- tor-relays - lists.torproject.org

Moving my obfs4 bridge from tor expert bundle to Debian, and have some questions. Thanks.
by Keifer Bly 30 Mar '20

30 Mar '20

Hi all, So I am switching the OBFS4 bridge I was running via Tor Expert Bundle on Windows 10 over to running it via Debian app for Windows 10. This app is on the Windows store at https://www.microsoft.com/en-us/p/debian/9msvkqc78pk6?activetab=pivot:overv… Essentially, it is an app that lets you run Linux packages on Windows. I made the switch so that I could keep tor and obfs4 up to date using unattended upgrades. However, for some odd reason, despite the fact I backed up the tor identity keys and pasted them into the keys directory when I moved over, the bridge is still generating new keys on startup. I copied the key files from my expert bundle bridge to /var/lib/tor/keys directory in the Linu terminal, I copied all of the files. It’s a bridge so no big deal I guess, but wonder why that is happening. https://metrics.torproject.org/rs.html#details/780F4E3ADBC574A63CE8155C0911… And, I tested to see of unattended upgrades was working correctly after configuring it with these instructions: https://trac.torproject.org/projects/tor/wiki/TorRelayGuide/DebianUbuntuUpd… And got this the attached photo as a result, does this mean it is keeping tor and obfs4 up to date? Thanks very much. tor update test.PNG <https://drive.google.com/file/d/1c5TinBlApx5YuObiwt8pkl9w_F74O0JL/view?usp=…> --Keifer

2 4

BadExit
by gerard＠bulger.co.uk 30 Mar '20

30 Mar '20

Oh the shame! Never had that tag on my exit before. I assume it was due to a bad boy attacking an IP, pointed out by my ISP, and the ISP put my server "under mitigation". I assume some filtering, which of course would have looked bad to TOR users. I did not spot the ISP's email for 30 minutes, but then I was able to block the offended IP. Within minutes of doing that the ISP said attack stop and my server was removed from mitigation. However the next day badexit tag on my exit and remains there How long does the tag last? I go to my other, overseas exit, a family member, to see the tag is aslo applied there to. Do family members get tarred with the same brush? I have turned both into relays for the time being. Or have I got this wrong. Is it a DNS thing? Are no some DNS providers causing issues forcing the tag? I am not using opendns. Gerry

5 12

Moving my obfs4 bridge from tor expert bundle to Debian
by Keifer Bly 30 Mar '20

30 Mar '20

1 0

Possible to run a tor bridge/relay via tor browser?
by Keifer Bly 30 Mar '20

30 Mar '20

2 3

Problem with ubuntu 18.04 x386
by Francisco 30 Mar '20

30 Mar '20

I make the installation following the official page torproject.org from the tor repositories. I edit de torrc file and save the changes. but when i restart the service, gives me error. $ systemctl status tor@default failed (Result: exit-code) since... systemd[1]: tor(a)default.service: Start request repeated too quickly. systemd[1]: tor(a)default.service: Failed with result 'exit-code'. systemd[1]: Failed to start Anonymizing overlay network for TCP. thanks in advance. Sent from ProtonMail mobile

