- tor-relays - lists.torproject.org

consensus-health.html and fallback dirs
by Felix 16 Dec '18

16 Dec '18

Hi everybody Reading [1] shows the following statistics about the fallback dirs: Dec 5: Running 116 Not Running 0 Missing 34 Dec 13: Running 155 Not Running 0 Missing 2 Today (Dec 16) shows: Running 151 Not Running 0 Missing 6 I wonder how we can come from 116 running fallbacks to 155 within one week (without a new release): Then I checked for some fallbacks and found: The relay with the fp F9246DEF2B653807236DA134F2AEAB103D58ABFE was a fallback acc. fallback_dirs.inc until around 3.2.8rc, then it changed ip. It is still in 2.9.x lts but with the old ip, recommended but actually useless. Since around Dec 13 it is listed again [1] where it wasn't through 2018. The same with 8FA37B93397015B2BC5A525C908485260BE9F422. Are the two relays newly counted as running in [1], where they are useless because of the changed ips? The new ips aren't in any fallback_dirs.inc's and [2] shows no fallback flag. Would thereby [1] look better than it is? [1] https://consensus-health.torproject.org/consensus-health.html [2] https://metrics.torproject.org/rs.html#details/F9246DEF2B653807236DA134F2AE… -- Cheers, Felix

1 0

17 new relays at OVH (2018-10-24)
by nusenu 14 Dec '18

14 Dec '18

Hi, if you are the operator that added 17 new relays at OVH on 2018-10-24 (full list bellow), please set a ContactInfo and especially the MyFamily in your torrc to avoid putting tor clients at risk. kind regards, nusenu > added on 2018-10-24 > > | Up | Ext | JoinTime | IP | CC | ORp | Dirp | Version | Contact | Nickname | eFamMembers | FP | > |------+-------+------------+---------------+------+-------+--------+-----------+---------------------------+--------------------+---------------+------------------------------------------| > | 1 | 0 | 13:43:16 | 145.239.0.204 | de | 443 | 0 | 0.3.4.8 | None | Chief | 1 | 5EF464D06322614A3B8B6C2652C3C616F098EE8A | > | 1 | 0 | 13:43:17 | 54.37.200.155 | fr | 443 | 0 | 0.3.4.8 | None | Dash | 1 | B55F8445569407FBE6BAF205799A9EF8AC8CC256 | > | 1 | 0 | 13:43:18 | 51.68.170.247 | fr | 443 | 0 | 0.3.4.8 | None | Rebel | 1 | E7B036D933D6E0A68983E8E3F664EAA54ACDEA37 | > | 1 | 0 | 13:43:20 | 51.75.82.166 | fr | 443 | 0 | 0.3.4.8 | None | Butch | 1 | 4809E3F9A73F5373734A4D23E7E7807A4743DD8A | > | 1 | 0 | 13:43:21 | 51.75.153.17 | fr | 443 | 0 | 0.3.4.8 | None | Beauty | 1 | B66FBE3B2D9CE257AF75DEA760C69E379F7CDB80 | > | 1 | 0 | 13:43:22 | 51.68.170.74 | fr | 443 | 0 | 0.3.4.8 | None | Killer | 1 | E4CB0C293588C3E5FA7DB94485FF2686E128267F | > | 1 | 0 | 13:43:23 | 51.68.185.141 | fr | 443 | 0 | 0.3.4.8 | None | Arrow | 1 | 707F51E232E0CDAF64EC446609E7112CD3AD11F8 | > | 1 | 0 | 13:43:24 | 54.37.207.82 | fr | 443 | 0 | 0.3.4.8 | None | Dazzle | 1 | B80142DDCF8D6B72929541EFCC643ECCD99BEE36 | > | 1 | 0 | 13:50:41 | 145.239.1.97 | de | 443 | 0 | 0.3.4.8 | None | Memo | 1 | 1C514FA1A4F8A464E1853B70AA5D2F16FF087AD2 | > | 1 | 0 | 13:50:42 | 51.38.107.122 | fr | 443 | 0 | 0.3.4.8 | None | Pitch | 1 | 91B026FA459AE0DA15673AB07A9C6DFF8B41782B | > | 1 | 0 | 13:50:43 | 51.68.186.59 | fr | 443 | 0 | 0.3.4.8 | None | Smasher | 1 | 3B0EFDE689693CFDEC2305F7B99D5B2FA4A77D91 | > | 1 | 0 | 13:50:44 | 51.75.85.114 | fr | 443 | 0 | 0.3.4.8 | None | Landslide | 1 | C953A4C8DF0E233CB0D190C2A71B71F634AB4A14 | > | 1 | 0 | 13:50:45 | 51.68.182.30 | fr | 443 | 0 | 0.3.4.8 | None | Shade | 1 | EBE58DDCC51A9D23EE9DD39791695B608A1DFB29 | > | 1 | 0 | 13:50:46 | 54.37.207.37 | fr | 443 | 0 | 0.3.4.8 | None | Buster | 1 | D10C82E275A2B0121CF4075C92687F0786A72892 | > | 1 | 0 | 13:50:47 | 54.37.200.157 | fr | 443 | 0 | 0.3.4.8 | None | Digger | 1 | 6B29A78EEB42D318290DB60C6A2EDC714F1BAD42 | > | 1 | 0 | 13:50:48 | 54.37.207.84 | fr | 443 | 0 | 0.3.4.8 | None | Pipi | 1 | 150F7C9F4814C4918F4D2DEAA0C7A2255DC8C0E0 | > | 1 | 0 | 13:50:49 | 51.75.153.19 | fr | 443 | 0 | 0.3.4.8 | None | Shrimp | 1 | 51429A0F427A8DCB5B9DE64E35ECBBB76DAB0F7F | -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

