- tor-relays - lists.torproject.org

Exit Node shutdown
by Tyler Durden 13 Oct '18

13 Oct '18

Hi Our two exit nodes "chulak" and "aurora" will be terminated by the end of this month. Both are listed in the Fallback Directory Mirror list and need to be removed. Fingerprints: 379FB450010D17078B3766C2273303C358C3A442 B0279A521375F3CB2AE210BDBFC645FDD2E1973A The shutdown is due to an internal reorganization. Greetings Sam Grüneisen - President FVDE

3 2

Re: [tor-relays] DSL Router
by Isaac Grover, Aileron I.T. 13 Oct '18

13 Oct '18

Good morning, Both "cheap" and "useful" for running Tor nodes at home won't be found in big box retail ever, so I would take a look at the Mikrotik RB750Gr3 - it will do exactly what you want after it's configured properly. I used to have an RB1200 and recently upgraded to a CCR1009, both from Mikrotik, and have found them to be quite capable under heavy load. Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" Office: 715-377-0440, Fax:715-690-1029, Web: www.aileronit.com

5 4

Documentation on hardening Debian and Tor Bridge?
by Nathaniel Suchy 13 Oct '18

13 Oct '18

Hi, What documentation, if any exists on hardening my Debian install as well as my Tor Bridge? It's using OBFS4 and using IPTABLES NAT Forwarding for access through port 443 to obfuscate the protocol and of course avoid people from getting suspicious based on the port number? Is there a way I can make Tor use even stronger keys and such? I want things to be as hard to hack as possible. Cordially, Nathaniel Suchy

1 0

DSL Router
by onion 12 Oct '18

12 Oct '18

Apparently it looks like the usual router consumer products cant stand the number of connections on a DSL Line with 40Mbit/s upload capability. Could somebody help and share experience or a recommendation for a small, cheap, useful, up to date router, possibly with two WAN channels to get a consumer product combined on one side behind that router with all the DECT and other functionality for a private household and to have the Tor stuff on the second WAN channel. Thank you.

2 1

Which would be more helpful, to run a bridge or normal relay?
by Keifer Bly 12 Oct '18

12 Oct '18

Hi, So I just set up a new relay via the Tor expert bundle and am wondering if running a normal relay or a bridge would currently be more helpful? Thank you.

4 9

FreeBSD Solution Comparable to VyOS (BGP IPv4+6 FW) in Tor Intensive Environments
by grarpamp 11 Oct '18

11 Oct '18

On 10/11/18, Conrad Rockenhaus <conrad(a)rockenhaus.com> wrote: > Hello, > > I’m researching for a new colo, and in order to bring it online until I can > consolidate some hardware, I would like to temporarily run a VyOS Router as > the main router so I can start getting things online sooner than later. This > VyOS Router will be running BGP with the upstream providers, IPv4, and IPv6, > and basic filtering to protect the router and other essential hardware. > > I’ve seen VyOS perform quite wonderfully on 4-6 gbps links with traffic > coming primarily from a CDN. My question is does anyone here have any > experience running VyOS with that much traffic with that traffic primarily > consisting of Tor traffic? Are there any other suggestions for a basic > non-hardware router based solution as a temporary implementation, perhaps > even using FreeBSD? > > Thanks, Conrad FreeBSD can work fine in this application and would be a natural and complementary tool to your efforts in supporting relay diversity towards more BSD (FreeBSD) nodes. Further, Linux's older iptables, even its current nftables, will seem very different compared to the FreeBSD IPFW or PF with which you are surely familiar. You'll probably find more answers as to some BGP, packet filter, and hardware solutions for this on the freebsd-net mailing list above. And or on freebsd-questions , freebsd-isp , freebsd-ipfw , freebsd-pf , ... https://forums.freebsd.org/ See also (note: wikipedia often outdated / trivial)... https://wikipedia.org/wiki/List_of_open-source_routing_platforms Mentioned but not yet linked in above list... https://frrouting.org/ https://wikipedia.org/wiki/List_of_router_and_firewall_distributions https://forum.opnsense.org/index.php?topic=3534 Includes some bits from HardenedBSD, its onions are below... http://dxsj6ifxytlgq33k.onion/ http://3jkjhrvkdbdkqisnwhdpe4afh2j2g3suhsfcewiemsyk5ecd6gadmxyd.onion/ https://wikipedia.org/wiki/Comparison_of_firewalls

1 0

VyOS in Tor Intensive Environments
by Conrad Rockenhaus 11 Oct '18

11 Oct '18

Hello, I’m researching for a new colo, and in order to bring it online until I can consolidate some hardware, I would like to temporarily run a VyOS Router as the main router so I can start getting things online sooner than later. This VyOS Router will be running BGP with the upstream providers, IPv4, and IPv6, and basic filtering to protect the router and other essential hardware. I’ve seen VyOS perform quite wonderfully on 4-6 gbps links with traffic coming primarily from a CDN. My question is does anyone here have any experience running VyOS with that much traffic with that traffic primarily consisting of Tor traffic? Are there any other suggestions for a basic non-hardware router based solution as a temporary implementation, perhaps even using FreeBSD? Thanks, Conrad

