- tor-relays - lists.torproject.org

Home router keeps failing.
by Gary 18 Jul '18

18 Jul '18

Hi, I keep having issues with my home router - it keeps failing due to the number of connections and I would be grateful for some advice. I have been running a (non-exit) middle relay for some time and up until now my router has mostly coped. It is what is what I got from my ISP, I can't afford to get a new one. At the minute I had to reset it on a daily basis which not only breaks tor circuits, but I am finding it increasingly hard to convince other people I live with that we need the relay when it causes them browsing issues. My relay connects via wire Ethernet. When I get to (approx) 900 incoming / 600 outgoing tor connections the router goes TITSUP. ACCOUNTING MAX is set to 8GBytes, I think the actual daily usage is about 4 GB though. RelayBandwidthRate is 250 KBytes, RelayBandwitdthBurst is 500KBytes. Although there are a few other devices / phones also connected, however I would estimate not more than a combined 2 GB daily HTTP / HTTPS traffic for all devices. No file sharing / P2P other than tor. My DSL speed is approx 50 mbits download / 15 mbits upload I dont want to keep resetting my router every day, I would be grateful for any advice. Many Thanks.

6 5

Re: [tor-relays] Question regarding ethical torrent blocking
by tor＠t-3.net 16 Jul '18

16 Jul '18

grarpamp <grarpamp(a)gmail.com> wrote: > If operators are taking flak from their upstream, > and they want to carry the traffic for reasons, > before giving in and deploying exit policy, see what options > are available to SWIP the address space to you and thus > eat a lot of the complaints from the internet yourself. What he said, but adding to this - There are not many exit operators who will be in a position to actually own their own IP space and therefore have it SWIPed to them 100%, with nobody else getting abuse complaints. The more SWIP you can get pointed at you, the better, but unfortunately something like getting colo space and a /28 doesn't necessarily get you that. The automated DCMA complaints are actually an abuse of the recipient's email system because the goons sending them do not change what they are doing (or in fact, respond) when you ask them to stop emailing you. For those in a position to run exit policies that might result in abusive automated DCMA emails, it is entirely within the realm of reasonable to build email server filters to reject those at the SMTP envelope (refusal to even accept the emails). You'll also probably be making a filter that outright rejects Base-64 emails from that sender (ie: requiring all abuse@ emails to be submitted plain text or HTML).

