- tor-relays - lists.torproject.org

Re: [tor-relays] Is a relay on mobile broadband possible in Australia?
by Paul Templeton 06 Jul '18

06 Jul '18

> What provider - I used to run one on iiNet broadband. Just went online - iiNet does have this service anymore... https://www.iinet.net.au/internet/broadband/mobile/

1 0

Do not be intimidated "Zwiebelfreunde" and all others
by onion 06 Jul '18

06 Jul '18

out of German newspaper taz: https://www.taz.de/Kommentar-Razzien-bei-Netzaktivisten/!5515912/ https://www.taz.de/Kommentar-Razzien-bei-Netzaktivisten/%215515912/

2 1

Re: [tor-relays] tor-relays Digest, Vol 89, Issue 49
by dave levi 05 Jul '18

05 Jul '18

first, Thank you all for you answers and help. let me make it a bit harder. now, im running a relay which is Guard and Exit relays. i have defined in my relay(the server that's running the relay in /torrc file) to be "AllowSingleHopExits 1" and set in my computer that running the TOR(in /torrc file) with the 1(one) hop to: "ExcludeSingleHopRelays 0" and "AllowSingleHopCircuits 1" so now every thing needs to be ok right? but, still its not working On Tue, Jun 26, 2018 at 5:34 PM, <tor-relays-request(a)lists.torproject.org> wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Is Tor-network protected from using one hop? (dave levi) > 2. Re: Is Tor-network protected from using one hop? (Logforme) > 3. Re: Is Tor-network protected from using one hop? (Matt Traudt) > 4. Re: Is Tor-network protected from using one hop? (Nagaev Boris) > 5. Re: Is Tor-network protected from using one hop? > (Roger Dingledine) > 6. Re: Is Tor-network protected from using one hop? (Matt Traudt) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 26 Jun 2018 17:16:46 +0300 > From: dave levi <levi72827(a)gmail.com> > To: tor-relays(a)lists.torproject.org > Subject: [tor-relays] Is Tor-network protected from using one hop? > Message-ID: > <CAJUku5hQa5JCk1UCn_CynyVG=kxhXkQpC0-ApW=k7vJxPrTM5g@ > mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > I'm testing few things in Tor and I noticed that if im changing(from the > source code) the number of hop's(nodes) to be more then 3 hop's it work's > fine(slowly, but still working) and if im sting only 2 hop's its still > works great. but, when i'm setting only 1 hop, i can open the Tor-browser > but i can't use it(Tor-browser) to visit site(regular site or onion site > too). so im thinking maybe the Tor-network have protected from users who > are using 1 hop? >

1 0

OutboundBindAddressExit
by Paul Templeton 05 Jul '18

05 Jul '18

Can you only bind one address or is there a way to use multiple? P 609662E824251C283164243846C035C803940378

2 4

A general question for relay operators
by George 05 Jul '18

05 Jul '18

Greetings relay operators. A question that came up offline for relay operators can be summed up in one sentence, paraphrased from flexlibris: as a relay operator, what "things" do you wish you knew before you started running a relay? I'm really curious, in particular, to hear from those relay operators who are less connected to others, and are maybe more isolated physically from the community. In the long-ago past, many of us ran exit nodes without giving it much thought or preparation leading to ISP issues, but that seems less common today. For others, there might be a learning curve in keeping a network service up with decent uptime, while updating the relevant ports and operating system. There's no irrelevant answers to this, including more boring issues such as paying for the relay, choosing a provider or experiences as a (conscious) exit node operator. Bonus point for showing relation between your total costs per 1Mbps. Not only should this discussion be useful on list, but it might provide more content for the relay operator guide. g -- 34A6 0A1F F8EF B465 866F F0C5 5D92 1FD1 ECF6 1682

9 15

Coordinated raids of Zwiebelfreunde at various locations in Germany
by nusenu 05 Jul '18

05 Jul '18

https://blog.torservers.net/20180704/coordinated-raids-of-zwiebelfreunde-at… https://www.ccc.de/en/updates/2018/hausdurchsuchungen-bei-vereinsvorstanden… "The board members of the association are not considered suspects but witnesses in the ongoing investigation." "Just to recap: The mere presence of an e-mail address at a large free provider on a website has caused law enforcement authorities to deduce that a German association that helps raise funds for this provider must be connected to this website somehow."