2 1

Thank You
by Conrad Rockenhaus 11 Oct '18

11 Oct '18

Thank you everyone for the well wishes. I have been discharged from the hospital and I’m recovering slowly at home. I appreciate all of the kind notes that I received and again, thank you. Regards, Conrad

1 0

tor 0.3.2.x reaching end-of-life on 2018-10-09
by nusenu 10 Oct '18

10 Oct '18

this should also be on this list: https://twitter.com/torproject/status/1045295783812235267 wrote: > Tor 0.3.2.x will be EOL on October 9th. This > means the network team will stop maintaining it, and 0.3.2.x will no > longer receive security patches. Please upgrade before October 9th! > Thank you for helping us keep the network strong please upgrade your relays if you are on one of these lists: https://metrics.torproject.org/rs.html#search/version:0.3.2%20running:true https://nusenu.github.io/OrNetStats/eolrelays -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

2 1

1/6 of the tor network capacity runs on end-of-life tor releases - Let's patch!
by nusenu 09 Oct '18

09 Oct '18

Dear Tor Relay Operators! today marks the end-of-life day of tor version 0.3.2.x, meaning: No more security updates for tor 0.3.2. With this day the amount of relays running end-of-life tor versions on the network increased to over 1300 (!) making up 1/6 of the entire capacity. If you find yourself on this list bellow, please change your tor version to one of the supported releases (some are in BCC) https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTor… affected exit/guard operators (grouped by contact, sorted by cw, filtered for cw > 100) for a per-relay list see: https://nusenu.github.io/OrNetStats/eolrelays +----------------------------------------------------+-----------------------+--------+---------+ | contact | tor versions | cw | #relays | +----------------------------------------------------+-----------------------+--------+---------+ | Privacy Republic <abuse-team _at_ PrivacyRepublic | 0.3.1.10 | 282500 | 4 | | sirmatt ksu edu 0x94FBBB0A | 0.3.2.10,0.3.2.10-dev | 166800 | 2 | | abuse(a)to-surf-and-protect.net | 0.3.2.10 | 157700 | 3 | | tor-relay-admin robgjansen com | https://onioncoun | 0.3.2.10-dev | 98770 | 4 | | 0xFED4E03C Jan <jan AT wth dot in> | 0.3.1.10 | 88300 | 2 | | Admin <tor(a)ngc292.space> | 0.3.1.9,0.3.2.9 | 74900 | 3 | | email:hello[]brasshorncomms.uk hoster:brasshorncom | 0.3.2.10 | 70800 | 2 | | Jordan <jordan(a)yui.cat> | 0.3.2.10 | 66400 | 3 | | Kevin Hicks <admin(a)fissionrelays.net> | 0.3.2.10 | 61000 | 4 | | Peter Pan <peterpan(a)fscore.de> | 0.3.2.10 | 60400 | 1 | | Random Person <root <at> nldo.nl> | 0.3.2.10 | 59800 | 1 | | Boris Nagaev 19pZzECKDDMbSpaWEy8vGvELEfXM8GrkHS <b | 0.3.2.10 | 56300 | 1 | | ${CONTACT_GPG_FINGERPRINT} ${CONTACT_NAME} ${CONTA | 0.3.1.10,0.3.1.9 | 50720 | 4 | | Itzhak Daniel <itzhak+tor(a)itk98.net> | 0.3.1.10 | 50420 | 3 | | Ghost <torabuse AT cridyn dot com> | 0.3.2.10 | 47900 | 3 | | staff(a)dotsrc.org | 0.3.2.10 | 45100 | 2 | | 0x77A31D11 Tony Olagbaiye <frony0 AT gmail dot com | 0.3.0.10 | 41000 | 1 | | Sebastian <tor(a)sebastianhahn.net> - 12NbRAjAG5U3LL | 0.3.2.10 | 40200 | 1 | | cubox at irc.freenode.org | 0.3.2.9 | 40100 | 1 | | 0xC443B5A5AD274F30 Simon Fischer <tor AT simonfisc | 0.3.1.10,0.3.2.10 | 37300 | 2 | | aTorRelay(a)gmail.com | 0.3.2.10 | 37200 | 1 | | Torchwood <contact [at] pakitow [dot] eu> | 0.3.2.10 | 37200 | 2 | | sudo(a)rm-rf.pro | 0.3.1.9 | 36800 | 1 | | Zwiebel <zwiebel(a)kawo2.rwth-aachen.de> | 0.3.2.10 | 33800 | 1 | | AKK <TOR with AKK and ORG> | 0.3.2.10 | 33300 | 1 | | Jonathan Krebs, mailto: <user: jonny host: heron d | 0.3.2.10 | 32800 | 1 | | relays [at] riseup.net | 0.3.1.7 | 32600 | 1 | | tor(a)meriot.fr | 0.3.2.9 | 31400 | 1 | | abuse-node49 AT posteo DOT de | 0.3.2.10 | 30200 | 1 | | horst(a)faust-home.de | 0.3.2.10 | 28500 | 1 | | juha.nurmi(att)tut.fi | 0.3.2.9 | 27970 | 9 | | why(a)example.com | 0.3.2.10 | 27700 | 1 | | Parckwart email:mail[]parckwart.de pgp:47BC7DE83D4 | 0.3.2.10 | 26900 | 2 | | tor(at)0day.rocks | 0.3.2.10 | 26400 | 1 | | VSIF Support <support AT vsif dot ca> | 0.3.2.10 | 26300 | 1 | | see https://www.artikel5ev.de/torcontact/ | 0.3.1.9 | 26070 | 3 | | <tor dot bielefeld AT gmail dot com> | 0.3.2.10 | 25100 | 1 | | Parckwart email:mail[]parckwart.de pgp:47BC7DE83D4 | 0.3.2.10 | 24590 | 2 | | sqrrm(a)tutanota.com | 0.3.2.10 | 24320 | 5 | | Thomas Steen Rasmussen / Tykling <thomas(a)gibfest.d | 0.3.2.10 | 23900 | 1 | | SwissPrivacyLab - hello(at)swissprivacylab(dot)ch | 0.3.2.10 | 23400 | 1 | | relay-tor(a)posteo.de | 0.3.2.10 | 23200 | 1 | | 0x816F1BEA40C85A247F6DF5E4B47E36CF62F1D06E Ruben D | 0.3.1.9 | 22700 | 1 | | 0xB9A02A3D Pavol Rusnak <stick+tor(a)gk2.sk> | 0.3.1.8 | 22600 | 1 | | t o r p r o j e c t () m a i l b o x (dot) o r g | 0.3.2.10 | 22530 | 2 | | RARvolt <rarvolt(a)rarvolt.net> | 0.2.8.12 | 22000 | 1 | | Torservers.net <support .AT. torservers .DOT. net> | 0.3.2.10 | 21400 | 1 | | Holger <holger(a)ht2274.de> | 0.2.4.27 | 20500 | 1 | | PW <pw AT pw dot is> | 0.3.2.9 | 20500 | 1 | | Stash Crypto <infrastructure AT stashcrypto dot co | 0.3.1.10 | 20400 | 1 | | sykotik.org US tor node | 0.3.2.10 | 19700 | 1 | | tormate(at)tuta(dot)io [tor-relay.co] | 0.3.1.9 | 19600 | 1 | | tor_relay(a)f00bar.wtf | 0.3.2.10 | 19600 | 1 | | atlayo(a)atlayo.com | 0.3.2.10 | 19090 | 2 | | Marvin Moloczek <tor(a)moloczek.com> | 0.3.2.10 | 18500 | 1 | | 0x31384448 Ole Rydahl (Had a cat named Dobbo) <ole | 0.3.1.10 | 18100 | 1 | | tor at localhost dot lu | 0.2.5.16 | 18100 | 1 | | \u200B\u200Btor.research(a)yandex.com | 0.3.2.10 | 17900 | 1 | | 4096R/5819E33F Zhongfu Li <tor at zhongfu dot li> | 0.3.2.10 | 17600 | 1 | | bla5r <b64:YmxhNXIgYXQgcmlzZXVwIGRvdCBuZXQK> | 0.3.2.10 | 17300 | 1 | | Why do you need this? | 0.2.4.27 | 17000 | 1 | | Evolyn <toradmin(a)evolyn.de> 17HZHq2tGtUjzns3oFDev3 | 0.2.5.16 | 16800 | 1 | | tor[_-aet*]llit{,;D0t?\\]}eu | 0.3.2.10 | 16800 | 1 | | Erebor <nakamura AT i2pmail dot org> | BTC: 163NGL | 0.3.2.10 | 16700 | 1 | | MCOfficer <mcofficer(at)gmx.de> | mcofficer.me | I | 0.3.2.10 | 16400 | 1 | | Marcel Straub <marcel AT straub-nv.de> | 0.3.2.10 | 16000 | 1 | | 0xFFFFFFFF Undisclosed at nowhere dot doom | 0.3.2.10 | 15700 | 1 | | isorry(a)no.no | 0.3.2.10 | 15700 | 1 | | torrelay ~at~ kieran(dot)pw [tor-relay.co] | 0.3.2.10 | 15500 | 1 | | nobody(a)example.com | 0.3.2.10 | 14800 | 1 | | 0x3632046A Dmitry <dbaryshkov AT gmail dot com> | 0.3.2.10 | 14700 | 1 | | 0x0F8AD679BA61EB09 Michael Armbruster <tor@armbrus | 0.3.1.9 | 14600 | 1 | | <mknoszlig AT zeroton dot in> | 0.3.2.10 | 14500 | 1 | | Random Person <nobody AT example dot com> | 0.3.0.9 | 14500 | 1 | | : | 0.3.2.10 | 14300 | 1 | | Parckwart email:mail[]parckwart.de pgp:47BC7DE83D4 | 0.3.2.10 | 14280 | 3 | | tor at cybercyber dot wtf | 0.2.5.16 | 14220 | 2 | | Kd8hln.com Jeffschefke(a)gmail.com | 0.3.1.9 | 14100 | 1 | | nutritionfacts at tutanota.com donate btc here: 1J | 0.3.2.10 | 13600 | 1 | | tor-relays-e4e6e4(a)ssa.nikita.ca | 0.3.2.10 | 13600 | 1 | | TNinja <abuse-team _at_ tor _dot_ ninja> | 0.2.5.16 | 13500 | 1 | | MaggiWuerze admin(a)maggiwuerze.de | 0.3.1.10 | 13400 | 1 | | twink0r @ twitter | 0.3.2.10 | 13400 | 1 | | 'julles dot reneau at post dot com' | 0.3.1.9 | 13200 | 1 | | Jean Bonbeurre <tor-hiboo AT 0x010c DOT fr> | 0.3.1.9 | 13200 | 1 | | abuse(at)jacobwall(dot)com [tor-relay.co] | 0.3.2.9 | 12900 | 1 | | inbox(a)wooodoka.ru | 0.2.6.10 | 12800 | 1 | | mshepard2(a)maricopa.edu | 0.3.2.10 | 12200 | 1 | | rhfred(a)disroot.org | 0.3.2.10 | 12100 | 1 | | Phillip <phillip(a)dangernoodle.de> | 0.3.2.10 | 12000 | 1 | | none | 0.3.2.10 | 11400 | 1 | | 0x112CA89F scholzi100 <tor(a)scholzi100.de> 1436DgS4 | 0.3.2.10 | 11200 | 1 | | tor(a)anybody.home | 0.3.2.10 | 11200 | 1 | | 0xA5CBA13E <tor[AT]d0p1[dot]eu> - 19wzjCe4m6YiiAh | 0.3.2.10 | 10800 | 1 | | E026C5DDADC05B54CCA279AAE4E111292E32190D tor@hosti | 0.3.1.10 | 10800 | 2 | | tor-amuse(a)foofus.com 9a1cfa554a8721f7192c | 0.3.1.9 | 10700 | 1 | | tor-relay-host(a)protonmail.ch | 0.3.2.10 | 10600 | 1 | | https://it-syndikat.org | 0.3.2.10 | 10400 | 1 | | TvdW <tor AT tvdw DOT eu> - bitcoin 1NKKoCQwKs67eK | 0.3.0.1-alpha | 10230 | 2 | | DeaVulTan <deavultan(a)tuta.io> | 0.2.4.27 | 10100 | 1 | | [admin] <at> [bin] <dot> [ovh] bitcoin donations t | 0.3.1.9 | 9970 | 2 | | jan(a)cyber-consultancy.nl | 0.2.4.27 | 9920 | 1 | | agata-relay AT jawnosc dot com | 0.3.2.10 | 9770 | 1 | | <tor AT geekariom dot com> | 0.3.2.10 | 9720 | 1 | | Random Person tort(a)pike.pl | 0.3.1.9 | 8910 | 1 | | @toofy <toofy AT riseup dots net> | 0.2.5.16 | 8810 | 1 | | Manuel Giraud <manuel+tor AT ledu-giraud DOT fr> | 0.3.2.10 | 8750 | 1 | | Maarten Eyskens <maarten AT innovatete dot ch> | 0.2.8.9 | 8720 | 1 | | <tor - chaoshosting . de> | 0.3.1.9 | 8610 | 1 | | Contact (at)SilSte on Twitter [tor-relay.co] | 0.3.2.10 | 8380 | 1 | | 0x83288189 Casper <fantom AT fedoraproject dot org | 0.3.1.10 | 8260 | 1 | | annie - anniesboobs[]protonmail[]com | 0.3.2.10 | 8230 | 1 | | Admin <admin AT tor-relay dot io> | 0.3.2.10 | 8180 | 1 | | kunkka-tor _a.T_ protonmail.ch | 0.3.2.10 | 8150 | 1 | | christianbro <at> yandex <dot> ru - 1D1EjYEGHFPmc8 | 0.2.7.6 | 8000 | 1 | | support @ TORdashRELAYdotUS | 0.3.2.10 | 7950 | 1 | | darren.martyn(a)xiphosresearch.co.uk - 1MAdEpv9UP7FR | 0.2.4.27 | 7830 | 1 | | g <g @ eryd DOT net> | 0.2.4.27 | 7820 | 1 | | nt892(a)vtyulb.ru | 0.3.1.9 | 7770 | 1 | | tor terjan net | 0.3.2.10 | 7730 | 1 | | 0x44778F8B Bradley Shaw <bs+tor AT sigint dot pw> | 0.3.2.9 | 7660 | 1 | | nigger(a)nigger.nig | 0.3.2.10 | 7600 | 1 | | GodOfAnonymous(a)Glactic.Gods | 0.3.2.9 | 7500 | 1 | | Parckwart email:mail[]parckwart.de pgp:47BC7DE83D4 | 0.3.2.10 | 7390 | 1 | | Its Organic <nobody AT example dot com> | 0.2.7.6 | 7380 | 1 | | Sysadmin of the Day Role Person <wbb aaaaattttt fa | 0.3.2.10 | 7310 | 1 | | 59FDAC19FBC4E692652F3EB0C7B7552BDF21283B Smith <qt | 0.3.2.10 | 6820 | 1 | | Pascal666 at Users dot SourceForge dot Net - 1EYFA | 0.2.7.6 | 6440 | 1 | | nobody <nbody AT example dot com> | 0.3.1.10 | 6350 | 1 | | Anonymous Coward <anonymous AT nullhost dot net> | 0.3.1.9 | 6120 | 1 | | Joe Gratz <firstname AT firstnamelastname dot net> | 0.3.1.8 | 5960 | 1 | | 0xFFFFFFFF Random Person <nobody AT example dot co | 0.3.2.10 | 5860 | 1 | | Zack Weinberg https://www.owlfolio.org/contact/ | 0.3.1.9 | 5810 | 1 | | Rainbownerds.de <admins (a) rainbownerds.de | 0.3.1.9 | 5750 | 1 | | 0x432B02EC Gustav Wetter <gustav DOT wettter AT pi | 0.3.1.7 | 5720 | 1 | | contact @SilSte on Twitter [tor-relay.co] | 0.3.2.10 | 5570 | 1 | | Tor Hostmaster <hostmaster AT jth dot net> | 0.3.2.10 | 5550 | 1 | | <torseedslu _AT_ protonmail _DOT_ ch> | 0.3.1.9 | 5490 | 1 | | Systems Manager <service(a)ns.sol.net> | 0.3.1.9 | 5461 | 2 | | <tor-op AT innolan dot net> | 0.3.2.10 | 5340 | 1 | | Contact Person <treebark 9999999 AT gmail dot com> | 0.3.2.10 | 5280 | 1 | | 0x60C0742D1F357D42 Sergey Popov <admin+tor AT pink | 0.3.1.10 | 5240 | 1 | | tor.sir-drake(at)posteo.de | 0.3.2.10 | 5100 | 1 | | Todd Lansing <tor AT shadow.systems> | 