2 1

AS: "OVH SAS" - 17 relays (2018-10-24)
by nusenu 13 Dec '18

13 Dec '18

a relay gang joined in Oct 2018 at OVH 2018-10-24 | Up | Ext | JoinTime | IP | CC | ORp | Dirp | Version | Contact | Nickname | eFamMembers | FP | |------+-------+------------+---------------+------+-------+--------+-----------+---------------------------+--------------------+---------------+------------------------------------------| | 1 | 0 | 13:43:16 | 145.239.0.204 | de | 443 | 0 | 0.3.4.8 | None | Chief | 1 | 5EF464D06322614A3B8B6C2652C3C616F098EE8A | | 1 | 0 | 13:43:17 | 54.37.200.155 | fr | 443 | 0 | 0.3.4.8 | None | Dash | 1 | B55F8445569407FBE6BAF205799A9EF8AC8CC256 | | 1 | 0 | 13:43:18 | 51.68.170.247 | fr | 443 | 0 | 0.3.4.8 | None | Rebel | 1 | E7B036D933D6E0A68983E8E3F664EAA54ACDEA37 | | 1 | 0 | 13:43:20 | 51.75.82.166 | fr | 443 | 0 | 0.3.4.8 | None | Butch | 1 | 4809E3F9A73F5373734A4D23E7E7807A4743DD8A | | 1 | 0 | 13:43:21 | 51.75.153.17 | fr | 443 | 0 | 0.3.4.8 | None | Beauty | 1 | B66FBE3B2D9CE257AF75DEA760C69E379F7CDB80 | | 1 | 0 | 13:43:22 | 51.68.170.74 | fr | 443 | 0 | 0.3.4.8 | None | Killer | 1 | E4CB0C293588C3E5FA7DB94485FF2686E128267F | | 1 | 0 | 13:43:23 | 51.68.185.141 | fr | 443 | 0 | 0.3.4.8 | None | Arrow | 1 | 707F51E232E0CDAF64EC446609E7112CD3AD11F8 | | 1 | 0 | 13:43:24 | 54.37.207.82 | fr | 443 | 0 | 0.3.4.8 | None | Dazzle | 1 | B80142DDCF8D6B72929541EFCC643ECCD99BEE36 | | 1 | 0 | 13:50:41 | 145.239.1.97 | de | 443 | 0 | 0.3.4.8 | None | Memo | 1 | 1C514FA1A4F8A464E1853B70AA5D2F16FF087AD2 | | 1 | 0 | 13:50:42 | 51.38.107.122 | fr | 443 | 0 | 0.3.4.8 | None | Pitch | 1 | 91B026FA459AE0DA15673AB07A9C6DFF8B41782B | | 1 | 0 | 13:50:43 | 51.68.186.59 | fr | 443 | 0 | 0.3.4.8 | None | Smasher | 1 | 3B0EFDE689693CFDEC2305F7B99D5B2FA4A77D91 | | 1 | 0 | 13:50:44 | 51.75.85.114 | fr | 443 | 0 | 0.3.4.8 | None | Landslide | 1 | C953A4C8DF0E233CB0D190C2A71B71F634AB4A14 | | 1 | 0 | 13:50:45 | 51.68.182.30 | fr | 443 | 0 | 0.3.4.8 | None | Shade | 1 | EBE58DDCC51A9D23EE9DD39791695B608A1DFB29 | | 1 | 0 | 13:50:46 | 54.37.207.37 | fr | 443 | 0 | 0.3.4.8 | None | Buster | 1 | D10C82E275A2B0121CF4075C92687F0786A72892 | | 1 | 0 | 13:50:47 | 54.37.200.157 | fr | 443 | 0 | 0.3.4.8 | None | Digger | 1 | 6B29A78EEB42D318290DB60C6A2EDC714F1BAD42 | | 1 | 0 | 13:50:48 | 54.37.207.84 | fr | 443 | 0 | 0.3.4.8 | None | Pipi | 1 | 150F7C9F4814C4918F4D2DEAA0C7A2255DC8C0E0 | | 1 | 0 | 13:50:49 | 51.75.153.19 | fr | 443 | 0 | 0.3.4.8 | None | Shrimp | 1 | 51429A0F427A8DCB5B9DE64E35ECBBB76DAB0F7F | https://nusenu.github.io/OrNetRadar/2018/10/24/a3 -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

2 1

Current state of HSDir attacks on hidden services
by Jonathan D. Proulx 13 Dec '18

