- tor-relays - lists.torproject.org

Is obfs4 still working in China and Venezula
by Keifer Bly 07 Oct '18

07 Oct '18

Hi all, I just set up a new obfs4 bridge (https://metrics.torproject.org/rs.html#details/148BD64BED9F2C27637D986DE032…) and was wondering if obfs4 is working in China and Venezuela? Thanks. --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

2 2

I Have Worked Out An (Experiemental) Way To Run A Relay Or Obfuscated Bridge On Windows And Update On Relay "Torland"
by Keifer Bly 06 Oct '18

06 Oct '18

Hi all, I wanted to report a method I have found of running a tor relay on Windows, as well as an obfuscated bridge. So when I switched over to Windows, I had to start a new relay as my signing keys were lost in the transit. I decided to switch over to running a bridge, as I am running on a home router to cut down on connections, etc. For setting up a new relay on Windows, these are the steps that worked (cmd says I have generated a fingerprint). Step 1: Download the tor expert bundle from here https://www.torproject.org/download/download Step 2: Extract the tor expert bundle to the desktop. Step 3: Run “tor.exe” as administrator (doing so will create the folders were going to be running tor from later. Step 4: Open the “run” command. Using this, open “C:\Users\keife\AppData\Roaming\tor” (Where is says “keife” you will need to type your username). Step 5: Go back to the folder that the tor expert bundle was extracted to formerly. Open the folder called “Tor” and copy / paste all of the contents of it over to the roaming/tor folder you just opened using the run command. Step 6: Right click inside the folder, and select New -> Text Document, name the text file “torrc” and open it using notepad. Step 7: In the torrc text file just created, type nothing else but the configuration for your relay, for example Nickname torland SocksPort 0 ORPort 9002 ExitRelay 0 ContactInfo keifer dot bly at gmail dot com ExitPolicy reject *:* Change the nickname to what you want your relay to be called, ORPort to what port you are forwarding on, ContactInfo to your email address, etc. Go file -> save then close notepad. Step 8: To start a middle relay, do not click tor.exe as it will not recognize torrc in txt file format. Instead we will use Windows Command Prompt to ask “tor.exe” to read the torcc file. Open cmd, and type “cd”, then a space, then “C:\Users\yourusername\AppData\Roaming\tor”. This will point command prompt to the directory where tor is. Step 9: in CMD, type “tor.exe -f torrc.txt” This will send a command to tor to read the file called “torrc.txt” in the file directory, and start a relay. Now, I will go to how tonight I was able to start an obfs4 obfscated bridge on Windows (at least to where it says I have a fingerprint and a “registered server transport ‘obfs4’). Step 1: After doing all of the things above, download the tor browser from https://www.torproject.org/download/download Step 2: Install tor browser, then navigate to the folder you installed tor browser to. Step 3: In the folder tor browser was installed to, above the “start tor browser” button, there will be a folder called “Browser”. Open this folder, open “TorBrowser” folder, then open “Tor” folder. Right click the folder called “pluggable transports” and copy / paste it to the “roaming/tor” folder. Step 4: Now to edit the torrc file to run the obfuscated bridge. Here is a somewhat example torrc file (my current one) Nickname torland SOCKSPort 0 # no local SOCKS proxy ORPort 9002 # public bridge must have an open ORPort ExtORPort auto # configure ExtORPort for obfs4proxy ExitPolicy reject *:* # no exits allowed BridgeRelay 1 # relay won't show up in the public consensus PublishServerDescriptor 1 # publish to the bridge authority ContactInfo keifer dot bly at gmail dot com # use obfs4proxy to provide obfs4 on port 80 ServerTransportPlugin obfs4 exec C:\Users\keife\AppData\Roaming\tor\PluggableTransports\obfs4proxy.exe ServerTransportListenAddr obfs4 0.0.0.0:9002. To try running any kind of obfusacted bridge, try editing “ServerTransportPlugin obfs4 exec C:\Users\keife\AppData\Roaming\tor\PluggableTransports\obfs4proxy.exe” to the exe of the pluggable transport you want to run. Doing this, after starting it about an hour ago, has resulted in this output from tor, it is a picture on a google drive link as the list does not allow photos and there is now way to edit copy text from command prompt. Cheers. https://drive.google.com/open?id=1aPVIYox5ZD_JwpqnRGFk-bGxDjRDc_OL --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

