- tor-relays - lists.torproject.org

29 Jun '18

1 0

Tor Exit Node Winter Shutdown
by Jason Odoom 29 Jun '18

29 Jun '18

Hello relay operators, I regret to inform you all that I will be shutting down my Tor Exit node - Winter [0] after more than five years. Digital Ocean's new bandwidth policy has made it incredibly expensive to keep this online. I incurred almost $200 of usage. I was lucky enough to have received a deduction off of my bill. I also believe that in this case asking for donations will do little to help. I did not host this Exit node for accolade but because I truly believe in what the Tor project is doing. I will allocate my budget for the Exit node towards monthly contributions to Tor as an alternative. Hopefully in the future I will be able to return. It's been fun. 0: https://metrics.torproject.org/rs.html#details/9EC5E097663862DF861A18C32B37… Best, Jason - Jason Odoom GPG 9031B50D

2 2

A general question for relay operators
by arisbe 29 Jun '18

29 Jun '18

Hello George and all, When I was learning to implement Tor I had difficulty wading through the web pages for information. Some pages were obsolete, some poorly maintained (think Tor flow or good/bad hosting companies). The Tor manual is just a huge list of Tor terminology with no aids to help find things. The Tor project site has no site map. I still occasionally have the same problems when I try to find something. I found this very discouraging as I tried to grow my first Tor node without a live person to help me. I can imagine how daunting this would be to someone also trying to learn linux. Hey, thanks so much for asking. I appreciate your interest.

3 3

No IPv6 bridges from bridges.torproject.org
by Roman Mamedov 28 Jun '18

28 Jun '18

Hello, If you select "Do you need IPv6 addresses - Yes", it always results in an error "There aren't any bridges available". No matter if choosing obfs4 or none for the pluggable transport. Is that thing working? There should be at least one available (with obfs4, too), or at least I was under impression that I run one. As a side note, that page always loads in my native language with no way to switch to English -- pages which do this are the worst. In this case it means I can't usefully copy-paste you the exact error messages that I get. -- With respect, Roman

2 1

Is Tor-network protected from using one hop?
by dave levi 27 Jun '18

27 Jun '18

I'm testing few things in Tor and I noticed that if im changing(from the source code) the number of hop's(nodes) to be more then 3 hop's it work's fine(slowly, but still working) and if im sting only 2 hop's its still works great. but, when i'm setting only 1 hop, i can open the Tor-browser but i can't use it(Tor-browser) to visit site(regular site or onion site too). so im thinking maybe the Tor-network have protected from users who are using 1 hop?

6 6

Re: [tor-relays] tor-relays Digest, Vol 89, Issue 49
by dave levi 26 Jun '18

26 Jun '18

first, Thank you all for you answers and help. let me make it a bit harder. now, im running a relay which is Guard and Exit relays. i have defined in my relay(the server that's running the relay in /torrc file) to be "AllowSingleHopExits 1" and set in my computer that running the TOR(in /torrc file) with the 1(one) hop to: "ExcludeSingleHopRelays 0" and "AllowSingleHopCircuits 1" so now every thing needs to be ok right? but, still its not working On Tue, Jun 26, 2018 at 5:34 PM, <tor-relays-request(a)lists.torproject.org> wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Is Tor-network protected from using one hop? (dave levi) > 2. Re: Is Tor-network protected from using one hop? (Logforme) > 3. Re: Is Tor-network protected from using one hop? (Matt Traudt) > 4. Re: Is Tor-network protected from using one hop? (Nagaev Boris) > 5. Re: Is Tor-network protected from using one hop? > (Roger Dingledine) > 6. Re: Is Tor-network protected from using one hop? (Matt Traudt) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 26 Jun 2018 17:16:46 +0300 > From: dave levi <levi72827(a)gmail.com> > To: tor-relays(a)lists.torproject.org > Subject: [tor-relays] Is Tor-network protected from using one hop? > Message-ID: > <CAJUku5hQa5JCk1UCn_CynyVG=kxhXkQpC0-ApW=k7vJxPrTM5g@ > mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > I'm testing few things in Tor and I noticed that if im changing(from the > source code) the number of hop's(nodes) to be more then 3 hop's it work's > fine(slowly, but still working) and if im sting only 2 hop's its still > works great. but, when i'm setting only 1 hop, i can open the Tor-browser > but i can't use it(Tor-browser) to visit site(regular site or onion site > too). so im thinking maybe the Tor-network have protected from users who > are using 1 hop? >

