- tor-relays - lists.torproject.org

circuit ends in myself
by cmeclax-sazri 12 Aug '11

12 Aug '11

I just restarted tor after upgrading the version, then brought up Vidalia, and one of the circuits ends in myself! (xxx,xxx,cmeclax0 where the xxx's are other relays) How come? I'm a middleman.

2 2

Received abuse complaint - how did this happen?
by Steve Snyder 11 Aug '11

11 Aug '11

Today my ISP informed me that an abuse complaint had been lodged against me by spamcop.net. I looked at the report and my IP is indeed in it. It seems like a valid complaint. My question, though, is how did this happen? I'm using the Reduced Exit Policy as shown here: https://trac.torproject.org/projects/tor/wiki/TheOnionRouter/ReducedExitPol… Neither SMTP nor SMTPS are among the ports accepted as exit ports. Anyone have any thoughts as to how my Tor config can be used to transmit spam? Thanks.

4 4

jumping clock
by Softail 09 Aug '11

09 Aug '11

Every few days I find a log message like this Aug 08 07:20:09.241 [warn] Your system clock just jumped 122 seconds forward; assuming established circuits no longer work. Seems to always be 122 seconds as far as I can tell and happens at random times. Doesn't seem to be correlated with the log rotations or anything else. I'm running ntpd and that seems to be working fine. I started to let it use the kludge local clock in case the network was unavailable. I didn't think that was likely and it doesn't seem to have made any difference. Google turns up some complaints about this on much older versions 2.0.23. I'm currently running 2.1.30 from the Tor repository. It's i386 running on x86_64. I suppose I could try rebuilding a 64 bit version but so far haven't built my own yet. Would eventually like to dig into the sources but don't have time right now. Anybody else see this or have suggestions about what to do about it? Thanks -- A man in chains knows he should have acted sooner... Julian Assange

3 4

Setting up a "hidden" exit node
by Joel Hobson 09 Aug '11

09 Aug '11

Hi all, I'm an undergraduate student working as a research assistant for the summer. My current task is to figure out a way to measure delay caused by individual nodes (we want to replicate this paper: http://cis.poly.edu/~ross/papers/Tor.pdf <http://cis.poly.edu/%7Eross/papers/Tor.pdf>). It seems to me that the easiest way of accomplishing this would be to run an exit node and construct a two-hop circuit to it. OP ------> Node to be measured -------> Exit node Since the OP and exit node are under my control, I could measure the time it takes for any packets to reach the exit node from the OP. I want to be the only one who can use this exit node so I don't have to worry about getting approval from the school to run an exit node (could be time-consuming). I realize this is pretty far from any design goals the developers have, but is there some way of running a hidden exit node? One that doesn't appear on any directory server (PublishServerDescriptor 0 might work)****, but can still be used if you know its IP address? The Tor Control Protocol makes it easy enough to create a custom circuit (discussed here: http://thesprawl.org/memdump/?entry=8) but it won't accept IP addresses for nodes. I can put an IP in exitnodes in the torrc file, but exitnodes doesn't seem to have any effect, even when StrictExitNodes is set. Thanks Joel