13 Dec '18

Hi All, The recent thread on ColoCrossing nodes[1] has gotten me wondering about the current state of HSDir attacks on hidden sites my web searching has only turned up some articles that are a few years old. Is it really still the case that spending a little time crafting the "right" finger prints i sall it takes for an adversary to reliably host the HSDir for a given hidden service? Well and 4-5 days uptime... Assuming the new ColoCrossing nodes are maliciously target ina particular hidden service is it just their sloppiness of putting them all up in the same place over a short period rather than in a slower and more widely distributed manner the only thing that prevented them from acheving their unmasking goals? Seems like it would be trivial for even a moderately funded attacker to put up 16-32 nodes across a similar number of hosting providers, https://www.terraform.io framework for example seems to support about 37 different "cloud providers" so finding that number of unique providers isn't really hard. If they also set them up at semirandom intervals over the course of a month or so who could ever tell? -Jon -- [1] https://lists.torproject.org/pipermail/tor-relays/2018-December/016712.html

2 2

Re: [tor-relays] Current state of HSDir attacks on hidden services
by Isaac Grover, Aileron I.T. 13 Dec '18

13 Dec '18

Good morning Jon, In addition to fingerprint correlation and AS choice, I also recall reading this paper about identifying hidden services using clock skew based on internal CPU temperature: https://murdoch.is/papers/ccs06hotornot.pdf . The paper is older, but I'm curious if such an attack method is still effective? Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - " Because #ProactiveIsBetter " O: 715-377-0440<tel:715-425-0440>, F:715-690-1029<tel:715-690-1029>, W: www.aileronit.com<http://www.aileronit.com/> LinkedIn: https://www.linkedin.com/in/IsaacGrover/ YouTube: https://www.youtube.com/channel/UCqrwZNFKdR-guKtuQzFPObQ