1 0

Re: [tor-relays] Fwd: Tor Guard Relay
by Mirimir 14 Jul '18

14 Jul '18

On 06/09/2018 01:51 PM, Keifer Bly wrote: > I just scanned the picture files using Avast, which I use a a lot and it is > a pretty great anti virus program based off of my use with it. Here is the > contents of the email in programming code; I don't know about other email > services but in Gmail this can be retrieved by signing into the web version > (in a web browser) clicking the more options button (next to the replay > button) and clicking "show original". > >>From what I can tell looking at the code, it is encoded using base64 and > the ip address of the web server it was sent from is 104.161.37.109. > > However, as for telling anything else, it seems like that would be > difficult to do without the right equipment. Let me know what you think. Thanks for source with headers. I don't see anything useful, though, I do see that "In-Reply-To: <5b182b2c.1c69fb81.390f6.f0ea(a)mx.google.com>" is correct, so the sender is probably subscribed to the list. Getting that right from messages in the online archives would be nontrivial. But damn: "I joined this site so that i could weed through the guys who aren’t serious and reliable enough to invite to my house where i feel comfortable." Trolling the tor-relays list for nice guys to date? That is bizarre. > On Sat, Jun 9, 2018 at 5:26 PM Mirimir <mirimir(a)riseup.net> wrote: > >> On 06/09/2018 05:28 AM, Keifer Bly wrote: >>> I was asked by mirmir to send one of the emails as a txt file, and so >> here >>> it is. It is at the google drive link below, I had tried to send it as an >>> attachment, but got a note back saying it was being held because it was >> too >>> big. The zip file contains the contents of the email and the attached >>> images. Thank you. I will try creating a spam filter for the email domain >>> they are coming from, though a few of them have come from yahoo.com >> domain, >>> which annoyingly I can't really block as some of my legitimate contacts >> use >>> yahoo mail. I could try reporting this to Google, what do you think? >>> >>> >> https://drive.google.com/open?id=0B_cH2cPZZmbTMmE2Ni1hc1BZbXliM0hMaTZnN19Gc… >> >> Thanks. But the text there doesn't contain headers. But that's less an >> issue, because from headers aren't spoofed. The question now is whether >> this is simple trolling, or attempts to infiltrate machines of relay >> operators. Someone experienced with malware analysis could examine the >> images for attack code, as Roman suggested. But that's over my head. >> >> Blocking *.mexyst.com domains, as Neel suggested, will likely stop most >> of them, with little or no downside. But blocking yahoo.com isn't >> workable for many. But if they're all as salacious as Keifer's example, >> blocking on language seems workable. Or language plus domain. >> >> As with Efail, this is a reminder of the risks of decoding HTML, loading >> embedded images, and fetching remote content. And the importance of >> compartmentalizing email and browsing from credentials for relay >> management (and other high-impact stuff, such as finances). >> >>> On Fri, Jun 8, 2018 at 9:57 PM Mirimir <mirimir(a)riseup.net> wrote: >>> >>>> On 06/08/2018 05:03 PM, Keifer Bly wrote: >>>>> This is one of the about 20 emails that have been received. Upon >> looking >>>> it >>>>> looks like they are spoofing the [tor-relays] subject line. My >> apologies >>>>> for the subject change but could not find a way to forward the emails >>>>> without forwarding them from an old conversation. Thank you. (The >> subject >>>>> this is in reference to is "Spam Emails Received From This Mailing >>>> List"). >>>> >>>> OK, so they're just using subject lines from the list. And not spoofing >>>> the from address. >>>> >>>> But what you forwarded doesn't include the headers. By googling, I get >>>> this: >>>> >>>> | 1) Open the message in your Gmail inbox. >>>> | 2) Click the down-arrow in the top-right corner of the message. >>>> | 3) Click the "Show original" link toward the bottom of the options >>>> | box. The message will open in a separate window with the full >>>> | message headers at the top. >>>> >>>> Just save that as a text file, and send it to me as an attachment. >>>> >>>> Why the bloody hell someone would target users of this list in that way >>>> is bizarre. And why you? Rather than me, who is admittedly an outspoken >>>> jerk sometimes ;) >>>> >>>>> ---------- Forwarded message --------- >>>>> From: Becky Janet <beckyjanet335900(a)re.mexyst.com> >>>>> Date: Fri, Jun 8, 2018 at 7:48 PM >>>>> Subject: Re: [tor-relays] Tor Guard Relay >>>>> To: Keifer Bly <keifer.bly(a)gmail.com> >>>>> >>>>> >>>>> first you need to trust someone to find real sex partner. So if you >> want >>>> to >>>>> find real sex partner then you need to trust me. Always i'm telling you >>>>> it's totally f r e e. Just connect with My Private Page >>>>> <http://datingflirt.info/1stold> by submitting you mail, name, age >> etc. >>>> I'm >>>>> assure you if it's ask any cc then no need to connect with me. So just >>>>> trust and try. Trust Me & Try It Now NCTB ; After completing this task >>>>> check your mail ,Automatically you will get my personal phone no in >> your >>>>> mail within 5 min. Just check your mail (inbox/s p a m) and call me >> asap. >>>>> I'm waiting for your cam >>>>> >>>> _______________________________________________ >>>> tor-relays mailing list >>>> tor-relays(a)lists.torproject.org >>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >>>> >>> >> _______________________________________________ >> tor-relays mailing list >> tor-relays(a)lists.torproject.org >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >> >

4 9

bridge not accessible through obfs4 port
by entensaison＠use.startmail.com 13 Jul '18