2 1

bb
by 向梁 06 Aug '11

06 Aug '11

bb

1 0

Newbie Messed up Relay Setup
by flgcrz 05 Aug '11

05 Aug '11

Hello, Is this the right place to post if I'm having difficulties? I've done quite a bit of searching forums and things. I'm new to this and have been struggling a bit to get Tor and Vidalia working smoothly. I think I know what the problem is . I had my relay setup and working fine but Tor was not working. So I looked around a bit and I found this post on the Ubuntu forums and a useful guide to setting up Tor Vidalia and Polipo. I followed the instructions in that guide and finally Tor is working both when Vidalia boots and in my browser albeit with Torbutton as opposed to Foxyproxy (recommended in the guide). I thought this is great progress finally. But no I messed something up. In my enthusiasm I had copied the torrc from the guide without backing up my original and now my relay is no longer working. There are I believe 2 issues. The first I think is that the original references to my keys have been deleted. The second is I think something to do with the setup I have for ControlPort. I don't think its a firewall issue. I am running a firewall locally and have port forwarding setup on my wireless router for 9001 and 9030 Like I said I'm new to all this so I could be wrong. I also don't know a lot about encryption so I am hesitant to post the details of my logs on a public list. I've messed things up so if this is too much of a pain is there a way to just wipe out old keys and start a new relay from scratch? Thanks you in advance Best Kevin ---- Here is the post on Ubuntu Forums http://ubuntuforums.org/showthread.php?p=11117515#post11117515 Here are some of the details from from my logs ( minus the encyption stuff which I can post if those who know better think its ok to do so) Aug 04 18:38:10.018 [Info] resolve_my_address(): Guessed local hostname 'CRZ' resolves to a private IP address (127.0.0.1). Trying something else. Aug 04 18:38:10.019 [Info] resolve_my_address(): Interface IP address '192.168.1.130' is a private address too. Ignoring. Aug 04 18:38:10.023 [Info] resolve_my_address(): Address 'CRZ' resolves to private IP address '127.0.0.1'. Tor servers that use the default DirServers must have public IP addresses. Aug 04 18:38:10.023 [Info] router_pick_published_address(): Could not determine our address locally. Checking if directory headers provide any hints. Aug 04 18:38:10.024 [Info] resolve_my_address(): Guessed local hostname 'CRZ' resolves to a private IP address (127.0.0.1). Trying something else. Aug 04 18:38:10.025 [Info] resolve_my_address(): Interface IP address '192.168.1.130' is a private address too. Ignoring. Aug 04 18:38:10.026 [Info] resolve_my_address(): Address 'CRZ' resolves to private IP address '127.0.0.1'. Tor servers that use the default DirServers must have public IP addresses. Aug 04 18:38:10.027 [Info] router_pick_published_address(): Could not determine our address locally. Checking if directory headers provide any hints. Aug 04 18:38:10.027 [Info] update_consensus_router_descriptor_downloads(): 0 router descriptors downloadable. 0 delayed; 2494 present (0 of those were in old_routers); 0 would_reject; 0 wouldnt_use; 0 in progress. Aug 04 18:38:10.028 [Info] resolve_my_address(): Guessed local hostname 'CRZ' resolves to a private IP address (127.0.0.1). Trying something else. Aug 04 18:38:10.029 [Info] resolve_my_address(): Interface IP address '192.168.1.130' is a private address too. Ignoring. Aug 04 18:38:10.030 [Info] resolve_my_address(): Address 'CRZ' resolves to private IP address '127.0.0.1'. Tor servers that use the default DirServers must have public IP addresses. Aug 04 18:38:10.030 [Info] router_pick_published_address(): Could not determine our address locally. Checking if directory headers provide any hints. Aug 04 18:38:10.031 [Info] routerlist_remove_old_routers(): We have 2617 live routers and 1253 old router descriptors. Aug 04 18:38:10.032 [Info] resolve_my_address(): Guessed local hostname 'CRZ' resolves to a private IP address (127.0.0.1). Trying something else.

2 1

How to fully utilize resources for relay?
by Steve Snyder 05 Aug '11

05 Aug '11

I have a machine that is dedicated to being a Tor exit node. How can I maximize the performance (high throughput / low latency) of Tor traffic? I have plenty of under-utilized CPU and RAM resources on this system. According to TorStatus, my bandwidth is rarely maxed-out. This is on a Linux system, currently running Tor v0.2.2.30-rc. So... what resources can I spend to make this a better Tor node? Thanks.

3 3

Number of Connections Open
by Tim Sally 03 Aug '11

03 Aug '11

Hi! I'm working on a model to estimate the number of connections an OR has open as a function of the OR's bandwidth. I could really use some help confirming that my model is reasonable. Would any relay operators be willing to share the results of some variant of netstat | wc -l and the bandwidth of the relay? Thanks, Tim