5 4

Re: [tor-relays] Problem with ubuntu 18.04 x386
by Francisco 30 Mar '20

30 Mar '20

Hi, sorry for that, I'm sending more information now: Tor version: Tor 0.4.2.7 running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.1, Zlib 1.2.11, Liblzma 5.2.2, and Libzstd 1.3.3. The log when I try to restart the service (sudo systemctl restart tor@default) : Job for tor(a)default.service failed because the control process exited with error code. See "systemctl status tor(a)default.service" and "journalctl -xe" for details. $ systemctl status tor(a)default.service tor(a)default.service - Anonymizing overlay network for TCP Loaded: loaded (/lib/systemd/system/tor(a)default.service; enabled-runtime; vendor preset: enabled) Active: failed (Result: exit-code) since Sun 2020-03-29 14:25:21 -03; 4min 55s ago Process: 2587 ExecStartPre=/usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 0 --ver Process: 2586 ExecStartPre=/usr/bin/install -Z -m 02755 -o debian-tor -g debian-tor -d /run/tor (code=exited, status=0/SUCCESS) mar 29 14:25:21 x systemd[1]: Failed to start Anonymizing overlay network for TCP. mar 29 14:25:21 x systemd[1]: tor(a)default.service: Service hold-off time over, scheduling restart. mar 29 14:25:21 x systemd[1]: tor(a)default.service: Scheduled restart job, restart counter is at 5. mar 29 14:25:21 x systemd[1]: Stopped Anonymizing overlay network for TCP. mar 29 14:25:21 x systemd[1]: tor(a)default.service: Start request repeated too quickly. mar 29 14:25:21 x systemd[1]: tor(a)default.service: Failed with result 'exit-code'. mar 29 14:25:21 x systemd[1]: Failed to start Anonymizing overlay network for TCP. $ journalctl -xe mar 29 14:25:21 x systemd[1]: tor(a)default.service: Failed with result 'exit-code'. mar 29 14:25:21 x systemd[1]: Failed to start Anonymizing overlay network for TCP. -- Subject: Unit tor(a)default.service has failed -- Defined-By: systemd -- Support: http://www.ubuntu.com/support -- -- Unit tor(a)default.service has failed. -- -- The result is RESULT. mar 29 14:25:21 x systemd[1]: tor(a)default.service: Service hold-off time over, scheduling restart. mar 29 14:25:21 x systemd[1]: tor(a)default.service: Scheduled restart job, restart counter is at 5. -- Subject: Automatic restarting of a unit has been scheduled -- Defined-By: systemd -- Support: http://www.ubuntu.com/support -- -- Automatic restarting of the unit tor(a)default.service has been scheduled, as the result for -- the configured Restart= setting for the unit. mar 29 14:25:21 x systemd[1]: Stopped Anonymizing overlay network for TCP. -- Subject: Unit tor(a)default.service has finished shutting down -- Defined-By: systemd -- Support: http://www.ubuntu.com/support -- -- Unit tor(a)default.service has finished shutting down. mar 29 14:25:21 x systemd[1]: tor(a)default.service: Start request repeated too quickly. mar 29 14:25:21 x systemd[1]: tor(a)default.service: Failed with result 'exit-code'. mar 29 14:25:21 x systemd[1]: Failed to start Anonymizing overlay network for TCP. -- Subject: Unit tor(a)default.service has failed -- Defined-By: systemd -- Support: http://www.ubuntu.com/support -- -- Unit tor(a)default.service has failed. -- -- The result is RESULT. mar 29 14:29:38 x kernel: perf: interrupt took too long (3160 > 3140), lowering kernel.perf_event_max_sample_rate to 63250 mar 29 14:30:17 x sudo[2616]: fcp : TTY=pts/0 ; PWD=/home/fcp ; USER=root ; COMMAND=/bin/systemctl status tor@default mar 29 14:30:17 x sudo[2616]: pam_unix(sudo:session): session opened for user root by (uid=0) mar 29 14:32:07 x sudo[2616]: pam_unix(sudo:session): session closed for user root Sent with ProtonMail Secure Email. ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Sunday, March 29, 2020 9:00 AM, <tor-relays-request(a)lists.torproject.org> wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > Today's Topics: > > 1. Problem with ubuntu 18.04 x386 (Francisco) > 2. Re: Problem with ubuntu 18.04 x386 (TorGate) > > > Message: 1 > Date: Sun, 29 Mar 2020 06:31:48 +0000 > From: Francisco franciscort(a)protonmail.com > To: tor-relays(a)lists.torproject.org > Subject: [tor-relays] Problem with ubuntu 18.04 x386 > Message-ID: > TmgFQrqhT-AZx7PXSZ5VGxxkmeI-Xf869hC1IKYE6itAhAZwpgjfJ-jkkcNCKUNC4GaHzRi4gLCO91k1K9xPRajp-5hAg6aJEYUFvoNvPtc=(a)protonmail.com > > Content-Type: text/plain; charset="utf-8" > > I make the installation following the official page torproject.org from the tor repositories. > > I edit de torrc file and save the changes. but when i restart the service, gives me error. > > $ systemctl status tor@default > failed (Result: exit-code) since... > > systemd[1]: tor(a)default.service: Start request repeated too quickly. > systemd[1]: tor(a)default.service: Failed with result 'exit-code'. > systemd[1]: Failed to start Anonymizing overlay network for TCP. > > thanks in advance. > > Sent from ProtonMail mobile >

2 1

Re: [tor-relays] Possible to run a tor bridge/relay via tor browser?
by Keifer Bly 28 Mar '20

28 Mar '20

1 0

New relay
by William Pate 28 Mar '20

28 Mar '20

Set up another relay (this time on Raspberry Pi 4): https://metrics.torproject.org/rs.html#details/BD187CF1B44A84EC7DD1BC2AC9C4… William Pate willpate(a)pm.me 512-947-3311 inadequate.net

