- tor-relays - lists.torproject.org

Willing to be FallbackDir
by Quake 23 Sep '18

23 Sep '18

Hello, I'm interested on being a FallbackDir. Relay details: Nick: Quake Fingerprint: 490FB3FAAF8837407D94CA7E1DEF025DEF0F3516 Dir address: 178.175.139.122:80 A few restarts here and there but downtimes so far have been just few minutes max. I tend to run the latest Tor unstable versions and update as fast as possible when a new version comes out. If you feel like the relay's eligible to be added as a FallbackDir then by all means, feel free to add it to the source code.

1 0

Re: [tor-relays] Help! TOR Relat dead after upgrading Ubuntu to 18.04
by Ben Riley 23 Sep '18

23 Sep '18

I'm back in business!!!! THANK YOU!! So I changed a couple of ports and also opened those on my router. Previously I only had 9030 & 9001. I've added DirPort on 9051, Socks on 9050. I've actually got 4 ports open on the router for TOR - 9001, 9030, 9050 & 9051. I set 9030 as my control port in torrc - does that port need to be open on the router? Or can I remove that port forward? I have one of the authentication methods unhashed, so I believe that protects that somewhat. netstat -tlpn returns the following: Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:9051 0.0.0.0:* LISTEN 9531/tor tcp 0 0 127.0.0.1:9030 0.0.0.0:* LISTEN 9531/tor tcp 0 0 0.0.0.0:9001 0.0.0.0:* LISTEN 9531/tor tcp 0 0 127.0.0.1:5939 0.0.0.0:* LISTEN 1342/teamviewerd tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN 747/systemd-resolve tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 6055/cupsd tcp 0 0 127.0.0.1:9050 0.0.0.0:* LISTEN 9531/tor tcp6 0 0 ::1:631 :::* LISTEN 6055/cupsd nyx appears to be running fine now. I can see the graph and log messages like previously. It pulled my previous Nickname, but I currently have no flags, so I'm guessing that will update later. I've got the exit policy set to reject *:* however, as I don't want to blow my ISP off. Is that about it? Can anyone think of anything else I need to check? Thank you to everyone who offered solutions! On Thu, Sep 20, 2018 at 4:19 AM Chad MILLER <chad(a)cornsilk.net> wrote: > I maintain the tor-middle-relay Snap package. It listens on system-chosen, > arbitrary ports. May be useful to you, itself, or to steal ideas from. > > $ sudo snap install tor-middle-relay > > > > > On Wed, Sep 19, 2018, 04:56 Ben Riley <blades1000(a)gmail.com> wrote: > >> First off, will outline that I am very much a newbie, but was able to get >> a relay up and running on a Ubuntu machine. It was running fine for maybe >> 12 months (MelbTorBox), with a few resets and software updates along the >> way. >> >> Just doing my bit to help the network. >> >> Anyway, after the Ubuntu upgrade, I had to re-install TOR and I believed >> I did it basically the same way. >> >> Unfortunately, that appears not to be the case. >> I've posted the error messages on the Ubuntu forum hoping to get >> assistance, but no joy: >> >> https://askubuntu.com/questions/1070469/18-04-tor-relay-error-could-not-bin… >> >> I'm now coming to the experts to see if I can resurrect relay before I >> pull the pin on the idea. >> >> I have BASIC Unix knowledge (I can type commands and that's about it). I >> think I might have a couple of copies installed in different places and I >> know I have the TOR browser installed (it works fine). >> >> When I type 'nyx' it replies with: >> Unable to connect to tor. Maybe it's running without a ControlPort? >> >> So I type 'tor' and get >> Sep 19 21:34:24.819 [notice] Tor 0.3.4.8 (git-5da0e95e4871a0a1) running >> on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.0g, Zlib 1.2.11, Liblzma >> 5.2.2, and Libzstd 1.3.3. >> Sep 19 21:34:24.819 [notice] Tor can't help you if you use it wrong! >> Learn how to be safe at >> https://www.torproject.org/download/download#warning >> Sep 19 21:34:24.819 [notice] Read configuration file "/etc/tor/torrc". >> Sep 19 21:34:24.823 [notice] Based on detected system memory, >> MaxMemInQueues is set to 2862 MB. You can override this by setting >> MaxMemInQueues by hand. >> Sep 19 21:34:24.824 [notice] Scheduler type KIST has been enabled. >> Sep 19 21:34:24.824 [notice] Opening Socks listener on 127.0.0.1:9050 >> Sep 19 21:34:24.824 [notice] Opening Control listener on 127.0.0.1:9051 >> Sep 19 21:34:24.824 [notice] Opening OR listener on 0.0.0.0:9001 >> Sep 19 21:34:24.824 [notice] Opening Directory listener on 0.0.0.0:9050 >> Sep 19 21:34:24.824 [warn] Could not bind to 0.0.0.0:9050: Address >> already in use. Is Tor already running? >> Sep 19 21:34:24.824 [notice] Closing partially-constructed Socks listener >> on 127.0.0.1:9050 >> Sep 19 21:34:24.824 [notice] Closing partially-constructed Control >> listener on 127.0.0.1:9051 >> Sep 19 21:34:24.824 [notice] Closing partially-constructed OR listener on >> 0.0.0.0:9001 >> Sep 19 21:34:24.824 [warn] Failed to parse/validate config: Failed to >> bind one of the listener ports. >> Sep 19 21:34:24.824 [err] Reading config failed--see warnings above. >> >> I 'think' my original torrc file may have somehow survived the Ubuntu >> upgrade, but I don't know how as I did a wipe and re-install of Ubuntu. >> But when I edited it, there were my contact details sitting there. >> >> Very appreciative of any help! >> >> Thanks >> Ben. >> > _______________________________________________ >> tor-relays mailing list >> tor-relays(a)lists.torproject.org >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >> >