8 7

Flags
by vinc3nt 01 Aug '11

01 Aug '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 hello, I have set up a Tor relay. Where can I find online documentation that explains the meaning of all flags set: Authority Bad Directory Bad Exit Exit Fast Guard Hibernating Named Stable Running Valid V2Dir Some are intuitive, but others do not understand the meaning tnx - -- vinc3nt +--------------------------------------------------------------------+ |GPG Id key: 4096R/1E2A7F06 2010-11-23 http://pgp.mit.edu | |Key Fingerprint: 1355 B43E 99A9 37EF 5F27 A399 B71C 8AEB 1E2A 7F06 | |() ascii ribbon campaign - against html e-mail | |/\ www.asciiribbon.org - against proprietary attachments | +--------------------------------------------------------------------+ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBAgAGBQJONoYsAAoJELcciuseKn8GEX4P/jmXuLHL7nKyDA7vOegKMeii HgesWX2cUbxpVkOzbVZ/ubtE2RMFmVfikS4ChbcIFzAECOKRctY1lDy45Sihwtit jNysYwm9Fh/3uBlpRPMdMhHA8g7rr6Xh5lDvkSTdeyJVAx0xnOLNEhT3Oi2aYsZF a2vgcwTLdsvgDRxMynDhDKwxKIfyPZk443gEYMaT3kxVlxr18zD8XDsFxbVOl9LO HhCZ3USJYHW/rWf3v1+HsIx28CHl0RaxPkwtMzX9oXvN5mLYyYy1O0w2wV7mDnp3 59BOAhxbe3oY6F4fmBrw3FyPfgUDPfD0DaY6UZxnokXeRG743XK8AkfXTkiP0g4B /MxBqWypqcNGUvlToii7GBW8RZt+wBukeS50Qok8+RLIIB7SZSPVx90GnZxCl2q5 tnrlqM0dNKi0/jXUHpcmuxsYVLGQ+k+8Ky2E106pagYiayYeajbhuXjPOmZIqYMu dXTqotR1p4JbJFnrmyFRomgDetKUBaZRk6Kjnln8grQyMglPoKFb/1EvtgxrKMOf hysEakFhIAV8yeCYiQAPm0vfSudgpz6i6reStqTMVrjQqm/HObedSTvN+h/Oy2QX MR1r8TTOSdRZgglxy59g/H4EruQxSET5P/RdnCBcRbLp6xDymPOilpSl+bhBS8KO zOt0C+asU/krtS/XDVzt =KUbN -----END PGP SIGNATURE-----

2 2

stable flag
by Softail 26 Jul '11

26 Jul '11

My relay seems to gain and lose the stable flag every day for the last several days. It's been up more than a week. Is this normal? I don't recall seeing this on a previous hosting provider and I suspect there is something going on with the network. I'm thinking of setting the log level to info or debug to try to figure out what is going on. Is that a good idea? Is it likely to be informative? Thanks -- A man in chains knows he should have acted sooner... Julian Assange

3 4

possible bad exit or bad circuit
by cmeclax-sazri 25 Jul '11

25 Jul '11

jceaovh Pandora18 tornodeca I was browsing a website that I hang out on all the time, and it came up with a Privoxy forwarding failure error. I tried another website and got the same error. I restarted Privoxy; didn't fix it. I brought up Vidalia and looked at the circuits. The one listed above was first; when I attempted to view the website, it added a line with the name of the website, labeled Closed, which quickly disappeared. I closed the circuit and refreshed the website and it came up.

2 5

Strange warnings
by Klaus Layer 22 Jul '11

22 Jul '11

Hi, My relays suddenly show the following warnings: "Tried to establish rendezvous on non-OR or non-edge circuit." Is this something I should worry about? I am wondering why several of my relays shows that at nearly the same time. Thanks, Klaus

2 1

Odd activity on my rely
by George Gemelos 20 Jul '11

20 Jul '11

I'm running an exit node, yreka and have noticed as single IP address that has been connected for at least a day, probably longer, which is pushing anywhere from 3Mb to 9Mb but receives very little traffic back from my node, sub 500Kb. My traffic to this machine is going out of 443 (my ORPort) and being sent to port 50090 on the other machine. I only allow exit traffic to ports 80 and 443. So I do not think this is exit traffic. I have also checked on blutmagie and could not find the IP as a relay which would suggest that this is a TOR user and I am serving as an entry node. I have never seen such speeds for a single user. The one sided nature of the traffic and its size have my interests peaked. I just wanted to verify that this is not unusual and something that I should investigating. I did not include the IP address of the machine because I was not sure it would be in the spirit of TOR to post such information. Any feedback would be greatly appreciated.

4 8

Seeking headless TAILS (or similar)
by Steve Snyder 19 Jul '11

19 Jul '11

I'm looking for a Tor installation that boots off of read-only media and acts as a relay, sort of a TAILS but without the user-space applications. Does such a thing exist? Thanks.

