- tor-relays - lists.torproject.org

tor relay issue on windows 10
by Keifer Bly 13 Apr '21

13 Apr '21

Hi all, So I am attempting to start a new relay on Windows Server 2019. The issue is though for an unspecified reason, the tor process just quits when starting the relay: Here is the log file: [image: image.png] And then once it gets to "now checking if qr port is reachable from the outside" the tor process suddenly quits. Im running it as administrator I am wondering why the process would suddenly stop for no apparent reason on reaching this? Here is the torrc, though it seems to read that no issue: SocksPort 0 ORPort 4555 Nickname testrelay ContactInfo kk(a)gmail.com Log notice file c:\notices.log ControlPort 9051 ExitPolicy reject *:* Though it seems to read the torrc file without any issue. Thanks. --Keifer

3 7

TOR relays killing internet speed
by John Csuti 13 Apr '21

13 Apr '21

Hello everyone, I am hosting 3 VM's limited at 10Mbps all together. Each VM is limited to 1Mbps via proxmox. I have noticed if i have these relays running it kills a 10Gbps fiber optic line. All the way down to 50Mbps or worse depending on what the time of day. Any idea what i can try? I noticed this happen over the past few months maybe its increased usage on the relays not sure. According to TOR relay search the demand has spiked recently. I wondering why/how it could bypass the limits on both proxmox and pfsense. Thanks, John Csuti (216) 633-XXXX

5 6

Relay Name Change
by Kathi 10 Apr '21

10 Apr '21

I changed the name of my relay nick name from <UnNamed> to (Correct Name) after I got it to operate correctly. The relay was in operation when I did the change. I went into the menu in NYX, clicked reset tor. The relay has been up eighteen hours as of this writing. Its flags are: Fast, Running, V2Dir, Valid.1,911 circuits open and 2709 outbound, 20,670 connections on Ivp4 Tor Metrics shows <Unnamed> only (Correct Name) isn't shown when searched How long does it take for the name change to take effect? sysop

4 3

Possible to give something I made to tor? (message for roger digeldine and other tor project heads)
by Keifer Bly 10 Apr '21

10 Apr '21

Hi all, So for the sake of diversity, as well as helping out Windows users who want to contribute to tor, this is a tool I have created which makes running tor relays on Windows very easy. The features are: Auto installs tor and keeps it up to date. Easy relay configuration with provided torrc file. Can configure to start relay on OS boot. The drawbacks is it configures the Windows Defender Firewall to allow the relay traffic but can't auto configure any other firewalls, and only supports vanilla bridges currently. I am wanting to give this tool to tor project to list on the website for those looking to run relays on Windows networks (networks running Windows Server, etc). I've made this GUI open source with a GitHub link, if interested. Thanks. --Keifer

1 0

IPv4 AND IPv6 Relay
by ML Tor 09 Apr '21

09 Apr '21

Hi to all. I have recently created 4 TOR relays on two different ISPs (frantech.ca and yourserver.de). They work smoothly with IPv4. Now I wanted to add IPv6 as well, as both ISPs provide a / 64 address. In my torrc file I have inserted these two lines: ORPort nnnn.nnnn.nnnn.nnnn: 8001 ORPort [2605: 6400: 10: 55c: 199: 195: 250: 83]: 8001 But I get this error: "[NOTICE] Unable to find IPv6 address for ORPort 8001. You might want to specify IPv4Only to it or set an explicit address or set Address." Then only the IPv4 address is enabled. I have done various tests but I cannot find the solution. Can you tell me the correct configuration? :-) -- F1D75392BBB9E8D165A918F7DC8E270BCA67D720 9EA17159838F930F4D63757692AC2CE06C45D30E F02D242E78E099DFA30AE9C90E47D61C170EE97C 3160C0AA71A17811246FDCEAB246326C7D9ED754