1 0

AS: "ColoCrossing" - 28 new relays
by nusenu 12 Dec '18

12 Dec '18

these relays look rather strange and are likely operated by a single entity, watch out. 2018-12-10 | Up | Ext | JoinTime | IP | CC | ORp | Dirp | Version | Contact | Nickname | eFamMembers | FP | |------+-------+------------+----------------+------+-------+--------+---------------+---------------------------+--------------+---------------+------------------------------------------| | 1 | 0 | 03:18:23 | 23.95.85.216 | us | 9447 | 0 | 0.3.5.5-alpha | bddwwell6_at_gmail_com | Bottom00S | 1 | C00BF86148C5391530FAFB550BD79706BCB55EB7 | | 1 | 0 | 03:26:38 | 107.173.70.100 | us | 10401 | 0 | 0.3.5.5-alpha | _bch440w AT yeezee.io | Porksoundz | 1 | C00BCA7A0EE03FD6E8B9BBBE1D9250DC2194EFD9 | | 1 | 0 | 03:36:15 | 107.173.70.107 | us | 15888 | 0 | 0.3.5.5-alpha | look4dotme at-hotmail.com | PLZTornode | 1 | C00B7102C5E1CF4F18CB529F05830FCCC1BDC611 | | 1 | 0 | 03:58:30 | 172.245.97.224 | us | 9700 | 0 | 0.3.5.5-alpha | abaubum@ mail_com | LikeTORLike | 1 | 2D56F86ABB41462E1CAA58F55F0BA15E843B5FDB | | 1 | 0 | 04:16:08 | 198.46.182.191 | us | 10534 | 0 | 0.3.5.5-alpha | fofalafel_gmail_com | RedSBoll999 | 1 | 2D56F2422C0DC5BA859E9167321314A26B1557C6 | | 1 | 0 | 04:20:57 | 23.95.0.211 | us | 13013 | 0 | 0.3.5.5-alpha | crab33s(a)yahoo.com | ifufcrab | 1 | 2D56FB048E4838534CA3F5276591632A64FE99F5 | | 1 | 0 | 05:23:14 | 107.173.70.105 | us | 12712 | 0 | 0.3.5.5-alpha | evertme2_atmail_net | ihaZtordrunk | 1 | 2EBFF85DAEB4CB84A117F801801BE9A536AE7524 | | 1 | 0 | 05:31:33 | 23.95.85.216 | us | 9404 | 0 | 0.3.5.5-alpha | __do_wwoo_rry___at__gmail | UKNOWnoto | 1 | 48A3DD64243F50550ABEFA1EB73D8D50E701C370 | | 1 | 0 | 06:27:32 | 172.245.97.194 | us | 12059 | 0 | 0.3.5.5-alpha | distorikATgmail.COM | erRHeroes | 1 | 2EBFFE2CBC8F1AC47EF3406B8010BDBDD9A83084 | | 1 | 0 | 06:32:40 | 107.173.70.103 | us | 11930 | 0 | 0.3.5.5-alpha | strapaganzza at mail.net | nerevgiuap | 1 | 48A3F20EA43CC7B4B124D3F8894795D31A3F90E4 | | 1 | 0 | 07:20:14 | 107.173.70.100 | us | 9902 | 0 | 0.3.5.5-alpha | painkillsde __AT__gmail_c | coldBloodT | 1 | 48A3F9E9990FB122839DD301D2195E2040DFD02F | | 1 | 0 | 08:28:44 | 107.173.70.104 | us | 9581 | 0 | 0.3.5.5-alpha | grave345235(a)gm__ail.com | rEPlace3r | 1 | AA08AE727D782C71930D828C4236CB2434E559C6 | | 1 | 0 | 08:33:40 | 107.173.70.102 | us | 16870 | 0 | 0.3.5.5-alpha | nneoodww9 at mail.com | Historitian | 1 | 8788B1A28148ABD7C48ADF00791BBE795BC4A282 | | 1 | 0 | 09:17:47 | 107.173.70.105 | us | 9292 | 0 | 0.3.5.5-alpha | ultimost_gmail_at | Bailarumba | 1 | AA088A35AFC64BE27806EB4CEB8DA059F157EBD9 | | 1 | 0 | 09:21:48 | 198.46.182.211 | us | 13873 | 0 | 0.3.5.5-alpha | augllsdn4(a)gmail.com | lighTOR | 1 | 878874CD42DE8695A0C02B6A5385E18638C0F95A | | 1 | 0 | 09:55:11 | 198.46.182.191 | us | 14037 | 0 | 0.3.5.5-alpha | elistranoob AT gmail dot. | ChOue | 1 | AA08CE96617B2D3B6F4753805B6C8244E07A40E9 | | 1 | 0 | 10:01:14 | 107.173.70.107 | us | 11389 | 0 | 0.3.5.5-alpha | to_me_baby at yahoo.com | bagarabild | 1 | 8788AAB8C1E28693C30CFC4159EE0F313C25D610 | | 1 | 0 | 15:30:33 | 107.173.70.10 | us | 9075 | 0 | 0.3.5.5-alpha | besktrsop(a)gmail.com | TorpDay | 1 | A099DAA630AC76F03FBB6138E2EBA884151E8706 | | 1 | 0 | 15:34:27 | 23.95.85.215 | us | 17563 | 0 | 0.3.5.5-alpha | bebe_rexa AT nomail.com | RepeldeVay | 1 | FB346238C8FCB515A49F53049D0129BF69EAD7CA | | 1 | 0 | 15:39:48 | 198.46.182.208 | us | 15199 | 0 | 0.3.5.5-alpha | pokerspot1(a)yahoo.com | delldivision | 1 | A099ED2475CE64280119ECDE46EA414931014540 | | 1 | 0 | 15:43:46 | 192.227.155.34 | us | 14413 | 0 | 0.3.5.5-alpha | justnomail1 AT gmail com | elitor00 | 1 | FB34E30229A265047A6A136AECA4CBBAA88EA12E | | 1 | 0 | 15:48:34 | 107.173.70.102 | us | 18204 | 0 | 0.3.5.5-alpha | spint000r_AT_jepajio.io | SPintro | 1 | A099DBA1456E1A185613DE047F728BA48D8CB79B | | 1 | 0 | 16:21:19 | 172.245.97.194 | us | 17781 | 0 | 0.3.5.5-alpha | mustamus3d_at_gmail_ | mustaHesh | 1 | FB347A7601D71BA4F929C27EDCC2A9B168DF0B79 | 2018-12-09 | Up | Ext | JoinTime | IP | CC | ORp | Dirp | Version | Contact | Nickname | eFamMembers | FP | |------+-------+------------+----------------+------+-------+--------+---------------+---------------------------+-------------+---------------+------------------------------------------| | 1 | 0 | 11:48:20 | 23.95.85.215 | us | 15349 | 0 | 0.3.5.5-alpha | vejj2dw_at_gmail.com | Veloprises | 1 | A677EE072DA6F8E6E902EC4B6CE35AE78CF450B6 | | 1 | 0 | 12:11:32 | 107.173.70.106 | us | 12001 | 0 | 0.3.5.5-alpha | yeeeyahoo dog yooh.net | nightmareON | 1 | A677EA1818F2EC649B583CBDD8F30AF3B7A09A23 | | 1 | 0 | 12:21:13 | 23.95.0.211 | us | 10509 | 0 | 0.3.5.5-alpha | meyuo AT school DOT ymail | DinoSource0 | 1 | A677F3CC1019AB162174CBB58C803E4C17268CD4 | | 1 | 0 | 13:42:45 | 107.173.70.101 | us | 11766 | 0 | 0.3.5.5-alpha | LOTOLOT_at yahoo.com | L0t0siaa | 1 | D021F4D88E2A87A184D72EC0FC7558DB29D161F5 | | 1 | 0 | 14:01:04 | 192.227.155.34 | us | 13968 | 0 | 0.3.5.5-alpha | chemie333 AT_vfmail.net | Hemabab3 | 1 | D021FF49FEF26D36C27E68C1A89E6F237DCDF5AC | -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

8 11

Monitoring a Tor-Relay - Telegraf / InfluxDB / Grafana ?
by petrarca＠protonmail.ch 08 Dec '18

08 Dec '18

I was thinking about setting up a monitoring of a Tor-Relay using Telegraf, InfluxDB and Grafana. Although I did read quite some documenation about it already I thought it might be good to check for possible experiences made here before spending (wasting) too much time trying it out myself. Questions I could not answer yet myself include e.g. - What will be the performance impact of running Telegraf on a Tor-Realy (CPU, disk, I/O,...)? - What happens if the InfluxDB (running on another system) is not reachable (maintenance, outages) - is the data lost or buffered somehow? - I would like to also keep see old/historical data but not as granular as more recent data - is there any way to boild down old data, e.g. to only keep hourly data for data older that a month etc.? There are an overwhelmingly number of monitoring possibilities (munin, collecd, monit, nyx, RRDtool, Cacti, Monitorix, Nagios, Zabbix,...) out there and one could easily spend days if not weeks with reading and testing. So any kind of shared experiences, hints or tips are more than welcome. .