0.3.2.10 | 5090 | 1 | | Micah Sherr <msherr(a)cs.georgetown.edu> | 0.3.2.9-dev | 5010 | 1 | | madnight madnight <danon(a)gmx.de> | 0.3.1.10 | 4990 | 1 | | eldernorn(a)gmail.com | 0.3.2.10 | 4820 | 1 | | Random Person Verbal Kint Kaiser Soze(a)nobody.examp | 0.3.1.7 | 4550 | 1 | | 0x3C68C8DBCBA783EF Joel R. Voss <jvoss at altsci d | 0.3.1.10 | 4490 | 1 | | <wheezy AT wheezy dot io> | 0.3.2.10 | 4450 | 1 | | gutbesserwasser <gutbesserwasser at gmail dot com> | 0.2.4.29 | 4310 | 1 | | Person <torATzoneDno> | 0.3.2.9 | 4220 | 1 | | <onions at mit dot edu> | 0.3.2.10 | 4090 | 1 | | tor-operator(a)something.linode.com | 0.3.2.10 | 3910 | 1 | | 2048R/EFC737D8 Tim Cinel <email(a)timcinel.com> | 0.3.2.10 | 3880 | 1 | | Florian Tschorsch <tschorsch(a)informatik.hu-berlin. | 0.3.1.9,0.3.2.9 | 3830 | 2 | | 0x05B29E8D Jivan Amara <Development(a)JivanAmara.net | 0.3.2.10 | 3810 | 1 | | Tor.Node-AARONSWARTZ-CA manas.ca | 0.3.2.10 | 3650 | 1 | | HackThisSite.org | 0.2.4.20 | 3610 | 1 | | jens <jens(a)chaox.net> - 11XxuJRkNp3CrxwP6DGdHwEa6U | 0.3.1.9 | 3610 | 1 | | anallm6d4wqwp7ij(dot)onion(at)dhosting4okcs22v(dot | 0.3.2.10 | 3590 | 1 | | babut(a)yandex.ru | 0.3.0.10 | 3580 | 1 | | 0xFFFFFFFF anon <tyb AT riseup.net> | 0.3.2.10 | 3470 | 1 | | swisskiss at sigaint.org | 0.3.1.9 | 3430 | 1 | | Random Person <random AT person dot com> | 0.3.1.9 | 3390 | 1 | | <hostmaster at denetron dot com> | 0.3.2.10 | 3330 | 1 | | Wubim Foundation <services AT wubim DOT com> | 0.3.1.9 | 2880 | 1 | | Skwid Returns <not.hidden.person(a)gmail.com> | 0.3.2.10 | 2850 | 1 | | Yuri Stuken <stukenyuri+tor AT gmail dot com> | 0.3.2.10 | 2830 | 1 | | Nick Sheppard <nicksheppard03(a)gmail.com> | 0.2.7.6 | 2780 | 1 | | 0x309F635DAD1B5517 | 0.3.2.10 | 2750 | 1 | | <tor(a)carnet.hr> | 0.2.5.16 | 2730 | 1 | | Anonymous | 0.3.2.10 | 2720 | 1 | | freetornetadmin(a)protonmail.com | 0.3.2.10 | 2660 | 1 | | @kosjoli | 0.2.5.12 | 2450 | 1 | | tor(a)krosnov.org | 0.3.2.10 | 2410 | 1 | | <tor-admin AT tma-0 DOT net> | 0.3.2.10 | 2340 | 1 | | LaMarre TAO Totalement, Amplement, Owned :P torrel | 0.2.4.29 | 2080 | 1 | | Tor Relay <torrouter at bigfoot dot com> | 0.3.0.10 | 2050 | 1 | | 2048g/D72C4234 Andrey Lelikov <torinfo(a)lelik.org> | 0.2.6.10 | 2030 | 1 | | 1024D/CF154167 Eirik Oeverby <ltning dash tor AT a | 0.3.2.9 | 2000 | 1 | | Hugh <wiki att sonic dawt net> | 0.3.2.10 | 1970 | 1 | | Gnu Gnaka <brainsalad AT kl1a [dot] net> | 0.3.2.10 | 1850 | 1 | | ricksybusiness(a)riseup.net | 0.3.2.9 | 1850 | 1 | | darktech7000(a)gmail.com | 0.3.2.10 | 1720 | 1 | | william(a)william.si | 0.2.6.10 | 1640 | 1 | | TOR148 <tor148 AT alien-stargate DOT com> | 0.3.2.10 | 1600 | 1 | | Josef Gajdusek <atx.tor ZAVINAC atx BODKA name> | 0.3.2.10 | 1550 | 1 | | me(a)jordan.im | 0.3.2.10 | 1460 | 1 | | tor(a)eb4.be | 0.3.1.9 | 1380 | 1 | | Donkey(dot)Dick(at)gmail(dot)com [tor-relay.co] | 0.3.2.10 | 892 | 1 | | tor-cs-mnl(a)0x.tf | 0.3.2.10 | 759 | 1 | | George <george7cebolla1960(a)gmail.com> | 0.2.5.16 | 732 | 1 | | George Kaplan <kaplan1966 AT yahoo dot com> | 0.2.7.6 | 629 | 1 | | Tom Ritter <tom(a)ritter.vg> | 0.3.2.10 | 587 | 1 | | kcwu A csie org | 0.3.1.9 | 389 | 1 | | 0x408B52D5 corcra corcra(a)riseup.net | 0.3.1.7 | 367 | 1 | | 0xC49D4040 seadog007 <007seadog(a)gmail.com> | 0.3.1.9 | 296 | 1 | | m9wjsc4wyq at snkmail com | 0.3.2.10 | 210 | 1 | | Zdravko Tzenov <torzpi222 AT gmail dot com> | 0.2.5.16 | 178 | 1 | | Ed dot Dyreen at gmx dot com | 0.3.1.9 | 103 | 1 | | 0x499F70C5 Robert Warren Gilmore <Robert.Warren.Gi | 0.2.8.11 | 100 | 1 | +----------------------------------------------------+-----------------------+--------+---------+ -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

