- tor-relays - lists.torproject.org

Guard flag got removed after only 48 hours of downtime.
by William Kane 11 Aug '20

11 Aug '20

Please discard the previous (empty) email, it was an error on my end. Today, I noticed that my guard flag has been taken away: https://metrics.torproject.org/rs.html#details/47E1157F7DA6DF80EC00D745D73A… Does this have to do with the recent two, major downtime's of the relay? While I wasn't monitoring the server, the kernel decided (or rather oom-killer did) to reap the tor process for consuming too much memory (keep in mind, this is a virtual machine with only 1GB of RAM which running another daemon consuming about ~92MB's of RAM). I promptly restarted the relay, but the same thing happened again yesterday. So today, I manually set a lower MaxMemInQueues value instead of letting Tor calculate one for me - 640MB's instead of 732MB's. Still, I am confused as for why the guard flag has been taken away - I recently opted in to be a fallback directory mirror, does this have anything to do with it? The relay was stable and online for almost a year, so only 48 hours of downtime shouldn't affect the variables qualifying a relay to become and stay a guard that much? If this is because of the directory mirror thing, then please take my relay out of that pool - I want to stay a guard for a number of reasons - mainly because my host is only hosting about 10 tor relays unlike all the other big hosters that are commonly used - network variety is very important or so I've been taught, especially when it comes to guard relays. If this is a mistake on Tor Project's end, I please ask for it to be resolved - however, if it's the Directory Authorities disqualifying my relay, then there's nothing to be done except to wait. Greetings, William Kane

5 11

why non-exit node becomes last in the circuits?
by tor-operator-sahara-it 10 Aug '20

10 Aug '20

Hello. On Tails: Today i found that my jabber messenger (with server in *.onion) use onion circuit with three nodes, and two times from two exit-nodes were very strange. https://metrics.torproject.org/rs.html#details/92E807AC5E23CCD9FE623EA4DC02… https://metrics.torproject.org/rs.html#details/AC5CECEF6AF649F2A7F047D102FE… They havnt exit-flag. Why it happen?

3 3

This would be better in bold, methinks - IPv6 troubleshooting
by torix＠protonmail.com 10 Aug '20

10 Aug '20

An important piece of mental furniture that I never needed to know until months later when a relay stopped working is right here in Step 7: Check IPv6 Availability of page https://community.torproject.org/relay/setup/post-install/ "If you enable IPv6 without working IPv6 connectivity your entire relay will not be used, regardless if IPv4 is working." This seems to me to be quite idiosyncratic to tor, and easily forgotten - not the first thing I would think about when troubleshooting, nor is the post-install page quite where I would look for help when a relay stopped. As we move more and more to including IPv6 in our relay setups, this will come up more often. But we should at least add bold here. --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 1

Relay dropped all traffic
by Sebastian Elisa Pfeifer 08 Aug '20

08 Aug '20

Hey, so one of my relays [0] dropped all traffic. Tor Metrics says its down for 4 days now, but "last restarted" correctly states today at 19:06. Also, on the metrics page is has the flags Fast, Guard, Running, Stable, V2Dir, Valid and ReachableIPv6, but when I SSH into it and look in nyx, it says there "flags: none". I tried rebooting multiple times. The Log tells me "Aug 07 02:36:12.000 [notice] Heardbeat: It seems like we are not in the cached consensus." I have attached the log with the events since the last restart today at 19:06 Should I just generate new keys? Greetings, Sebastian [0] https://metrics.torproject.org/rs.html#details/A4DEEE8F4467621C0A3CB7F4E25C…

2 2

What is the command to view the tor log file on Debian?
by Keifer Bly 08 Aug '20

08 Aug '20

6 8

Availables ports for obfs4 on Fedora
by I.N.R.I. 07 Aug '20

07 Aug '20

Hi To install Tor I try to set a port for obfs4 The ports 22, 80 and 443 are used I wish to find a free port conpatible with the TCP 127.0.0.1 Or an other adress May you help me pls ? Thanks Sent with [ProtonMail](https://protonmail.com) Secure Email.

1 0

Re: [tor-relays] Tor is showing it's running different versions, and continuing previous thread
by Keifer Bly 07 Aug '20

