- tor-relays - lists.torproject.org

Expanded Free Trial For Exit Relays
by Conrad Rockenhaus 27 Jul '18

27 Jul '18

Hello, One of the guys trying out my services suggested that I offer a free trial to those who would like to run Linux Tor Exit Relays or just plain relays or even bridges. So I am. I would prefer you would use FreeBSD (Still working on OpenBSD) but I'll offer Linux if it helps expand Tor. So, I'll offer this - 1 vCPU, 2GB RAM, 10GB HDD, 100mbit/unmetered bandwidth. Address space is SWIPed to me. I'm still automating things so I don't have a nice control panel online yet, should have it by this weekend though. If you're interested, please email me a public RSA key and I will create an instance for you. Thanks, Conrad -- Conrad Rockenhaus https://www.rockenhaus.com ------ Get started with GreyPony Anonymization Today! https://www.greyponyit.com

1 0

Moving Tor Files - Backing Up Tor Software On Macos
by Keifer Bly 25 Jul '18

25 Jul '18

Hi, So I am trying to backup my relay software (torrc file, relay fingerprint, etc) using my file backup application. However, there is a problem. The macos operating system only allows accessing the /usr/local/, where tor is saved via the Go -> Go to folder option and does not allow it to be found via the finder no matter what, which my backup application (google backup and sync) requires. I tried running defaults write com.apple.Finder AppleShowAllFiles true as both the normal and sudo user and restarted the computer and finder, and this did nothing. Is it possible to move the tor files to a place where they would be accessible via the Finder or is there a known workaround for this? The software version is tor 0.3.3.9 on macos 10.13.6. Thanks very much.

2 1

How to restore fingerprint on updated RPI3
by Richard Johnston 24 Jul '18

24 Jul '18

I've run a relay for over a year and recently updated from an RPI2 to a RPI3. I've copied the torrc file and the node has the same IP Address and ports. What additional files need to be copied to get the fingerprint (et al) to match the original relay. The updated RPI3 shows up as a new relay and I would like to have it take over the old fingerprint. Any suggestions or procedures? Thanks in advance! -- Rich Johnston

2 2

Bridge relays should upgrade to use the new bridge authority
by Roger Dingledine 24 Jul '18

24 Jul '18

Hi folks! If you run a bridge relay, please upgrade -- so your bridge address can resume being given out to censored users, and so your stats can resume being included in the metrics pages. We just put out new releases (0.2.9.16, 0.3.2.11, 0.3.3.9, 0.3.4.5-rc) that retire the old bridge authority and start using a new one. The new bridge authority is "Serge", and it is operated by George from the Tor BSD Diversity project: https://lists.torproject.org/pipermail/tor-announce/2018-July/000162.html If for whatever reason you can't upgrade yet, you can also manually switch to advertising your bridge descriptor to the new bridge authority by using this torrc line: AlternateBridgeAuthority Serge orport=9001 bridge 66.111.2.131:9030 BA44 A889 E64B 93FA A2B1 14E0 2C2A 279A 8555 C533 Thanks! --Roger

5 15

Temporarily shutting down public relay
by Shawn Webb 23 Jul '18

23 Jul '18

Hey All, As an FYI, I'm temorarily shutting down the non-exit HardenedBSD-based relay I run at home (3CA2B91F2F2720202DD845E0E4C827E720CF5430) due to an upcoming extensive shoulder surgery my wife is having. I need to cut costs as she will be out of work for a year. My plan is to re-enable it once she's fully recovered. Thanks, -- Shawn Webb Cofounder and Security Engineer HardenedBSD Tor-ified Signal: +1 443-546-8752 Tor+XMPP+OTR: lattera(a)is.a.hacker.sx GPG Key ID: 0x6A84658F52456EEE GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE

1 0

FYI: Subpoena Received
by "IPfail (Tor Admin)" 23 Jul '18

23 Jul '18

FYI, I received a subpoena from a US based court to produce information about individual(s) who were using one of our exit nodes at a specific date/time. In the nearly 3 months that these exits have been in operation, this is the first subpoena and only the second complaint received. For purposes of documenting the approximate ratio of "complaints / traffic processed", these nodes have handled ~515TB and are using the recommended reduced exit policy. https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy

7 8

Bridges and MyFamily setting
by Cristian Consonni 23 Jul '18

23 Jul '18

Hi, I am running a couple of relay nodes and now I would like to set a bridge relay. The `torrc` file says the following: --- ## Uncomment this if you run more than one Tor relay, and add the identity ## key fingerprint of each Tor relay you control, even if they're on ## different networks. You declare it here so Tor clients can avoid ## using more than one of your relays in a single circuit. See ## https://www.torproject.org/docs/faq#MultipleRelays ## However, you should never include a bridge's fingerprint here, as it would ## break its concealability and potentially reveal its IP/TCP address. #MyFamily $keyid,$keyid,... --- I understand that I should not add the bridge fingerprint to the MyFamily setting of my other relays, but should I set MyFamily on my bridge (with the fingerprints of my other nodes)? I suppose that the logic of avoiding to have the same circuit through multiple relay controlled by the same operator is still valid, but I don't know if this could be a problem. C

2 3

[Software Announcement] FamilyGenerator: Tor MyFamily Generator
by Neel Chauhan 22 Jul '18

22 Jul '18

Hi tor-relays mailing list, I have created a tool called FamilyGenerator. FamilyGenerator is a tool to automatically construct a Tor MyFamily line based on Onionoo parameters. Why? If you run multiple relays, it can become hard to keep your MyFamily line updated if you add or remove relays. FamilyGenerator makes it easier (and automated if you use cron, or maybe without it in a future version if it ever comes). Does it integrate with Tor directly? As of now, no. If you want to automatically load FamilyGenerator outputs to Tor, you can: 1. Make sure all your relays has something in common in the Nickname or ContactInfo lines 2. Use a shell script to generate the MyFamily line with FamilyGenerator 3. Use a cron job to reload Tor after FamilyGenerator runs 4. Include the output in a Include line in your torrc Hopefully, a future version can avoid cron (that is, if it comes). FamilyGenerator is available on GitHub at: https://github.com/neelchauhan/FamilyGenerator You can install it from PyPI with: pip install FamilyGenerator A FreeBSD port is underway. For Debian users, sorry, but there's no Debian package in the pipeline as I don't use Debian. That's it. Thank You, Neel Chauhan

5 6

Trying to set up a relay at home, but get no connections
by Gunnar Wolf 21 Jul '18