2 2

Relay out of consensus after node migration
by T0r-n0d3 21 Sep '18

21 Sep '18

Hi, I recently migrated my tor node to new hardware: t0rnod3 5582BBEC12380E34D7DFB8C237939A0B317B205E Copying the /var/lib/tor/keys/ folder on the process. Now my node do not handles circuits, nor it's shown in atlas and I see the following on the logs: [notice] Heartbeat: It seems like we are not in the cached consensus. Kind regards Sent with [ProtonMail](https://protonmail.com) Secure Email.

3 4

Mexico City operator meetup (October 2nd)
by Colin Childs 21 Sep '18

21 Sep '18

Hello tor-relays, At 6:30PM on October 2nd, the Tor Project will be hosting a relay operator meetup in Mexico City, at the Sheraton Maria Isabel[1][2]. Come along and meet other relay operators and hear the latest news from Tor — we’ll also have T-shirts and stickers to kit out your devices. If you don’t run a relay but would like to know more, there will be lots of people at the meetup happy to help you. I also encourage you to read the complete blog post on the Tor Meeting Open Days linked below[1]. There are multiple other events happening around the meeting that relay operators may be interested in. We would love to see you there, thank you all for being part of the relay operator community! [1]: https://blog.torproject.org/hack-us-mexico-city-hackea-con-tor-en-mexico [2]: Paseo de la Reforma 325, Cuauhtémoc, 06500 Ciudad de México, CDMX, Mexico

1 0

Tor Relay Software Warns When Current Running Version Of Tor Is No Longer Recommended, But Not When A Newer Version Is Available?
by Keifer Bly 21 Sep '18

21 Sep '18

Hello, A few days ago, I upgraded my version of tor from 0.3.3.9 to tor 0.3.4.8. I noticed, however, that tor does not tell me when a new version is available. But in the past when I was a few versions behind, it popped up with a message saying “WARNING: this version of tor is out of date or no longer recommended.” So, I am just wondering, why is it that the tor software warns when the current version is “no longer recommended” but does not warn when an update is available? Thanks.