3 2

Re: [tor-relays] Monitoring a Tor-Relay - Telegraf / InfluxDB / Grafana ?
by Olaf Grimm 08 Dec '18

08 Dec '18

For a tor relay that is not neccessary. After I thought about this in the past I decided it so after local watching. Now I use "htop" and "bwm-ng", "nload" and "nyx" via SSH on the remote server. You can use the website "uptime monitor" if you want to get a mail after server crash or other network errors. My preference is the tor monitoring network https://metrics.torproject.org. Why you want to use a big monitoring solution? If your tor relay is a second paylod on the server this ist ok, but this is not the right discussion channel here. Olaf Am 08.12.18 um 10:01 schrieb petrarca(a)protonmail.ch: > I was thinking about setting up a monitoring of a Tor-Relay using Telegraf, InfluxDB and Grafana. Although I did read quite some documenation about it already I thought it might be good to check for possible experiences made here before spending (wasting) too much time trying it out myself. > > Questions I could not answer yet myself include e.g. > > - What will be the performance impact of running Telegraf on a Tor-Realy (CPU, disk, I/O,...)? > - What happens if the InfluxDB (running on another system) is not reachable (maintenance, outages) - is the data lost or buffered somehow? > - I would like to also keep see old/historical data but not as granular as more recent data - is there any way to boild down old data, e.g. to only keep hourly data for data older that a month etc.? > > There are an overwhelmingly number of monitoring possibilities (munin, collecd, monit, nyx, RRDtool, Cacti, Monitorix, Nagios, Zabbix,...) out there and one could easily spend days if not weeks with reading and testing. So any kind of shared experiences, hints or tips are more than welcome. > > . > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Re: [tor-relays] Who is permanently checking my bridge relay?
by teor 05 Dec '18

05 Dec '18

Hi, > On 4 Dec 2018, at 21:27, tschador(a)posteo.de wrote: > > Hi all! > > I wonder who is permanently connecting/checking(?) my Tor bridge relay. > The ip is 66.111.2.129 and the period of the connects are 21 min 21 sec, > e.g.: > > Dec 4 10:32:00 SRC=66.111.2.129 > Dec 4 10:53:21 SRC=66.111.2.129 > Dec 4 11:14:43 SRC=66.111.2.129 > Dec 4 11:36:04 SRC=66.111.2.129 > Dec 4 11:57:26 SRC=66.111.2.129 > Dec 4 12:18:52 SRC=66.111.2.129 > > https://metrics.torproject.org/rs.html#search/66.111.2.129 gives no match. > > Any more experiences with other bridges? A few years ago, I opened a ticket to randomise authority reachability testing: https://trac.torproject.org/projects/tor/ticket/13928 But we triaged it out with the comment: My rationale for redlining it during triage was that the best place to do unpredictable-order testing is probably in a successor to torflow. (sbws is a successor to torflow, and it does randomise the testing order.) Are there any good reasons to randomise the order of authority tests? One good reason is that it breaks patterns in the authority checks, so relays really do need to be up all the time to be listed as reachable. T

1 0

IP addresses on the list
by Charly Ghislain 05 Dec '18

05 Dec '18

We have seen ip addresses posted on this list recently. They were coming from the logs. I think it would be nice if the software powering this list could scramble all ips in message bodies. At least having to reformat them in order to avoid that filter would give the poster some time to realize if it is a good idea to post it in the first place. I am also questioning myself whether addresses should be printed in log files altogether. Maybe even with the unsafe flag on - at least for released versions. If one wants to know which ip is connecting to her bridge, she can use whatever network capture software already existing. Any opinion? Thanks, Charly

3 2

Re: [tor-relays] Who is permanently checking my bridge relay?
by Charly Ghislain 05 Dec '18

05 Dec '18

If it wasn't, would posting the ip address of a client connecting to a bridge in here compromise her anonymity and/or allow one to firewall/blacklist her traffic? Im assuming one could guess the ip address of the running bridge based on the poster email address. On Tue, Dec 4, 2018 at 2:57 PM <tschador(a)posteo.de> wrote: > On 2018-12-04 13:15, George wrote: > > > tschador(a)posteo.de: > > >> I wonder who is permanently connecting/checking(?) my Tor bridge relay. > > > > > > That's the bridge directory authority. > > Ok, thank you. > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >

4 5

Fwd: Throughput of each circuit
by marziyeh latifi 04 Dec '18

04 Dec '18

Hello,I have two questions about tor's relay: 1-How can I calculate the throughput of each circuit in a relay?I mean that how can I calculate the number of cells that are sent from circuit queue to the output buffer per second in each relay? 2-What is the difference between circuit and channel in relays? I'm looking forward to hearing from you! thanks! Marziyeh