2 1

bridge installation help please
by I 26 Jun '18

26 Jun '18

4 11

Relay Guide - IPv6 Connectivity Testing
by Matthew Finkel 25 Jun '18

25 Jun '18

Over the last few days I've started thinking more about IPv6 and, inevitably, I started thinking about how we can improve support within the Tor network. Within the last few months, there were a few instances of relay operators seeking answers for why their relay did not have the running flag in the consensus. After some investigation, in some cases this was because the relay had an IPv6 ORPort configured but a majority of the IPv6-enabled directory authorities did not believe it was running. Unfortunately, despite IPv6 connectivity being a necessity now, ISP rollout is slow and on-going in some geographical areas and network peering arrangements are sometimes sub-standard or not stable. The Relay Guide[0] has a section describing how an operator can enable an IPv6 ORPort, and there's a supplementary page[1] specifically describing additional information about it. Considering there are potential critical failures when the IPv6 ORPort is configured, should the relay guide suggest the operator confirm they have IPv6 connectivity to all of the IPv6-enabled directory authorities[2] before enabling it ("Please ping6/telnet/nc to these hosts before enabling this.")? It would also be nice if the relay, itself, performed self-checks of this connectivity and printed a warning log if some failure-threshold is reached (and possibly disabling the IPv6 ORPort). But, in reality, this is a hack around a broken internet - and I hesitate advocating for something like this in tor. Maybe there is a compromise we can find between the relay operator manually testing connectivity periodically and tor automatically doing-smart-things. Thoughts? - Matt [0] https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#IPv6 [1] https://trac.torproject.org/projects/tor/wiki/doc/IPv6RelayHowto [2] https://gitweb.torproject.org/tor.git/tree/src/or/auth_dirs.inc

3 5

Number of connections on dir port
by Logforme 25 Jun '18

25 Jun '18

After reading this post https://lists.torproject.org/pipermail/tor-relays/2018-May/015277.html I started looking into what is happening on the dir port on my relay (855BC2DABE24C861CD887DB9B2E950424B49FC34) The bandwidth ratio of dir/or traffic is around 3% to 4%. Not excessive according to the linked post. Looking at the conntrack table I see many IP addresses (usually from Ukraine or Russia) with 100+ connections. Atm there are around 10 IP addresses with 100+ connections and around 30 with 10+ connections. None of the IP addresses I've looked at are Tor relays. Some questions: Is this expected behaviour against on a fallbackdir flagged relay? Does the DoS prevention implemented recently address abuse against the dir port? I read that newer Tor clients don't use the dir port. Correct? Do Tor relays use the dir port? Can I remove the dir port from my relay without reducing my relays usability to the network? Thank you for any answers.

2 1

Re: [tor-relays] Alleged Family Members
by Paul Templeton 24 Jun '18

24 Jun '18

> How long is the timeout for 'Alleged Family Members' to disappear on > 'metrics.torproject.org'? Can I force it? Shouldn't take long, but did you leave the relay finger print in the MyFamily section in the torrc file? P 609662E824251C283164243846C035C803940378