2 3

Fast search for underutilized ASN space?
by Isaac Grover, Aileron I.T. 06 Oct '18

06 Oct '18

Good morning fellow relay operators, I am interested in reaching out to the ISPs in underutilized ASNs to share their acceptance for exit nodes with the relay operator community so that interested parties can set up nodes with those ISPs as they are able. Previously I seem to recall being able to use Atlas to search for fewest exit nodes per both ASN and country but am currently unable to reproduce that functionality in Tor Metrics, Onionoo, or Globe. So before I invest the time in such a project, would there be interest from the relay community in receiving such information? Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" Office: 715-377-0440, Fax:715-690-1029, Web: www.aileronit.com

4 3

Running A Tor Relay On Windows 10 (Was Continuing To Run A Relay On Mac OS High Sierra Via Homebrew After A New Mac OS Version Is Released)
by Keifer Bly 05 Oct '18

05 Oct '18

Hello, So adding to the previous discussion, I was not able to run Debian Linux on my machine, or the new Mac OS. What I ended up doing was formatting the hard drive (erasing the OS and all), then did a fresh install of Debian Linux, which after installing failed to load. However, what I then did a fresh install of was Windows 10, and it is successfully up and running. I have my relay fingerprint backed up. If someone could please send me the instructions for running a relay on Windows 10, that would be appreciated. I know I could run a Debian Linux virtual machine, but would rather not have to deal with VMs. Your instructions (or ideas) are appreciated. Thank you.

3 3

The neighbour's cat just walked in.
by I 05 Oct '18

05 Oct '18

2 8

Continuing To Run A Relay On Mac OS High Sierra Via Homebrew After A New Mac OS Version Is Released
by Keifer Bly 05 Oct '18

05 Oct '18

Hi all, So I am having a bit of a dilemma, the computer I am running my relay on is running Mac OS High Sierra, and despite the fact that Apple Support had priorly told me it would be able to run Mojave (via the serial number) when I go to install Mojave, I get an error saying Mojave “cannot be installed on this computer”. Ugh. As my relay is running via homebrew, I created a homebrew support ticket for this incident, and this was their response. “Generally homebrew supports only the last 3 releases, which would mean you have 2 more years of bottle support at least. It doesn’t mean it’ll stop working the day after it ends though. While having an up to date system is a good thing, the homebrew packages might very well work for years after official support is dropped, you’ll just have to compile updates for yourself.” The official homebrew support ticket can be viewed here: https://discourse.brew.sh/t/continued-support-for-certain-processes-on-olde… Seeing as they say homebrew supports the last three releases of Mac OS, I should be fine for another while. However, they hinted that the main thing that is dropped support for is bottles, so I am wondering if running the tor relay software via homebrew requires this process? I can’t really buy a new computer right now, and that’s the only available that isn’t a laptop, so I am trying to find available options. Thanks all.

4 5

Greypony / Conrad Rockenhaus offline?
by Isaac Grover, Aileron I.T. 05 Oct '18

05 Oct '18

Good afternoon fellow relay operators, My exit node hosted with Greypony IT (ephesysnull - 2426F096372BCAB360B75D463AEBD7B7B8BFF0FF) has gone offline, greyponyit.com is also offline, and emails to Conrad Rockenhaus sent over the last week have received no replies. Has anyone else received a response from him? Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" O: 715-377-0440<tel:715-425-0440>, F:715-690-1029<tel:715-690-1029>, W: www.aileronit.com<http://www.aileronit.com/> LinkedIn: https://www.linkedin.com/in/IsaacGrover/ YouTube: https://www.youtube.com/channel/UCqrwZNFKdR-guKtuQzFPObQ

11 14

Chinese hacking chips added to Supermicro server motherboards
by I 05 Oct '18

05 Oct '18

1 0

Greypony IT - Public Statement to the Tor Community
by Nathaniel Suchy 04 Oct '18

04 Oct '18

Hi everyone, I'm writing to you all on behalf of Conrad. There have been a few messages posted here in regards to Greypony IT and a lack of responses from Conrad. Conrad is NOT ignoring you nor being malicious. Conrad had a stroke and has been seeking medical attention. Likewise he's unable to provide customer support or fix issues as he's in a hospital. The issue affecting several customers is at the ISP Level - system administrators such as myself are unable to SSH into the Xenserver to fix customer issues. This is something Conrad will have to fix after he recovers. I'm unable to fix individual virtual machines for customers until the hypervisors are fixed. It's quite possible that customers will choose to cancel services and/or switch providers and/or request an SLA Credit or a refund. This is understandable. We will address requests on a case by case basis as soon as possible. To address a few things I've seen floating around here and on a few IRC channels: 1) Greypony IT has not been shut down. We've been unable to address a network outage. 2) Greypony IT has not had equipment seized by LE to the best of my knowledge. Hopefully this provides everyone insight - I know it's not a solution but we want everyone to know. Cordially, Nathaniel Suchy