1 0

IPv6 and bridges
by arisbe 07 Oct '18

07 Oct '18

Hello to you all, Question: Is there a point to adding IPv6 addresses to the ORPorts of my bridges? Will they then operate somewhat in the fashion of guards without published metrics? Any info would be helpful. Arisbe

3 2

Unsubscribing from mailing list
by Sagar 07 Oct '18

07 Oct '18

Kindly unsubscribe this email id - "sagardeb3(a)gmail.com" from tor mailing lists as I am no longer interested in this mailing list. Please do it as soon as possible. Thank you. ⁣Sent from BlueMail

2 1

Is obfs4 still working in China and Venezula
by Keifer Bly 07 Oct '18

07 Oct '18

Hi all, I just set up a new obfs4 bridge (https://metrics.torproject.org/rs.html#details/148BD64BED9F2C27637D986DE032…) and was wondering if obfs4 is working in China and Venezuela? Thanks. --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

2 2

I Have Worked Out An (Experiemental) Way To Run A Relay Or Obfuscated Bridge On Windows And Update On Relay "Torland"
by Keifer Bly 06 Oct '18

06 Oct '18

Hi all, I wanted to report a method I have found of running a tor relay on Windows, as well as an obfuscated bridge. So when I switched over to Windows, I had to start a new relay as my signing keys were lost in the transit. I decided to switch over to running a bridge, as I am running on a home router to cut down on connections, etc. For setting up a new relay on Windows, these are the steps that worked (cmd says I have generated a fingerprint). Step 1: Download the tor expert bundle from here https://www.torproject.org/download/download Step 2: Extract the tor expert bundle to the desktop. Step 3: Run “tor.exe” as administrator (doing so will create the folders were going to be running tor from later. Step 4: Open the “run” command. Using this, open “C:\Users\keife\AppData\Roaming\tor” (Where is says “keife” you will need to type your username). Step 5: Go back to the folder that the tor expert bundle was extracted to formerly. Open the folder called “Tor” and copy / paste all of the contents of it over to the roaming/tor folder you just opened using the run command. Step 6: Right click inside the folder, and select New -> Text Document, name the text file “torrc” and open it using notepad. Step 7: In the torrc text file just created, type nothing else but the configuration for your relay, for example Nickname torland SocksPort 0 ORPort 9002 ExitRelay 0 ContactInfo keifer dot bly at gmail dot com ExitPolicy reject *:* Change the nickname to what you want your relay to be called, ORPort to what port you are forwarding on, ContactInfo to your email address, etc. Go file -> save then close notepad. Step 8: To start a middle relay, do not click tor.exe as it will not recognize torrc in txt file format. Instead we will use Windows Command Prompt to ask “tor.exe” to read the torcc file. Open cmd, and type “cd”, then a space, then “C:\Users\yourusername\AppData\Roaming\tor”. This will point command prompt to the directory where tor is. Step 9: in CMD, type “tor.exe -f torrc.txt” This will send a command to tor to read the file called “torrc.txt” in the file directory, and start a relay. Now, I will go to how tonight I was able to start an obfs4 obfscated bridge on Windows (at least to where it says I have a fingerprint and a “registered server transport ‘obfs4’). Step 1: After doing all of the things above, download the tor browser from https://www.torproject.org/download/download Step 2: Install tor browser, then navigate to the folder you installed tor browser to. Step 3: In the folder tor browser was installed to, above the “start tor browser” button, there will be a folder called “Browser”. Open this folder, open “TorBrowser” folder, then open “Tor” folder. Right click the folder called “pluggable transports” and copy / paste it to the “roaming/tor” folder. Step 4: Now to edit the torrc file to run the obfuscated bridge. Here is a somewhat example torrc file (my current one) Nickname torland SOCKSPort 0 # no local SOCKS proxy ORPort 9002 # public bridge must have an open ORPort ExtORPort auto # configure ExtORPort for obfs4proxy ExitPolicy reject *:* # no exits allowed BridgeRelay 