13 Jul '18

Dear friends, I am uncuccessfully running a bridge that uses obfs4 as pluggable transport. (At least it should.) Today I actually tried to connect to it and it is possible to connect to the bridge using the ORport. But when I tried to start tor browser with this setting to use obfs4: obfs4 12.345.67.89:1111 (only with the right numbers) it got stuck at "establishing an encrypted network connection". I checked on canyouseeme.org and both the vanilla ORport and the obfs4 port seem to be accessible from outside. My router is set to allow TCP and UDP on the port for obfs4. What could be causing the problem? Cheers, Lo Am Mittwoch, 11. Juli 2018 um 20:47 schrieb Keifer Bly <keifer.bly(a)gmail.com>: > > In comparison how much bandwidth would a Tor bridge user per month? > > It would be tough to give an exact answer to that is it depends on > how many people are connecting through your specific bridge. However > in general the bandwidth requirements would be much less, as bridges > are used for mostly areas where the tor network is blocked whereas > one of the exit relays is used by every client that uses tor at all. > > You can find more information on this topic here > > >> https://metrics.torproject.org/stats.html > > This page contains information about how much traffic different types > of relays generally send and receive over time, etc. > > PS, my apologies if this comes through twice for some reason. My > email client is acting a bit strange at the moment. > > On Wed, Jul 11, 2018 at 9:04 AM Nathaniel Suchy <me(a)lunorian.is> > wrote: >> Hi. I would like to run a public OBFS4 Tor Bridge. Digitalocean’s >> price changes made running an exit too expensive. In comparison how >> much bandwidth would a Tor bridge use per month? >> >> Cheers, >> Nathaniel >> _______________________________________________ >> tor-relays mailing list >> tor-relays(a)lists.torproject.org >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

3 3

Relay Search feature request: add consensus weight line/graph
by nusenu 12 Jul '18

12 Jul '18

I filed a RS feature request that should help you better understand / interpret relay trending (relay doing better or worse?) https://trac.torproject.org/projects/tor/ticket/26767 Relay Search has two graphs showing bw history data and relative values (fraction and probabilities): consensus weight fraction middle probability guard probability exit probability written bytes per second read bytes per second One of the most relevant question for a relay operator is: How is my relay doing? Is it doing better or worse than usually? A good data point to answer this is to look at the cw value over time (not cw fraction) since the probabilities and fraction values are relative and not directly controllable by the operator (i.e. other operators add relays). This will allow relay operators to answer questions like: "My cw fraction decreased, was it because my cw decreased or did my cw remain stable and someone else added more resources?" a graph showing the ratio between cw fraction to cw would also be nice since it answers above question more directly without having to compare the cw and cw fraction lines manually onionoo data: https://metrics.torproject.org/onionoo.html#weights_relay_consensus_weight the onion box displays a cw graph: https://raw.githubusercontent.com/ralphwetzel/theonionbox/master/docs/images/weights.png

1 0

Bridge bandwidth usage?
by Nathaniel Suchy 11 Jul '18

11 Jul '18

Hi. I would like to run a public OBFS4 Tor Bridge. Digitalocean’s price changes made running an exit too expensive. In comparison how much bandwidth would a Tor bridge use per month? Cheers, Nathaniel

2 1

Re: [tor-relays] Thoughts on automatically updating tor software on macos High Sierra
by Keifer Bly 10 Jul '18

10 Jul '18

Tried that twice now and it has not worked. It’s strange, the error terminal returns when trying to launch the script to upgrade tor is this iMac:~ oldimac$ launchctl load -w /Library/LaunchDaemons/starttorupgrade.plist /Library/LaunchDaemons/starttorupgrade.plist: Path had bad ownership/permissions This is very odd. I set the permissions to read and write for all users, but yet this error is still happening. I changed the permissions for the whole lanchdaemons folder as well and still no resolve to this. I even tried signing into the root user in Terminal to see if that would resolve the issue, it did not. Here is the code for the two scripts I wrote, they were too big to send as attachments. Perhaps I am doing something wrong? I do not know. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Label</key> <string>com.oldimac.upgradetor</string> <key>ProgramArguments</key> <array> <string>/Library/LaunchDaemons/upgradetor.plist </string> </array> <key>StartInterval</key> <integer>80000</integer> </dict> </plist> code for upgradetor.plist: > brew upgrade tor > On Jul 9, 2018, at 8:45 PM, Keifer Bly <keifer.bly(a)gmail.com> wrote: > > Tried that twice now and it has not worked. It’s strange, the error terminal returns when trying to launch the script to upgrade tor is this > > > iMac:~ oldimac$ launchctl load -w /Library/LaunchDaemons/starttorupgrade.plist > /Library/LaunchDaemons/starttorupgrade.plist: Path had bad ownership/permissions > > This is very odd. I set the permissions to read and write for all users, but yet this error is still happening. I changed the permissions for the whole lanchdaemons folder as well and still no resolve to this. I even tried signing into the root user in Terminal to see if that would resolve the issue, it did not. I’ve attached the scripts I created if someone wouldn’t mind helping me take a look tp see if anything is wrong? Thank you.