3 3

NTP and tor
by grarpamp 04 Oct '18

04 Oct '18

Further NTP client variations... https://chrony.tuxfamily.org/ https://github.com/bsdphk/Ntimed https://leaf.dragonflybsd.org/cgi/web-man?command=dntpd&section=8 http://cr.yp.to/clockspeed.html

1 0

Plans to add IPv6 exit nodes to list of Tor exit nodes
by Gabbi Fisher 03 Oct '18

03 Oct '18

Hi there! I wanted to see if there are any plans to add Tor exit nodes with IPv6 addresses to https://check.torproject.org/exit-addresses. I've observed some while using Tor, but do not see them on this list. Thanks so much! Gabbi

2 1

Question Re: firewall rules for obfs4 bridge relay
by torrelay.europa＠keemail.me 03 Oct '18

03 Oct '18

Hello, I'm in the process of setting up a couple of obfs4 bridge relays on Ubuntu server 18.04. I'm endeavoring to apply strict firewall rules to ensure only the necessary ports are open. In accordance with the configuration (below) I've allowed port 9001: #Bridge config RunAsDaemon 1 ORPort 9001 BridgeRelay 1 ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy ExtORPort auto #Set your bridge nickname and contact info ContactInfo <your-contact-info> Nickname pick-a-nickname I've also allowed port 9051 to enable me to connect to the obfs4 server via onionbox. After starting the Tor service the Tor logs report, Opening Socks listener on 127.0.0.1:9050 Opening Control listener on 127.0.0.1:9051 Opening OR listener on 0.0.0.0:9001 Extended OR listener listening on port XXXXX. Registered server transport 'obfs4' at '[::]:33919' All of the ports listed (above) appear to be fixed ports that open each time I start/restart Tor. However, the "Extended OR listener listening on port XXXXX" changes on each start/restart. I can see the configuration (above) instructs ExtORPort auto. I've looked online where there is some advice suggesting the auto setting for ExtORPort is important for security reasons, however, if I'd like to have strict firewall rules the auto setting becomes problematic. Currently, I've allowed port 9001 & the Tor logs report, Now checking whether ORPort XXX.XXX.XXX.XX:9001 is reachable... Self-testing indicates your ORPort is reachable from the outside. I'd be grateful for some advice on which ports I should keep open, to ensure I can provide the very best service & good security practice both for the client & the server - thanks :) Best regards, Kenneth

2 3

Re: [tor-relays] bridge on the public server - IP reputation
by entensaison＠use.startmail.com 02 Oct '18

02 Oct '18

> HI, > > I have a VPS server with fast internet connection. > I would like to configure tor bridge on that machine. > > VPS server has configured some services already. If tor bridge > service > will run on that machine (IP), will it generate any impact for IP > reputation ? I mean blacklisting. > > Greetings > Fazii A bridge's IP is not on a public list. So generally running a bridge shouldn't affect your reputation at all. Average people who don't use tor will not know that you run a bridge on that IP and don't care unless you tell them. Average people who want to use that bridge will appreciate it. Other service providers will not know about that fact and probably don't care either unless you tell them, because it doesn't affect their services. Since a bridge is used as a first hop in a tor circuit and not as an exit only other tor relays will receive connections from it. If your ISP doesn't allow you to run a tor relay but doesn't put too much effort into monitoring your traffic they'll probably not notice that you are running a bridge. A sensor who tries to block access to the tor network may find out your IP and block access to your other services, too. If you provide a service that is being sensored in some countries then people from those countries probably won't be able to connect to your bridge either.