21 Jul '18

Hello, I have set up a VM at my home server (via fiber DSL) to work as a Tor relay. I have set up port forwarding for ORport and DirPort (defaults, 9001 and 9030). The logs don't give me any useful information — or, possibly, I fail to grok anything useful ;-) The following happens every couple of hours: Jun 07 09:36:19.000 [notice] Heartbeat: It seems like we are not in the cached consensus. Jun 07 09:36:19.000 [notice] Heartbeat: Tor's uptime is 17:59 hours, with 0 circuits open. I've sent 2.71 MB and received 32.26 MB. Jun 07 09:36:19.000 [notice] Average packaged cell fullness: 13.454%. TLS write overhead: 12% Jun 07 09:36:19.000 [notice] Circuit handshake stats since last time: 0/0 TAP, 14/14 NTor. Jun 07 09:36:19.000 [notice] Since startup, we have initiated 0 v1 connections, 0 v2 connections, 0 v3 connections, and 21 v4 connections; and received 0 v1 connections, 0 v2 connections, 0 v3 connections, and 216 v4 connections. Jun 07 09:36:19.000 [notice] DoS mitigation since startup: 0 circuits rejected, 0 marked addresses. 0 connections closed. 0 single hop clients refused. Jun 07 15:36:19.000 [notice] Heartbeat: It seems like we are not in the cached consensus. Jun 07 15:36:19.000 [notice] Heartbeat: Tor's uptime is 23:59 hours, with 0 circuits open. I've sent 3.18 MB and received 42.36 MB. Jun 07 15:36:19.000 [notice] Average packaged cell fullness: 13.454%. TLS write overhead: 14% Jun 07 15:36:19.000 [notice] Circuit handshake stats since last time: 0/0 TAP, 0/0 NTor. Jun 07 15:36:19.000 [notice] Since startup, we have initiated 0 v1 connections, 0 v2 connections, 0 v3 connections, and 21 v4 connections; and received 0 v1 connections, 0 v2 connections, 0 v3 connections, and 284 v4 connections. Jun 07 15:36:19.000 [notice] DoS mitigation since startup: 0 circuits rejected, 0 marked addresses. 0 connections closed. 0 single hop clients refused. Jun 07 21:36:19.000 [notice] Heartbeat: It seems like we are not in the cached consensus. Jun 07 21:36:19.000 [notice] Heartbeat: Tor's uptime is 1 day 5:59 hours, with 0 circuits open. I've sent 3.66 MB and received 53.04 MB. Jun 07 21:36:19.000 [notice] Average packaged cell fullness: 13.454%. TLS write overhead: 16% Jun 07 21:36:19.000 [notice] Circuit handshake stats since last time: 0/0 TAP, 0/0 NTor. Jun 07 21:36:19.000 [notice] Since startup, we have initiated 0 v1 connections, 0 v2 connections, 0 v3 connections, and 21 v4 connections; and received 0 v1 connections, 0 v2 connections, 0 v3 connections, and 351 v4 connections. Jun 07 21:36:19.000 [notice] DoS mitigation since startup: 0 circuits rejected, 0 marked addresses. 0 connections closed. 0 single hop clients refused. What should I look into? Thanks,

11 13

Question regarding ethical torrent blocking
by Conrad Rockenhaus 20 Jul '18

20 Jul '18

Hello, I was going to ask someone off-list, but the amount of abuse and DCMA complaints I have received now have been so much that I have decided that the best action to take is to set an exit policy. I run a couple of exit nodes and I have people apparently using them to torrent, which we ask people politely not to do through Tor....but the policy gets ignored I guess. Anyway, I'm receiving a sufficient amount of complaints to where I'm worried that my service may be terminated unless I take action, which would affect the greater good. So the question is - I run the default exit policy. I don't like being the arbiter of what goes through and what doesn't. Is it okay, ethically, from a free speech standpoint, to reach this point to where we say "we need to block this content from transversing my node" in response to legal complaints from others? Are others implementing these blocks and do you feel that such a block doesn't violate any ethical norm to provide uncensored access to the Internet? I'm just curious on what thoughts on this are. I know how to technically perform the block, I guess I feel like we're one of the last bastions against censorship on the Internet and people do torrent legitimate stuff. I don't consider pirating Fallout 4, The Elder Scrolls V, Sweetbitter, and The Evil Within 2 to be protected speech FYI... my worry is just blocking the legitimate uses of bittorrent. Thanks, Conrad Rockenhaus

8 10

Discounts/Free Trials on BSD instances to promote BSD relays?
by Conrad Rockenhaus 20 Jul '18