3 6

IPv6 on DSL
by Paul 20 Sep '18

20 Sep '18

Can Tor cope with a daily changing IPv6 Address? If so, are there any additional inputs in torrc to be made as "ip addr|grep inet6|grep global" is not giving a fix value (global noprefixroute dynamic ) Thanks Paul

3 3

More IPv6 questions
by Paul 20 Sep '18

20 Sep '18

https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#Parttwo:technic… uses "ORPort [IPv6-address]:9001" - so can i use the same port number for IPv4 and IPv6? If I run more than one instance on the same machine, can i use the same IPv6 address like in the first instance - as i can do in IPv4? "ip addr|grep inet6|grep global" doesn't give an answer on every server - what to do instead please to fill the square brackets? Thanks Paul

2 1

Help! TOR Relat dead after upgrading Ubuntu to 18.04
by Ben Riley 19 Sep '18

19 Sep '18

First off, will outline that I am very much a newbie, but was able to get a relay up and running on a Ubuntu machine. It was running fine for maybe 12 months (MelbTorBox), with a few resets and software updates along the way. Just doing my bit to help the network. Anyway, after the Ubuntu upgrade, I had to re-install TOR and I believed I did it basically the same way. Unfortunately, that appears not to be the case. I've posted the error messages on the Ubuntu forum hoping to get assistance, but no joy: https://askubuntu.com/questions/1070469/18-04-tor-relay-error-could-not-bin… I'm now coming to the experts to see if I can resurrect relay before I pull the pin on the idea. I have BASIC Unix knowledge (I can type commands and that's about it). I think I might have a couple of copies installed in different places and I know I have the TOR browser installed (it works fine). When I type 'nyx' it replies with: Unable to connect to tor. Maybe it's running without a ControlPort? So I type 'tor' and get Sep 19 21:34:24.819 [notice] Tor 0.3.4.8 (git-5da0e95e4871a0a1) running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.0g, Zlib 1.2.11, Liblzma 5.2.2, and Libzstd 1.3.3. Sep 19 21:34:24.819 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning Sep 19 21:34:24.819 [notice] Read configuration file "/etc/tor/torrc". Sep 19 21:34:24.823 [notice] Based on detected system memory, MaxMemInQueues is set to 2862 MB. You can override this by setting MaxMemInQueues by hand. Sep 19 21:34:24.824 [notice] Scheduler type KIST has been enabled. Sep 19 21:34:24.824 [notice] Opening Socks listener on 127.0.0.1:9050 Sep 19 21:34:24.824 [notice] Opening Control listener on 127.0.0.1:9051 Sep 19 21:34:24.824 [notice] Opening OR listener on 0.0.0.0:9001 Sep 19 21:34:24.824 [notice] Opening Directory listener on 0.0.0.0:9050 Sep 19 21:34:24.824 [warn] Could not bind to 0.0.0.0:9050: Address already in use. Is Tor already running? Sep 19 21:34:24.824 [notice] Closing partially-constructed Socks listener on 127.0.0.1:9050 Sep 19 21:34:24.824 [notice] Closing partially-constructed Control listener on 127.0.0.1:9051 Sep 19 21:34:24.824 [notice] Closing partially-constructed OR listener on 0.0.0.0:9001 Sep 19 21:34:24.824 [warn] Failed to parse/validate config: Failed to bind one of the listener ports. Sep 19 21:34:24.824 [err] Reading config failed--see warnings above. I 'think' my original torrc file may have somehow survived the Ubuntu upgrade, but I don't know how as I did a wipe and re-install of Ubuntu. But when I edited it, there were my contact details sitting there. Very appreciative of any help! Thanks Ben.

4 4

Repeated warning in an exit relay
by livak 18 Sep '18

18 Sep '18

The relay repeatedly casts the following message: Sep 18 08:19:58.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendevous (pending) What does it mean ? Livak Sent with [ProtonMail](https://protonmail.com) Secure Email.

3 2

maha's tor-latest on COPR?
by renke＠mobtm.com 18 Sep '18

18 Sep '18

Hi *, does anyone know if maha still supports his Fedora/Epel repo for the latest Tor release[1]? I'm nearly sure he announced his repo on the list some time ago, but I don't find the mail anymore... With 0.3.3.10 (and 0.3.4.8) released and not really happy with compiling it myself[2] an up to date repo for redhattish distributions would be very nice. Thanks Renke [1] https://copr.fedorainfracloud.org/coprs/maha/tor-latest/ [2] too lazy :)