1 0

Hetzner bandwidth terms update
by Roman Mamedov 01 Oct '18

01 Oct '18

Hello, It appears that Hetzner has changed their bandwidth terms from "20 TB outgoing per month, then capped to 10 Mbit" to fully unmetered 1 Gbps connection on most servers: https://wiki.hetzner.de/index.php/Traffic/en Discussed at: https://www.lowendtalk.com/discussion/152498/hetzner-dedicated-servers-now-… Adjust your relay bandwidth limits accordingly. :) -- With respect, Roman

2 1

bridge on the public server - IP reputation
by fazii＠vfemail.net 01 Oct '18

01 Oct '18

HI, I have a VPS server with fast internet connection. I would like to configure tor bridge on that machine. VPS server has configured some services already. If tor bridge service will run on that machine (IP), will it generate any impact for IP reputation ? I mean blacklisting. Greetings Fazii ------------------------------------------------- ONLY AT VFEmail! - Use our Metadata Mitigator to keep your email out of the NSA's hands! $24.95 ONETIME Lifetime accounts with Privacy Features! 15GB disk! No bandwidth quotas! Commercial and Bulk Mail Options!

1 0

relay and bridge on the same IP
by fazii＠vfemail.net 01 Oct '18

01 Oct '18

Hi, is it possible to build tor non-exit relay and bridge on the same IP, the same tor instance ? I have running Freebsd non-exit relay instance and I can build more instances in different countries, the question is if its technical possible to have bridge and relay on the same machine ? Does it make sense from the securit point of view ? Fazii ------------------------------------------------- ONLY AT VFEmail! - Use our Metadata Mitigator to keep your email out of the NSA's hands! $24.95 ONETIME Lifetime accounts with Privacy Features! 15GB disk! No bandwidth quotas! Commercial and Bulk Mail Options!

2 2

Re: [tor-relays] Jerk spammers on tor-relays (was Re: Fwd: Tor GuardRelay)
by Keifer Bly 01 Oct '18

01 Oct '18

So, for me, it appears that the jerk spammers have advanced, Instead of sending spam to the tor-relays(a)lists.torproject.org email address, they are now directly sending spam to specific addresses subscribed to the list. I got one today from colemanrosettad(a)gmail.com, and have been receiving some over the last few days that were sent directly to this email address. I did not think they were related, but the other email addresses the one I received today was also sent to the addresses below, which I believe are addresses that are subscribed to the list. I have reported it to Google via their abuse report email address which is registrar-abuse(a)google.com, so I will see what they say (and forward it to the list if requested). The other addresses were: johndalton289(a)gmail.com, and teor2345(a)gmail.com. I tried attaching a photo of the "to" field but it was rejected due to size limitations. Just thought I'd give a heads up. On Thu, Sep 20, 2018 at 9:10 PM Keifer Bly <keifer.bly(a)gmail.com> wrote: > So, for me, it appears that the jerk spammers have advanced, Instead of > sending spam to the tor-relays(a)lists.torproject.org email address, they > are now directly sending spam to specific addresses subscribed to the list. > I got one today from colemanrosettad(a)gmail.com, and have been > receiving some over the last few days that were sent directly to this email > address. I did not think they were related, but the other email addresses > the one I received today was also sent to the addresses in the attached > photo, which I believe are addresses that are subscribed to the list. I > have reported it to Google via their abuse report email address which is > registrar-abuse(a)google.com, so I will see what they say (and forward it > to the list if requested). > > Just thought I'd give a heads up. > > > > On Fri, Jul 13, 2018 at 7:47 PM Keifer Bly <keifer.bly(a)gmail.com> wrote: > >> I looked it up. You can forward the spams that the Gmail address are >> sending to registrar-abuse(a)google.com, which reports spam emails and >> inappropriate content being sent by Gmail users to Google. Try that. >> >> >> >> *From: *Mirimir <mirimir(a)riseup.net> >> *Sent: *Friday, July 13, 2018 7:41 PM >> *To: *tor-relays(a)lists.torproject.org >> *Subject: *Re: [tor-relays] Jerk spammers on tor-relays (was Re: Fwd: >> Tor GuardRelay) >> >> >> >> On 07/13/2018 03:07 PM, Keifer Bly wrote: >> >> > Dang. I stopped getting them for a while due to the SPAM filter I >> >> > configured in Gmail, however they are now coming through again. These >> >> > spammers are trying to be smart by sending these spam messages from >> >> > different domains; they are now coming from >> >> > scarlettsofia710182(a)it.argmx.com >> >> > >> >> > Anyone else getting these? >> >> > >> >> > Thanks. >> >> >> >> I haven't received those after posts since June 27. And nothing from >> >> *.argmx.com. But I am getting sex spam from a few Gmail addresses, with >> >> blank subject lines. New, and perhaps related. >> >> >> >> > On Sat, Jun 9, 2018 at 10:38 PM Roger Dingledine <arma(a)mit.edu> wrote: >> >> >> >> <SNIP> >> >> >> >> >> Maybe there is a mailman module that lets you send a different >> watermarked >> >> >> mail to each subscriber, or to send mails out with different timing >> >> >> patterns to do a binary search over the list, in order to discover >> which >> >> >> addresses are triggering the spam? But I don't know of an easy way to >> >> >> do it. >> >> >> >> That would be a bad precedent, I think ;) >> >> >> >> >> Also, I hear from at least one person that some tor-dev subscribers are >> >> >> getting spams too. :( >> >> >> >> Searching for the spam addresses, I found reports from other mail lists. >> >> So it's not just Tor lists. >> >> >> >> <SNIP> >> >> _______________________________________________ >> >> tor-relays mailing list >> >> tor-relays(a)lists.torproject.org >> >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >> >> >> >