20 Jul '18

Howdy, So, anyway, I was previously more active, but I decided on a midlife career change and was on a training path to become a Physician Assistant. Then I was hit by a drunk driver. Now I had to drop out of the program for the next year at least, if at all, so I'm going back to working IT. That's the sob story. I like BSD, primarily FreeBSD (please flame me about how my relays aren't secure later :P) and like promoting the use of it. I have excess capacity on dedicated servers that I personally pay for that are used to host portions of a very popular Wiki based Satire/Dark Humor website. Some of that capacity is already going to Tor. On the servers that have address space SWIPed to me, I would like to resell that capacity specifically to host BSD based Tor relays, exits, bridges, and hidden services. Right now I'm working on infrastructure and a website and trying to somewhat automate things. The question I would like to ask, and honestly, I'm not trying to generate customers, I honestly believe that if a Linux user actually logs into a BSD box for the first time and sees the beauty and grace that the differences between BSD and Linux are that they would want to switch their own personal relay. I'm a firm believer of this. I know there's some hardcore Linux fans out there and that's fine, there's a legion of BSD fans too :). To the point - would it be fair to network stability to offer a week long free trial to run a tor instance, well, that is if that's what the user hopefully runs? Would such a model even have an affect on increasing the number of BSD instances we have on Tor presently? And again, per a suggestion in a previous email chain that I was involved in, I setup my ARIN and RIPE ids, and my providers have SWIPed the address spaces to me so any and all abuse complaints will be coming to me for the address spaces for now on. Thanks, Conrad

6 10

Updating relay using killall -hup command
by Keifer Bly 20 Jul '18

20 Jul '18

Hello, So recently I upgraded from tor 0.3.3.8 to tor 0.3.3.9, and used the killall -HUP command to restart the relay. However this did nothing, the relay consensus says I am still running tor 0.3.3.8 days later. Is there a way I can cause the upgrade to appear without completely restarting the relay? The OS is macos High Sierra 10.13.6. Thank you.

5 4

Re: [tor-relays] Discounts/Free Trials on BSD instances to promote BSD relays?
by Conrad Rockenhaus 19 Jul '18

19 Jul '18

Thank you for letting me know, I will look into this! I greatly appreciate the tip. On Wed, Jul 18, 2018 at 9:03 PM, Alejandro Andreu <contact(a)alejandroandr.eu> wrote: > Hi, > > For automating the setup please consider using `gibson`[1], an effort made > by the folks at Emerald Onion to better manage a Tor relay through a set of > shell scripts. It's still in development, but just as you do, they run > everything in BSD boxes. > > Cheers! > > [1]: https://emeraldonion.org/introducing-gibson/ > > > > -------- Original Message -------- > > On Jul 19, 2018, 09:34, Conrad Rockenhaus < conrad(a)rockenhaus.com> wrote: > > > Howdy, > > So, anyway, I was previously more active, but I decided on a midlife > career change and was on a training path to become a Physician > Assistant. Then I was hit by a drunk driver. Now I had to drop out of > the program for the next year at least, if at all, so I'm going back > to working IT. That's the sob story. > > I like BSD, primarily FreeBSD (please flame me about how my relays > aren't secure later :P) and like promoting the use of it. I have > excess capacity on dedicated servers that I personally pay for that > are used to host portions of a very popular Wiki based Satire/Dark > Humor website. Some of that capacity is already going to Tor. On the > servers that have address space SWIPed to me, I would like to resell > that capacity specifically to host BSD based Tor relays, exits, > bridges, and hidden services. Right now I'm working on infrastructure > and a website and trying to somewhat automate things. > > The question I would like to ask, and honestly, I'm not trying to > generate customers, I honestly believe that if a Linux user actually > logs into a BSD box for the first time and sees the beauty and grace > that the differences between BSD and Linux are that they would want to > switch their own personal relay. I'm a firm believer of this. I know > there's some hardcore Linux fans out there and that's fine, there's a > legion of BSD fans too :). > > To the point - would it be fair to network stability to offer a week > long free trial to run a tor instance, well, that is if that's what > the user hopefully runs? Would such a model even have an affect on > increasing the number of BSD instances we have on Tor presently? > > And again, per a suggestion in a previous email chain that I was > involved in, I setup my ARIN and RIPE ids, and my providers have > SWIPed the address spaces to me so any and all abuse complaints will > be coming to me for the address spaces for now on. > > Thanks, > > Conrad > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays -- Conrad Rockenhaus Get started with GreyPony Anonymization Today! https://www.greyponyit.com

