- tor-relays - lists.torproject.org

Re: [tor-relays] Questions about relays on IPv6
by Charly Ghislain 19 Jun '19

19 Jun '19

Basically, assuming relays communicate between them over ipv4, guards and exits supporting ipv6 would allow clients with ipv6-only connectivity to join the network, and establish connections to ipv6-aware servers. So I guess it makes sense if you relay ever gets the guard flag. On Wed, Jun 19, 2019 at 10:21 AM <tschador(a)posteo.de> wrote: > > Hello, > > I have enabled IPv6 on my Relay [1] and setup a new one [2]. > Both got the additional Flag 'ReachableIPv6' - fine. > > In the 'IPv6 HOWTO' [3] I found: > > "Since clients only use the ORPort (because it's more anonymous2), and > relays only use IPv4, there is no reason to configure an IPv6 DirPort - > if you do, it will never be used." > > Hmm - 'relays only use IPv4' seems to be true. Until now I can see only > incoming connections from the authorities; no other IPv6 and no outgoing > IPv6 connection while on [1] there are over 6800 und on [2] over 4800 > IPv4 connections! > > So I wonder: Does it make sense to setup IPv6 non-exit relays when IPv6 > is not used? Or must I wait patiently - how long? > > Thanks. > > [1] 6A7551EEE18F78A9813096E82BF84F740D32B911 (Tormachine) > [2] 9556D34D97C0382E8B9901B036ACAA2F2B453FEC (Tormachine2) > [3] https://trac.torproject.org/projects/tor/wiki/doc/IPv6RelayHowto > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

exit relay "internal error"
by dns1983＠riseup.net 19 Jun '19

19 Jun '19

Hello, I have an exit relay on a debian remote vm. Yesterday, after I installed the last linux security update, I rebooted It, and than I had a problem with additional IPs, that were no more being assigned. In order to understand if it were a problem caused by the last upgrade I restored a previous backup, that I made on May with tar. I didn't solved the problem restoring the backup, so I opened a ticket with my provider. Now they have fixed this issue, but my tor instance is going in loop. The log says: ... Jun 18 13:33:31.000 [notice] Bootstrapped 0%: Starting Jun 18 13:33:32.000 [notice] Starting with guard context "default" ============================================================ T= 1560854012 INTERNAL ERROR: Raw assertion failed at ../src/lib/ctime/di_ops.c:179: ! old_val/usr/bin/tor(dump_stack_symbols_to_error_fds+0x33)[0x55a17b410943] /usr/bin/tor(tor_raw_assertion_failed_msg_+0x86)[0x55a17b410fd6] /usr/bin/tor(dimap_add_entry+0xa0)[0x55a17b411ba0] /usr/bin/tor(construct_ntor_key_map+0x69)[0x55a17b357969] /usr/bin/tor(server_onion_keys_new+0x4d)[0x55a17b39f4dd] /usr/bin/tor(+0x66e27)[0x55a17b287e27] /usr/bin/tor(threadpool_new+0x18b)[0x55a17b3b3f0b] /usr/bin/tor(cpu_init+0x9d)[0x55a17b28828d] /usr/bin/tor(run_tor_main_loop+0x136)[0x55a17b27a496] /usr/bin/tor(tor_run_main+0x1215)[0x55a17b27b935] /usr/bin/tor(tor_main+0x3a)[0x55a17b278a8a] /usr/bin/tor(main+0x19)[0x55a17b278609] /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1)[0x7ffb901ba2e1] /usr/bin/tor(_start+0x2a)[0x55a17b27865a] Jun 18 13:33:33.000 [notice] Tor 0.3.5.8 opening log file. ... What could be the problem? thanks Gigi