8 28

"darknode*" relays at Digital Ocean risk getting rejected from the network
by nusenu 29 Sep '18

29 Sep '18

1 2

"Safe" ports for exit node that won't attract LEA?
by Isaac Grover, Aileron I.T. 27 Sep '18

27 Sep '18

Good morning fellow exit node operators, I have set up an exit node in my home on a separate IP address away from all other traffic. I'm well aware of the risks from dated articles posted many years ago, so if you're going to send warnings and scary stories, please do so off list. I won't be running it with all ports open; rather I'm interested in ports that still provide benefit to the Tor network but don't attract the attention of law enforcement. Currently I am exiting port 8333 (Bitcoin) and nothing else, but am open to other non - risky ports. Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" Office: 715-377-0440, Fax:715-690-1029, Web: www.aileronit.com

3 2

New Exit-Relay / First abuse issues
by tor-markus 26 Sep '18

26 Sep '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hey *, I run C65EF5E06B8338CF976D376048BE2C8FBD499C9C for about a month. On Monday I received the first abuse ticket from my ISP (Contabo GmbH). The ticket contained lots and lots of log information from a fail2ban system so GMail sent it right into the spam folder. 24 hours later I received a monitoring e-mail that my server was down. After a little search through my mails I found out that Contabo shuts down all services within 24h if there is no reply. That kinda sucked because I run some private services on this machine (different ip). Contabo's mail claimed that a 30€ fee would be due in order to cover their work for disabling and enabling the server. A very very unfriendly e-mail and about an hour of time later my server was back online :) (Note: the e-mail was sent around 10 PM and I received the answer at about 11 PM, so the abuse department is there 24/7. Their hotline however, can't deal with abuse complaints, they can only be handled via e-mail.) Contabo sent me a (probably) automated e-mail that the issue was resolved and no further action is needed. Overall I think its a little unprofessional to shutdown servers within 24 hours without trying to call a customer, or at least several e-mail reminders over a day or two. Markus This is my new abuse e-mail template for German speaking hosting providers: Sehr geehrte Damen und Herren, Auf dem Server wird eine Tor-Exit Node betrieben. NachTMG §8ist der Betreiber von jeder Haftung für die durchgeleiteten Daten befreit, dies gilt für mich als Ihren Kunden sowohl als auch für Sie als mein ISP. Die IP X.X.X.X leitet ausschließlich Tor-Exit Traffic durch. Diese Übermittlungen sind weder von mir veranlasst noch wird der Adressant oder die zu übermittelnden Informationen ausgesucht und oder verändert. Unter der IP Adresse X.X.X.X werden keinerlei Daten bereitgestellt. Diese Ports werden durchgeleitet: 20-21, 43, 53, 80-81, 88, 110, 143, 194, 220, 389, 443, 464-465, 531, 543-544, 554, 563, 587, 636, 706, 749, 853, 873, 902-904, 981, 989-995, 1194, 1220, 1293, 1500, 1533, 1677, 1723, 1755, 1863, 2082-2083, 2086-2087, 2095-2096, 2102-2104, 3128, 3389, 3690, 4321, 4643, 5050, 5190, 5222-5223, 5228, 5900, 6660-6669, 6679, 6697, 8000, 8008, 8074, 8080, 8082, 8087-8088, 8232-8233, 8332-8333, 8443, 8888, 9418, 9999-10000, 11371, 19294, 19638, 50002, 64738. Im Falle von Spam / Brute Force empfehlen ich dem Absender der abuse E-Mail seine Systeme mit Tools wieFail2Ban,reCAPTCHA zu schützen. Im Falle von gehäuften (D)DoS Attacken gibt es die Möglichkeit das gesamte Tor Netzwerk zu blockieren. Hierfür steht ein eine jederzeit aktuelle Blacklist aller Tor-ExitNodes bereit: https://www.torproject.org/projects/tordnsel.html Falls ausschließlich über die IP X.X.X.X bösartiger Traffic ausgeht kann der Absender der abuse