1 0

Home router keeps failing.
by Gary 17 Jul '18

17 Jul '18

Hi, I keep having issues with my home router - it keeps failing due to the number of connections and I would be grateful for some advice. I have been running a (non-exit) middle relay for some time and up until now my router has mostly coped. It is what is what I got from my ISP, I can't afford to get a new one. At the minute I had to reset it on a daily basis which not only breaks tor circuits, but I am finding it increasingly hard to convince other people I live with that we need the relay when it causes them browsing issues. My relay connects via wire Ethernet. When I get to (approx) 900 incoming / 600 outgoing tor connections the router goes TITSUP. ACCOUNTING MAX is set to 8GBytes, I think the actual daily usage is about 4 GB though. RelayBandwidthRate is 250 KBytes, RelayBandwitdthBurst is 500KBytes. Although there are a few other devices / phones also connected, however I would estimate not more than a combined 2 GB daily HTTP / HTTPS traffic for all devices. No file sharing / P2P other than tor. My DSL speed is approx 50 mbits download / 15 mbits upload I dont want to keep resetting my router every day, I would be grateful for any advice. Many Thanks.

6 5

Re: [tor-relays] Question regarding ethical torrent blocking
by tor＠t-3.net 16 Jul '18

16 Jul '18

grarpamp <grarpamp(a)gmail.com> wrote: > If operators are taking flak from their upstream, > and they want to carry the traffic for reasons, > before giving in and deploying exit policy, see what options > are available to SWIP the address space to you and thus > eat a lot of the complaints from the internet yourself. What he said, but adding to this - There are not many exit operators who will be in a position to actually own their own IP space and therefore have it SWIPed to them 100%, with nobody else getting abuse complaints. The more SWIP you can get pointed at you, the better, but unfortunately something like getting colo space and a /28 doesn't necessarily get you that. The automated DCMA complaints are actually an abuse of the recipient's email system because the goons sending them do not change what they are doing (or in fact, respond) when you ask them to stop emailing you. For those in a position to run exit policies that might result in abusive automated DCMA emails, it is entirely within the realm of reasonable to build email server filters to reject those at the SMTP envelope (refusal to even accept the emails). You'll also probably be making a filter that outright rejects Base-64 emails from that sender (ie: requiring all abuse@ emails to be submitted plain text or HTML).