2 2

Thoughts on automatically updating tor software on macos High Sierra
by Keifer Bly 10 Jul '18

10 Jul '18

Hello list, So for a while I have been struggling to find a way to automatically update the tor relay software on macOS High Sierra. What I am currently doing is running a batch file that runs the command “brew upgrade tor” continuously. However, I am attempting to find a way to do this automatically on macos High Sierra where the process doesn’t have to be running every second. Here’s the unfortunate thing, on the newest macos operating systems, it appears there is no possible way to run terminal commands automatically, as crontab has been disabled / removed from newer mac operating systems (I discussed this with Apple technical support) and applications to run scripts automatically are incompatible with newer macos. Any thoughts on this would be appreciated, thank you.

3 2

DNS Time Outs
by Paul Templeton 09 Jul '18

09 Jul '18

Hi all, how often does the site https://arthuredelstein.net/exits/ update. 'coffswifi4' was reporting 60% timeouts but I have setup a stand alone DNS for it and would like to know if its resolved the problem. I think this is why it kept on being dropped from the consensus... For nusenu - Yes I have setup DNSSEC :-) Regards, Paul 137CF322859E400455E457DB920F65FFDD222CDF

3 3

Re: [tor-relays] DNS Time Outs
by Paul Templeton 09 Jul '18

09 Jul '18

> Exits don't get dropped from the consensus for DNS failures. > The directory authorities only check ORPort connectivity. Then I have two separate problems...

1 0

tor alpha users: if you are still running 0.3.3.5-rc..
by nusenu 07 Jul '18

07 Jul '18

Dear debian/ubuntu tor alpha repo users, there is an oddly high number of relays running 0.3.3.5-rc which was the last version before the 0.3.3.x alpha repo has been discontinued. If you are doing apt upgrades and don't get tor v0.3.3.7 your sources list is likely incorrectly setup (only containing the experimental lines without the tor stable lines), please ensure you copy and paste the sources.list lines from https://www.torproject.org/docs/debian.html.en#ubuntu after choosing your settings from the drop down. Note: as already noted on this list, the page is slightly outdated. If you want to help testing 0.3.4.x you should replace '0.3.3.x' with '0.3.4.x' in your sources.list bonus points if you want to share the reason why you had a misconfigured sources.list file (maybe we can improve / avoid that somewhere) -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

3 8

Is a relay on mobile broadband possible in Australia?
by I 06 Jul '18

06 Jul '18

6 22

Re: [tor-relays] Is a relay on mobile broadband possible in Australia?
by Paul Templeton 06 Jul '18

06 Jul '18

> What provider - I used to run one on iiNet broadband. Just went online - iiNet does have this service anymore... https://www.iinet.net.au/internet/broadband/mobile/

1 0

Do not be intimidated "Zwiebelfreunde" and all others
by onion 06 Jul '18

06 Jul '18

out of German newspaper taz: https://www.taz.de/Kommentar-Razzien-bei-Netzaktivisten/!5515912/ https://www.taz.de/Kommentar-Razzien-bei-Netzaktivisten/%215515912/

2 1

Re: [tor-relays] tor-relays Digest, Vol 89, Issue 49
by dave levi 05 Jul '18

05 Jul '18

first, Thank you all for you answers and help. let me make it a bit harder. now, im running a relay which is Guard and Exit relays. i have defined in my relay(the server that's running the relay in /torrc file) to be "AllowSingleHopExits 1" and set in my computer that running the TOR(in /torrc file) with the 1(one) hop to: "ExcludeSingleHopRelays 0" and "AllowSingleHopCircuits 1" so now every thing needs to be ok right? but, still its not working On Tue, Jun 26, 2018 at 5:34 PM, <tor-relays-request(a)lists.torproject.org> wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Is Tor-network protected from using one hop? (dave levi) > 2. Re: Is Tor-network protected from using one hop? (Logforme) > 3. Re: Is Tor-network protected from using one hop? (Matt Traudt) > 4. Re: Is Tor-network protected from using one hop? (Nagaev Boris) > 5. Re: Is Tor-network protected from using one hop? > (Roger Dingledine) > 6. Re: Is Tor-network protected from using one hop? (Matt Traudt) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 26 Jun 2018 17:16:46 +0300 > From: dave levi <levi72827(a)gmail.com> > To: tor-relays(a)lists.torproject.org > Subject: [tor-relays] Is Tor-network protected from using one hop? > Message-ID: > <CAJUku5hQa5JCk1UCn_CynyVG=kxhXkQpC0-ApW=k7vJxPrTM5g@ > mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > I'm testing few things in Tor and I noticed that if im changing(from the > source code) the number of hop's(nodes) to be more then 3 hop's it work's > fine(slowly, but still working) and if im sting only 2 hop's its still > works great. but, when i'm setting only 1 hop, i can open the Tor-browser > but i can't use it(Tor-browser) to visit site(regular site or onion site > too). so im thinking maybe the Tor-network have protected from users who > are using 1 hop? >

