I am not sure if I am doing something wrong or not... Thanks Sambuddho

1 0

Tor relay system & uptime requirements
by Goulven Guillard 03 Feb '12

03 Feb '12

Hi all, I am considering setting up a tor relay. However my configuration is not powerful and I failed to find precise informations about the hardware system requirements. I believe it would be useful to have such informations in the FAQ, along with graphs of the needed RAM & CPU as a function of the allocated bandwidth. Anyway, I would use a Sheevaplug (Marvell 1.2 GHz CPU, 512 MB DDR2 @ 400 MHz) running Debian Squeeze. It already serves as a small webserver (~200 visits/month, <10 MB bandwidth/month), and 150 MB of RAM are allocated to flashybrid (which helps preserving the SD card life by keeping /var/log/* and such data in RAM and write it down only once in a while). First questions : would it be eligible as a tor relay ? As a tor exit ? Or should I rather go for a bridge ? I guess my bandwidth will be limited by the hardware, how much would you suggest ? On the same network is my personal computer which is much more powerful but down most of the day, so I guess it would be unworthy to make use of it ? I have also thought about using the PC of my parents as a bridge (smaller bandwidth), but again it is online only a few hours a day, would it be worth it ? Thanks. Regards, G.

7 10

0.2.3.10-alpha / .11-alpha
by Sebastian Urbach 02 Feb '12

02 Feb '12

Hi, I was wondering if one of you had a message in the log from 0.2.3.10-alpha which was that he coul not access the AES hardware engine and is using software instead. I upgraded to .11-alpha a day later and the message seems to be gone. Does anybody know how to check if he can access the AES hardware engine now or is the feature just disabled in the new version ? Normally he sould be able to access the feature because the Intel CPUs in the system support it, Thanks in advance -- Mit freundlichen Grüßen / Yours sincerely Sebastian Urbach -------------------------------------------------------- Religion is something left over from the infancy of our intelligence, it will fade away as we adopt reason and science as our guidelines. -------------------------------------------------------- Bertrand Arthur William Russell (1872-1970), British philosopher, logician, mathematician, historian, and social critic.

1 0

Re: [tor-relays] Thoughts on InspecTor?
by Scott Bennett 02 Feb '12

02 Feb '12

On Thu, 2 Feb 2012 00:25:19 -0500 Roger Dingledine <arma(a)mit.edu> wrote: >On Wed, Feb 01, 2012 at 11:36:57PM -0500, Steve Snyder wrote: >> This application claims to identify bad Tor nodes for the purpose of >> excluding them from use: >> >> http://xqz3u5drneuzhaeo.onion/users/badtornodes/ >> >> Anyone have any thoughts on this? > >In general it is a poor plan to change your routing strategy in a way >that makes you different from most Tor users. If you change it enough, >you end up making a signature for your behavior where an attacker can >say "hey, that's the guy who never uses German relays". The result is >that you harm your anonymity. Nobody has really researched how much harm >comes from how much difference -- and we recommend against doing things >that are poorly understood. > >> The sum of bad-exit-flags (8), > >As far as I can tell, >http://xqz3u5drneuzhaeo.onion/users/badtornodes/overview.html#blocking >are all tiny relays so it doesn't much matter whether you badexit them >(you're probably never going to encounter them in practice anyway). > >For the question of exit relays in Iran, see >https://trac.torproject.org/projects/tor/ticket/4207 >https://trac.torproject.org/projects/tor/ticket/4923 > The latter ticket's discussion section is quite interesting. After reading through it, it seems to me that the problem in Roger's point C would be best dealt with in vidalia without regard to IP address or presumed country. When asking whether the user wishes to run a relay, vidalia's dialog could include an instruction something like this: "Before you decide to run a tor relay, please consider whether the government of the country where you live and/or would like to operate a relay might target you for any kind of abuse if that government noticed that you were running a tor relay." As long as the people who have volunteered to provide translations for vidalia's and/or tor's textual interactions with users have sufficient skills to provide such a cautionary note in all of the most necessary languages plus two or three languages spoken widely around the world, then that should take care of the matter. I share the concerns of both Roger and Sebastian regarding undesirable potential results of automating the rejection of entire countries of relays. Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at cs.niu.edu * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************

1 0

Thoughts on InspecTor?
by Steve Snyder 02 Feb '12

02 Feb '12

This application claims to identify bad Tor nodes for the purpose of excluding them from use: http://xqz3u5drneuzhaeo.onion/users/badtornodes/ Anyone have any thoughts on this? The sum of bad-exit-flags (8), exit nodes that alter payload (4), and long-term-misconfigured (27) suggests excluding 39 nodes within the Tor config file. Is this reasonable? Are these exclusions appropriate for relays, or for end users, or neither, or both?