2 3

Having trouble getting my relay to be picked up
by Stephen Downward 17 Jun '19

17 Jun '19

Good evening, I am having some trouble running a tor relay node. I have forwarded TCP 9001, and can confirm I can access it from outside of my network. I used the following instructions to set up my node: https://trac.torproject.org/projects/tor/wiki/TorRelayGuide/DebianUbuntu Here is the relevant snippet from my log file: Jun 15 23:31:00 TorRelay systemd[1]: Starting Anonymizing overlay network for TCP... Jun 15 23:31:01 TorRelay tor[3488]: Jun 15 23:31:01.127 [notice] Tor 0.2.9.16 (git-9ef571339967c1e5) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.1.0j and Zlib 1.2.8. Jun 15 23:31:01 TorRelay tor[3488]: Jun 15 23:31:01.127 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning Jun 15 23:31:01 TorRelay tor[3488]: Jun 15 23:31:01.127 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc". Jun 15 23:31:01 TorRelay tor[3488]: Jun 15 23:31:01.127 [notice] Read configuration file "/etc/tor/torrc". Jun 15 23:31:01 TorRelay tor[3488]: Jun 15 23:31:01.131 [notice] Based on detected system memory, MaxMemInQueues is set to 1125 MB. You can override this by setting MaxMemInQueues by hand. Jun 15 23:31:01 TorRelay tor[3488]: Configuration was valid Jun 15 23:31:01 TorRelay tor[3491]: Jun 15 23:31:01.288 [notice] Tor 0.2.9.16 (git-9ef571339967c1e5) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.1.0j and Zlib 1.2.8. Jun 15 23:31:01 TorRelay tor[3491]: Jun 15 23:31:01.288 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning Jun 15 23:31:01 TorRelay tor[3491]: Jun 15 23:31:01.288 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc". Jun 15 23:31:01 TorRelay tor[3491]: Jun 15 23:31:01.288 [notice] Read configuration file "/etc/tor/torrc". Jun 15 23:31:01 TorRelay tor[3491]: Jun 15 23:31:01.292 [notice] Based on detected system memory, MaxMemInQueues is set to 1125 MB. You can override this by setting MaxMemInQueues by hand. Jun 15 23:31:01 TorRelay tor[3491]: Jun 15 23:31:01.292 [notice] Opening OR listener on 0.0.0.0:9001 Jun 15 23:31:05 TorRelay systemd[1]: Started Anonymizing overlay network for TCP. As you can see, I'm not getting "Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.", which would indicate that the relay is working properly. The server does not have any outgoing connections blocked. I am unsure what to do in order to get this to work - some help would be beneficial. Thanks!

2 1

Home Router limits question
by torix＠protonmail.com 16 Jun '19

16 Jun '19

Would tor show something in its log if I were hitting my router's limit? Seeing nothing there or in my router's gui log interface, but not sure what I should expect to see. TIA, --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

3 2

Setting Tor Relay to Hibernate After 100Mbits
by Keifer Bly 05 Jun '19

05 Jun '19

Hi all, so as of Google Clouds pricing plans on outgoing traffic, I am attempting to set my relay to hibernate after sending 100 mbits of data per month. Does this torrc configuration look like it would do that? SOCKSPort 0 ORPort 65534 ExitPolicy reject *:* ContactInfo keiferDoTblyAtgmaildOtcom Nickname torworld RelayBandwidthRate 100 MBits RelayBandwidthBurst 100 MBits AccountingMax 100 MBits AccountingStart month 1 00:00 AccountingRule out Thanks all. --Keifer

5 6

Curious up disclosure possible?
by Dr Gerard Bulger 04 Jun '19

04 Jun '19

Conclusion...avoid http, 80 ? https://blog.duszynski.eu/tor-ip-disclosure-through-http-301-cache-poisonin… Gerry Mobile Device > On 3 Jun 2019, at 9:26 pm, Keifer Bly <keifer.bly(a)gmail.com> wrote: > > So I am trying to limit as google cloud has strict pricing plans. Perhaps I should go back to just running a bridge for now. What would the traffic limit for a useful relay be? Thanks. > >> On Mon, Jun 3, 2019 at 10:40 AM Matt Traudt <pastly(a)torproject.org> wrote: >> On 6/3/19 13:20, Keifer Bly wrote: >> > Hi all, so as of Google Clouds pricing plans on outgoing traffic, I am >> > attempting to set my relay to hibernate after sending 100 mbits of data >> > per month. Does this torrc configuration look like it would do that? >> > >> > SOCKSPort 0 >> > >> > ORPort 65534 >> > >> > ExitPolicy reject *:* >> > >> > >> > ContactInfo keiferDoTblyAtgmaildOtcom >> > >> > Nickname torworld >> > >> > RelayBandwidthRate 100 MBits >> > >> > RelayBandwidthBurst 100 MBits >> > >> > AccountingMax 100 MBits >> > >> > AccountingStart month 1 00:00 >> > >> > AccountingRule out >> > >> > Thanks all. >> > >> >> 100 Megabits is 12.5 Megabytes, and approximately ~10 page loads of the >> average web page these days (as unscientifically eye-balled by me). >> >> Further, setting RBR and RBB to 100 Mbits (per second) means you could >> theoretically hit your tiny AccountingMax in the first second of every >> month. >> >> An AccountingMax of 100 Megabits is almost assuredly not what you >> actually want. >> >> I'm wondering if there was some confusion about the difference between >> speed and a simple of bytes. Confusingly, Tor uses the same unit strings >> (like "MBits") for both, but mentally we should be adding "per second" >> for torrc options like RelayBandwidthRate. >> >> 100 Megabits per second is a reasonable RBR setting for a reasonable >> relay. 100 Megabits per month is a useless relay. >> >> Hope that helps. >> >> Matt >> _______________________________________________ >> tor-relays mailing list >> tor-relays(a)lists.torproject.org >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > -- > --Keifer > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