1 0

OutboundBindAddressExit
by Paul Templeton 05 Jul '18

05 Jul '18

Can you only bind one address or is there a way to use multiple? P 609662E824251C283164243846C035C803940378

2 4

A general question for relay operators
by George 05 Jul '18

05 Jul '18

Greetings relay operators. A question that came up offline for relay operators can be summed up in one sentence, paraphrased from flexlibris: as a relay operator, what "things" do you wish you knew before you started running a relay? I'm really curious, in particular, to hear from those relay operators who are less connected to others, and are maybe more isolated physically from the community. In the long-ago past, many of us ran exit nodes without giving it much thought or preparation leading to ISP issues, but that seems less common today. For others, there might be a learning curve in keeping a network service up with decent uptime, while updating the relevant ports and operating system. There's no irrelevant answers to this, including more boring issues such as paying for the relay, choosing a provider or experiences as a (conscious) exit node operator. Bonus point for showing relation between your total costs per 1Mbps. Not only should this discussion be useful on list, but it might provide more content for the relay operator guide. g -- 34A6 0A1F F8EF B465 866F F0C5 5D92 1FD1 ECF6 1682

9 15

Coordinated raids of Zwiebelfreunde at various locations in Germany
by nusenu 05 Jul '18

05 Jul '18

https://blog.torservers.net/20180704/coordinated-raids-of-zwiebelfreunde-at… https://www.ccc.de/en/updates/2018/hausdurchsuchungen-bei-vereinsvorstanden… "The board members of the association are not considered suspects but witnesses in the ongoing investigation." "Just to recap: The mere presence of an e-mail address at a large free provider on a website has caused law enforcement authorities to deduce that a German association that helps raise funds for this provider must be connected to this website somehow."

5 5

DSL interruption
by Paul 05 Jul '18

05 Jul '18

^ r | rt rt | rt rt | rt rt rt | rt rt rt rt | rt rt rt rt | rt rt rt rt rt | rt rt rt rt rt rt | rt rt rt rt rt rt rt | rt rt rt rt rt rt rt -+---------------------------------------------------------------------------> | 12 13 14 15 16 17 18 19 20 21 22 23 00 01 02 03 04 05 06 07 08 09 10 11 h rx (MiB) tx (MiB) h rx (MiB) tx (MiB) h rx (MiB) tx (MiB) 12 11.14 14.76 20 666.90 679.48 04 11.68 15.05 13 98.65 102.77 21 27.54 29.01 05 22.50 22.41 14 961.83 954.33 22 49.58 51.97 06 14.50 17.09 15 1028.29 1021.80 23 50.87 51.47 07 11.75 15.13 16 1529.16 1520.73 00 28.72 29.68 08 10.71 13.05 17 1779.50 1768.45 01 16.91 19.62 09 32.82 14.84 18 2477.60 2456.01 02 10.76 14.93 10 13.86 15.48 19 2380.83 2358.08 03 10.06 12.70 11 1.57 2.32 From time to time I do get DSL interruptions which look like above on the traffic on one of my smaller relays. This usually last until I restart the machine manually. Anybody having a good quick idea, script to solve this and restart automatically when DSL is up again? Its on Raspian latest.. Thanks and regards Paul

2 1

killall -hup command
by Keifer Bly 04 Jul '18

04 Jul '18

Hello, So recently I rebooted my relay using the killall tor -hup command (while I was trying to mae some changes to my torrc file). My relays uptime was not changed at all by this, having a current uptime of about 6 days. However, I noticed today at http://torstatus.blutmagie.de/router_detail.php?FP=db1af6477bb276b6ea5e7213… My relay lost the stable flag (which it had had for the last about two months). I know not to worry about exactly what flags I have all the time, but it raises the question of what eactly the killall -hup command does? Thanks.