2 2

control_auth_cookie problem
by mick 19 Jul '11

19 Jul '11

Hi Guys I use munin to monitor a bunch of stuff (including tor) on my servers. The long run munin stats are quite useful. I checked my stats today and noticed that there were no entries for tor on one machine going back a couple of weeks. Now I know I rebooted the machine in question about 12 days ago and I /think/ I upgraded tor at that time. Certainly the restart will have caused a regeneration of the cookie file anyway. Checking my logs, I see the following from munin: "Unable to connect to Tor ControlPort (515 Authentication failed: Wrong length on authentication cookie" and similarly in the tor log: " Got authentication cookie with wrong length (16)" Now I can see that the cookie file is 32 characters long, so I'm guessing that the file contains a control character that is screwing up the munin php plugin line "$cookie = file_get_contents($cookiepath);" Anyone else seen this before? Any ideas for fixing it? - short of restarting tor again (I've done that and I'm reluctant to keep on stopping and starting what should be a stable server), Thanks Mick --------------------------------------------------------------------- The text file for RFC 854 contains exactly 854 lines. Do you think there is any cosmic significance in this? Douglas E Comer - Internetworking with TCP/IP Volume 1 http://www.ietf.org/rfc/rfc854.txt ---------------------------------------------------------------------

2 1

DNAT question
by Softail 19 Jul '11

19 Jul '11

I'm trying to switch my ports from 9001/9030 to 443/80. The tor configuration seems straight forward. I tried /sbin/iptables --append INPUT --protocol tcp --match state --state NEW --destination a.b.c.d --dport 9001 --jump ACCEPT /sbin/iptables --append INPUT --protocol tcp --match state --state NEW --destination a.b.c.d --dport 9030 --jump ACCEPT /sbin/iptables --table nat --append PREROUTING --protocol tcp --source-port 443 --destination a.b.c.d --jump DNAT --to-destination :9001 /sbin/iptables --table nat --append PREROUTING --protocol tcp --source-port 80 --destination a.b.c.d --jump DNAT --to-destination :9030 but that doesn't seem to work. The OR and Dir ports are not reachable from the outside. I assumed that PREROUTING happened before INPUT but not really an expert on this. The firewall blocks everything else inbound to that address but the two ports I opened. Do I need to open 443/80 on the INPUT chain as well and if so do I also need to keep 9001/9030 open also? CentOS 5.6 if that matters. Thanks -- A man in chains knows he should have acted sooner... Julian Assange

2 4

How to set the path of tor control listener file?
by Klaus Layer 19 Jul '11

19 Jul '11

Hi all, I am running multiple tor instances on my relay server. All instances save the Control listener file to /var/run/tor/control. Therefore one instance overwrites the control listener file of the other. Is there a way to set the location where tor writes the control file as it can be done for PID file with parameter PidFile or authentication cookie file with parameter CookieAuthFile? Thanks, Klaus -- Klaus Layer Walldorf, Germany GPG Fingerprint: 466D 12F8 28A3 D137 A77E FC3B 271C 2D79 6F5E 94C9

2 1

Fwd: Arm 1.4.3 Release
by Damian Johnson 17 Jul '11

17 Jul '11

(especially relevant to relay operators...) Hi all. A new release of arm (http://www.atagar.com/arm/) is now available. This completes the codebase refactoring project that's been a year in the works and provides numerous performance, usability, and stability improvements... * Relay Setup Wizard Setting up a relay can be tricky for new users. In headless environments this means navigating Tor's massive, user unfriendly man page and even when Vidalia's an option it makes relatively poor exit configurations. Starting arm before Tor now provides instructions for auto-generating a good relay setup... a. Selection for what you'd like to be http://www.atagar.com/transfer/tmp/arm_wizard1.png b. Picking your relay options http://www.atagar.com/transfer/tmp/arm_wizard2.png c. Confirmation for the configuration it's making http://www.atagar.com/transfer/tmp/arm_wizard3.png * Menu Interface All of arm's capabilities are now available via a simple menu interface. http://www.atagar.com/transfer/tmp/arm_menu.png * Arm Gui Prototype Over this summer Kamran Khan has been working on a GTK frontend for arm as part of Google Summer of Code. The initial prototype is ready! http://inspirated.com/2011/06/28/summer-of-code-progress-graphs-logs-and-ac… * Performance Improvements Several arm and TorCtl performance fixes providing a 83% faster startup time, 12% lower memory usage, and instantaneous shutdown. * Improved Platform Support Vastly better support for Mac OSX. Arm has also been backported to Debian Squeeze and Ubuntu Lucid / Maverick. http://packages.debian.org/squeeze-backports/tor-arm https://bugs.launchpad.net/maverick-backports/+bug/721886 * ... etc Options for requesting a new identity, shutting down Tor, reconnecting if Tor's been restarted and many, many bugfixes. http://www.atagar.com/arm/releaseNotes.php#1.4.3 Cheers! -Damian