Auto Upgrading Tor Using Unattended Ugrades
by Keifer Bly 04 Jun '19

04 Jun '19

Hello all, So I am now auto upgrading tor using the method at https://trac.torproject.org/projects/tor/wiki/TorRelayGuide/DebianUbuntuUpd… Upon testing, this is what I got. Initial blacklisted packages: Initial whitelisted packages: Starting unattended upgrades script Allowed origins are: [] Checking: firefox-esr ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: google-cloud-sdk ([<Origin component:'main' archive:'cloud-sdk-stretch' origin:'cloud-sdk-stretch' label:'cloud-sdk-stretch' site:'packages.cloud.google.com' isTrusted:True>]) Checking: google-compute-engine ([<Origin component:'main' archive:'google-compute-engine-stretch-stable' origin:'google-compute-engine-stretch-stable' label:'google-compute-engine-stretch-stable' site:'packages.cloud.google.com' isTrusted:True>]) Checking: google-compute-engine-oslogin ([<Origin component:'main' archive:'google-compute-engine-stretch-stable' origin:'google-compute-engine-stretch-stable' label:'google-compute-engine-stretch-stable' site:'packages.cloud.google.com' isTrusted:True>]) Checking: libavcodec57 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: libavfilter6 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: libavformat57 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: libavresample3 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: libavutil55 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: libpostproc54 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: libswresample2 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: libswscale4 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: python-google-compute-engine ([<Origin component:'main' archive:'google-compute-engine-stretch-stable' origin:'google-compute-engine-stretch-stable' label:'google-compute-engine-stretch-stable' site:'packages.cloud.google.com' isTrusted:True>]) Checking: python3-google-compute-engine ([<Origin component:'main' archive:'google-compute-engine-stretch-stable' origin:'google-compute-engine-stretch-stable' label:'google-compute-engine-stretch-stable' site:'packages.cloud.google.com' isTrusted:True>]) pkgs that look like they should be upgraded: Fetched 0 B in 0s (0 B/s) fetch.run() result: 0 blacklist: [] whitelist: [] No packages found that can be upgraded unattended and no pending auto-removals What I am attempting to do is automatically install new tor versions when they are released. Will this do that automatically? How can I keep this process running? Thanks. --Keifer

3 9

Relay Consensus Low
by Matt Westfall 02 Jun '19

02 Jun '19

My tor node: https://metrics.torproject.org/rs.html#details/B1B10104EB72A1FBBF6687B05F19… Doesn't ever go up above 8800 or so. One thing I notice in Nyx is that my connections never go above about 2000 in and out connections. I have advertised bandwidth of just shy of a gigabit in my config. I understand now that the "advertised bandwidth" is calculated based on observed traffic through the node, which while more reliable and avoids abuse, seems to be counter productive to a degree. Ultimately what do I need to do to get more traffic through my node? Cause I have a 2Gbps fiber sitting here basically doing nothing so I was giving 1Gbps to tor :) Config -------------- RunAsDaemon 1 ControlPort 9051 ORPort 9001 ORPORT [2001:559:c290::fffb]:9001 RelayBandwidthRate 45 MB # Throttle traffic to 100KB/s (800Kbps) RelayBandwidthBurst 50 MB # But allow bursts up to 200KB/s (1600Kbps) DirPort 9030 # ExitPolicy reject *:* # no exits allowed ExitPolicy reject6 *:* Any suggestions appreciated. Matt Westfall President & CIO ECAN Solutions, Inc. Everything Computers and Networks 804.592.1672