3 2

A bug or a feature ?
by livak 18 Sep '18

18 Sep '18

The ORPort option of torrc was changed fom 9030 to 80, the relay was sent a HUP signal: kill -HUP [PID] and exited with: Sep 18 07:59:04.000 [notice] Received reload signal (hup). Reloading config and resetting internal state. Sep 18 07:59:04.000 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc". Sep 18 07:59:04.000 [notice] Read configuration file "/etc/tor/torrc". Sep 18 07:59:04.000 [notice] Opening Directory listener on 0.0.0.0:80 Sep 18 07:59:04.000 [warn] Could not bind to 0.0.0.0:80: Permission denied Sep 18 07:59:04.000 [notice] Closing no-longer-configured Directory listener on 0.0.0.0:9030 Sep 18 07:59:04.000 [warn] Failed to parse/validate config: Failed to bind one of the listener ports. Sep 18 07:59:04.000 [err] Reading config failed--see warnings above. For usage, try -h. Sep 18 07:59:04.000 [warn] Restart failed (config error?). Exiting. When the relay was manually restarted and it successfully ran. Can it be considered a bug ? Livak Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 1

Torservers relay family decreased?
by Tobias Westerhever 18 Sep '18

18 Sep '18

Hello, recently, I noticed some strange aspects related to networks of Torservers/Zwiebelfreunde. Since there was no way to get any further information on this topic so far, I am posting it here. Maybe someone can help. (a) Torservers relay family decreased? The organisation used to maintain much more relays than their family [1] currently contains. At the moment, only four relays located in NL belong to them, while the Metrics page indicates some orphaned family members. This coincidences with [2], but I am unaware of any announcements of Torservers/Zwiebelfreunde itself (i.e. tight financial situation). Does anybody have further details here? (b) Who is the operator behind family B771AA877687F88E6F1CA5354756DF6C8A7B6B24 ? There are some /24 IPv4 BGP allocations claiming to belong to the umbrella organisation "Zwiebelfreunde e.V.", which operate(d|s) the relay family mentioned above. I will ask further questions about this in (c) . However, there is a _huge_ relay family (27 members, with a total bandwith of ~ 1,245 MB) located in 185.220.101.0/24 , which uses Zwiebelfreunde as a contact role and has not been changed since 2017-09-08. The relays itself, however, all use <abuse(a)to-surf-and-protect.net> as contact address (which does not seem to be related to Zwiebelfreunde at all) and use a description beginning with "nifty". Since most of them have both Guard and Exit flag assigned, I figure they are handling a huge consensus weight. Does anybody know the person/organisation behind them? Are they related to Zwiebelfreunde/Torservers? What is the physical location of the servers (BGP claims DE, but upstream AS200052 uses UK)? (c) Strange BGP allocations using Zwiebelfreunde as contact role At the moment, 9 IPv4 BGP prefixes with a length of /24 are known to use a contact role pointing to Zwiebelfreunde [4] . These are as follows: - 37.218.246.0/24 (Upstream AS47172 "Greenhost", claims EU, but is likely NL, 0 Tor relays found) - 193.235.207.0/24 (Upstream AS196689 "Digicube", claims EU, but is likely FR, 0 Tor relays found) - 192.36.61.0/24 (Upstream AS60781 "Leaseweb", claims EU, but is likely NL, 0 Tor relays found) - 192.36.41.0/24 (Upstream AS34305 "BaseIP", claims EU, but is likely NL, 0 Tor relays found) - 192.36.27.0/24 (Upstream AS60729 "Zwiebelfreunde" !, claims EU, physical location unknown, 0 Tor relays found) - 185.220.102.0/24 (Upstream AS60729 "Zwiebelfreunde" !, claims EU, physical location unknown, 0 Tor relays found) - 185.220.101.0/24 (Upstream AS200052 "Joshua Peter McQuistan", claims DE, physical location unknown, 27 Tor relays found) What puzzles me here is: 1. None of these networks has any Tor relays known (or Metrics does not show them), which is strange as Torservers/Zwiebelfreunde is more or less dedicated to operate relays. 2. The appearing relays solely belong to the strange and huge family mentioned in (b) , which cannot be exactly pinpointed to be run by Torservers/Zwiebelfreunde. 3. I suspected the mentioned IP ranges to be fakely allocated, but most of them were not changed for more than half a year. Further, I never observed any traffic from or to these networks. If anybody does, please drop me a line. 4. All for relays which do belong to Torservers are located in AS43350 ("NForce Entertainment") and do not have their own IPv4 prefix. *** As of these coincidences, and the observations mentioned in (a) and (b), I suspect something nasty (or highly unusual) is going on, but I have no clue what this might be. It would be great if someone who is in Tor more deeply than I am could take a look at this. Also, if there is further information available, please tell me. "Mit dem Wissen wächst der Zweifel. / Doubt grows with knowledge." -- Goethe Best regards, T. Westerhever Links: [1] https://metrics.torproject.org/rs.html#search/family:0FF233C8D78A17B8DB7C82… [2] https://blog.torservers.net/20180704/coordinated-raids-of-zwiebelfreunde-at… [3] https://metrics.torproject.org/rs.html#search/family:B771AA877687F88E6F1CA5… [4] https://bgp.he.net/