3 2

Re: [tor-relays] Who is permanently checking my bridge relay?
by Logforme 04 Dec '18

04 Dec '18

On 2018-12-04 16:33:33, tschador(a)posteo.de wrote: >Furthermore it was clear for me that fix periods of 21 min 21 sec >couldn't be a normal client. Missing more information about bridge >directory authority … >From https://blog.torproject.org/new-bridge-authority: "The Bridge Authority is a simple but essential piece of the Tor Network. Unlike the other directory authorities, the Bridge Authority does not get a vote in Tor's consensus protocol. Instead, it serves to aggregate relay descriptors which Tor Bridges send to it, checking their cryptographic validity and testing that the Bridges' ORPorts within these descriptors are reachable" The last part is what causes the connections you see

1 0

Re: [tor-relays] Who is permanently checking my bridge relay?
by George 04 Dec '18

04 Dec '18

tschador(a)posteo.de: > Hi all! > > I wonder who is permanently connecting/checking(?) my Tor bridge relay. That's the bridge directory authority. g -- 34A6 0A1F F8EF B465 866F F0C5 5D92 1FD1 ECF6 1682

1 0

UbuntuCore relays
by nusenu 02 Dec '18

02 Dec '18

Roger Dingledine wrote: > Btw, all of these UbuntuCore relays are from snap packages run by Tor > enthusiasts Do you indeed mean "all"? Since there have also been other hypothesis about at least some of these "UbuntuCore" relays in the past (see bad-relays ML archive from 2017-11-13), it would be great if you could elaborate on how you came to that conclusion. thanks, nusenu -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

3 5

tor irc
by deadcow＠tuta.io 01 Dec '18

01 Dec '18

i needed som fast help i tried IRC .... started well and when iv got help a= nd pasted the whole torrc file ... bot kicked me out i cant log in ive got = this answer deadcow sets mode +i on deadcow -NickServ- This nickname is registered and protected.=C2=A0 If it is your n= ickname, you may -NickServ- authenticate yourself to services with the IDENTIFY command.=C2= =A0 You are -NickServ- getting this message because you are not on the access list for = the -NickServ- deadcow nickname. * #tor-relays :Cannot join channel (Need to be identified and verified to j= oin this channel, '/msg NickServ help' to learn how to register and verify.= ) how do i get back to the chat ? ive never used irc :( anyway tha question was about bridge. i've started but i have no logs and dont know what is wrong. VPN is off. end of torrc #Bridge config RunAsDaemon 1 ORPort 9001 BridgeRelay 1 ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy # For a fixed obfs4 port (i.e. 9002), uncomment the following line. #ServerTransportListenAddr obfs4 0.0.0.0:9002 # Local communication port between Tor and obfs4. Always set this to "auto"= . "Ext" means # "extended", not "external". Don't try to set a specific port number, nor = listen on 0.0.0.0. ExtORPort auto #Set your bridge nickname and contact info ContactInfo deadcow(a)tuta.io <mailto:deadcow@tuta.io> <mailto:deadcow@tuta.io <mailto:deadcow@tuta.io>> Nickname deadcow something is wrong but what :) thx for help --- Google, Facebook, The government and others are spying on your emails! DO YOU LIKE IT? If not, CHANGE! Securely sent with Tutanota. Claim your encrypted mailbox today! https://tutanota.com

2 1

Conrad Rockenhaus
by torix＠protonmail.com 30 Nov '18

30 Nov '18

Dear All, Has anyone news of Conrad? His servers at greypony have been down a week, which is worrying. TIA, --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 1