4 5

Turning down my relay from DigitalOcean
by Guillermo Narvaez 03 Jul '18

03 Jul '18

Hello everyone, Sadly I'm stoping the tor daemon in my relay due high cost of bandwidth ($100), in the meantime I start to search an optional hosting. My apologies! -Guillermo

10 11

Contact info obfscation
by Keifer Bly 02 Jul '18

02 Jul '18

Hello, I am aware that email addresses used in the “ContactInfo: “ in a relay operator’s torrc file is publicly listed on the tor relay. However, what I am wondering, is there a way to obfuscate the email address on http://torstatus.blutmagie.de/router_detail.php?FP=db1af6477bb276b6ea5e7213… to appear as “k—f---b--(a)g-ail.xn--com-9o0a or something of the sorts, while keeping the real email address readable for tor cloud to send mail to? It seems like obfuscating the email address in the torrc file would cause it to become unreadable to the tor project as well. Thank you.

10 23

Problem implementing IPv6 and NYX info
by arisbe 02 Jul '18

02 Jul '18

This year I've modified most of my exit relays to function as IPv6 in/out. The process was easy with the exception of two [0], [1]. I requested and received an IPv6 address, netmask and gateway from these ISPs. I then modified my /etc/network/interfaces file as follows leaving the IPv4 lines in tack: iface eth0 IPv6 static address 2a06:1700:0:1b:: netmask 64 gateway 2a06:1700:0:1b::1 ip addr shows the IPv6 address as global. I added a single line to torrc following the IPv4 line: ORPort 9001 ORPort [2a06:1700:0:1b::1]:9001 After a restart, both relays ramped up to a volume of connections where I was comfortable that the changes were good. Visiting them 12 hours later I find connections in the few hundred and no flags. About half of the connections were from non-Tor servers. The Tor daemon was running and had a PID. Logs showed the relay operational and nothing peculiar. Tor metrics shows the relay as down. I've commented out the IPv6 ORPort line to get both of these exits going again. The procedure I outlined has worked four other times for me. So what gives? Can anyone steer me toward the problem? And, finally, a quick question: Does NYX display incoming and outgoing IPv6 relay information? I assume ARM does not. Arisbe [0] [4061C553CA88021B8302F0814365070AAE617270] [1] [9B31F1F1C1554F9FFB3455911F82E818EF7C7883]

5 5

relayor v0.4.0 is released
by nusenu 01 Jul '18

01 Jul '18

Hi, relayor v0.4.0 is released. relayor helps you with running relays with minimal effort (automate everything). https://github.com/nusenu/ansible-relayor This release contains important changes for exit operators that define their own exit policy, please _do_ read the changelog if you are an exit operator using relayor _before_ upgrading since it requires a minor configuration adjustment. If you do not change the default value for tor_ExitPolicy no configuration change is required. Changes since v0.3.3: ------------------------------ - major: change the format of tor_ExitPolicy (single-line to multi-line) previously it you defined the exit policy like: tor_ExitPolicy: "accept *:80, accept *:443, accept *:22" now you define your exit policy like this: tor_ExitPolicy: - accept *:80 - accept *:443 - accept *:22 - support multiple IP addresses for OutboundBindAddressExit - add support for OpenBSD 6.3 (drop 6.2) - add support for Ubuntu 18.04 (drop 16.04) - add support for Fedora 28 (drop 27) - drop support for Debian 8 and HBSD - increase min. tor version to 0.2.9.x - increase min. ansible verstion to 0.2.5.3 - add support for custom addition to MyFamily members - switch tor_alpha_version from 0.3.3.x to 0.3.4.x - Debian: switch to HTTPS (from HTTP) for repository traffic - reorder some torrc items Main benefits for a tor relay operator ====================================== * automation - no more manual setup tasks * security: offline Ed25519 master keys every tor instance is run with a distinct user * automatically makes use of IPv6 IPs (if available) * automatic tor instance generation (two by default - configurable) * enables tor's Sandbox feature by default on Debian-based systems * easily choose between alpha/non-alpha releases * easily restore a relay setup * easily choose between exit relay/non-exit relay mode * automatic deployment of a tor exit notice html page via tor's DirPort * automatic MyFamily management Supported Operating Systems ---------------------------- Debian 9 and Debian Testing OpenBSD 6.3 FreeBSD 10.4, 11.1 Ubuntu 18.04 CentOS 7 Fedora 28 regards, nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

1 1

fix this please
by I 30 Jun '18

30 Jun '18

3 5