8 12

New exit node
by livak 18 Sep '18

18 Sep '18

Just wanted to tell I could set up a new relay with fingerprint Akbash 7C5032CF2545636FEECCE1065A25944FF49C09F7 The relay is been running for more than a day and gathered the Exit, Fast, Running, V2Dir and Valid flags. However this hardworking relay would not continue its earnest efforts unless it could find a wealthy and amenable sponsor. Livak Sent with [ProtonMail](https://protonmail.com) Secure Email.

12 21

Exit friendly ISPs
by grarpamp 17 Sep '18

17 Sep '18

On 9/17/18, niftybunny <abuse(a)to-surf-and-protect.net> wrote: > [cost, cost, cost] >> freedom is a profitable business model. We charge double and up rates to ignore and manage everything, short of legal process served, with you on point in role until you're not. Exits, torrents, gaming, IRC, shells, free speech, social nets, researchers, political sites, any legal business... all fine... bring it. Who's in? >>> reputation costs >> >> So these ISPs get a bad reputation mark on the list of >> bad isp's, on forums, on lists, etc. > > No, they don’t. We (the Tor people) are a tiny fraction of a tiny fraction > of a tiny fraction. Nobody really cares about us. Opinion: RIMU hosting sucks. Why: Because they refuse to host legal exits, or state / negotiate any upstream terms regarding them. Changepoint: When they do either or both of those. There, that should search rank before long. > They have 1 Million websites hosted, who cares > about 2-3 people complaining they do not host Tor exists? If that was an ISP's ratio they'd have much bigger things to deal with, and efficiences in dealing with them, than to care about banning a handful of exit customers. Absent prohibition in law or upstream contract, most ISP's banning such things simply haven't done much to develop and... >> Explore the possible.

2 1

New TOR Relay
by Kyle Levy 17 Sep '18

17 Sep '18

Hello, I am attempting to set up a TOR relay on my raspberry pi on my home network (nickname: relaydetour). I had it set up and running, but now it seems to be offline. I hadn't changed any settings, and it's still flagged as "running" and "valid". Is it functional? And is it more likely a problem with my configuration or something more problematic? Please let me know. Thank you.

4 6

Exit friendly ISPs in Australia
by Isaac Grover, Aileron I.T. 17 Sep '18

17 Sep '18

Good evening, Following up with a tongue-in-cheek suggestion to set up exit nodes in Australia, for those who are interested, there are already seven exit nodes in Australia per https://hackertarget.com/tor-exit-node-visualization/ . I have also contacted RIMU Hosting, which has servers in Australia, and they said "As an account holder under our terms of use, you would be directly responsible for all content in and out of your server. In general that is not possible to do with a tor exist node, so we are not a good fit for that use case." Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" O: 715-377-0440<tel:715-425-0440>, F:715-690-1029<tel:715-690-1029>, W: www.aileronit.com<http://www.aileronit.com/> LinkedIn: https://www.linkedin.com/in/IsaacGrover/ YouTube: https://www.youtube.com/channel/UCqrwZNFKdR-guKtuQzFPObQ