1 # relay won't show up in the public consensus PublishServerDescriptor 1 # publish to the bridge authority ContactInfo keifer dot bly at gmail dot com # use obfs4proxy to provide obfs4 on port 80 ServerTransportPlugin obfs4 exec C:\Users\keife\AppData\Roaming\tor\PluggableTransports\obfs4proxy.exe ServerTransportListenAddr obfs4 0.0.0.0:9002. To try running any kind of obfusacted bridge, try editing “ServerTransportPlugin obfs4 exec C:\Users\keife\AppData\Roaming\tor\PluggableTransports\obfs4proxy.exe” to the exe of the pluggable transport you want to run. Doing this, after starting it about an hour ago, has resulted in this output from tor, it is a picture on a google drive link as the list does not allow photos and there is now way to edit copy text from command prompt. Cheers. https://drive.google.com/open?id=1aPVIYox5ZD_JwpqnRGFk-bGxDjRDc_OL --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

2 3

Fast search for underutilized ASN space?
by Isaac Grover, Aileron I.T. 06 Oct '18

06 Oct '18

Good morning fellow relay operators, I am interested in reaching out to the ISPs in underutilized ASNs to share their acceptance for exit nodes with the relay operator community so that interested parties can set up nodes with those ISPs as they are able. Previously I seem to recall being able to use Atlas to search for fewest exit nodes per both ASN and country but am currently unable to reproduce that functionality in Tor Metrics, Onionoo, or Globe. So before I invest the time in such a project, would there be interest from the relay community in receiving such information? Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" Office: 715-377-0440, Fax:715-690-1029, Web: www.aileronit.com

4 3

Running A Tor Relay On Windows 10 (Was Continuing To Run A Relay On Mac OS High Sierra Via Homebrew After A New Mac OS Version Is Released)
by Keifer Bly 06 Oct '18

06 Oct '18

Hello, So adding to the previous discussion, I was not able to run Debian Linux on my machine, or the new Mac OS. What I ended up doing was formatting the hard drive (erasing the OS and all), then did a fresh install of Debian Linux, which after installing failed to load. However, what I then did a fresh install of was Windows 10, and it is successfully up and running. I have my relay fingerprint backed up. If someone could please send me the instructions for running a relay on Windows 10, that would be appreciated. I know I could run a Debian Linux virtual machine, but would rather not have to deal with VMs. Your instructions (or ideas) are appreciated. Thank you.

3 3

The neighbour's cat just walked in.
by I 05 Oct '18

05 Oct '18

2 8

Continuing To Run A Relay On Mac OS High Sierra Via Homebrew After A New Mac OS Version Is Released
by Keifer Bly 05 Oct '18

05 Oct '18

Hi all, So I am having a bit of a dilemma, the computer I am running my relay on is running Mac OS High Sierra, and despite the fact that Apple Support had priorly told me it would be able to run Mojave (via the serial number) when I go to install Mojave, I get an error saying Mojave “cannot be installed on this computer”. Ugh. As my relay is running via homebrew, I created a homebrew support ticket for this incident, and this was their response. “Generally homebrew supports only the last 3 releases, which would mean you have 2 more years of bottle support at least. It doesn’t mean it’ll stop working the day after it ends though. While having an up to date system is a good thing, the homebrew packages might very well work for years after official support is dropped, you’ll just have to compile updates for yourself.” The official homebrew support ticket can be viewed here: https://discourse.brew.sh/t/continued-support-for-certain-processes-on-olde… Seeing as they say homebrew supports the last three releases of Mac OS, I should be fine for another while. However, they hinted that the main thing that is dropped support for is bottles, so I am wondering if running the tor relay software via homebrew requires this process? I can’t really buy a new computer right now, and that’s the only available that isn’t a laptop, so I am trying to find available options. Thanks all.