2 1

Fallback Directories - Upcoming Change
by David Goulet 08 Apr '21

08 Apr '21

Greetings! This is to announce that the Tor Project network team will soon change how fallback directories are selected as we are about to update that list. As a reminder, here is the fallback directory definition from the tor man page: When tor is unable to connect to any directory cache for directory info (usually because it doesn’t know about any yet) it tries a hard-coded directory. Relays try one directory authority at a time. Clients try multiple directory authorities and FallbackDirs, to avoid hangs on startup if a hard-coded directory is down. Clients wait for a few seconds between each attempt, and retry FallbackDirs more often than directory authorities, to reduce the load on the directory authorities Previously, we would ask this list for volunteers and then start a lengthy process over weeks to add/remove volunteers from an official list and then make sure the volunteered relays were matching a certain set of criteria. This process was very time consuming for our small team and so we are making a change to be more efficient and avoid to slip on the updates like we did in the previous versions. We will now select at random relays to become fallback directories that match those requirements: - Fast flag "Fast" -- A router is 'Fast' if it is active, and its bandwidth is either in the top 7/8ths for known active routers or at least 100KB/s. - Stable flag "Stable" -- A router is 'Stable' if it is active, and either its Weighted MTBF is at least the median for known active routers or its Weighted MTBF corresponds to at least 7 days. - DirCache is set to 1 (default) - As been around for at least 90 days. The above corresponds to more than 4000 relays at the moment in the consensus and so we'll randomly pick 200 from those at each release so we can have regular rotation and shift load over time over the entire network. Over time, we will remove or add more relays at each minor release if the set of fallback directories not working reaches a 25% threshold or more. Finally, it is very possible that we'll change those requirements over time as we assess this change. We'll do our best to inform this list in time. Thanks! Tor Network Team -- fegt0kLbq3rSb5UY2KTCr5TVsjOd2mko2FRZAZic23Q=

3 3

How best to convince people not to block Tor entirely when they cite DDOS attacks as the reason?
by Nils Erik Flick 07 Apr '21

07 Apr '21

Hi everyone, (Tor advocacy vs. panicked small-time hosting company suffering from "massive attacks") What advice can I offer to someone who's blocking traffic from Tor because their network is apparently experiencing sustained DOS attacks via some exits? They explained to me that they were aware of the value of anonymity online, but couldn't see a way to protect their hosting customers from "attacks making the systems inaccessible". In the end I offered some vague handwaving ("why don't you temporarily throttle traffic just from the nodes where the attacks come from"). I'm not going to do *their* job. But it would still be useful to have something better to point to than just a vague remark. This is a situation where the standard reasons why one needn't block Tor don't really work, and next time I'd like to be better prepared to argue why this isn't a reason either. So, is there some ready-made explanation I could send to such a company, that explains in technical detail how they can *properly* mitigate this without overblocking? K.

1 0

Relay Configurator
by Андрей Гвоздев 06 Apr '21

06 Apr '21

Did anyone use this website: https://tor-relay.co Is it safe to use? Is there an easy way to setup MyFamily if you want to run a few relays?

2 1

Relay Search without AS number/name information?
by nusenu 05 Apr '21

05 Apr '21

Hi, as many of you know AS level data (AS number and name) on Relay Search/onionoo is using a rather outdated geoip database from maxmind. That is the reason why Relay Search displays inaccurate or no AS information for many relays. Recently the geoip database used by tor (not Relay Search) switched [1] from maxmind's db to ipfire [2] for license reasons. Since tor only needs the country level information in only ships country level informat (but ipfire's geoip also contains AS level data). Today I read about the idea to remove AS level data from onionoo/Relay Search on the gitlab issue: https://gitlab.torproject.org/tpo/metrics/relay-search/-/issues/40004#note_… If you also have an opinion on whether Relay Search should improve its AS level information instead of removing it completely now is probably a good time to state it - especially if your tools depend on it. kind regards, nusenu [1] https://gitlab.torproject.org/tpo/core/tor/-/issues/40224 [2] https://location.ipfire.org/ -- https://nusenu.github.io

1 0

ISP
by Андрей Гвоздев 05 Apr '21

05 Apr '21

Which ISP is better? Scaleway or OVH?