7 8

Tor master exits with a required protocol error
by teor 17 Sep '18

17 Sep '18

(CC'd tor-relays, please direct replies to tor-dev.) Hi, If you are running Tor master, your Tor may exit with a required protocol error. The issue was introduced in commit 991bec67ee (about 8 hours ago). The following conditions will make Tor exit: * Tor will exit on startup if it has a cached consensus from the 14th of September (or earlier). It does not matter how old the consensus is. * If certain directory authorities go down, the remaining authorities may generate a consensus that will cause your Tor to exit. These consensuses require the LinkAuth=1 protocol, which Tor master believes it does not support. (The change was intended for NSS Tors, but mistakenly applies to all Tors.) Here's how you can mitigate this issue: * downgrade to 0.3.4.8 or earlier, or * delete the cached consensuses in your data directory. These consensuses may be called cached-consensus, cached-microdesc-consensus, unverified-consensus, and unverified-microdesc-consensus. Some may not be present. We should resolve this issue in master in the next 24 hours. Then it may take another 24 hours for packages to be rebuilt. The master ticket for this change is: https://trac.torproject.org/projects/tor/ticket/27288 T -- teor Please reply @torproject.org New subkeys 1 July 2018 PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ----------------------------------------------------------------------

1 0

Australian relays
by Sydney 17 Sep '18

17 Sep '18

Hi all I currently run 3 Australian exits, and 1 non-exit, in the 262E84A99F53AE1F6860267F7C5DA5B96E57A46D family. Due to personal reasons I need to take the relays down, which is disappointing as they are currently in a unique AS. This will leave 6 Australian exits. I appreciate that Australia is a long way in terms of latency, and my relays have been fairly under-utilised even though they’re on a 100mbit (Adelaide) and gigabit (Sydney) network interface. I might be in a position to bring these back in 2019. Before I do, I just wanted to know if it’s worthwhile having the Australian relays as part of the network? Cheers Sydney

2 1

Announcement: Relay operator meetings on IRC
by Colin Childs 16 Sep '18

16 Sep '18

Hello Tor relay operators! Starting September 11th @ 1:00AM UTC, we will be piloting regular relay operator meetings in #tor-relays on irc.oftc.net. These meetings will be an opportunity to introduce yourself to the operator community, make new contacts and provide updates to the group on the status of your relays. This will also be an opportunity to have questions answered by a group of dedicated relay operators, community members and Tor Project staff. For everyone overseas, we will be hosting a second meeting on September 25th @ 19:00 UTC. After these initial two meetings, we will evaluate if these dates / times need to be adjusted, as well as how frequently these meetings should be run. I will send a follow-up email at the end of September with the results of that evaluation. On the Monday of meeting weeks, I will send a reminder on this list with the channel, date and time. I look forward to seeing you all there, and thank you for running relays!

6 8

exit operators: overall DNS failure rate above 5% - please check your DNS
by nusenu 16 Sep '18

16 Sep '18

Dear Exit relay operators, first of all thanks for running exit relays! One of the crucial service that you provide in addition to forwarding TCP streams is DNS resolution for tor clients. Exits relays which fail to resolve hostnames are barely useful for tor clients. We noticed that lately the failure rates did increase again and would like to urge you to visit Arthur's "Tor Exit DNS Timeouts" page that shows you the DNS error rate for exit relays: https://arthuredelstein.net/exits/ (the page is usually updated once a day) Please consider checking your DNS if your exit relay consistently shows a non zero timeout rate - and make sure you run an up to date tor version. If you are an exit operator but have no (or no working) ContactInfo, please consider updating that field in your torrc so we can reach you if something is wrong with your relay. kind regards nusenu -- https://twitter.com/nusenu_

2 3

[release] ExoneraTor 4.0.0
by Karsten Loesing 15 Sep '18

15 Sep '18

Good evening, today we released and deployed version 4.0.0 [0] of the ExoneraTor service [1]. This new version greatly reduces database size and variance of query response times. Changes in this version are heavily based on work done by Sebastian Hahn. Earlier ExoneraTor databases can be migrated by running the new psql script [2] that comes with a migration function. Please direct comments and questions to the metrics-team mailing list [3]. All the best, Karsten [0] https://dist.torproject.org/exonerator/4.0.0/ [1] https://metrics.torproject.org/exonerator.html [2] https://gitweb.torproject.org/exonerator.git/tree/src/main/sql/exonerator2.… [3] https://lists.torproject.org/cgi-bin/mailman/listinfo/metrics-team