1 0

Re: [tor-relays] Fwd: Tor Guard Relay
by Mirimir 14 Jul '18

14 Jul '18

On 06/09/2018 01:51 PM, Keifer Bly wrote: > I just scanned the picture files using Avast, which I use a a lot and it is > a pretty great anti virus program based off of my use with it. Here is the > contents of the email in programming code; I don't know about other email > services but in Gmail this can be retrieved by signing into the web version > (in a web browser) clicking the more options button (next to the replay > button) and clicking "show original". > >>From what I can tell looking at the code, it is encoded using base64 and > the ip address of the web server it was sent from is 104.161.37.109. > > However, as for telling anything else, it seems like that would be > difficult to do without the right equipment. Let me know what you think. Thanks for source with headers. I don't see anything useful, though, I do see that "In-Reply-To: <5b182b2c.1c69fb81.390f6.f0ea(a)mx.google.com>" is correct, so the sender is probably subscribed to the list. Getting that right from messages in the online archives would be nontrivial. But damn: "I joined this site so that i could weed through the guys who aren’t serious and reliable enough to invite to my house where i feel comfortable." Trolling the tor-relays list for nice guys to date? That is bizarre. > On Sat, Jun 9, 2018 at 5:26 PM Mirimir <mirimir(a)riseup.net> wrote: > >> On 06/09/2018 05:28 AM, Keifer Bly wrote: >>> I was asked by mirmir to send one of the emails as a txt file, and so >> here >>> it is. It is at the google drive link below, I had tried to send it as an >>> attachment, but got a note back saying it was being held because it was >> too >>> big. The zip file contains the contents of the email and the attached >>> images. Thank you. I will try creating a spam filter for the email domain >>> they are coming from, though a few of them have come from yahoo.com >> domain, >>> which annoyingly I can't really block as some of my legitimate contacts >> use >>> yahoo mail. I could try reporting this to Google, what do you think? >>> >>> >> https://drive.google.com/open?id=0B_cH2cPZZmbTMmE2Ni1hc1BZbXliM0hMaTZnN19Gc… >> >> Thanks. But the text there doesn't contain headers. But that's less an >> issue, because from headers aren't spoofed. The question now is whether >> this is simple trolling, or attempts to infiltrate machines of relay >> operators. Someone experienced with malware analysis could examine the >> images for attack code, as Roman suggested. But that's over my head. >> >> Blocking *.mexyst.com domains, as Neel suggested, will likely stop most >> of them, with little or no downside. But blocking yahoo.com isn't >> workable for many. But if they're all as salacious as Keifer's example, >> blocking on language seems workable. Or language plus domain. >> >> As with Efail, this is a reminder of the risks of decoding HTML, loading >> embedded images, and fetching remote content. And the importance of >> compartmentalizing email and browsing from credentials for relay >> management (and other high-impact stuff, such as finances). >> >>> On Fri, Jun 8, 2018 at 9:57 PM Mirimir <mirimir(a)riseup.net> wrote: >>> >>>> On 06/08/2018 05:03 PM, Keifer Bly wrote: >>>>> This is one of the about 20 emails that have been received. Upon >> looking >>>> it >>>>> looks like they are spoofing the [tor-relays] subject line. My >> apologies >>>>> for the subject change but could not find a way to forward the emails >>>>> without forwarding them from an old conversation. Thank you. (The >> subject >>>>> this is in reference to is "Spam Emails Received From This Mailing >>>> List"). >>>> >>>> OK, so they're just using subject lines from the list. And not spoofing >>>> the from address. >>>> >>>> But what you forwarded doesn't include the headers. By googling, I get >>>> this: >>>> >>>> | 1) Open the message in your Gmail inbox. >>>> | 2) Click the down-arrow in the top-right corner of the message. >>>> | 3) Click the "Show original" link toward the bottom of the options >>>> | box. The message will open in a separate window with the full >>>> | message headers at the top. >>>> >>>> Just save that as a text file, and send it to me as an attachment. >>>> >>>> Why the bloody hell someone would target users of this list in that way >>>> is bizarre. And why you? Rather than me, who is admittedly an outspoken >>>> jerk sometimes ;) >>>> >>>>> ---------- Forwarded message --------- >>>>> From: Becky Janet <beckyjanet335900(a)re.mexyst.com> >>>>> Date: Fri, Jun 8, 2018 at 7:48 PM >>>>> Subject: Re: [tor-relays] Tor Guard Relay >>>>> To: Keifer Bly <keifer.bly(a)gmail.com> >>>>> >>>>> >>>>> first you need to trust someone to find real sex partner. So if you >> want >>>> to >>>>> find real sex partner then you need to trust me. Always i'm telling you >>>>> it's totally f r e e. Just connect with My Private Page >>>>> <http://datingflirt.info/1stold> by submitting you mail, name, age >> etc. >>>> I'm >>>>> assure you if it's ask any cc then no need to connect with me. So just >>>>> trust and try. Trust Me & Try It Now NCTB ; After completing this task >>>>> check your mail ,Automatically you will get my personal phone no in >> your >>>>> mail within 5 min. Just check your mail (inbox/s p a m) and call me >> asap. >>>>> I'm waiting for your cam >>>>> >>>> _______________________________________________ >>>> tor-relays mailing list >>>> tor-relays(a)lists.torproject.org >>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >>>> >>> >> _______________________________________________ >> tor-relays mailing list >> tor-relays(a)lists.torproject.org >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >> >