07 Aug '20

That returns "reading config failed" so no luck. Thanks anyway though! --Keifer On Fri, Aug 7, 2020 at 12:43 PM <tschador(a)posteo.de> wrote: > On 07.08.20 20:47, Keifer Bly wrote: > > > Hi all, > > > > So my relay at > > > > > https://metrics.torproject.org/rs.html#details/79E3B585803DE805CCBC00C1EF36… > > > > Says it is running two different versions, on metrics it is showing it is > > running tor 0.4.3.5 but when I log into the VPS via SSH it says it is > > running tor 0.4.3.6. It has been like this for a few days now. Something > > is also not allowing me to check tors data logs, when I check my torrc it > > says the log file is /var/log/tor/notices.log, it either just loads a > blank > > file or says the file is unwrite able. This is odd I don’t believe I did > > add any special configuration for this. > > Hi Keifer, > > on Debian you can check: tor -v; dpkg -l|grep "ii ?tor" > For me it shows: > Tor 0.4.3.6 running on Linux > ii tor 0.4.3.6-1~d10.buster+1 > ii tor-geoipdb 0.4.3.6-1~d10.buster+1 > > Next - check: ls -lA /var/log/tor > An my server it shows: > -rw-r----- 1 debian-tor adm 0 Jul 13 21:03 log > > The owner should be "debian-tor" or whatever your tor is running. > use: chown to change file owner and group > and: chmod to change file mod bits > > Good luck! >

1 0

Tor is showing it's running different versions, and continuing previous thread
by Keifer Bly 07 Aug '20

07 Aug '20

Hi all, So my relay at https://metrics.torproject.org/rs.html#details/79E3B585803DE805CCBC00C1EF36… Says it is running two different versions, on metrics it is showing it is running tor 0.4.3.5 but when I log into the VPS via SSH it says it is running tor 0.4.3.6. It has been like this for a few days now. Something is also not allowing me to check tors data logs, when I check my torrc it says the log file is /var/log/tor/notices.log, it either just loads a blank file or says the file is unwrite able. This is odd I don’t believe I did add any special configuration for this. Heads up, on my end the spam emails are coming through again. Cheers. Thanks very much. --Keifer

1 0

The “tor-relay” Well-Known Resource Identifier - IANA registration
by nusenu 07 Aug '20

07 Aug '20

Hi, as already sent to the tor-dev mailing list a week ago I planning to submit a well-known URI registration ( https://tools.ietf.org/html/rfc8615 ) so the verifyurl is at a static place and no longer needs to be specified explicitly. Please let me know if you have any comments. https://nusenu.github.io/tor-relay-well-known-uri-spec/ kind regards, nusenu -- https://mastodon.social/@nusenu

2 1

West Coast US Tor Relays Slow - Low Consensus Weight versus East Coast
by Neel Chauhan 06 Aug '20

06 Aug '20

Hi network-health@/tor-relays@ mailing lists, I noticed one thing: Tor relays on the West Coast US (and Canada) are generally slower than those on say the East Coast and in Europe. I moved to the West Coast this January, but this was not an issue in the past when looking at dedicated servers I had from the West Coast prior to this year. These are two middle relay instances on an Gigabit FTTH connection (Wave G in Redmond, WA): https://metrics.torproject.org/rs.html#details/B0F9BA27944FA59E3B1A182208FF… https://metrics.torproject.org/rs.html#details/DB710B14D7329B7289CFCC547F48… The Consensus Weight often is slower than the Advertised Bandwidth, and isn't ramping up despite having lots of bandwidth. I set RelayBandwidthRate to about 500 Mbps on each instance. This isn't just a Wave G problem, this affects almost every relay in the West Coast including other Gigabit ISPs such as AT&T (AS7018) and Sonic (AS46375), as well as hosting companies and colocation facilities. For instance, my Los Angeles-based Exit relays at Psychz Networks (AS40676) show this issue (however they are new): https://metrics.torproject.org/rs.html#details/156AAC3FAD1ACC8906316519DCB4… https://metrics.torproject.org/rs.html#details/A69CEB30328B1E85C6B167FECAF2… Even Emerald Onion has this issue: https://metrics.torproject.org/rs.html#details/09DCA3360179C6C8A5A20DDDE1C5… What is causing this issue and is there a solution? Is it backbone congestion due to COVID-19? The high load on dirauths? sbws regressions? Can I help fix this issue? I am a Core Tor contributor and am open to also working on sbws. Is there a way to optimize my relays (they run FreeBSD). -Neel === https://www.neelc.org/

2 1

FreeBSD Relays in VMware VSphere
by MacLemon 06 Aug '20

06 Aug '20

Hi! We've been having serious networking problems with a FreeBSD VM in VMware VSphere for several months now. The symptom is that network throughput slowly degrades and packet loss increases until your VM is unable to transmit any meaningful data. (Cannot SSH in anymore, etc. We're talking literally BITS per second bad.) We've been suspecting the vmx(8) networking driver for some time and now there's an update to the driver available in FreeBSD 12.1-p8. So if you're running a Relay on FreeBSD under VSphere, this should fix the issue. https://bsdsec.net/articles/freebsd-announce-freebsd-errata-notice-freebsd-… We hope that our two-in-one FreeBSD relay will be stable and passing traffic again! C3WLittleGem https://metrics.torproject.org/rs.html#details/B1F09810C4F7B9D30F483DCE3891… C3WPhantomStreak https://metrics.torproject.org/rs.html#details/C04850673F655A91F5AD3C06E1E5… C3W Family Members: https://metrics.torproject.org/rs.html#search/family:C04850673F655A91F5AD3C… Best regards MacLemon for the Chaos Computer Club Vienna/Austria

1 0

Exit relay: ERROR -- No Descriptor Available
by raspitor 05 Aug '20

05 Aug '20

After running an exit relay for a few days I see the message: ERROR -- No Descriptor Available on the torstatus.rueckgr.at site, and the traffic of my exit node is almost zero, also seen in nyx. Rebooting the system restarts everything normal and it is listed on the ruckgraet site, but after a day or so the problem occurs again. What might ne the cause of this?