5 5

DSL interruption
by Paul 04 Jul '18

04 Jul '18

^ r | rt rt | rt rt | rt rt rt | rt rt rt rt | rt rt rt rt | rt rt rt rt rt | rt rt rt rt rt rt | rt rt rt rt rt rt rt | rt rt rt rt rt rt rt -+---------------------------------------------------------------------------> | 12 13 14 15 16 17 18 19 20 21 22 23 00 01 02 03 04 05 06 07 08 09 10 11 h rx (MiB) tx (MiB) h rx (MiB) tx (MiB) h rx (MiB) tx (MiB) 12 11.14 14.76 20 666.90 679.48 04 11.68 15.05 13 98.65 102.77 21 27.54 29.01 05 22.50 22.41 14 961.83 954.33 22 49.58 51.97 06 14.50 17.09 15 1028.29 1021.80 23 50.87 51.47 07 11.75 15.13 16 1529.16 1520.73 00 28.72 29.68 08 10.71 13.05 17 1779.50 1768.45 01 16.91 19.62 09 32.82 14.84 18 2477.60 2456.01 02 10.76 14.93 10 13.86 15.48 19 2380.83 2358.08 03 10.06 12.70 11 1.57 2.32 From time to time I do get DSL interruptions which look like above on the traffic on one of my smaller relays. This usually last until I restart the machine manually. Anybody having a good quick idea, script to solve this and restart automatically when DSL is up again? Its on Raspian latest.. Thanks and regards Paul

2 1

killall -hup command
by Keifer Bly 04 Jul '18

04 Jul '18

Hello, So recently I rebooted my relay using the killall tor -hup command (while I was trying to mae some changes to my torrc file). My relays uptime was not changed at all by this, having a current uptime of about 6 days. However, I noticed today at http://torstatus.blutmagie.de/router_detail.php?FP=db1af6477bb276b6ea5e7213… My relay lost the stable flag (which it had had for the last about two months). I know not to worry about exactly what flags I have all the time, but it raises the question of what eactly the killall -hup command does? Thanks.

4 5

Turning down my relay from DigitalOcean
by Guillermo Narvaez 03 Jul '18

03 Jul '18

Hello everyone, Sadly I'm stoping the tor daemon in my relay due high cost of bandwidth ($100), in the meantime I start to search an optional hosting. My apologies! -Guillermo

10 11

Contact info obfscation
by Keifer Bly 02 Jul '18

02 Jul '18

Hello, I am aware that email addresses used in the “ContactInfo: “ in a relay operator’s torrc file is publicly listed on the tor relay. However, what I am wondering, is there a way to obfuscate the email address on http://torstatus.blutmagie.de/router_detail.php?FP=db1af6477bb276b6ea5e7213… to appear as “k—f---b--(a)g-ail.xn--com-9o0a or something of the sorts, while keeping the real email address readable for tor cloud to send mail to? It seems like obfuscating the email address in the torrc file would cause it to become unreadable to the tor project as well. Thank you.