2 2

tor on Centos version question
by torix＠protonmail.com 25 Mar '20

25 Mar '20

I can see that my Debian relay went from 0.4.2.6 to 0.4.2.7 a few days ago automatically with auto updates set up. However, my hosted relay, which runs on Centos 7, is still at version 0.3.5.8. I am using the epel repo version. Is that okay? Or should I have added a tor repo? TIA, --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 1

Re: [tor-relays] Dirport9030
by Nuno Rego 24 Mar '20

24 Mar '20

As I said, I'm still learning. I have a server at Hetzner with a monthly limit of 20TB, and I am trying to adjust the speed so that it does not exceed 20TB at the end of the month. The problem is that whenever I place the BandwidthRate and BandwidthBurst above 10MB I lose the Guard, HSdir and V2Dir flags. On the page https://metrics.torproject.org/rs.html#search/TugaOnion I see that DirPort is 0 instead of 9030. I have the BandwidthRate and BandwidthBurst at 9MB and everything is fine, but I will reach the end of the month and I only spent about 10TB. Cumprimentos; TugaOnion -- Securely sent with Tutanota. Get your own encrypted, ad-free mailbox: https://tutanota.com Mar 4, 2020, 21:37 by : > I have a problem.> > I am learning, and I have 4 active relays.> > I used the same configuration on the 4. Recently 2 of them lost the Guard, HSdir and V2Dir flags.> > On the page > https://metrics.torproject.org/rs.html#search/TugaOnion> I see that DirPort is 0 instead of 9030. I haven't changed anything, and in the relay configuration there is 9030. Any suggestions on how to solve the problem> > ? > > Cumprimentos; > > -- > Securely sent with Tutanota. Get your own encrypted, ad-free mailbox: > https://tutanota.com >

3 3

Is it wise to continue to allow yahoo email accounts to request bridges?
by Keifer Bly 24 Mar '20

24 Mar '20

Hi all, So for those who did not know, Yahoo (and as such Yahoo Mail) is now owned by Verizon. They bought both Yahoo and AOL and combined them into Verizon Media. For this reason, it seems like allowing Yahoo Mail accounts would in turn allow a large scale ISP (in this case Verizon) to easily obtain bridges. Does anyone agree on this? It's just a thought. Thanks. --Keifer

2 1

Re: [tor-relays] Stable flag not appearing on my bridge.
by Keifer Bly 24 Mar '20

24 Mar '20

2 2

Relay Or/Dirport Unreachable
by Kathi 24 Mar '20

24 Mar '20

Plan: Configure relay on local cable connection (Century Link). The idea is to have the relay proofed operational the way I want it and then move it (torrc) to a droplet after it has been in operation for three days. Doing this saves cost in downloading to the droplet. Modem Zyxel C3000 _was_ set to port forward on 9001, 9030, and 9050 IP 192.XXX.X.X Turn off UpnP (plug and play) <relay fails with it on> GUFW is set to allow the above ports – reload to allow changes after much struggling/research to open ports 9001/9030 nc -zv 127.0.0.1 9001/9030 Connection to 127.0.0.1 9001 port [tcp/*] succeeded! <9030 also> Alrighty then! Tor –verify-config <many probs here, but cleared> No complaints NOTE: I know tor.Nyx should not be run as root, I get that. Tor/Nyx are running as root. I don’t know how to use debian-tor as usr. Nyx shows in it’s configuration as usr debian-tor. Su debian-tor produces a rollover back to root usr prompt. service tor start Nyx – No complaints, running as default. After just two minutes of operation the relay was running at 2 MB/s with bursts up to 3 MB/s. After the obligatory/frustrating twenty minute wait for or/dirport hand shaking I get:orport/dirport unreachable…. Adnauseum! Changed IP address to one given by tor, still unreachable. Lastly, I removed the 900l/9030 ports from the modem and installed 6969 as the orport. Changed GUFW, verified the changes took place, changed ip to real world IP 63.xxx.xxx.xxx in torrc. Hand shaking to the orport was almost immediate. Right now, the relay after twenty hours of operation is tortusing along at 20 B/s. Which to me is pure BS. Can someone give me some idea’s as to what I am doing wrong? Kathi

7 10

When will my relay gain the stable flag again?
by nottryingtobelame＠protonmail.com 19 Mar '20

19 Mar '20

My relay (903CA67D0DEB74CFBB01432840A26CB8C6C18FDF) is ~2 years old. Recently, I had a series of network issues that took my relay offline for unexpectedly long times. When it has gone offline before and lost the stable flag, it usually took only a couple days to pick it back up again. It is approaching 8 days since I finally got things resolved with a new router, but still no stable flag. I also used to have the guard flag, but I know I can't get back to guard status without the stable flag. Thanks.