2 1

Should I use Tor Alpha on my relays
by Sebastian Elisa Pfeifer 01 Aug '20

01 Aug '20

Hello, I am currently running Tor from the Tor Repositories on Debian Stable. Its working ok, but I was wondering if the network would benefit if I would start using Tor Alpha? Greetings, Sebastian

3 3

Recently very low Consensus Weight
by tor_this_too＠aol.com 01 Aug '20

01 Aug '20

Hi everyone, this is my first ever post on a mailinglist, so bare with me if I'm doing it wrong... I've been running a relay for some time now and recently the traffic dropped neraly completely https://metrics.torproject.org/rs.html#details/564A7F1D0314125AF60096CDE0A8… Consensus Weight is down to 71 and I wonder why this is the case? The relay was recently rebooted (just in case) and all other traffic I may initiate from this server is without a problem and at max speed. Any ideas?

1 0

Upgrading Linux Mint to Ulyana
by Anonforpeace 30 Jul '20

30 Jul '20

Hello: I am running my bridge on Linux Mint and there is an upgrade to the latest version, Linux Mint 20, Ulyana. I'd like to perform the upgrade, buy my question is, is there a way to do it without having to reconfigure the bridge entirely?

2 1

Guard flag got removed after only 48 hours of downtime.
by William Kane 28 Jul '20

28 Jul '20

1 0

Recover AccountingMax counter
by Camie Hethcote 28 Jul '20

28 Jul '20

Hi guys ! I had to reset tor service which led to AccountingMax counter reset. I'm already out of traffic limit so can I somehow recover this counter or should I wait until limit reset from my provider and then start tor service again? Thanks ! Camie

1 0

Unable to Automate TOR Browser | Python
by ABDAL LALIT 27 Jul '20

27 Jul '20

Hi, I'm trying to automate TOR Browser for anonymous scraping using python. The code is given below: from selenium import webdriver from selenium.webdriver.firefox.firefox_profile import FirefoxProfile from selenium.webdriver.firefox.firefox_binary import FirefoxBinary binary = FirefoxBinary("C://Tor Browser//Browser//firefox.exe") driver = webdriver.Firefox(firefox_binary = binary) def interactWithSite(driver): driver.get("https://www.google.com") driver.save_screenshot("screenshot.png") This is the preliminary code I used as a building block. I am receiving an error message, while running the code as follows: The pop-up is as [image: image.png] While the error shown in the code is as follows [image: image.png] [image: image.png] [image: image.png] I request the team to kindly help me with this issue. I'm really stuck and thus am unable to build up my project further

1 0

ContactInfo Information Sharing Specification Version 1 released
by nusenu 27 Jul '20

27 Jul '20

Hi, I'm happy to finally announce version 1 of the ContactInfo Information Sharing Specification: https://github.com/nusenu/ContactInfo-Information-Sharing-Specification This is an effort that started in 2017 as you can see on github. Tor's ContactInfo field was primarily intended to contain an email address and PGP key fingerprint but since this field accepts an arbitrary string it has been used for multiple other purposes (website urls, donation information, bitcoin addresses, ...). This is a specification to formalize the ContactInfo string to: - make provided information machine readable (could be used for Relay Search) - improve the ability to contact relay operators - allow the automatic attribution and verification that a relay is operated by a given entity - increase information sharing among tor relay operators Eran Sandler created a nice and simple to use generator based on the specification: https://torcontactinfogenerator.netlify.app/ If you used the generator and specification in the past, please regenerate your ContactInfo string, so it includes the version field. I'm particularly looking forward to seeing many use the verifyurl field. Overview of definied fields email pgp abuse operatorurl verifyurl keybase twitter mastodon matrix xmpp otr3 ricochet hoster cost uplinkbw trafficacct memory cpu virtualization bitcoin zcash donationurl offlinemasterkey signingkeylifetime sandbox os tls aesni autoupdate confmgmt dnslocation dnsqname dnssec dnslocalrootzone CIISSversion regards, nusenu -- https://mastodon.social/@nusenu

9 15

Re: [tor-relays] Become a Fallback Directory Mirror (deadline: July 23)
by tor-operator 26 Jul '20