10 23

Problem implementing IPv6 and NYX info
by arisbe 02 Jul '18

02 Jul '18

This year I've modified most of my exit relays to function as IPv6 in/out. The process was easy with the exception of two [0], [1]. I requested and received an IPv6 address, netmask and gateway from these ISPs. I then modified my /etc/network/interfaces file as follows leaving the IPv4 lines in tack: iface eth0 IPv6 static address 2a06:1700:0:1b:: netmask 64 gateway 2a06:1700:0:1b::1 ip addr shows the IPv6 address as global. I added a single line to torrc following the IPv4 line: ORPort 9001 ORPort [2a06:1700:0:1b::1]:9001 After a restart, both relays ramped up to a volume of connections where I was comfortable that the changes were good. Visiting them 12 hours later I find connections in the few hundred and no flags. About half of the connections were from non-Tor servers. The Tor daemon was running and had a PID. Logs showed the relay operational and nothing peculiar. Tor metrics shows the relay as down. I've commented out the IPv6 ORPort line to get both of these exits going again. The procedure I outlined has worked four other times for me. So what gives? Can anyone steer me toward the problem? And, finally, a quick question: Does NYX display incoming and outgoing IPv6 relay information? I assume ARM does not. Arisbe [0] [4061C553CA88021B8302F0814365070AAE617270] [1] [9B31F1F1C1554F9FFB3455911F82E818EF7C7883]

5 5

relayor v0.4.0 is released
by nusenu 01 Jul '18

01 Jul '18

Hi, relayor v0.4.0 is released. relayor helps you with running relays with minimal effort (automate everything). https://github.com/nusenu/ansible-relayor This release contains important changes for exit operators that define their own exit policy, please _do_ read the changelog if you are an exit operator using relayor _before_ upgrading since it requires a minor configuration adjustment. If you do not change the default value for tor_ExitPolicy no configuration change is required. Changes since v0.3.3: ------------------------------ - major: change the format of tor_ExitPolicy (single-line to multi-line) previously it you defined the exit policy like: tor_ExitPolicy: "accept *:80, accept *:443, accept *:22" now you define your exit policy like this: tor_ExitPolicy: - accept *:80 - accept *:443 - accept *:22 - support multiple IP addresses for OutboundBindAddressExit - add support for OpenBSD 6.3 (drop 6.2) - add support for Ubuntu 18.04 (drop 16.04) - add support for Fedora 28 (drop 27) - drop support for Debian 8 and HBSD - increase min. tor version to 0.2.9.x - increase min. ansible verstion to 0.2.5.3 - add support for custom addition to MyFamily members - switch tor_alpha_version from 0.3.3.x to 0.3.4.x - Debian: switch to HTTPS (from HTTP) for repository traffic - reorder some torrc items Main benefits for a tor relay operator ====================================== * automation - no more manual setup tasks * security: offline Ed25519 master keys every tor instance is run with a distinct user * automatically makes use of IPv6 IPs (if available) * automatic tor instance generation (two by default - configurable) * enables tor's Sandbox feature by default on Debian-based systems * easily choose between alpha/non-alpha releases * easily restore a relay setup * easily choose between exit relay/non-exit relay mode * automatic deployment of a tor exit notice html page via tor's DirPort * automatic MyFamily management Supported Operating Systems ---------------------------- Debian 9 and Debian Testing OpenBSD 6.3 FreeBSD 10.4, 11.1 Ubuntu 18.04 CentOS 7 Fedora 28 regards, nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

1 1

fix this please
by I 30 Jun '18

30 Jun '18

3 5

Gentoo's Github hacked
by I 29 Jun '18

29 Jun '18

1 0

Tor Exit Node Winter Shutdown
by Jason Odoom 29 Jun '18

29 Jun '18

Hello relay operators, I regret to inform you all that I will be shutting down my Tor Exit node - Winter [0] after more than five years. Digital Ocean's new bandwidth policy has made it incredibly expensive to keep this online. I incurred almost $200 of usage. I was lucky enough to have received a deduction off of my bill. I also believe that in this case asking for donations will do little to help. I did not host this Exit node for accolade but because I truly believe in what the Tor project is doing. I will allocate my budget for the Exit node towards monthly contributions to Tor as an alternative. Hopefully in the future I will be able to return. It's been fun. 0: https://metrics.torproject.org/rs.html#details/9EC5E097663862DF861A18C32B37… Best, Jason - Jason Odoom GPG 9031B50D

2 2

A general question for relay operators
by arisbe 29 Jun '18

29 Jun '18

Hello George and all, When I was learning to implement Tor I had difficulty wading through the web pages for information. Some pages were obsolete, some poorly maintained (think Tor flow or good/bad hosting companies). The Tor manual is just a huge list of Tor terminology with no aids to help find things. The Tor project site has no site map. I still occasionally have the same problems when I try to find something. I found this very discouraging as I tried to grow my first Tor node without a live person to help me. I can imagine how daunting this would be to someone also trying to learn linux. Hey, thanks so much for asking. I appreciate your interest.