Re: [tor-relays] Relay with VPN
by deadcow＠tuta.io 30 Nov '18

30 Nov '18

Hi thanks for the answers. I understand your answers. I can not agree or disagree because I have no idea about it so I believe you and I wont do Relay with VPN :) I am using VPN all the time and I wanted to try run relay.... what you say make sense, so for the time I try, i'll disconnect VPN. I just want to see that my internet is good enough to run it 10/1 but as i've read in the instructions maybe bridge would be better for me ... i have access to internet 120/10 so i could set up relay on that but i need a PC with linux and remote control so getting complicated ... first try out what i have, if cool, later try more and more :) I love the concept of tor, I'd like to promote it :) question: can be laptop ? i think why not, but maybe i'm wrong thanks for helps :) --- Google, Facebook, The government and others are spying on your emails! DO YOU LIKE IT? If not, CHANGE! Securely sent with Tutanota. Claim your encrypted mailbox today! https://tutanota.com Nov 28, 2018, 11:53 PM by tor-relays-request(a)lists.torproject.org: > Send tor-relays mailing list submissions to > > tor-relays(a)lists.torproject.org <mailto:tor-relays@lists.torproject.org> > > To subscribe or unsubscribe via the World Wide Web, visit > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays> > or, via email, send a message with subject or body 'help' to > > tor-relays-request(a)lists.torproject.org <mailto:tor-relays-request@lists.torproject.org> > > You can reach the person managing the list at > > tor-relays-owner(a)lists.torproject.org <mailto:tor-relays-owner@lists.torproject.org> > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Re: Relay with VPN (s7r) > 2. Compatibility issue with OpenSSL 1.1.1a (Nick Mathewson) > 3. Re: Relay with VPN (Roger Dingledine) > 4. Re: tor relay warning - what is mean ? (> dlugasny(a)protonmail.com <mailto:dlugasny@protonmail.com>> ) > 5. Re: Relay with VPN (teor) > 6. Re: tor relay warning - what is mean ? (teor) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 28 Nov 2018 14:23:38 +0200 > From: s7r <> s7r(a)sky-ip.org <mailto:s7r@sky-ip.org>> > > To: > tor-relays(a)lists.torproject.org <mailto:tor-relays@lists.torproject.org> > Subject: Re: [tor-relays] Relay with VPN > Message-ID: <> eba112e6-f60b-6278-2bf3-e86c34dc0dc4(a)sky-ip.org <mailto:eba112e6-f60b-6278-2bf3-e86c34dc0dc4@sky-ip.org>> > > Content-Type: text/plain; charset="utf-8" > > 11:18 PM, > deadcow(a)tuta.io <mailto:deadcow@tuta.io>> wrote: > >> Hi everyone, first time ever using mailing lists. Please let me know if something I'm doing wrong. >> >> I'd like to run a middle relay. >> I'm using Linux mint 19 >> >> The question. Can i set up relay through VPN? (nordvpn) >> Or if i want relay i have to stop using vpn? >> Thank you for help >> >> >> --- >> Google, Facebook, The government and others are spying on your emails! >> DO YOU LIKE IT? If not, CHANGE! >> Securely sent with Tutanota. Claim your encrypted mailbox today! >> https://tutanota.com <https://tutanota.com> >> > > Hello, > > Thanks for your interest in running a relay. > > You say you want to run a middle relay, why do you want to run it behind > a VPN in this case? Middle relays get no abuse complaints or anything as > they can not be used as exit points. Maybe you can explain to us why you > think you need to run your middle relay behind a VPN, do you have a > particular reason? Because for Tor running a relay behind a VPN is not a > + on security or privacy at all, instead it just complicates things. > > Secondly, if you have justified reason to still want to use a VPN on a > middle relay, here are some things you need to take into consideration > as well as disadvantages: > > - you will have higher latency; > - the bandwidth of your relay will be of the speed of the VPN itself, > and shared VPN usually are slow for high grade server connections that > run 24x7 with constant bandwidth usage; > - when the VPN tunnel will fail, due to an endpoint problem or internet > connectivity problem or route to destination problem, etc., the relay > will update its descriptor with the real IP address instead of the VPN > address, and when the VPN tunnel connects again change again and so on > until clients will be confused. One way around this is for your to > specify 'Address' in torrc and bind to explicit <address>:<port>. > > - you don't need just any VPN, you need a VPN with a public and static > IP address, so that you can actually open ports on that IP address > applications can bind and listen to certain ports. A normal shared VPN > that just changes the IP address for browsing is not sufficient, because > that does not assign a public static IP address directly. > > There are VPN services out there that offer public and static IP > addresses, but they are more expensive. > > - you should tell the VPN provider that you plan to use the maximum > available bandwidth 24x7, because all say it's unlimited because they > think "nobody will use that much", but when running Tor relays this is > not true. > >

2 1

tor relay warning - what is mean ?
by dlugasny＠protonmail.com 28 Nov '18

28 Nov '18

Hi, does any could tell me what is mean that Warn ? 16:32:33 [WARN] {BUG} Bug: 0x1076f25 <_start+0xa5> at /usr/local/bin/tor (on Tor 0.3.4.9 4ec3ccf2863b86e7) │ 16:32:33 [WARN] {BUG} Bug: 0x1077119 <main+0x19> at /usr/local/bin/tor (on Tor 0.3.4.9 4ec3ccf2863b86e7) │ 16:32:33 [WARN] {BUG} Bug: 0x107727c <tor_main+0x4c> at /usr/local/bin/tor (on Tor 0.3.4.9 4ec3ccf2863b86e7) │ 16:32:33 [WARN] {BUG} Bug: 0x107bfe9 <tor_run_main+0xb9> at /usr/local/bin/tor (on Tor 0.3.4.9 4ec3ccf2863b86e7) │ 16:32:33 [WARN] {BUG} Bug: 0x107a221 <do_main_loop+0x411> at /usr/local/bin/tor (on Tor 0.3.4.9 4ec3ccf2863b86e7) ─┘ 16:32:33 [WARN] {BUG} Bug: 0x801b4de1f <event_base_loop+0x51f> at /usr/local/lib/libevent-2.1.so.6 (on Tor 0.3.4.9 4ec3ccf2863b86e7) I extracted that from Nyx. FreeBSD 11.1 Cheers Dlugasny Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 3

Relay with VPN
by deadcow＠tuta.io 28 Nov '18

28 Nov '18

Hi everyone, first time ever using mailing lists. Please let me know if something I'm doing wrong. I'd like to run a middle relay. I'm using Linux mint 19 The question. Can i set up relay through VPN? (nordvpn) Or if i want relay i have to stop using vpn? Thank you for help --- Google, Facebook, The government and others are spying on your emails! DO YOU LIKE IT? If not, CHANGE! Securely sent with Tutanota. Claim your encrypted mailbox today! https://tutanota.com

5 4

Is There A Windows CMD Command To Update Tor.exe?
by Keifer Bly 28 Nov '18

28 Nov '18

Hello, so today when I started my bridge relay, tor popped up with a warning saying this WARNING: According to directory authorities, this version of tor [0.3.4.8] is out of date or no longer recommended. I am running the obfs4 bridge via tor expert bundle, and was told previously that that is updated when the tor browser is updated, but am wondering, seeing as there is a way to do this on MacOS and Linux, is there a way to update the tor process (I guess I would also need to update the obfs4 exe process) via the Windows command line? Thank you.