26 Jul '20

Dear Gus or whoever it may concern; I was unable to reply before the deadline due to an unforeseeable issue which came up. That has now been cleared up and I hope it'll be fine to participate. At any rate, here are the ones which I'd like to opt-in: k0nslNET14: https://metrics.torproject.org/rs.html#details/8C5155E33148B13CEF02197037D8… k0nslNET1488: https://metrics.torproject.org/rs.html#details/239E373B108E04912B3AF8C32E99… k0nslNET7: https://metrics.torproject.org/rs.html#details/F1B6FA0ED8C60E9C7317AF027E7C… k0nslNET1889: https://metrics.torproject.org/rs.html#details/0E8FD4368083BD7817A42F3ECEDE… They all support IPv6 as well. All the best! Faithfully -k0nsl

1 0

an alternative to verifyurl
by nusenu 24 Jul '20

24 Jul '20

Hi, based on feedback I got about https://github.com/nusenu/ContactInfo-Information-Sharing-Specification I want to add an additional verification option based on DNS records to allow for the same verification as the verifyurl field provides but without the need to have a webserver and a proper TLS certificate. Explained by example: Lets say the operator has the domain example.com and runs a relay with fingerprint ABCF46A63F9C21FD315CD061B3EAA3EB05283ABC on IP addresses: 192.0.2.235 The operator would simply create the following DNS record for verification/linking: DNS A record: ABCF46A63F9C21FD315CD061B3EAA3EB05283ABC.example.com pointing to 192.0.2.235 If the relay has an IPv6 address as well an AAAA record is created for the same name pointing to the IPv6 address. Since we require a TLS certificate for verifyurl this will require DNSSEC to be enabled on the domain to be validated. Let me know if you have any feedback on this additional option. thanks! nusenu -- https://mastodon.social/@nusenu

1 0

generating graphs of "attributable" operators using ContactInfo/verifyurl
by nusenu 21 Jul '20

21 Jul '20

nusenu wrote [1]: > I'm generating some timeseries graphs now to see what (exit) fraction (stacked) > is managed by > https://torservers.net/partners.html > and those mentioned at the bottom of > https://lists.torproject.org/pipermail/tor-relays/2020-January/018022.html > + some custom additions for operators I had some contact before > over time (past 6 months). > spoiler: it used to be >50% until some malicious actor came along and reduced it to <50% I was still fiddling around with this by looking through the list of operators sorted by their network fraction of the overall capacity to add more to the "attributable" pool, but it is rather time consuming, especially if we aim to generate them on a regular basis. To allow for better automation/scalability in this effort I'd like to ask operators to use the ContactInfo string generator https://torcontactinfogenerator.netlify.app/ in particular the operatorurl and verifyurl fields. This will allow me to automate the time consuming job and generate some nice timeseries graphs. Please let me know if you have any questions. Looking forward to seeing many ContactInfo strings containing operatorurl and verifyurl fields. thanks, nusenu [1] https://lists.torproject.org/pipermail/tor-relays/2020-July/018660.html -- https://mastodon.social/@nusenu

1 0

tor relay - vps maintenance - what to do ?
by dlugasny＠protonmail.com 21 Jul '20

21 Jul '20

Hi, in the next three days, my VPS provider planning to shutdown ("maintenanance") for 6 hours my VPS where tor relay is running (with some services). What should I do ? I suspect that my VPS will be copied and reviewed (by not authorized persons) afterwards. How do You react in such a situations ? I appreciate any advice. Cheers Dlugasny Sent with [ProtonMail](https://protonmail.com) Secure Email.

6 5

Directory Authority servers still using excessive bandwidth
by Neel Chauhan 20 Jul '20

20 Jul '20

Hi tor-relays@, I have noticed that despite fixing bugs in the past, the directory authority relays are still using excessively high amounts of bandwidth, when looking at Relay Search: Examples: * https://metrics.torproject.org/rs.html#details/7EA6EAD6FD83083C538F44038BBF… * https://metrics.torproject.org/rs.html#details/9695DFC35FFEB861329B9F1AB04C… * https://metrics.torproject.org/rs.html#details/BD6A829255CB08E66FBE7D374836… And many more. I'm asking since I'm having an issue with low consensus weights on a symmetrical "Gigabit" pipe, and I am suspecting the overloaded authority servers are a factor. Are they? It could also be my current ISP's (Wave Broadband) crap peering, but would I really want to use Comcast? -Neel === https://www.neelc.org/

1 0

Re: [tor-relays] Error from LZMA encoder
by nottryingtobelame＠protonmail.com 20 Jul '20

20 Jul '20

This bridge is on Digital Ocean, so I checked my logs and it doesn't appear that my memory usage ever maxed. It hovers right around 80 with the highest spike at about 87%. Is that insufficient? Thank you for the reply.

1 0