3 3

Torservers relay family decreased? (solved)
by niftybunny 13 Sep '18

13 Sep '18

› Hello, › › recently, I noticed some strange aspects related to networks › of Torservers/Zwiebelfreunde. Since there was no way to get any › further information on this topic so far, I am posting it here. › Maybe someone can help. Lets recap this for a moment: 1. Every relay of my family has my e-mail. Write an e-mail and ask. Problem solved. 2. The e-mails are running on a domain, registered my me, make a whois lookup for the domain. Problem solved. 3. The /24 IP space is registered by me. Make a RIPE (or whoever provides IP lookup) and you also have my name. Problem solved. 4. Ask someone from Torservers about me. They gave me the /24 for hosting Tor exits. Problem solved. 5. Take a look at the Tor relay mailing list, I was active there. Problem solved. 6. I am an registered InterExchangeCarrier under German law. Ask the Bundesnetzagentur for my Information. Problem solved. 7. The RIPE entries are maintained by F3Netze/Zwiebelfreunde. Ask Tim about me. Problem solved. 8. Write a snail mail letter to my address. Problem solved. 9. Send me a facsimile to my official RIPE abuse records. Problem solved. and the list goes on and on … Welcome to the Interwebs where people ask who you are ... To perfect sum it up: https://i.imgur.com/20wmhNT.jpg › (b) Who is the operator behind family B771AA877687F88E6F1CA5354756DF6C8A7B6B24 ? › There are some /24 IPv4 BGP allocations claiming to belong to the › umbrella organisation "Zwiebelfreunde e.V.", which operate(d|s) › the relay family mentioned above. There is still no family fingerprint. We did not ever claimed to belong to Zwiebelfreunde e.V. Stop making shit up. › I will ask further questions about this in (c) . › › However, there is a _huge_ relay family (27 members, with a › total bandwith of ~ 1,245 MB) located in 185.220.101.0/24 , › which uses Zwiebelfreunde as a contact role and has not been › changed since 2017-09-08. No, we do not. We are the ADMIN-C and the TECH-C. Zwiebelfreunde is just the MNT-REF. Look it up for yourself: https://apps.db.ripe.net/db-web-ui/#/query?bflag&searchtext=185.220.101.0&s… It even has a fucking disclaimer on it: netname: MK-TOR-EXIT remarks: ----------------------------------- remarks: This network is used for Tor Exits. remarks: We do not have any logs at all. remarks: For more information please visit: remarks: https://www.torproject.org remarks: ----------------------------------- remarks: Dieses Netz hostet nur Tor remarks: Exists. Wir haben keinerlei Logs. remarks: Mehr Informationen unter: remarks: https://www.torproject.org The (current) owner of the IPs is: https://apps.db.ripe.net/db-web-ui/#/lookup?source=ripe&key=ORG-MK113-RIPE&… and the abuse contact: https://apps.db.ripe.net/db-web-ui/#/lookup?source=RIPE&key=ACRO11287-RIPE&… › The relays itself, however, all use <abuse at to-surf-and-protect.net> › as contact address (which does not seem to be related to › Zwiebelfreunde at all) and use a description beginning with › "nifty". Have you tried to send uns an e-mail and ask? No? They are not related to Zwiebelfreunde because we are not Zwiebelfreunde. And btw, its Nifty + name of a rodent. Yes, I know hedgehogs are no rodents. But they are cute too. › Since most of them have both Guard and Exit flag assigned, I › figure they are handling a huge consensus weight. No. Complete bullshit. Exit flag indicates thats an Exit and Guard indicates a longer uptime. I can make an relay on a wee DSL line with these flags. It indicates not a huge consensus weight at all. RTFM! › Does anybody know the person/organisation behind them? Yes. › Are they related to Zwiebelfreunde/Torservers? Besides the /24, no. What is the physical location of the servers (BGP claims DE, but upstream AS200052 uses UK)? NL BGP claims DE? BGP is a routing protocol, it claims nothing. It doesnt give a flying shit about countries. It routes packets between different ASs. Show me the BGP routing table. › (c) Strange BGP allocations using Zwiebelfreunde as contact role › At the moment, 9 IPv4 BGP prefixes with a length of /24 are › known to use a contact role pointing to Zwiebelfreunde [4] . › › These are as follows: › - 37.218.246.0/24 (Upstream AS47172 "Greenhost", claims EU, but is likely NL, 0 Tor relays found) › - 193.235.207.0/24 (Upstream AS196689 "Digicube", claims EU, but is likely FR, 0 Tor relays found) › - 192.36.61.0/24 (Upstream AS60781 "Leaseweb", claims EU, but is likely NL, 0 Tor relays found) › - 192.36.41.0/24 (Upstream AS34305 "BaseIP", claims EU, but is likely NL, 0 Tor relays found) › - 192.36.27.0/24 (Upstream AS60729 "Zwiebelfreunde" !, claims EU, physical location unknown, 0 Tor relays found) › - 185.220.102.0/24 (Upstream AS60729 "Zwiebelfreunde" !, claims EU, physical location unknown, 0 Tor relays found) › - 185.220.101.0/24 (Upstream AS200052 "Joshua Peter McQuistan", claims DE, physical location unknown, 27 Tor relays found) BGP still claims shit. BGP is still a routing protocol. Look at a looking glas server and start reading RTFs. › What puzzles me here is: › 1. None of these networks has any Tor relays known (or Metrics › does not show them), which is strange as Torservers/Zwiebelfreunde › is more or less dedicated to operate relays. https://nusenu.github.io/OrNetStats/ https://metrics.torproject.org/rs.html › 2. The appearing relays solely belong to the strange and huge › family mentioned in (b) , which cannot be exactly pinpointed to › be run by Torservers/Zwiebelfreunde. Yeah, these strange and huge relays are here for over 3 years, growing. https://imgur.com/1jwtxHX Nusenu twitter page, https://twitter.com/nusenu_ , you should check it out. › 3. I suspected the mentioned IP ranges to be fakely allocated, › but most of them were not changed for more than half a year. Further, › I never observed any traffic from or to these networks. If anybody › does, please drop me a line. Yes! Complete right! You just destroyed our super secret FBI/NSA/BND/MI6 plan to take over the Tor network. Good job, Sherlock! › As of these coincidences, and the observations mentioned in (a) › and (b), I suspect something nasty (or highly unusual) is going on, › but I have no clue what this might be. 100% perfect conclusion. Good job, Sherlock! › It would be great if someone who is in Tor more deeply than I am › could take a look at this. Also, if there is further information › available, please tell me. › "Mit dem Wissen wächst der Zweifel. / Doubt grows with knowledge." › -- Goethe https://imgur.com/JG514ja › Best regards, › T. Westerhever Whatever, niftybunny