2 1

Re: [tor-relays] tor relay - impact on e-mail system reputation
by starlight.2018q2＠binnacle.cx 26 Nov '18

26 Nov '18

If you have a good deal on a powerful VPS you wish to run as a relay, suggest you rent a second dirt-cheap low resource VPS for email. MTA softwares tolerate flaky connectivity and system performance well. RBLs are a fact of life. I use them to great benefit on my MTAs. Reason no-port-25 exits are blacklisted is that web-form spammers use them. Here are two excellent resources for viewing the blacklist status of IP addresses (helpful to check IPs, when known, before purchase): http://multirbl.valli.org/lookup/x.x.x.x.html # single IP https://www.senderbase.org/lookup/?search_string=x.x.x.x/24 # block, directs to Talos The lists which matter most are Spamhaus, CBL and Barracuda. Good luck with it! On 2Thu Nov 22 13:08:55 UTC 2018, Artem Dziubenko wrote: > >Hi, > >no its not possible. This is powerful VPS with single IP. I simply do not >want to have blacklisted IP because tor relay is running on it. > >In the past many times IP was blaclisted and afterwards I had >several problems with email delivery. > >I do not understand why rbls blocking tor non exit relay ip's... It stupid... > >Cheers >Dlugasny > >Sent from ProtonMail mobile > >-------- Original Message -------- >On 22 Nov 2018, 08:30, Artem Dziubenko wrote: > >> Is it possible to get a second IP address for that server from your ISP? >> >> ------ Original Message ------ >>> Hi, >>> >>> I haven an e-mail server which has a lot of not consumed >>> resources (CPU/Traffic etc.). Base on my practice I know that my >>> E-mail server will loose reputation if Tor relay will run on the same IP. >>> >>> Is there any other way to utilize resources of that machine without >>>> any reputation impact on the IP. >>> >>> Thanks in advance for any feedback. >>> >>> Cheers >>> Dlugasny

4 5

Raspberry pi 3 relay performace
by tor_manager＠autistici.org 26 Nov '18

26 Nov '18

Hello everyone, I have a tor relay running on a raspberry with raspbian 9 and tor version 3.4.8, everything is working fine for more then a year. I noticed that the average download/upload is just 1.5 MB and the peak 3.3 MB The Bandwidth configuration is the following: BandwidthRate 9 MB BandwidthBurst 10 MB RelayBandwidthRate 9 MB RelayBandwidthBurst 10 MB MaxAdvertisedBandwidth 9 MB It doesn't look the CPU or memory usage are too high. Is this something normal? How can I improve the performance? Thanks a lot

4 8

How To Update The Tor Expert Bundle To Tor 0.3.4.9
by Keifer Bly 26 Nov '18

26 Nov '18

Hello, So I am running an obfscated bridge on Windows 10 via the tor expert bundle, which, even when I tried downloading it today, is running tor 0.3.4.8. I was unaware that tor 0.3.4.9 had been released due to this. Do to being away from where the relay is running, I will not be able to update it for about 4 days, but how could I update the tor expert bundle to tor 0,3,4,9? How could I update the tor expert bundle to the newest tor in general? Thank you.

2 2

Is the public information for relays trustable?
by Gunnar Wolf 25 Nov '18

25 Nov '18

Hi, I just asked a superset of this question to the IRC channel - But I want to be able to better refer to the subset that wasn't answered there ;-) I am working together with some other people to increase the number of relays in Mexico. We have finally started to increase the number - from our usual two active relays to four, still WAY too low, but it's a beginning: https://metrics.torproject.org/rs.html#search/country:mx But there are some issues / questions bugging me: When we set out to pursue this, we faced the reality that most Mexican ISPs block Tor relays in some way or another: The main ISP in the country (Telmex / Infinitum / Uninet, depending on the business branch in question) blocks all communication to seven of the dirauths, thereby making it impossible to operate a relay (although bridges do work); many other ISPs employ a set of nested NAT systems, making it impossible for external computers to reach a server inside it... However, we have at least one relay claiming to be from Uninet (5F6E720D7F0A95D6276B6F6DF8C210735A331B9D - Not currently online, but made it to the consensus at least at several points over the past months). We also have some in an ISP that gives addresses behind multiple layers of NAT and are unworkable (FF3FF664B0811B2E3C237BECA4382966AD9E393C, 6E483A91105C647A65ED04E1CB637AAD84F5943F) So... Is this information right? Can this be in some way spoofed? How should I interpret this? Thanks,

4 4