1 0

I get sad when :-(
by Paul Templeton 24 Jun '18

24 Jun '18

I get sad when I lose control over one of the bare metal systems I run and help desk is slow to respond over the weekend. Then you have to throw in the time differences, then the language - its a wonder anything runs... Just wanted to know if there is anyone I can hook up with to talk about some config/stability issues. I have two systems one a VPS the other bare metal and both will drop out of the consensuses about once a day(2 to 3 hours) but are running the whole time. I have 4 bare metal systems but none are at capacity and would like to find the best approach to get more out of them. Consensus is one issue that's limiting capacity usage. I would love to meet up but in a remote part of AU and I just quit my job after 15 years so haven't time to fly anywhere at this time... P 609662E824251C283164243846C035C803940378

3 4

Prepping bridges for censorship
by Keifer Bly 23 Jun '18

23 Jun '18

Hi, So I had a thought. It seems like a lot of the relays run off of various port numbers (of course). However if all of the relays and bridges are running off of various port numbers (ie 9001, 10000, etc.), couldn’t this stop censored users (who’s isp or local firewall only allows certain ports like 80 and 443) from being able to connect to the tor network even when using bridges due to the port that the bridge of guard relay being run on a port number that is blocked by the isp or local firewall? Just a thought.

4 6

Tor Relay Operators Needs
by Eran Sandler 22 Jun '18

22 Jun '18

Hi everyone, My name is Eran Sandler and I'm the Operator of tor4thepeople1 (98F44299592FC31FD3F2F8969D27374D00E96B9B) and tor4thepeople3 (CEACA34874EAD103D27CA6A7650B16112F12B209) - tor4thepeople2 had to go away, unfortunately. I also developed the gonionoo (https://github.com/erans/gonionoo) an Go wrapper around the Onionoo API. I've been running various tor relays and exit nodes since Sep/2015. Being a software developer by trade I've been thinking about projects and services that might help Tor Relay Operators and Tor in general and have a few ideas I wanted to pass along and see if anyone sticks. A few of the most notable ones are: - *Tor Weather Replacement* - ever since Tor Weather went down I've found that I actually miss it. It doesn't happen often that my relays are down but it does happen from time to time and in the past Tor Weather really helped get notified. A few things I thought about adding in addition to "Your node is down" alert are: - Node version is too old - New versions of Tor that are relevant to you are available etc - Sends node stats every given interval - *Free domain name for every Tor node operator who wants it*. A while back I purchased torexitnode.net and I wanted to develop a system that, upon verifying a running node (send an email to the published Email address of a node and verify its running) - will give a subdomain under torexitnode.net. I'm currently using it for tor4thepeople1.torexitnode.net and tor4thepeople3.torexitnode.net. I find that it makes things easier to explain when that's the node name. If you can get your hosting service to provide you with an updated reverse DNS for your IP address and point it to a subdomain of torexitnode.net it make it very clear that this is a Tor exit node. - *System to provide tor exit node verification*. Given a pre-registered app and callback and a fingerprint of a node it will find the Email of the operator and email a unique link. When that link is clicked a callback will be made to the preregistered URL - allowing a developer to verify that a certain node operator is truely the one accessing the service. That is actually needed for both of the services mentioned above. - *Simple package to run a webserver + customized tor exit node notice page* - similar to what I configured for http://tor4thepeople1.torexitnode.net. It's very useful and if we can get a super basic web server that only serves this page and would be easy to install (maybe even bundle with Tor) + let's encrypt integration (to serve it under SSL) it would provide great benefit to all operators. If you have additional ideas and or thoughts about the above projects or other projects please let me know. Looking forward to your thoughts. Thanks, Eran

5 13

Re: [tor-relays] tor-relays Digest, Vol 89, Issue 37
by Bill Chapman 21 Jun '18

21 Jun '18

> On Jun 20, 2018, at 1:48 PM, "tor-relays-request(a)lists.torproject.org" <tor-relays-request(a)lists.torproject.org> wrote: > > +

1 0

Relay bandwidth accounting
by Sean Brown 18 Jun '18

18 Jun '18

I just set up a new non-exit relay and in going through information to set up, I came across the T-shirt for contributing and in addition to running for 2 months it says "if you're not an exit but you average 500 KBytes/s traffic." What would be the best way to keep accounting of the traffic my relay is passing? I know of the metrics.torproject.org, is that all the project would need?