E-Mail diesen mithilfe von iptables blockieren: iptables -A INPUT -s X.X.X.X -j DROP Falls der Absender diese Möglichkeit nicht hinnehmen möchte, kann von meiner Seite aus jeder Traffic zu seiner IP bzw. zu einzelnen Ports unterbunden werden. Dem Absender der Abuse E-Mail können sie in meinem Namen folgende Nachricht zukommen lassen: > Dear Sir or Madame, > > we would like to forward this message on behalf of our customer who is responsible for this particular server with the IP X.X.X.X. > > The IP address in question is a Tor exit node.https://www.torproject.org/overview.html > > There is little we can do to trace this matter further. As can be seen from theoverview page, the Tor network is designed to make tracing of users impossible. The Tor network is run by some 5000 volunteers who use the free software provided by the Tor Project to run Tor routers. Client connections are routed through multiple relays, and are multiplexed together on the connections between relays. The system does not record logs of client connections or previous hops. This is because the Tor network is a censorship resistance, privacy, and anonymity system used by whistle blowers, journalists, Chinese dissidents skirting the Great Firewall, abuse victims, stalker targets, the US military, and law enforcement, just to name a few. Seehttps://www.torproject.org/about/torusers.html.enfor more info. Unfortunately, some people misuse the network. However, compared to the rate of legitimate use, abuse complaints are rare.https://www.torproject.org/docs/faq-abuse.html.en > This does not mean that nothing can be done, however. The Tor project provides an automated DNSRBL for you to query to flag traffic coming from Tor nodes.https://www.torproject.org/projects/tordnsel.html.en. In general, we believe that problems like this are best solved by improving your service to defend against the attack from the Internet at large. > > As a German individual I fully comply with the Germantelemedia law §15. This prohibits logging any personally identifiable data or usage data except for billing purposes. As we do not charge any users any fees we will not be able to keep any connection data now and in the future. Furthermore I am protected by German telemedia law §8, which protects me from any liability for traffic that passes through my infrastructure on behalf of users. This also protects my ISP (XXX) from any liability. > > Thanks for your understanding, > XXX Für dringliche Angelegenheiten bitte ich Sie mich direkt unter +XXXX zu kontaktieren. Mit dieser automatisierten Antwort erkenne ich eine Fristsetzung für ein Abuse-Ticket nicht an. Desweiteren fordere ich Sie dazu auf den Server nicht zu deaktivieren, da keine Rechtsverletzungen in irgendeiner Form durch den Server und seine angebotenen Dienste entstehen können. Das TMG im Paragraphen 8 schützt sowohl Sie als auch mich vor jedweder Haftung für den Traffic der durch die Nutzer der Tor-Exit Node entsteht. Einer etwaigen Bearbeitungsgebühr widerspreche ich, da dies weder im Vertrag noch in den AGBs zum Zeitpunkt des Vertragsschluss kommuniziert wurde. Im Falle einer ungerechtfertigten Deaktivierung behalte ich mir vor Zahlungen für den Zeitraum den Zeitraum der Deaktivierung einzubehalten. Mit freundlichen Grüßen, XXX Sent with ProtonMail Secure Email. -----BEGIN PGP SIGNATURE----- Version: ProtonMail Comment: https://protonmail.com wsBcBAEBCAAQBQJboklXCRB9CI1YHT0L1QAAZIEIAKRgL+rUVz255CLBxGIj 9Iq34ifPlGJr0xtJUWZoB0/+dWtqc253dU1JqLiEzUlzwiVUhBclFzM6WsIr KoEjOvUqMc3Bfq3g3cj4FhPASXPCAw8ZxSUIV8KI85uLCbzwAI/nU/LUnh99 7v351MPxIZJsdCTuWjT5MjxAndys/g5gC3XtrwC7pCQ1D2gpEAAIRWA7NvUW xJBaMb4KADnVBAMETj8oV9q8KxX3fXJwPLSC5cldC3jiA7wV3njHIiV70V08 1ZT3rEVKryAt82tvNY86MKRLxvi/OJMiSM0kFbAlsGs5s9czPnzw3Jau9bk8 2ccQ3G8IMyLdrHjKhcaMvBU= =tyGN -----END PGP SIGNATURE-----