2 1

torrc "permission denied" warning
by tony 27 Jan '12

27 Jan '12

In the Tor logs for a relay, I get the following message: Dec 19 19:42:23.662 [notice] Renaming old configuration file to "/etc/tor/torrc.orig.1" Dec 19 19:42:23.662 [warn] Couldn't rename configuration file "/etc/tor/torrc" to "/etc/tor/torrc.orig.1": Permission denied I've played around with file permissions but it doesn't help. Tor seems to be working. Does the error matter? Running Tor on a Ubuntu Server 10.04 LTS Feedback much appreciated.

3 2

This is what you get....compile problem OSX10.4
by Geoff Down 25 Jan '12

25 Jan '12

Can anyone help with this please? % sudo ./configure --with-libevent-dir=/opt/local/lib/ && make && make install -> checking for libevent directory... configure: WARNING: We found the libraries for libevent, but we could not find the C header files. You may need to install a devel package. % port contents libevent ->Port libevent contains: /opt/local/bin/event_rpcgen.py /opt/local/include/evdns.h /opt/local/include/event.h /opt/local/include/event2/buffer.h /opt/local/include/event2/buffer_compat.h /opt/local/include/event2/bufferevent.h /opt/local/include/event2/bufferevent_compat.h /opt/local/include/event2/bufferevent_ssl.h /opt/local/include/event2/bufferevent_struct.h /opt/local/include/event2/dns.h /opt/local/include/event2/dns_compat.h /opt/local/include/event2/dns_struct.h /opt/local/include/event2/event-config.h /opt/local/include/event2/event.h /opt/local/include/event2/event_compat.h /opt/local/include/event2/event_struct.h /opt/local/include/event2/http.h /opt/local/include/event2/http_compat.h /opt/local/include/event2/http_struct.h /opt/local/include/event2/keyvalq_struct.h /opt/local/include/event2/listener.h /opt/local/include/event2/rpc.h /opt/local/include/event2/rpc_compat.h /opt/local/include/event2/rpc_struct.h /opt/local/include/event2/tag.h /opt/local/include/event2/tag_compat.h /opt/local/include/event2/thread.h /opt/local/include/event2/util.h /opt/local/include/evhttp.h /opt/local/include/evrpc.h /opt/local/include/evutil.h /opt/local/lib/libevent-2.0.5.dylib /opt/local/lib/libevent.a /opt/local/lib/libevent.dylib /opt/local/lib/libevent.la /opt/local/lib/libevent_core-2.0.5.dylib /opt/local/lib/libevent_core.a /opt/local/lib/libevent_core.dylib /opt/local/lib/libevent_core.la /opt/local/lib/libevent_extra-2.0.5.dylib /opt/local/lib/libevent_extra.a /opt/local/lib/libevent_extra.dylib /opt/local/lib/libevent_extra.la /opt/local/lib/libevent_openssl-2.0.5.dylib /opt/local/lib/libevent_openssl.a /opt/local/lib/libevent_openssl.dylib /opt/local/lib/libevent_openssl.la /opt/local/lib/libevent_pthreads-2.0.5.dylib /opt/local/lib/libevent_pthreads.a /opt/local/lib/libevent_pthreads.dylib /opt/local/lib/libevent_pthreads.la /opt/local/lib/pkgconfig/libevent.pc /opt/local/lib/pkgconfig/libevent_openssl.pc /opt/local/lib/pkgconfig/libevent_pthreads.pc I'm flying blind here - should libevent be a binary or just a load of source files? I've only a vague idea of what the error messages mean, let alone how to fix them. GD -- http://www.fastmail.fm - A no graphics, no pop-ups email service

4 15

Do bridges care about DNS?
by Steve Snyder 24 Jan '12

24 Jan '12

Do bridges have a need for name resolution, or it it just a matter of passing a packet from one IP address to another (i.e. from user to Tor node)? Thanks.