3 3

No IPv6 bridges from bridges.torproject.org
by Roman Mamedov 28 Jun '18

28 Jun '18

Hello, If you select "Do you need IPv6 addresses - Yes", it always results in an error "There aren't any bridges available". No matter if choosing obfs4 or none for the pluggable transport. Is that thing working? There should be at least one available (with obfs4, too), or at least I was under impression that I run one. As a side note, that page always loads in my native language with no way to switch to English -- pages which do this are the worst. In this case it means I can't usefully copy-paste you the exact error messages that I get. -- With respect, Roman

2 1

Is Tor-network protected from using one hop?
by dave levi 26 Jun '18

26 Jun '18

I'm testing few things in Tor and I noticed that if im changing(from the source code) the number of hop's(nodes) to be more then 3 hop's it work's fine(slowly, but still working) and if im sting only 2 hop's its still works great. but, when i'm setting only 1 hop, i can open the Tor-browser but i can't use it(Tor-browser) to visit site(regular site or onion site too). so im thinking maybe the Tor-network have protected from users who are using 1 hop?

6 6

Re: [tor-relays] tor-relays Digest, Vol 89, Issue 49
by dave levi 26 Jun '18

26 Jun '18

first, Thank you all for you answers and help. let me make it a bit harder. now, im running a relay which is Guard and Exit relays. i have defined in my relay(the server that's running the relay in /torrc file) to be "AllowSingleHopExits 1" and set in my computer that running the TOR(in /torrc file) with the 1(one) hop to: "ExcludeSingleHopRelays 0" and "AllowSingleHopCircuits 1" so now every thing needs to be ok right? but, still its not working On Tue, Jun 26, 2018 at 5:34 PM, <tor-relays-request(a)lists.torproject.org> wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Is Tor-network protected from using one hop? (dave levi) > 2. Re: Is Tor-network protected from using one hop? (Logforme) > 3. Re: Is Tor-network protected from using one hop? (Matt Traudt) > 4. Re: Is Tor-network protected from using one hop? (Nagaev Boris) > 5. Re: Is Tor-network protected from using one hop? > (Roger Dingledine) > 6. Re: Is Tor-network protected from using one hop? (Matt Traudt) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 26 Jun 2018 17:16:46 +0300 > From: dave levi <levi72827(a)gmail.com> > To: tor-relays(a)lists.torproject.org > Subject: [tor-relays] Is Tor-network protected from using one hop? > Message-ID: > <CAJUku5hQa5JCk1UCn_CynyVG=kxhXkQpC0-ApW=k7vJxPrTM5g@ > mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > I'm testing few things in Tor and I noticed that if im changing(from the > source code) the number of hop's(nodes) to be more then 3 hop's it work's > fine(slowly, but still working) and if im sting only 2 hop's its still > works great. but, when i'm setting only 1 hop, i can open the Tor-browser > but i can't use it(Tor-browser) to visit site(regular site or onion site > too). so im thinking maybe the Tor-network have protected from users who > are using 1 hop? >