6 6

Ten Hours of White Noise Got Five Copyright Notices
by I 26 Sep '18

26 Sep '18

1 0

(no subject)
by Kai Sullivan 25 Sep '18

25 Sep '18

Envoyé de mon iPhone

1 0

Re: [tor-relays] Running an exit node behind NAT?
by Isaac Grover, Aileron I.T. 24 Sep '18

24 Sep '18

Good afternoon nusenu, Thank you for your offer of assistance. I sent the requested information to your -lists email address. Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" O: 715-377-0440, F:715-690-1029, W: www.aileronit.com LinkedIn: https://www.linkedin.com/in/IsaacGrover/ YouTube: https://www.youtube.com/channel/UCqrwZNFKdR-guKtuQzFPObQ -----Original Message----- From: tor-relays [mailto:tor-relays-bounces@lists.torproject.org] On Behalf Of tor-relays-request(a)lists.torproject.org Sent: Monday, September 24, 2018 5:01 PM To: tor-relays(a)lists.torproject.org Subject: tor-relays Digest, Vol 92, Issue 62 Send tor-relays mailing list submissions to tor-relays(a)lists.torproject.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays or, via email, send a message with subject or body 'help' to tor-relays-request(a)lists.torproject.org You can reach the person managing the list at tor-relays-owner(a)lists.torproject.org When replying, please edit your Subject line so it is more specific than "Re: Contents of tor-relays digest..." Today's Topics: 1. Re: Memory leak in 0.3.4.8? (nusenu) 2. Re: Jerk spammers on tor-relays (Ralph Seichter) 3. Reminder: Meeting in #tor-relays (Colin Childs) 4. Running an exit node behind NAT? (Isaac Grover, Aileron I.T.) 5. Re: Running an exit node behind NAT? (nusenu) ---------------------------------------------------------------------- Message: 1 Date: Mon, 24 Sep 2018 12:14:00 +0000 From: nusenu <nusenu-lists(a)riseup.net> To: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] Memory leak in 0.3.4.8? Message-ID: <be59b0ce-c3c1-7db3-1855-b33320d01897(a)riseup.net> Content-Type: text/plain; charset="utf-8" please add any further information directly to the relevant trac issue at https://trac.torproject.org/projects/tor/ticket/27813 -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 833 bytes Desc: OpenPGP digital signature URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20180924/c8e77…> ------------------------------ Message: 2 Date: Mon, 24 Sep 2018 15:49:56 +0200 From: Ralph Seichter <m16+tor(a)monksofcool.net> To: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] Jerk spammers on tor-relays Message-ID: <d9400f26-314e-7d38-dc58-1137e9106238(a)monksofcool.net> Content-Type: text/plain; charset=utf-8 On 24.09.18 02:12, Dave Warren wrote: > I don't see anything obvious that addresses my approach (only the > approach of sending a message from a consistent address out slowly, > which has several obvious flaws). Messages are already uniquely identifiable, and your approach is just a variation of the method Andreas described. While it bundles spamtraps, it is still just as easily avoided using trigger address sets in the manner I mentioned before. -Ralph ------------------------------ Message: 3 Date: Mon, 24 Sep 2018 15:18:23 -0500 From: Colin Childs <colin(a)torproject.org> To: tor-relays(a)lists.torproject.org Subject: [tor-relays] Reminder: Meeting in #tor-relays Message-ID: <BB20ADEB-B77A-48D7-AE03-79891F17CAA0(a)torproject.org> Content-Type: text/plain; charset=us-ascii Hi everyone, This is a reminder email that we will be holding a relay operator meeting on IRC this Tuesday, September 25th @ 19:00 UTC. You can confirm your local date / time by visiting the following page, and selecting your timezone from the dropdown menu: https://www.worldtimeserver.com/convert_time_in_UTC.aspx?y=2018&mo=9&d=25&h… When: September 25th @ 19:00 UTC Where: irc.oftc.net @ #tor-relays ------------------------------ Message: 4 Date: Mon, 24 Sep 2018 21:48:19 +0000 From: "Isaac Grover, Aileron I.T." <igrover(a)aileronit.com> To: "'tor-relays(a)lists.torproject.org'" <tor-relays(a)lists.torproject.org> Subject: [tor-relays] Running an exit node behind NAT? Message-ID: <CY4PR04MB1078F3D3A619B70A5D3B83E9A8170(a)CY4PR04MB1078.namprd04.prod.outlook.com> Content-Type: text/plain; charset="utf-8" Good afternoon fellow exit node operators, I'm trying to run an exit node for specific ports on a reserved IP address from a VM behind NAT. Based on old how-to's and resolving errors in syslog, this is where I've settled for the torrc after installing the instances via ansible and relayor (thanks nusenu!); however, I'm not seeing the traffic counters update much at all and the exit node isn't showing up in consensus. What needs to be changed? OutboundBindAddress (internal IP) ORPort (internal IP):9000 DirPort (internal IP):80 DirPort (external IP) NoListen DirPort (internal IP) NoAdvertise Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" O: 715-377-0440<tel:715-425-0440>, F:715-690-1029<tel:715-690-1029>, W: www.aileronit.com<http://www.aileronit.com/> LinkedIn: https://www.linkedin.com/in/IsaacGrover/ YouTube: https://www.youtube.com/channel/UCqrwZNFKdR-guKtuQzFPObQ -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20180924/f6ab0…> ------------------------------ Message: 5 Date: Mon, 24 Sep 2018 22:01:00 +0000 From: nusenu <nusenu-lists(a)riseup.net> To: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] Running an exit node behind NAT? Message-ID: <7787779b-fc94-96cf-2160-727e847945e8(a)riseup.net> Content-Type: text/plain; charset="windows-1252" Isaac Grover, Aileron I.T.: > Good afternoon fellow exit node operators, > > I'm trying to run an exit node for specific ports on a reserved IP > address from a VM behind NAT. Based on old how-to's and resolving > errors in syslog, this is where I've settled for the torrc after > installing the instances via ansible and relayor (thanks nusenu!); > however, I'm not seeing the traffic counters update much at all and > the exit node isn't showing up in consensus. What needs to be > changed? > > OutboundBindAddress (internal IP) ORPort (internal IP):9000 DirPort > (internal IP):80 DirPort (external IP) NoListen DirPort (internal IP) > NoAdvertise if you are fine with that, please send me the config file, 'ip addr' output and logfile when tor starts up. -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 833 bytes Desc: OpenPGP digital signature URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20180924/9f615…> ------------------------------ Subject: Digest Footer _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays ------------------------------ End of tor-relays Digest, Vol 92, Issue 62 ******************************************