6 6

We will start a test run with M1
by niftybunny to-surf-and-protect.net 04 Apr '21

04 Apr '21

Hi there, next week we will drop the first M1 Mac Minis in the datacenter. With the thread of bugs in the current BSD version of tor: Any known issue with the Mac version of Tor? Any other suggestions / comments from Tor relay operators with Macs? nifty

1 0

Many SSH requests
by Cristiano Kubiaki Gomes 03 Apr '21

03 Apr '21

Hi there, O noticed many ssh requests to my Debian VM running a Relay and I am wondering if this is normal or if this is happening only with me. Anyone else see this ssh attemptives? Is it normal? sshd[27004]: Failed password for root from 45.91.226.235 port 41012 ssh2 sshd[27004]: Received disconnect from 45.91.226.235 port 41012:11: Bye Bye [preauth] sshd[27004]: Disconnected from authenticating user root 45.91.226.235 port 41012 [preauth] sshd[27006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.36.253.227 user=root It's many different ips and trying to access in many different ports. Thank you!

7 8

syn flood iptables rule
by Toralf Förster 02 Apr '21

02 Apr '21

The following 3 statements # Make sure NEW incoming tcp connections are SYN packets; otherwise we need to drop them. $IPT -A INPUT -p tcp ! --syn -m state --state NEW -j DROP # DDoS $IPT -A INPUT -p tcp -m state --state NEW -m recent --name synflood --set $IPT -A INPUT -p tcp -m state --state NEW -m recent --name synflood --update --seconds 60 --hitcount 10 -j DROP seems to work and to help here ata fast Tor relay. CPU went down from 109% to 95%. There're 500 connections less than before for a Tor fast relay. The /proc/net/xt_recent/synflood is quickly filled. Unfortunately I cannot change the "ip_list_tot" of "xt_recent" b/c I do use a non-modular kernel. Does anybody knows a circumvention? Are there any objections against this approach? -- Toralf

5 9

Is OVH a safe vps provider to run an exit relay on?
by Keifer Bly 02 Apr '21

02 Apr '21

7 9

bridge static or dynamic ip and multiple bridge config
by gi vi an 02 Apr '21

02 Apr '21

does bridge require static or dynamic ip? if more than one bridge can be configured per one isp connection, how do i configure? -- who am i ? https://mstdn.social/@gvian donate or patron: [+]₿ bitcoin (BTC): 3K7Ba2DFyyuGTukNqXEmogG4VgYp2RWnZV [×]gridcoin (GRC): SK7A2yq4rsoDSKc592dxSb3JSYeSSopbNB [÷]Ᵽ peercoin (PPC): PENnyj6dvEqaAKtqh9tV9KzRKc4N5EWfeH [=]pivx (PIVX): DNyihy8xWXkGyaLnipzWUrC3kjrbcvahHJ [<]blackcoin (BC): B4pCYCRhS6itEs2rsSAVbRnoKkL6thj3Bt

5 7

DirPortFrontPage file '.....' not found | Permission denied
by Petrusko 02 Apr '21

02 Apr '21

Hey, I'm having a little problem with setting up (my be some rights...) the html page on the relay DIRPort. On my logs : 00:00:03 [NOTICE] Tor 0.4.5.7 opening new log file. 00:00:03 [WARN] Could not open "/var/www/html/tor-relay.html": Permission denied 00:00:03 [WARN] DirPortFrontPage file '/var/www/html/tor-relay.html' not found. Continuing anyway. I've not found any information about how to set up this correctly. Many thanks in advance.

4 4

ipv6 ORPort + DIRPort too ?
by Petrusko 01 Apr '21

01 Apr '21

Hey, I've set up a new relay, available with ipv4 and ipv6. And I'm not sure if I can serve DIRPort on the ipv6 too ? In the torrc file, I've config : ORPort 9001 ORPort [xxxx:xxxx:xxx:x:xxxx:xxxx:xxxx:xxx]:9001 DIRPort 9030 Is it allowed to add something like this, to advertise on ipv6 too ?? : DIRPort [xxxx:xxxx:xxx:x:xxxx:xxxx:xxxx:xxx]:9030 Thank you all !