4 5

Greypony / Conrad Rockenhaus offline?
by Isaac Grover, Aileron I.T. 05 Oct '18

05 Oct '18

Good afternoon fellow relay operators, My exit node hosted with Greypony IT (ephesysnull - 2426F096372BCAB360B75D463AEBD7B7B8BFF0FF) has gone offline, greyponyit.com is also offline, and emails to Conrad Rockenhaus sent over the last week have received no replies. Has anyone else received a response from him? Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" O: 715-377-0440<tel:715-425-0440>, F:715-690-1029<tel:715-690-1029>, W: www.aileronit.com<http://www.aileronit.com/> LinkedIn: https://www.linkedin.com/in/IsaacGrover/ YouTube: https://www.youtube.com/channel/UCqrwZNFKdR-guKtuQzFPObQ

11 14

Chinese hacking chips added to Supermicro server motherboards
by I 05 Oct '18

05 Oct '18

1 0

Greypony IT - Public Statement to the Tor Community
by Nathaniel Suchy 04 Oct '18

04 Oct '18

Hi everyone, I'm writing to you all on behalf of Conrad. There have been a few messages posted here in regards to Greypony IT and a lack of responses from Conrad. Conrad is NOT ignoring you nor being malicious. Conrad had a stroke and has been seeking medical attention. Likewise he's unable to provide customer support or fix issues as he's in a hospital. The issue affecting several customers is at the ISP Level - system administrators such as myself are unable to SSH into the Xenserver to fix customer issues. This is something Conrad will have to fix after he recovers. I'm unable to fix individual virtual machines for customers until the hypervisors are fixed. It's quite possible that customers will choose to cancel services and/or switch providers and/or request an SLA Credit or a refund. This is understandable. We will address requests on a case by case basis as soon as possible. To address a few things I've seen floating around here and on a few IRC channels: 1) Greypony IT has not been shut down. We've been unable to address a network outage. 2) Greypony IT has not had equipment seized by LE to the best of my knowledge. Hopefully this provides everyone insight - I know it's not a solution but we want everyone to know. Cordially, Nathaniel Suchy

3 3

NTP and tor
by grarpamp 04 Oct '18

04 Oct '18

Further NTP client variations... https://chrony.tuxfamily.org/ https://github.com/bsdphk/Ntimed https://leaf.dragonflybsd.org/cgi/web-man?command=dntpd&section=8 http://cr.yp.to/clockspeed.html

1 0

Plans to add IPv6 exit nodes to list of Tor exit nodes
by Gabbi Fisher 04 Oct '18

04 Oct '18

Hi there! I wanted to see if there are any plans to add Tor exit nodes with IPv6 addresses to https://check.torproject.org/exit-addresses. I've observed some while using Tor, but do not see them on this list. Thanks so much! Gabbi

2 1

Question Re: firewall rules for obfs4 bridge relay
by torrelay.europa＠keemail.me 03 Oct '18

03 Oct '18

Hello, I'm in the process of setting up a couple of obfs4 bridge relays on Ubuntu server 18.04. I'm endeavoring to apply strict firewall rules to ensure only the necessary ports are open. In accordance with the configuration (below) I've allowed port 9001: #Bridge config RunAsDaemon 1 ORPort 9001 BridgeRelay 1 ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy ExtORPort auto #Set your bridge nickname and contact info ContactInfo <your-contact-info> Nickname pick-a-nickname I've also allowed port 9051 to enable me to connect to the obfs4 server via onionbox. After starting the Tor service the Tor logs report, Opening Socks listener on 127.0.0.1:9050 Opening Control listener on 127.0.0.1:9051 Opening OR listener on 0.0.0.0:9001 Extended OR listener listening on port XXXXX. Registered server transport 'obfs4' at '[::]:33919' All of the ports listed (above) appear to be fixed ports that open each time I start/restart Tor. However, the "Extended OR listener listening on port XXXXX" changes on each start/restart. I can see the configuration (above) instructs ExtORPort auto. I've looked online where there is some advice suggesting the auto setting for ExtORPort is important for security reasons, however, if I'd like to have strict firewall rules the auto setting becomes problematic. Currently, I've allowed port 9001 & the Tor logs report, Now checking whether ORPort XXX.XXX.XXX.XX:9001 is reachable... Self-testing indicates your ORPort is reachable from the outside. I'd be grateful for some advice on which ports I should keep open, to ensure I can provide the very best service & good security practice both for the client & the server - thanks :) Best regards, Kenneth

2 3

Re: [tor-relays] bridge on the public server - IP reputation
by entensaison＠use.startmail.com 02 Oct '18

02 Oct '18

> HI, > > I have a VPS server with fast internet connection. > I would like to configure tor bridge on that machine. > > VPS server has configured some services already. If tor bridge > service > will run on that machine (IP), will it generate any impact for IP > reputation ? I mean blacklisting. > > Greetings > Fazii A bridge's IP is not on a public list. So generally running a bridge shouldn't affect your reputation at all. Average people who don't use tor will not know that you run a bridge on that IP and don't care unless you tell them. Average people who want to use that bridge will appreciate it. Other service providers will not know about that fact and probably don't care either unless you tell them, because it doesn't affect their services. Since a bridge is used as a first hop in a tor circuit and not as an exit only other tor relays will receive connections from it. If your ISP doesn't allow you to run a tor relay but doesn't put too much effort into monitoring your traffic they'll probably not notice that you are running a bridge. A sensor who tries to block access to the tor network may find out your IP and block access to your other services, too. If you provide a service that is being sensored in some countries then people from those countries probably won't be able to connect to your bridge either.

1 0