6 10

Onionoo and ASN Number/AS Name
by Conrad Rockenhaus 02 Jun '19

02 Jun '19

Hello, Onionoo returns “unknown” for my ASN for some reason (should return 63080) and returns “unknown” for AS Name (Should be GreyPony Consultants - as named in ARIN). I’m trying to find out where things might be potentially breaking here before I start connecting to the route servers at DE-CIX next week. Has anyone seen this type of issue before? Thanks, Conrad

4 3

Verizon.com blocked on Tor Middle Relay on FiOS
by Neel Chauhan 01 Jun '19

01 Jun '19

Hi, I have a Tor middle relay on Verizon FiOS. If I try to access Verizon.com on the FiOS connection running a Tor middle relay, I get this error: > Access denied, in accordance with Verizon Information Security Policy > Please contact us if there is a legitimate business need to access this > content. They gave an email address to the EdgeCast NOC that I contacted, but the EdgeCast support said I should contact FiOS and not EdgeCast, even though I think the blocking is on EdgeCast's side (if it was on FiOS then I would get a "Hmm. We’re having trouble finding that site" error from Firefox). Other Verizon sites such as Verizon Wireless and Verizon Media/Oath properties like AOL/Yahoo/Tumblr/HuffPost/etc. are not blocked on FiOS running Tor (heck, I can even sign up for Tumblr on exit relays), even though these other Verizon sites also use EdgeCast. For those who have middle relays on their home broadband connection (not bridge or exit), both on Verizon FiOS and other ISPs regardless of country or technology, please test for if Verizon.com is blocked. Thank You, Neel Chauhan

5 5

Tor relay operators meetup, 25/05/2019 @ RADIX hacklab, Athens
by Vasilis 28 May '19

28 May '19

Dear Tor friends and relay operators, Next Saturday (25.05.2019) a Tor relay operators meetup will take place at RADIX hacklab in Athens. When: Saturday, May 25th, 2019 Time: 19:00 / 7:00 PM Where: Kaniggos 34 & Stournari, Athens 10682, Greece Event link: https://radix.one/en/2019-05-18-tor-meetup/ Hope to see many of you there. Cheers, ~Vasilis -- Fingerprint: 8FD5 CF5F 39FC 03EB B382 7470 5FBF 70B1 D126 0162 Pubkey: https://pgp.mit.edu/pks/lookup?op=get&search=0x5FBF70B1D1260162

1 1

Tor Relay Operator Meeting at the Gulaschprogrammiernacht
by Christophe Kemp 28 May '19

28 May '19

Hello everyone, there will be a Tor Relay Operator Meeting at the Gulaschprogrammiernacht :) You will find soon more information here: https://entropia.de/GPN See you there! Best regards Chrëscht International Ambassador Frënn vun der Ënn A.S.B.L

1 1

VPNs and Ports
by grarpamp 25 May '19

25 May '19

>> On May 23, 2019, at 4:39 AM, Wallichii <wallichii(a)riseup.net> wrote: >> >> On Thu, 23 May 2019 04:15:36 -0500 >> Conrad Rockenhaus <conrad(a)rockenhaus.com> wrote: >> >>> I’ll be starting a free VPN service soon to allow users that are >>> blocked from using Tor at their location to access Tor. To prevent >>> abuse of the service, I plan on restricting the ability of the VPN to >>> only access 53, 80, 443, 8080, 8443, 9001, and 9030. Are there any >>> other ports I should consider keeping open for the service? >> >> IMO setting up a bridge will help more users because not everyone is >> going to trust someone on the internet giving free proxy, you should >> run a bridge if you want to help more users. That would be an input VPN... perhaps useful if DPI was breaking user's tor access protocols (to bridges or regular entry guards), but not their VPN traffic. Output VPN's could also be useful to allow tor users to bind their stack to it over tor, thus permitting UDP back and forth from clearnet... typical with voice video comms and a bunch of other applications that have been disabled for tor users becase tor only supports TCP. Operators would have to publish their VPN node info somewhere for users to use... or getbridges, getvpns. There are prior exploratory threads on this here before. Operators can also be running and supporting VPNGate.net service as both input and output.