4 7

Help with FreeBSD relays
by xplato 31 Mar '21

31 Mar '21

Greetings, I am a bit of a noob here so please bear with me. I ran a relay using Ubuntu with very few issues however I decide to add an additional relay and decided to use FreeBSD. They will only run for around 18 hours and then they shut down. I have adjust the torrc file every way I know how and increased the Max vnodes thinking this may have been my issue. I can post the sysrc and torrc if needed. Anyone that might help me figure this out I would be grateful otherwise I am going to reluctantly move them both back to Ubuntu. Thanks, Dan Sent from ProtonMail for iOS

5 13

relay impersonation (contactinfo)
by nusenu 31 Mar '21

31 Mar '21

Hi, I'd like to raise your awareness of an ongoing scheme of questionable entities that make use of your name or relay contactinfo and/or relay nicknames. Those using other people's relay _nicknames_ got and get spotted by multiple people already and are somewhat obvious (at least for now), but I'd like to highlight those using familiar names in contactInfo that are likely less frequently uncovered because people lookup their relays by searching for their relay nicknames (and not so often by searching their contactinfo). So here are two practical things that you can do to help uncover more of them: - list your relay fingerprints under the well-known tor-relay URI: https://<your domain>/.well-known/tor-relay/rsa-fingerprint.txt and add "url:<your domain> proof:uri-rsa ciissversion:2" to your ContactInfo to allow for automated linkability verification. This protects your relays against spoofing of the url field. A domain is not required: You can use github-pages or similar if you do not have a domain. more details: https://gitlab.torproject.org/tpo/core/torspec/-/blob/master/proposals/326-… https://nusenu.github.io/ContactInfo-Information-Sharing-Specification/ Thanks to the 291 relays, that allow for automated verification already. Verifiable relay groups also get graphs on OrNetStats, for an example see: https://nusenu.github.io/OrNetStats/artikel10.org.html - search for your names/nicknames/org names/... in the ContactInfo field. On Relay Search you can do so using "contact:searchstring" Be creative in your search terms. This even makes sense if you do not run relays at all but your name is somewhat known in this context. kind regards, nusenu -------- Forwarded Message -------- Subject: tor relays rosiwig429(at)lidte(dot)com Date: Tue, 30 Mar 2021 23:55:01 > 2021-03-29 > > | Up | Ext | JoinTime | IP | AS | CC | ORp | Dirp | OS | Version | Nickname | eFamMembers | FP | > |------+-------+------------+----------------+------------------------------------------+------+-------+--------+-------+-----------+------------------+---------------+------------------------------------------| > | 1 | 1 | 06:25:11 | 103.82.32.14 | CMC Telecom Infrastructure Company | vn | 9001 | 9030 | Linux | 0.4.5.7 | coffswifi5 | 1 | B8D95BB1AAFB6F234EC50A100F46E4CC8E8E90FB | > | 1 | 1 | 07:34:40 | 78.138.135.110 | Ojsc oao Tattelecom | ru | 9001 | 9030 | Linux | 0.4.5.7 | artikel5ev3b2 | 1 | 771C9BC56DF4B29BA97CAA9387FB1FC140CFE3E3 | > | 1 | 1 | 13:43:04 | 103.56.156.143 | VNPT Corp | vn | 9001 | 9030 | Linux | 0.4.5.7 | CalyxInstitute18 | 1 | 04998AB63A49C4A0B5A5CD2994D95D098D2B5399 | > | 1 | 1 | 14:28:18 | 77.245.158.134 | Niobe Bilisim Teknolojileri Yazilim San. | tr | 9001 | 9030 | Linux | 0.4.5.7 | Merlin2 | 1 | B4285A497939D190739C976B947053D6CC0AE07C |