4 9

bridge not accessible through obfs4 port
by entensaison＠use.startmail.com 13 Jul '18

13 Jul '18

Dear friends, I am uncuccessfully running a bridge that uses obfs4 as pluggable transport. (At least it should.) Today I actually tried to connect to it and it is possible to connect to the bridge using the ORport. But when I tried to start tor browser with this setting to use obfs4: obfs4 12.345.67.89:1111 (only with the right numbers) it got stuck at "establishing an encrypted network connection". I checked on canyouseeme.org and both the vanilla ORport and the obfs4 port seem to be accessible from outside. My router is set to allow TCP and UDP on the port for obfs4. What could be causing the problem? Cheers, Lo Am Mittwoch, 11. Juli 2018 um 20:47 schrieb Keifer Bly <keifer.bly(a)gmail.com>: > > In comparison how much bandwidth would a Tor bridge user per month? > > It would be tough to give an exact answer to that is it depends on > how many people are connecting through your specific bridge. However > in general the bandwidth requirements would be much less, as bridges > are used for mostly areas where the tor network is blocked whereas > one of the exit relays is used by every client that uses tor at all. > > You can find more information on this topic here > > >> https://metrics.torproject.org/stats.html > > This page contains information about how much traffic different types > of relays generally send and receive over time, etc. > > PS, my apologies if this comes through twice for some reason. My > email client is acting a bit strange at the moment. > > On Wed, Jul 11, 2018 at 9:04 AM Nathaniel Suchy <me(a)lunorian.is> > wrote: >> Hi. I would like to run a public OBFS4 Tor Bridge. Digitalocean’s >> price changes made running an exit too expensive. In comparison how >> much bandwidth would a Tor bridge use per month? >> >> Cheers, >> Nathaniel >> _______________________________________________ >> tor-relays mailing list >> tor-relays(a)lists.torproject.org >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

3 3

Relay Search feature request: add consensus weight line/graph
by nusenu 12 Jul '18

12 Jul '18

I filed a RS feature request that should help you better understand / interpret relay trending (relay doing better or worse?) https://trac.torproject.org/projects/tor/ticket/26767 Relay Search has two graphs showing bw history data and relative values (fraction and probabilities): consensus weight fraction middle probability guard probability exit probability written bytes per second read bytes per second One of the most relevant question for a relay operator is: How is my relay doing? Is it doing better or worse than usually? A good data point to answer this is to look at the cw value over time (not cw fraction) since the probabilities and fraction values are relative and not directly controllable by the operator (i.e. other operators add relays). This will allow relay operators to answer questions like: "My cw fraction decreased, was it because my cw decreased or did my cw remain stable and someone else added more resources?" a graph showing the ratio between cw fraction to cw would also be nice since it answers above question more directly without having to compare the cw and cw fraction lines manually onionoo data: https://metrics.torproject.org/onionoo.html#weights_relay_consensus_weight the onion box displays a cw graph: https://raw.githubusercontent.com/ralphwetzel/theonionbox/master/docs/images/weights.png

1 0

Bridge bandwidth usage?
by Nathaniel Suchy 11 Jul '18

11 Jul '18

Hi. I would like to run a public OBFS4 Tor Bridge. Digitalocean’s price changes made running an exit too expensive. In comparison how much bandwidth would a Tor bridge use per month? Cheers, Nathaniel

2 1

Re: [tor-relays] Thoughts on automatically updating tor software on macos High Sierra
by Keifer Bly 10 Jul '18