4 5

A vote for the amateur relay operator
by torix＠protonmail.com 13 Sep '18

13 Sep '18

My vision for the tor project (toropia, if you will) is that running a relay be normal, i.e. part of the ritual of children leaving home for college would be to make sure their parents know how to reboot the tor relay in the basement when the power goes out. But it would be a big plunge for an amateur to set up an exit relay. So when Conrad Rockenhaus offered SWIPEd freeBSD installed relays, it seemed like a chance to get my feet wet. I have no freeBSD experience, but the new torproject directions turned out fine. I'm trusting that Conrad's install will be fine while I learn about hardened freeBSD and get plugged in about security updates. So Conrad gets the grief, and I just run the relay. Maybe I'm not a "real" relay operator for this one, but I think that's okay; I'm contributing to OS diversity, and a new exit relay. When Conrad wrote about getting a court order this week, and got a reply from teor, and said he was getting help with it, my reaction was "as least he seems to be getting help" - a comforting thought for an amateur reading this list who has never seen a court order. --torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

3 2

Exit node seized
by tor-relays＠geek1.de 12 Sep '18

12 Sep '18

Hello, I've found no information - after short googling - if I should take some action after an exit node got seized. Like marking the fingerprint as compromised or something like that. I'd guess it's ok to just set up a new exit node on the same IP and everything should be fine but I'm not quite 100% sure on this. Node in question: https://metrics.torproject.org/rs.html#details/AF8A3EE078EB81338461F178DBE5… And another question about this topic: Would it be better to create a new exit from scratch or is it ok to restore the latest backup with all keys, etc. ? Cheers Michael

4 6

Court Order
by Conrad Rockenhaus 11 Sep '18

11 Sep '18

Greypony received its first Court Order yesterday. Unfortunately, we have no records to provide since it was a Tor Exit, and we don’t even have records of who owned that relay at that IP address because we don’t keep records of the info. Oops. It’s a pretty broad Court Order, and kind of funny. Oh well. Conrad

6 9