2 1

When will my relay gain the stable flag again?
by nottryingtobelame＠protonmail.com 19 Mar '20

19 Mar '20

Disregard - the relay picked up the stable flag tonight.

1 0

Re: [tor-relays] Migrating to a new data center
by Isaac Grover, Aileron I.T. 19 Mar '20

19 Mar '20

Niftybunny, Thank you for the fun pictures. But the question on my mind: is "niftybunny" the brown marbled bunny or the larger white bunny? Or is "niftybunny" a cloud entity like the Borg?

2 1

Re: [tor-relays] Improving Relay IPv6 - RIPE Grant
by ILikeTor 19 Mar '20

19 Mar '20

Hi, I was wondering how you will implement IPv6-only relays. What limits will you set on how many relays can be per /(something)? Will you allow only two relays per /64, for example? Do you have any plans for that already?

3 2

Migrating to a new data center
by niftybunny 18 Mar '20

18 Mar '20

Comrades! Today the united rodent liberation army transitioned to a new data center in order to more effectively fight for privacy, security and freedom for every fluffy creature on this earth! We will work paw-in-paw to create a brighter future not only for us, but for every privacy-minded critter everywhere. Together we hop and together we fight! We are now online with 60cores/120 threads (Xeon), 384 gigabyte ram and a 60 gigabit connection. We will boost our puny traffic in the next weeks. For full transparency we also release these pictures of me and our QA team working hard to bring only the best of the best to you: https://i.imgur.com/iKh61E8.jpg <https://i.imgur.com/iKh61E8.jpg> https://i.imgur.com/4gnzncD.jpg <https://i.imgur.com/4gnzncD.jpg> https://i.imgur.com/DD0uaGC.jpg <https://i.imgur.com/DD0uaGC.jpg> https://i.imgur.com/VG7pm3S.jpg <https://i.imgur.com/VG7pm3S.jpg> https://i.imgur.com/wgRv8FU.jpg <https://i.imgur.com/wgRv8FU.jpg> niftybunny

4 5

Port Forwarding Question
by William Pate 18 Mar '20

18 Mar '20

This constantly trips me up. In my modem settings, I'm offered these options for port forwarding. I know I need to open 9001, but what do I enter into the external port fields? Thank you! William Pate willpate(a)pm.me 512-947-3311 inadequate.net

4 5

Fwd: Upcoming Tor security releases to fix a denial-of-service issue
by Nick Mathewson 17 Mar '20

17 Mar '20

---------- Forwarded message --------- From: Nick Mathewson <nickm(a)torproject.org> Date: Mon, Mar 16, 2020 at 1:25 PM Subject: Upcoming Tor security releases to fix a denial-of-service issue To: <tor-talk(a)lists.torproject.org> Hello! Some time this week, we currently plan to put out a set of security updates for all supported versions of Tor. These releases will fix a pair of denial-of-service bugs: one that we are classifying at "low" severity, and one that we are classifying at "high" severity. Our recommendation will be for everybody, including relays and clients, to upgrade once packages are available for their platforms. Although these vulnerabilities are "only" denial-of-service issues, any denial-of-service attack against Tor could be leveraged by an attacker to aid in a traffic analysis attack. To the best of our knowledge, these vulnerabilities are not being exploited in the wild. Currently supported release series are 0.3.5, 0.4.1, 0.4.2, and 0.4.3 (alpha). If you have not yet upgraded to one of those, the time to do so is soon. For our policy and process for handing security issues, please see: https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/Securit… best wishes, -- Nick

1 0

Consensus Weight Dropping/Authority Issues?
by John Ricketts 16 Mar '20

16 Mar '20

Hello, I have been watching the consensus weight and bandwidth of all of my 50 exit nodes drop consistently over the past few months. I have not made any hardware changes in my data center and actual customers have not complained about any performance issues. Operating systems and Tor version are up to date. I'm dedicating a significant portion of bandwidth to these nodes - 10gbit/sec. Am I having issues with the bandwidth authorities? I'm growing frustrated with my performance to resources ratio, I should be doing far better than this. Please throw ideas at me - open to any ideas. Thanks! John Quintex Alliance Consulting