10 Jul '18

Tried that twice now and it has not worked. It’s strange, the error terminal returns when trying to launch the script to upgrade tor is this iMac:~ oldimac$ launchctl load -w /Library/LaunchDaemons/starttorupgrade.plist /Library/LaunchDaemons/starttorupgrade.plist: Path had bad ownership/permissions This is very odd. I set the permissions to read and write for all users, but yet this error is still happening. I changed the permissions for the whole lanchdaemons folder as well and still no resolve to this. I even tried signing into the root user in Terminal to see if that would resolve the issue, it did not. Here is the code for the two scripts I wrote, they were too big to send as attachments. Perhaps I am doing something wrong? I do not know. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Label</key> <string>com.oldimac.upgradetor</string> <key>ProgramArguments</key> <array> <string>/Library/LaunchDaemons/upgradetor.plist </string> </array> <key>StartInterval</key> <integer>80000</integer> </dict> </plist> code for upgradetor.plist: > brew upgrade tor > On Jul 9, 2018, at 8:45 PM, Keifer Bly <keifer.bly(a)gmail.com> wrote: > > Tried that twice now and it has not worked. It’s strange, the error terminal returns when trying to launch the script to upgrade tor is this > > > iMac:~ oldimac$ launchctl load -w /Library/LaunchDaemons/starttorupgrade.plist > /Library/LaunchDaemons/starttorupgrade.plist: Path had bad ownership/permissions > > This is very odd. I set the permissions to read and write for all users, but yet this error is still happening. I changed the permissions for the whole lanchdaemons folder as well and still no resolve to this. I even tried signing into the root user in Terminal to see if that would resolve the issue, it did not. I’ve attached the scripts I created if someone wouldn’t mind helping me take a look tp see if anything is wrong? Thank you.

2 2

Thoughts on automatically updating tor software on macos High Sierra
by Keifer Bly 10 Jul '18

10 Jul '18

Hello list, So for a while I have been struggling to find a way to automatically update the tor relay software on macOS High Sierra. What I am currently doing is running a batch file that runs the command “brew upgrade tor” continuously. However, I am attempting to find a way to do this automatically on macos High Sierra where the process doesn’t have to be running every second. Here’s the unfortunate thing, on the newest macos operating systems, it appears there is no possible way to run terminal commands automatically, as crontab has been disabled / removed from newer mac operating systems (I discussed this with Apple technical support) and applications to run scripts automatically are incompatible with newer macos. Any thoughts on this would be appreciated, thank you.

3 2

DNS Time Outs
by Paul Templeton 09 Jul '18

09 Jul '18

Hi all, how often does the site https://arthuredelstein.net/exits/ update. 'coffswifi4' was reporting 60% timeouts but I have setup a stand alone DNS for it and would like to know if its resolved the problem. I think this is why it kept on being dropped from the consensus... For nusenu - Yes I have setup DNSSEC :-) Regards, Paul 137CF322859E400455E457DB920F65FFDD222CDF

3 3

Re: [tor-relays] DNS Time Outs
by Paul Templeton 09 Jul '18

09 Jul '18

> Exits don't get dropped from the consensus for DNS failures. > The directory authorities only check ORPort connectivity. Then I have two separate problems...

1 0

tor alpha users: if you are still running 0.3.3.5-rc..
by nusenu 07 Jul '18

07 Jul '18

Dear debian/ubuntu tor alpha repo users, there is an oddly high number of relays running 0.3.3.5-rc which was the last version before the 0.3.3.x alpha repo has been discontinued. If you are doing apt upgrades and don't get tor v0.3.3.7 your sources list is likely incorrectly setup (only containing the experimental lines without the tor stable lines), please ensure you copy and paste the sources.list lines from https://www.torproject.org/docs/debian.html.en#ubuntu after choosing your settings from the drop down. Note: as already noted on this list, the page is slightly outdated. If you want to help testing 0.3.4.x you should replace '0.3.3.x' with '0.3.4.x' in your sources.list bonus points if you want to share the reason why you had a misconfigured sources.list file (maybe we can improve / avoid that somewhere) -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

3 8

Is a relay on mobile broadband possible in Australia?
by I 06 Jul '18

06 Jul '18

6 22