2 1

bridge installation help please
by I 26 Jun '18

26 Jun '18

4 11

Relay Guide - IPv6 Connectivity Testing
by Matthew Finkel 25 Jun '18

25 Jun '18

Over the last few days I've started thinking more about IPv6 and, inevitably, I started thinking about how we can improve support within the Tor network. Within the last few months, there were a few instances of relay operators seeking answers for why their relay did not have the running flag in the consensus. After some investigation, in some cases this was because the relay had an IPv6 ORPort configured but a majority of the IPv6-enabled directory authorities did not believe it was running. Unfortunately, despite IPv6 connectivity being a necessity now, ISP rollout is slow and on-going in some geographical areas and network peering arrangements are sometimes sub-standard or not stable. The Relay Guide[0] has a section describing how an operator can enable an IPv6 ORPort, and there's a supplementary page[1] specifically describing additional information about it. Considering there are potential critical failures when the IPv6 ORPort is configured, should the relay guide suggest the operator confirm they have IPv6 connectivity to all of the IPv6-enabled directory authorities[2] before enabling it ("Please ping6/telnet/nc to these hosts before enabling this.")? It would also be nice if the relay, itself, performed self-checks of this connectivity and printed a warning log if some failure-threshold is reached (and possibly disabling the IPv6 ORPort). But, in reality, this is a hack around a broken internet - and I hesitate advocating for something like this in tor. Maybe there is a compromise we can find between the relay operator manually testing connectivity periodically and tor automatically doing-smart-things. Thoughts? - Matt [0] https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#IPv6 [1] https://trac.torproject.org/projects/tor/wiki/doc/IPv6RelayHowto [2] https://gitweb.torproject.org/tor.git/tree/src/or/auth_dirs.inc

3 5

Number of connections on dir port
by Logforme 25 Jun '18

25 Jun '18

After reading this post https://lists.torproject.org/pipermail/tor-relays/2018-May/015277.html I started looking into what is happening on the dir port on my relay (855BC2DABE24C861CD887DB9B2E950424B49FC34) The bandwidth ratio of dir/or traffic is around 3% to 4%. Not excessive according to the linked post. Looking at the conntrack table I see many IP addresses (usually from Ukraine or Russia) with 100+ connections. Atm there are around 10 IP addresses with 100+ connections and around 30 with 10+ connections. None of the IP addresses I've looked at are Tor relays. Some questions: Is this expected behaviour against on a fallbackdir flagged relay? Does the DoS prevention implemented recently address abuse against the dir port? I read that newer Tor clients don't use the dir port. Correct? Do Tor relays use the dir port? Can I remove the dir port from my relay without reducing my relays usability to the network? Thank you for any answers.

2 1

Re: [tor-relays] Alleged Family Members
by Paul Templeton 24 Jun '18

24 Jun '18

> How long is the timeout for 'Alleged Family Members' to disappear on > 'metrics.torproject.org'? Can I force it? Shouldn't take long, but did you leave the relay finger print in the MyFamily section in the torrc file? P 609662E824251C283164243846C035C803940378

1 0

I get sad when :-(
by Paul Templeton 24 Jun '18

24 Jun '18

I get sad when I lose control over one of the bare metal systems I run and help desk is slow to respond over the weekend. Then you have to throw in the time differences, then the language - its a wonder anything runs... Just wanted to know if there is anyone I can hook up with to talk about some config/stability issues. I have two systems one a VPS the other bare metal and both will drop out of the consensuses about once a day(2 to 3 hours) but are running the whole time. I have 4 bare metal systems but none are at capacity and would like to find the best approach to get more out of them. Consensus is one issue that's limiting capacity usage. I would love to meet up but in a remote part of AU and I just quit my job after 15 years so haven't time to fly anywhere at this time... P 609662E824251C283164243846C035C803940378

3 4

Prepping bridges for censorship
by Keifer Bly 23 Jun '18

23 Jun '18

Hi, So I had a thought. It seems like a lot of the relays run off of various port numbers (of course). However if all of the relays and bridges are running off of various port numbers (ie 9001, 10000, etc.), couldn’t this stop censored users (who’s isp or local firewall only allows certain ports like 80 and 443) from being able to connect to the tor network even when using bridges due to the port that the bridge of guard relay being run on a port number that is blocked by the isp or local firewall? Just a thought.

4 6