1 0

Re: [tor-relays] ISP (?????? ???????)
by Mark Murray 31 Mar '21

31 Mar '21

I used to run a couple of relays on their DEV1-S instances and never had any problems. They let you use the advertised bandwidth 24/7 without being throttled. ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Wednesday, March 31, 2021 8:26 AM, <tor-relays-request(a)lists.torproject.org> wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > Today's Topics: > > 1. Re: ipv6 ORPort + DIRPort too ? (Petrusko) > 2. This is not me (Paul Templeton) > 3. Re: syn flood iptables rule (Toralf F?rster) > 4. Re: DirPortFrontPage file '.....' not found | Permission > denied (torix(a)protonmail.com) > > 5. ISP (?????? ???????) > 6. Re: Is OVH a safe vps provider to run an exit relay on? > (Volker Mink) > > > Message: 1 > Date: Tue, 30 Mar 2021 21:38:59 +0200 > From: Petrusko petrusko(a)riseup.net > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] ipv6 ORPort + DIRPort too ? > Message-ID: f943db9d-b3c9-e51b-03ea-ac3447f780cf(a)riseup.net > Content-Type: text/plain; charset="utf-8" > > Ouch, this config looks like not so cool... > I see on Metrics the ipv6 choosen by Tor process, is now on : > "Unreachable OR Addresses" > > I'll write the other solution you given previously... with > ORPort xxx.xxx.xxx.xxx:9001 > ORPort [xxxx:xxxx:xxx:x:xxxx:xxxx:xxxx:xxx]:9001 > > 30/03/2021 ? 20:07, Petrusko : > > > Ok ! > > So this only line will serve on both ipv4 and ipv6 together, ok thx ! Cool > > 30/03/2021 ? 15:51, lists(a)for-privacy.net : > > > > > ORPort 9001 > >

1 0

ISP
by Андрей Гвоздев 31 Mar '21

31 Mar '21

Did anyone run relays on Scaleway?

4 3

This is not me
by Paul Templeton 31 Mar '21

31 Mar '21

the relay with fingerprint B8D95BB1AAFB6F234EC50A100F46E4CC8E8E90FB (coffswifi5)is not me... coffswifi4 is mine so don't ask me to add as a family... Paul 137CF322859E400455E457DB920F65FFDD222CDF

2 1

Recent Postings
by manifoil 30 Mar '21

30 Mar '21

Hello fellow Tor Relay operators! Recent activity on this mailing list has given me a headache... Let me explain. I subscribed to this mailing list to keep up to speed with new technical developments, trouble shooting advice and security advisories. If there is a mailing list that covers this criteria, please let me know because that is where I want to be. This recent 'noise' about Mr Stallman is, in my opinion, unnecessary and unwarranted on this particular mailing list. It reminds me of a similar episode on this mailing list a while back where someone appeared to have a personal problem with someone who ran a hosting company - I nearly wrote something about that. My relay has been chugging away at home for many years and bandwidth assigned to the network has steadily increased as my home broadband capability has improved. I am happy that it contributes to Tor and might help people in genuine need - be it politically, racially, sexual orientation wise or as a whistle blower. Finally, I would like to thank the poster who highlighted the OpenSSL vulnerability - my relay was promptly updated. To quote someone else and because I like this persons' sigh-off: With respect, Rattus Norvegicus Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 1

This past week's most active discussion has forced my hand
by Isaac Grover, Aileron I.T. 30 Mar '21

30 Mar '21

Good morning from Wisconsin, Back in 2019, I was involved in a discussion on this list to seek out hosting providers friendly to Tor exit nodes so that the list on the Tor Project website could be updated and geographic and provider diversity could be improved. Because our twins were newborns at the time, the project took a back burner but I had built up the initial automation and templates for the contacts. Would there be any interest in reviving this project for the aforementioned reasons? Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. – “ Because #ProactiveIsBetter ” O: 715-377-0440, F:715-690-1029, W: www.aileronit.com

3 2

Tor [0.4.5.7] {Bridge} IPv4 not found
by Someone 30 Mar '21

30 Mar '21

Hey, I'm running Tor [0.4.5.7] on Ubuntu 20.04.2 LTS and started running my first bridge following the exact tutorials on the community guide for running bridge. However, the syslog says(resulting in non-reachability of the port.): Tor[6278]: Unable to find IPv4 address for ORPort 11120. You might want to specify IPv6Only to it or set an explicit address or set Address. Here's my torrc conf: BridgeRelay 1 ORPort 11120 IPv4Only ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy ServerTransportListenAddr obfs4 0.0.0.0:356 IPv4Only ExtORPort auto ContactInfo __REDACTED_FOR_PRIVACY__ Nickname dubridge Steps done: Saw the router configuration (IPv6 disabled in there). Thought maybe some issue with dynamic/static IP so configured DHCP ADDRESS RESERVATION to get a static IP. Followed a similar thread on this topic by a guy recently so wrote IPv4Only in front of both ORPort and obfs4 Thanks! Someone

2 2