2 1

how to set-up multiple debian relays at once
by I 18 Jun '18

18 Jun '18

3 5

Spam Emails Received From This Mailing List
by Keifer Bly 16 Jun '18

16 Jun '18

Hello fellow relay operators, My apologies as this is not related to tor relays, however, there seems to be several spammers subscribed to the relay list. Every time I am involved in a discussion on this list, I receive 3-5 emails supposedly from girls wanting to meet up (for sex). The emails in question claim they are sent from email address tor-relays(a)lists.torproject.org (and always have the same email subject of the discussion I was involved in). I am somewhat in a trap as blocking them with spam filters would block all emails sent from the relay lists address. I am wondering what could be done about this (the email provider in question is Gmail). Thank you.

14 31

metricsbot broken
by Paul Templeton 15 Jun '18

15 Jun '18

Who ever looks after the @metricsbot@botsin.space its stopped working... Paul 609662E824251C283164243846C035C803940378

3 2

Bandwidth limits for Fallback Directory Mirror
by Cristian Consonni 15 Jun '18

15 Jun '18

Hi, due to the new DigitalOcean billing terms for bandwidth (see this other thread [1]), I have limited my relay bandwidth to be sure I will stay withing the limits: ``` RelayBandwidthRate 360 KB # Throttle traffic to 100KB/s (800Kbps) RelayBandwidthBurst 720 KB # But allow bursts up to 200KB/s (1600Kbps) ``` This is the relay: https://metrics.torproject.org/rs.html#details/1211AC1BBB8A1AF7CBA86BCE8689… The relay is also a Fallback Directory Mirror. I plan on keeping the relay running, but I was wondering if the new limits disqualify it or if they are a problem to let it be a fallback directory mirror. Thanks for you help. Cristian p.s.: I've also asked to DO if they could revert my last charges for the bandwidth, since they were quite steep and, frankly, unexpected. Let's see what they say... [1]: https://lists.torproject.org/pipermail/tor-relays/2018-April/015051.html

2 1

FW: [#79576] Spam Emails Being Sent To TOR Relay Operators
by Keifer Bly 13 Jun '18

13 Jun '18

Hill all, I wanted to inform that I filed a complaint about the spam emails and this is the reply I got. Cheers. From: support(a)ioflood.com Sent: Tuesday, June 12, 2018 7:43 PM To: Keifer Bly Cc: abuse(a)ioflood.com Subject: Re: [#79576] Spam Emails Being Sent To TOR Relay Operators Hi Keifer, I wanted to let you know that we've received your complaint regarding the spam emails and have forwarded it to the relevant customer so that they can resolved it. We do take these kinds of complaints seriously and will be following up with our customer to make sure the appropriate action is taken. In the meantime, if we can be of further assistance, please let me know. Thanks, -- Mabel To Input Output Flood, LLC We Love Servers web: www.ioflood.com email: mabel(a)ioflood.com Skype: ioflood_mabel_t twitter: @ioflood --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

3 2

Tor Community Night / Relay operator night in Barcelona
by Colin Childs 11 Jun '18

11 Jun '18

Hello tor-relays, The Tor Project will be holding a community night / operator meet up after-hours at the 2018 Privacy Enhancing Technologies Symposium (PETS2018) in Barcelona! This will be happening on July 24th, at 6:30 PM in the PETS main room at Centre de Cultura Contemporània de Barcelona. At 8:30PM we will be moving to a near-by Belgian bar called "Belchica" at Carrer de Villarroel, 60, 08011 for food and drink. There will be Vegan options available. This will be a great opportunity for the Tor relay operator community to meet and socialize. Within this event, there will be a dedicated relay operators meetup, which will begin at 7:00PM. We will discuss common issues operators face, potential solutions, as well as how we can all help to grow the relay operator community both locally and globally. We'll be on hand to answer questions and want to hear your feedback about the community, running relays, and what we can do to better support you. Full details on the event can be found on our blog at https://blog.torproject.org/meetup-tor-community-night-pets <https://blog.torproject.org/meetup-tor-community-night-pets> I look forward to hearing from you / seeing as many of you there as possible!