7 11

tor relay
by Станислав 15 Mar '20

15 Mar '20

hi.I start second instance of tor, but for some reason it stopped working.after updating the firmware on board pc engines apu2 Mar 09 13:48:46.000 [notice] Bootstrapped 0% (starting): Starting Mar 09 13:49:03.000 [notice] Starting with guard context "default" Mar 09 13:49:03.000 [warn] Unable to parse '/etc/resolv.conf', or no nameservers in '/etc/resolv.conf' (1) Mar 09 13:49:03.000 [warn] Couldn't set up any working nameservers. Network not up yet? Will try again soon. Mar 09 13:49:03.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Mar 09 13:49:04.000 [notice] Bootstrapped 5% (conn): Connecting to a relay Mar 09 13:49:04.000 [warn] Unable to parse '/etc/resolv.conf', or no nameservers in '/etc/resolv.conf' (1) Mar 09 13:49:04.000 [notice] Bootstrapped 10% (conn_done): Connected to a relay Mar 09 13:49:04.000 [notice] Bootstrapped 14% (handshake): Handshaking with a relay Mar 09 13:49:05.000 [notice] Bootstrapped 15% (handshake_done): Handshake with a relay done Mar 09 13:49:05.000 [notice] Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits Mar 09 13:49:05.000 [notice] Bootstrapped 90% (ap_handshake_done): Handshake finished with a relay to build circuits Mar 09 13:49:05.000 [notice] Bootstrapped 95% (circuit_create): Establishing a Tor circuit Mar 09 13:49:06.000 [notice] Bootstrapped 100% (done): Done Mar 09 13:50:05.000 [notice] Self-testing indicates your DirPort is reachable from the outside. Excellent. Publishing server descriptor. Mar 09 13:50:08.000 [notice] Performing bandwidth self-test...done. Mar 09 13:51:32.000 [notice] Received reload signal (hup). Reloading config and resetting internal state. Mar 09 13:51:32.000 [notice] Read configuration file "/etc/tor/torrc1". Mar 09 13:51:32.000 [notice] Your ContactInfo config option is not set. Please consider setting it, so we can contact you if your server is misconfigured or something else goes wrong. Mar 09 13:51:32.000 [warn] MyFamily is set but ContactInfo is not configured. ContactInfo should always be set when MyFamily option is too. Mar 09 13:51:32.000 [notice] Tor 0.4.2.5 opening log file. Mar 09 13:51:32.000 [warn] Unable to parse '/etc/resolv.conf', or no nameservers in '/etc/resolv.conf' (1) Mar 09 13:51:32.000 [err] set_options(): Bug: Acting on config options left us in a broken state. Dying. (on Tor 0.4.2.5 ) Mar 09 13:51:32.000 [err] Reading config failed--see warnings above. For usage, try -h. Mar 09 13:51:32.000 [warn] Restart failed (config error?). Exiting. С уважением, Станислав

7 12

Relays will be getting clock skew warnings today
by Roger Dingledine 15 Mar '20

15 Mar '20

Hi folks! One of the directory authorities, dizum, has a wrong clock today. And it is causing warning lines for every relay who interacts with it. :( The log lines will look like this: Mar 14 16:17:40.121 [warn] Received directory with skewed time (DIRSERV:45.66.33.45:80): It seems that our clock is behind by 2 hours, 0 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. I contacted the directory authority operator and he is working on fixing it. Hopefully he'll get it fixed today, and we can point the flood of concerned mails to this thread. :) Thanks, --Roger

1 0

Any tor relay watchdog services?
by Layer13 14 Mar '20

14 Mar '20

Hello, I'm writing to query about tor relay watchdogs and ask if there are any services to check if tor reachable from the internet and if not it would send me an automated email telling me that my relay is down. A little bit of backstory on why I need this: so a couple of days ago (13 to be exact) my server had an issue and rebooted, since that reboot I didn't start my relay node and it was down for 13 days until I noticed it today.

3 2

website support
by potlatch 13 Mar '20

13 Mar '20

Hello Tor, I have a few exit relays on the Tor network but generally I'm flying blind. Why isn't there an index of tor relays that can be accessed? Why isn't the tor access via it's website able to deliver me to the software pages? Why is the graphic display of tor connections over 5-years old? I thought tor was expert in data delivery and security. potlatch(a)protonmail.com Sent with [ProtonMail](https://protonmail.com) Secure Email.

4 3