1 0

Tor relay says it is reachable, but is not appearing on the network.
by Keifer Bly 24 May '19

24 May '19

Hi all, something very strange is going on with my relay called torworld. For some reason, the tor software is reporting that the relay is reachable and the relay is sending and receiving data (please see the attached screenshot), but after several days the relay is not appearing on the tor relay list. This seems strange and any ideas as to why this might be happening is appreciated. Thank you. running on Debian via Google Cloud VPS. Thank you. --Keifer

4 13

Scanning relays looking for onions
by Jordan 24 May '19

24 May '19

Looks like someone is making HTTP requests to known relays with a host header of an onion address. I have a webserver that returns 200 OK to all requests for honeypot-related fun and well... I can only imagine what they think my relay hosts as a result. Stay safe out there friends. 2019-05-23T02:43:58Z 5.8.10.[snip] 200 jg4rli4xoagvvmw47fr2bnnf[snip].onion / -- Jordan https://yui.cat/

1 0

new tor middle relay error
by Keifer Bly 24 May '19

24 May '19

Hi all, So I am running a new tor middle relay via a Google Cloud VPS but after the relay running for 1 day I am seeing this error May 16 18:23:50.000 [notice] Heartbeat: It seems like we are not in the cached consensus. Any thoughts on why this is happening is appreciated, thank you. --Keifer

2 2

forward relay connections
by tor-relay＠riseup.net 24 May '19

24 May '19

Hello dear friends I'm running a non exit relay on a debian machine (in the next few months I will switch to *BSD) on a Lime2. I'm running an exit relay too on a remote VM. I would turn my non-exit relay in an exit one, but for obvious reasons, I don't want to run It from my shitty ISP IP. I could give 10-14 mbps from my home connection, so I think that the lime2 would be powerful enough to run It properly. Do you think would be feasible to use SSH to forward all connections, except DNS queries, between my Lime2 and the remote VM in order to use an additional VM's IP? Could you give me some tips please? cheers Gigi

4 5

Tor relay problem
by findmei 22 May '19

22 May '19

Hi guys, I recently set up a tor relay on Centos7.But when I check the node at https://metrics.torproject.org/, i see that the relay is offline.Even though it is online.I looked tor log file. There was two common warning. May 15 14:42:13.000 [warn] Unable to stat resolver configuration in '/etc/resolv.conf': Permission denied May 15 14:49:13.000 [warn] HTTP status 307 ("Temporary Redirect") was unexpected while uploading descriptor to server '86.59.21.38:80'. Possibly the server is misconfigured? I try to chmod 777 /etc/resolv.conf for this warning " /etc/resolv.conf': Permission denied".But it didnt work it.And then i searched it on google for "HTTP status 307 ("Temporary Redirect")" .But i didn't find solution.Any suggestions? /etc/tor/torrc => https://paste.ubuntu.com/p/tD6zg2mwZy/ /var/log/tor/notices.log => https://paste.ubuntu.com/p/JsPGdgFJyT/ systemctl statust tor -l => https://paste.ubuntu.com/p/qpppzVK8qR/ Sent with [ProtonMail](https://protonmail.com) Secure Email.

4 4

Re: [tor-relays] Trouble Running Middle Relay On Google Cloud Debian VBS
by Keifer Bly 19 May '19

19 May '19

--Keifer On Sat, May 18, 2019 at 2:28 PM Keifer Bly <keifer.bly(a)gmail.com> wrote: > I have a specified port (65534). I just tried changing the ip adress to > 35.232.92.24 <https://35.232.92.24/>, and the connection to that port is > allowed by the firewall. I will check again over the next day and see if > anything chages. It is strange the software says traffic is being received > and says " > --May 18 01:20:06.000 [notice] Self-testing indicates your ORPort is > reachable from the outside. Excellent. > May 18 01:20:08.000 [notice] Performing bandwidth self-test...done." > > So according to the software the relay is reachable and sending and > receiving traffic. Seems strange it appears unreachable to me. Wonder why > that might be. Thanks. > > > On Sat, May 18, 2019 at 1:42 PM Roman Mamedov <rm(a)romanrm.net> wrote: > >> On Wed, 15 May 2019 22:26:25 -0700 >> Keifer Bly <keifer.bly(a)gmail.com> wrote: >> >> > Hi all, >> > >> > So I am starting a new middle relay using a VPS hosted on Google Cloud >> > running Debian. though the relay is running, it is not appearing in the >> > consensus after 10 hours. Here is the tor log, any thoughts on what is >> > going on would be greatly appreciated thank you. >> >> > May 15 18:23:53.000 [notice] Now checking whether ORPort >> > 35.238.140.120:65534 is reachable... (this may take up to 20 minutes -- >> > look for log messages indicating success) >> > May 15 18:23:54.000 [notice] Self-testing indicates your ORPort is >> > reachable from the outside. Excellent. >> >> FWIW this 35.238.140.120:65534 is not reachable right now from any of my >> machines. Did you change the port or IP since then? Also, I never used a >> Google >> VPS, but it appears you need to do extra steps to ensure you get a static >> external IP: >> >> https://cloud.google.com/compute/docs/ip-addresses/reserve-static-external-… >> Did you do that? >> >> >> -- >> With respect, >> Roman >> >