1 0

Tor Network Safety Precautions
by Keifer Bly 11 Jun '18

11 Jun '18

Hello, So I am aware that the tor network has some built in safety mechanisms to protect tor users from attacks (such as from malicious tor relays, surveillance based attacks, etc). I am aware of some of tors safety mechanisms; I know that tor will automatically switch out which relays the tor browser is connecting through so as to prevent relays from being able to log traffic flowing through them. I am also aware that tor browser will automatically redirect to https secure websites to prevent end to end correlation attacks on users. I am wondering, what are the other safety mechanisms that tor network does to prevent against attacks? Besides keeping the tor relay software on OS up to date (which I am doing), what are the safety precautions relay operators should consider (the OS my relay is running off of is macOS High Sierra). Thank you.

1 0

What is the different between Tor browser and Tor source code
by dave` dave 11 Jun '18

11 Jun '18

I know that i can download Tor Browser and use it as a regular browser with a touch of anonymity. but, if i want to change a few things in Tor i can change in .torrc file like the ExitNode, EntryNodeetc.. as i have here in Tor's manual: https://www.torproject.org/docs/tor-manual.html.en but, if i want to change a way more series things i need to change it from the source code for example the numbers of Nodes-hop make 1 one or 8 hop's: https://www.torproject.org/download/download.html.en after changing the source code i and to install it: ./configure && make install more info: https://www.torproject.org/docs/tor-doc-unix.html.en after changing thw source code as i want it compiled without any error's(Ubuntu 16.04 VMware). after the compiling im in kind of in dead end don't know what to do. i want to use the source code that i edit as a i use in regular Tor-Browser can i do that? Thank you!

6 14

Fwd: Tor Guard Relay
by Keifer Bly 10 Jun '18

10 Jun '18

This is one of the about 20 emails that have been received. Upon looking it looks like they are spoofing the [tor-relays] subject line. My apologies for the subject change but could not find a way to forward the emails without forwarding them from an old conversation. Thank you. (The subject this is in reference to is "Spam Emails Received From This Mailing List"). ---------- Forwarded message --------- From: Becky Janet <beckyjanet335900(a)re.mexyst.com> Date: Fri, Jun 8, 2018 at 7:48 PM Subject: Re: [tor-relays] Tor Guard Relay To: Keifer Bly <keifer.bly(a)gmail.com> first you need to trust someone to find real sex partner. So if you want to find real sex partner then you need to trust me. Always i'm telling you it's totally f r e e. Just connect with My Private Page <http://datingflirt.info/1stold> by submitting you mail, name, age etc. I'm assure you if it's ask any cc then no need to connect with me. So just trust and try. Trust Me & Try It Now NCTB ; After completing this task check your mail ,Automatically you will get my personal phone no in your mail within 5 min. Just check your mail (inbox/s p a m) and call me asap. I'm waiting for your cam

3 5

Tor Guard Relay
by Keifer Bly 07 Jun '18

07 Jun '18

Hello, I have one question. I have been running my relay “torland” at http://torstatus.blutmagie.de/router_detail.php?FP=db1af6477bb276b6ea5e7213… For roughly 3 months now (I am unsure exactly how many days). While my relay is marked “fast” and “stable” currently, it has never been marked as a “guard” relay. I believe being a “guard” relay requires at least 10mb/s for relay speed, but am wondering, do I need to configure my torrc file to allow it to be used as a guard relay and are there any risks for doing this (like there are in running in exit relay)? Thank you.

2 3