1 0

Running an exit node behind NAT?
by Isaac Grover, Aileron I.T. 24 Sep '18

24 Sep '18

Good afternoon fellow exit node operators, I'm trying to run an exit node for specific ports on a reserved IP address from a VM behind NAT. Based on old how-to's and resolving errors in syslog, this is where I've settled for the torrc after installing the instances via ansible and relayor (thanks nusenu!); however, I'm not seeing the traffic counters update much at all and the exit node isn't showing up in consensus. What needs to be changed? OutboundBindAddress (internal IP) ORPort (internal IP):9000 DirPort (internal IP):80 DirPort (external IP) NoListen DirPort (internal IP) NoAdvertise Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" O: 715-377-0440<tel:715-425-0440>, F:715-690-1029<tel:715-690-1029>, W: www.aileronit.com<http://www.aileronit.com/> LinkedIn: https://www.linkedin.com/in/IsaacGrover/ YouTube: https://www.youtube.com/channel/UCqrwZNFKdR-guKtuQzFPObQ

3 2

Reminder: Meeting in #tor-relays
by Colin Childs 24 Sep '18

24 Sep '18

Hi everyone, This is a reminder email that we will be holding a relay operator meeting on IRC this Tuesday, September 25th @ 19:00 UTC. You can confirm your local date / time by visiting the following page, and selecting your timezone from the dropdown menu: https://www.worldtimeserver.com/convert_time_in_UTC.aspx?y=2018&mo=9&d=25&h… When: September 25th @ 19:00 UTC Where: irc.oftc.net @ #tor-relays

1 0