1 0

CPU utilization for relay
by swsnyder＠snydernet.net 16 Jul '11

16 Jul '11

FYI, this is a profile of my Tor v0.2.2.30-rc relay, taken in a 10-minute sampling: CPU: CPU with timer interrupt, speed 0 MHz (estimated) Profiling through timer interrupt samples % linenr info symbol name 3126 29.7290 cast-586.s:9 CAST_encrypt 1677 15.9486 sha256-586.s:8 sha256_block_data_order 1149 10.9272 aes-586.s:424 _x86_AES_encrypt 844 8.0266 sha1-586.s:8 sha1_block_data_order 273 2.5963 crypto.c:1649 crypto_digest_get_digest 221 2.1018 md32_common.h:283 SHA1_Update 182 1.7309 encode.c:190 EVP_EncodeBlock 171 1.6262 OpenBSD_malloc_Linux.c:1793 ifree 136 1.2934 cast-586.s:379 CAST_decrypt 130 1.2363 md32_common.h:348 SHA1_Final 127 1.2078 obj_lib.c:66 OBJ_dup 122 1.1602 memarea.c:221 memarea_alloc 110 1.0461 aes-586.s:1610 _x86_AES_decrypt After running for 14 hours, the Tor relay has consumed 1.6% of CPU time. It is now using 45MB of RAM, servicing 112 active connections. According to http://torstatus.blutmagie.de my Max/Burst/Observed (Bps) bandwidth is: 153600 / 307200 / 127170 Environment: CPU: Pentium-M (Dothan) @ 1.80 GHz RAM: 1.0 GB DDR1 Net: Fast Ethernet connected to a Surfboard cable modem CentOS v5.6 Tor v0.2.2.30-rc libevent 2.0.12-stable openssl 1.0.0d zlib 1.2.5 glibc 2.5-58 Just another data point.

1 0

Setting up a relay
by Lalle Bralle 13 Jul '11

13 Jul '11

Anyone that has a very specific guide available to setting up a relay? I was thinking of doing this since I'm a firm believer in anonymity, I use TOR myself so might as well help the network and I have decent internet connection that is quite unused most of the time (100 Mbps down/10Mbps up). I was trying to follow up on that help section on the official site but it wasn't enough. There's a possibility the relay didn't work because of my router but I have opened the rights ports, tested by putting some limits and just testing some settings but not avail.

6 7

Bandwidth
by Tomas Sironi 07 Jul '11

07 Jul '11

Hi people. In the Tor manual, the next options are specified: * * * - BandwidthRate* - RelayBandwidthRate However i don't get to see the difference between those two. I imagined the first one is the bandwidth of tor being a client, and the second for the relay (server). But then i read this in the *BandwidthRate* description, breaking my previous supposition: ... If you want to run a relay in the public network, this needs to be *at > the very least* 20 KB ... I know those options limit the bandwidth but i don't know exactly which affects what. I'm running my Tor as client and relay, so i'm a little bit confused. Can anyone explain that for me? Thanks!

2 2

Relay Seccurity
by Tomas Sironi 05 Jul '11

05 Jul '11

Hi people. I'm new with Tor and i'm very interested in this project. I'm now being a relay, only acting as middleman (no exits). I would like to contribute more by having some services as exit. However i'm concerned about security. The machine i'm running as a relay is a pc in my home. From it, i have access to my router's web interface. The problem if i act as a exit for the port 80, would be that anyone can log into (or try to) my home router just by pointing to its ip address. Am i right? I've thought about using iptables to block outgoing connection from the relay to my router using iptables -A OUTPUT -d 192.168.15.1 -j DROP Not sure that's the correct line to do that. It blocks ping requests but i still can access the web interface of my router from that pc. Can anyone help me here? Thanks.

4 4

TOR on webOS?
by Bruno Kitzis 05 Jul '11

05 Jul '11

Good evening, I was wondering if TOR can be installed on WebOS? I was wondering because the OS family of webOS is Linux and TOR can be installed on LInux. But on your website it's written that TOR can only be installed on Android, iPhone and Maemo. Thanks a lot for your answer. Bruno Kitzis.

1 0

Registration for tor relay list
by Chris Boyd 03 Jul '11

03 Jul '11

thanks!

1 0

reg : Scripts / programs to monitor per stream statistics by a Tor client
by Sambuddho Chakravarty 25 Jun '11

25 Jun '11

Dear all Is there a script to monitor the per client statistics that a Tor client could use ? Thanks Sambuddho

1 0