1 0

Re: [tor-relays] How can I tell if my bridge is working?
by Scott Bennett 22 Jan '12

22 Jan '12

On Sun, 22 Jan 2012 05:58:45 -0500 Roger Dingledine <arma(a)mit.edu> wrote: >On Thu, Jan 19, 2012 at 08:35:30PM -0500, Steve Snyder wrote: >> New operator of a Tor bridge here. How can I tell that it is being used? >> >> With a regular relay I can look up the stats on TorStatus, or I can see >> that there are n current connections. But a bridge won't be published, >> and the lower volume of traffic means that there may not be many active >> connections at any given time. >> >> So how do I know if it is working? I mean beyond the absence of any >> errors logged? > >Answer 1: absence of any errors logged. Then just trust. :) > >Answer 2: Use a Tor controller. Vidalia has a "who has used my bridge >lately?" button you can push to learn by-country statistics. Or try >'arm' if you prefer command-line controllers. > >Answer 3: We publish sanitized bridge descriptors on the metrics site: >https://metrics.torproject.org/data.html#bridgedesc >We're working on usable interfaces to let you look up the descriptor >for your bridge (including the usage statistics that it publishes). Stay >tuned. > Answer 4: this isn't exactly what you want, yet it still provides relevant information. Use the HeartbeatPeriod command in your torrc file to provide usage information on a periodic basis with your choice of period. The message logged gives the uptime in days and hours and a rounded figure for bytes sent and bytes received since initialization, so if your node is *only* used as a bridge, these messages will give you rough idea of your bridge's usage. Note, of course, that some of the traffic will be stuff that your node needs for its operation, e.g., a consensus file. Be advised that each period incurs about 1 s of delay in logging the information, so if you want information every hour exactly, for example, you need to specify a period of 3599 s, not 3600 s. Note, too, that the default period is 21,600 s, or 6 hr. Again, "HearbeatPeriod 21599 seconds" should yield a message logged every six hours exactly. Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at cs.niu.edu * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************

2 1

Tor Status graphs
by Geoff Down 22 Jan '12

22 Jan '12

Hi, the read/write graphs in my relay's TorStatus.blutmagie.de page have been broken for some time (flat-lined) but I assumed that was down to my old software. However, I see that all the relays' pages are the same. Is this data no longer available? I had a quick look in the archives for an answer. GD -- http://www.fastmail.fm - IMAP accessible web-mail

3 2

How can I tell if my bridge is working?
by Steve Snyder 22 Jan '12

22 Jan '12

New operator of a Tor bridge here. How can I tell that it is being used? With a regular relay I can look up the stats on TorStatus, or I can see that there are n current connections. But a bridge won't be published, and the lower volume of traffic means that there may not be many active connections at any given time. So how do I know if it is working? I mean beyond the absence of any errors logged? Thanks.

4 3

Re: [tor-relays] How can I tell if my bridge is working?
by robbie macg 22 Jan '12

22 Jan '12

Hi, I may have misunderstood the question. I think the simplest way to determine if your bridge is up and running correctly is to check the contents of /var/log/tor/log. Alternatively, try using Vidalia to connect to your own bridge. and log an error. These methods often work well for newer users. You may have something more sophisticated in mind or be trying to accomplish some thing else. If hat's the case, I apologize. Cheers, Robbie > Message: 1 > Date: Fri, 20 Jan 2012 09:17:16 -0500 > From: "cmeclax-sazri" <cmeclax-sazri(a)ixazon.dynip.com> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] How can I tell if my bridge is working? > Message-ID: <201201200917.16804.cmeclax-sazri(a)ixazon.dynip.com> > Content-Type: Text/Plain; charset="iso-8859-1" > > On Thursday, January 19, 2012 20:35:30 Steve Snyder wrote: >> New operator of a Tor bridge here. How can I tell that it is being used? > > Telnet to port 9051 and type ?authenticate "blurdyboop"?. Then type > ?setevents > bw? and it'll tell you how many bytes go in and out. I'm not sure how to > tell > that there are client connections, but it's probably another setevents > command. > > cmeclax > > > ------------------------------ > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > > End of tor-relays Digest, Vol 12, Issue 19 > ****************************************** >

1 0

Tor Deprecation Notice
by Damian Johnson 20 Jan '12

20 Jan '12

Hi all. As per ticket 4788 [1] we'll soon be removing relays that are out of date and no longer safe to run, which includes anything older than version 0.2.1.30. When I last checked this included 257 relays [2] and I've already notified the 107 of those that had contact information available. If you're running one of those relays then you'll need to upgrade to keep operating. Sorry about the inconvenience and thanks for running a relay! -Damian [1] https://trac.torproject.org/projects/tor/ticket/4788 [2] https://trac.torproject.org/projects/tor/attachment/ticket/4788/old_relays.…

3 2