1 0

Trouble Running Middle Relay On Google Cloud Debian VBS
by Keifer Bly 19 May '19

19 May '19

Hi all, So I am starting a new middle relay using a VPS hosted on Google Cloud running Debian. though the relay is running, it is not appearing in the consensus after 10 hours. Here is the tor log, any thoughts on what is going on would be greatly appreciated thank you. May 15 18:23:47.096 [notice] Opening OR listener on 0.0.0.0:65534 May 15 18:23:47.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip. May 15 18:23:47.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6. May 15 18:23:47.000 [notice] Configured to measure statistics. Look for the *-stats files that will first be written to the data directory in 24 hours from now. May 15 18:23:47.000 [warn] You are running Tor as root. You don't need to, and you probably shouldn't. May 15 18:23:47.000 [notice] Your Tor server's identity key fingerprint is 'torworld 3A4E582092E7C6B822EC01F4D76F680F6C65B0A2' May 15 18:23:47.000 [notice] Bootstrapped 0%: Starting May 15 18:23:50.000 [notice] Bootstrapped 80%: Connecting to the Tor network May 15 18:23:51.000 [notice] Guessed our IP address as 35.238.140.120 (source: 193.23.244.244). May 15 18:23:52.000 [notice] Bootstrapped 85%: Finishing handshake with first hop May 15 18:23:52.000 [notice] Bootstrapped 90%: Establishing a Tor circuit May 15 18:23:53.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working. May 15 18:23:53.000 [notice] Bootstrapped 100%: Done May 15 18:23:53.000 [notice] Now checking whether ORPort 35.238.140.120:65534 is reachable... (this may take up to 20 minutes -- look for log messages indicating success) May 15 18:23:54.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. May 15 18:23:56.000 [notice] Performing bandwidth self-test...done. May 16 00:23:50.000 [notice] Heartbeat: It seems like we are not in the cached consensus. May 16 00:23:50.000 [notice] Heartbeat: Tor's uptime is 5:59 hours, with 0 circuits open. I've sent 789 kB and received 7.41 MB. May 16 00:23:50.000 [notice] Average packaged cell fullness: 100.000%. TLS write overhead: 27% May 16 00:23:50.000 [notice] Circuit handshake stats since last time: 0/0 TAP, 6/6 NTor. May 16 00:23:50.000 [notice] Since startup, we have initiated 0 v1 connections, 0 v2 connections, 0 v3 connections, and 8 v4 connections; and received 1 v1 connections, 0 v2 connections, 0 v3 connections, and 6 v4 connections. May 16 00:23:50.000 [notice] DoS mitigation since startup: 0 circuits rejected, 0 marked addresses. 0 connections closed. 0 single hop clients refused. May 16 00:58:51.000 [warn] Received http status code 404 ("Not found") from server '45.62.242.212:9030' while fetching consensus directory. I also had another thing I wanted to ask. I am working on a crontab script to automatically update and restart the tor relay once a month automatically, as I am already running a bridge on another network that needs to be updated manually. Does this script look like it would get the job done? I don't have much experience with crontab. # m h dom mon dow command 0 0 1 * * apt-get update apt update && apt install -y --only-upgrade tor killall tor tor root@instance-1:/home/keifer_bly# Thank you very much. --Keifer

4 7

Tor relay operator meetup in Mexico
by Jacobo Nájera 19 May '19

19 May '19

Hi We have our first relay operator meeting in Mexico, next week. More details here: https://blog.torproject.org/events/reunion-de-operadoras-y-operadores-mexico Thanks, Jacobo

1 0

Email Blocked by ISP
by K. Besig 17 May '19

17 May '19

I've run a home relay on and off for several years and recently, for the first time, had my email blocked by the ISP rendering it impossible to login into my 3rd party mail sever. When I contacted support I was informed my email password had been reset due to activity that resembled e-bombing/mass mailing. Only after submitting to a system scan while the rep waited on the phone,was I able to reset my password. I moved several months ago and went from a TWC legacy account to a Spectrum account. Wondering if anything other than lowering my tor bandwidth would keep them off my back...

5 4

Consensus-health - Guard flag
by lists＠for-privacy.net 08 May '19

08 May '19

Hello, I do not understand why relay A751D8BEE222564B7BA657F74B6658836FF1AEEA does not get a guard status. A few weeks ago I set AccountingMax on this relay. This is off for about 3 weeks. All servers are configured the same. https://metrics.torproject.org/rs.html#search/TorOrDie4privacyNET -- Ciao Marco!

1 0

Solving World's Tor Users Being Blocked by Websites (was: Tor exit bridges)
by grarpamp 08 May '19

08 May '19

On 5/7/19, nusenu <nusenu-lists(a)riseup.net> wrote: > > juanjo: >> Tor relays are public and easily blocked by IP. To connect to Tor >> network users where Tor is censored have to use bridges and even PTs. >> But, what happens on the exit? Many websites block Tor IPs so using >> it to access "clearweb" is not possible. Should we allow and start >> using "exit bridges"? In I2P we have not this problem since there is >> no central IP list of relays. > > there is no need to extend to one more hope to achieve this > > https://lists.torproject.org/pipermail/tor-dev/2018-March/013036.html > > https://lists.torproject.org/pipermail/tor-relays/2019-May/017273.html It's possible to augment such outbound solution offerings even further by running an OpenVPN termination service so users can transport UDP between clearnet as well. VPNGate.net project has an idea there too. Even large regional IPv6 pools could be bought and shared by operators and rotated through. More tor relay operators should consider some of the above options, whether as a requested "bridge" service mechanism, or listed in the consensus "contact" field, or as more of a standalone VPNGate support, or "ExitGate" project sort of arrangement. Using only tor right now, a user needs to use a clearnet service that does not scrape consensus, or one not fronted by services doing similar to CloudFlare's spiteful default tor blocking policy, or find a lucky exit within whatever geolocation game the clearnet service uses, or get lucky through traditional vpn or proxy. But those are only fun statistical hacks, not real long term solutions to the underlying problem. It's unfortunate that such braindead blocking, stupid policy regimes, sites refusal to developing creative solutions [1] for so many world's users legitimate privacy, info risk, anonymity needs... often results in users accounts being locked out and escalated into forcing disclosure of users private info and ID to sites to unlock them, thus exposing users to ongoing long term fraud, cost, and stress when that info (in most cases truly unnecessary to collect) is eventually shared misused and stolen by both sites and criminals... or outright auto deletion of user's valued account, built up social networks, etc... all for doing nothing wrong, and harming no one or thing. Death by DriveByExit :( And really shameful to deny world's users the right to simply read a website, be it social, commercial, information, etc or even sadly their own tax-theft funded governmental public sites doing this blocking too. There are some related projects, best practice, as well... https://trac.torproject.org/projects/tor/wiki/org/projects/WeSupportTor https://trac.torproject.org/projects/tor/wiki/org/projects/DontBlockMe https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-access Positive outreach and direct engagement by Tor community is key here, and perhaps not enough of that is happening, at least not publicly. It's a big enough issue that it really needs a dedicated, active, allied, and even funded subproject... a MegaProject that needs to happen. [1] Such as forfeitable cryptocurrency and mailed-in cash deposits refundable in time, increasing account priviledges and features based on account age and activity, community moderation and behaviour support within the sites, opensource third party tracking-free local SecurImage style captcha throughout a sites features, privacy preserving non-SMS non-Google/Apple pure TOTP authenticator protocols, PGP recovery, letting users simply *read* websites without any hindrance, while utilizing these methods only for *write* operations, etc and so many more ways you can envision... Cc'd for awareness and inclusion. *Please remove tor-dev and tor-relays, and move this to tor-talk or tor-access for ongoing discussion and progress. Thanks.

1 0

Pool of IP Addresses
by amytain 06 May '19

06 May '19

Is it possible to have a pool of ip addresses as the outbound ip addresses instead of just one?

4 6