- tor-relays - lists.torproject.org

Request for removal of an exit from the consensus
by Nathaniel Suchy (Lunorian) 05 May '18

05 May '18

This is more of a message to the directory authorities. After a discussion with Digitalocean - they will not relent on the bandwidth policy. The server tor-exit-us-1.lunorian.is (Tor Metrics link below) has been turned off for now - if the directory authorities would like further proof to confirm my request please email me. At the end of the month the SSD of the exit will be erased from Digitalocean's systems. I would hate for this exit to gain guard status and then be suddenly removed as it'd negatively impact Tor users. Effected exit: http://rougmnvswfsmd4dq.onion/rs.html#details/DF2E0ABE681206DD886E29D5190F1… Cheers, Nathaniel

2 1

dew questions about Tor-relay
by dave` dave 03 May '18

03 May '18

what is SocksPort, Controlsocket and Exitpolicy and Exitpolicy reject ip address or :*: is in my "torrc" file. can i set in my "torrc" file what ip i dont want/want to connect me?

5 4

DigitalOcean bandwidth billing changes
by Ralph Seichter 02 May '18

02 May '18

Looks like DigitalOcean has just begun measuring bandwidth usage "officially", starting yesterday: https://www.digitalocean.com/community/tutorials/digitalocean-bandwidth-bil… "Based on our analysis of the historical usage patterns of our customers, less than one percent of users will exceed their pooled allowance." I had heard of the One Percent, but never thought I'd become a part of that illustrious group... :-) -Ralph

15 22

Help With Autoupdating Tor Software
by Keifer Bly 02 May '18

02 May '18

Hello, So on Mac OS X, I am using crontab to automatically run a script I wrote for Mac OS High Sierra to automatically update the tor relaying software every day at 1am. The cron command I am using is this: 0 1 * * * /Users/oldimac/Desktop/update\ tor.scpt The script I wrote seems to work fine for updating tor, however it seems to have trouble updating homebrew. Here are the contents of the script: do shell script "$ which brew /usr/local/bin/brew update" do shell script "$ which brew /usr/local/bin/brew upgrade tor" end When the script is run, the output is this: sh: $: command not found Error: tor 0.3.2.10 already installed So it seems to be that it updates tor ok but when it tries to update homebrew the error is “command not found”. I previously tried do shell script “brew update” however that only turns to a "command not found" error and only works in terminal but not AppleScript. Also, after writing the crontab command, I launched crontab via terminal via running “crontab” which loads to a blank Terminal screen. Do you know of a way I can check the script actually ran? Thank you very much.

4 9

Info about Provider Scaleway and cheap "ARM server"
by Olaf Grimm 02 May '18

02 May '18

Dear readers, I tried to use different operating systems and hardware architectures for my Tor relays for diversity. So I came to the Parisian provider Scaleways, which has a cheap offer for ARM servers for € 2.99 per month. Debian was available with architecture "armhf / armv7l". I knew that, but I did not want to believe it. After performance trouble and a server crash I tested "/etc/cpuinfo" and 'lscpu'. There are Raspberry Pi in the cloud! From my personal device at home I know, that full cpu performance will kill the device due to overheating. Oh no! Must change to the next offer with x86_64 for € 11,99 / month. What can I expect? An old Pentium with 400MHz? https://www.scaleway.com/baremetal-cloud-servers/ My order was "C1 - A true metal ARM server running in the cloud." "4 Dedicated ARM Cores, 2GB Memory, 50GB SSD Disk / 200Mbit/s unmetered bandwith" The information for interested parties only. No discussion required. Olaf

3 2

>1100 relays still run end-of-life tor versions
by nusenu 01 May '18

01 May '18

As of today, with the EOL date of tor 0.2.5 the amount of EOL relays increased to over 1100 and more than 7% of the tor network capacity. https://nusenu.github.io/OrNetStats/#end-of-life-relays-share Here is the list of affected operators by contactInfo sorted by consensus weight fraction. https://gist.githubusercontent.com/nusenu/b867fb18c00dd1893820408877ed1470/… (the first 8 readable entries are in BCC) We encourage everyone to configure their relays to do updates automatically: https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#AutomaticSoftwa… Happy updating! nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

1 0

create Tor-Guard and Tor-Middle
by dave` dave 29 Apr '18

29 Apr '18

i want to build my own Guard-Relay and Middle-Relay and use them. i already have Tor-Bridge and Exit-Relay and i want to add the Guard and Middle, but i don't know how.

3 4

Tor relay marked as hibernating?
by Nathaniel Suchy (Lunorian) 29 Apr '18

29 Apr '18

Hi, The Tor relay https://metrics.torproject.org/rs.html#details/B0BF533DA3BC09DEEB4AF2BEC16F… of mine is marked as hibernating however I have not set a bandwidth limit. Any idea on why this is happening? Cheers, Nathaniel Suchy

3 2

Timeframe for a relay to be removed from the consensus and tor metrics
by Nathaniel Suchy (Lunorian) 28 Apr '18

28 Apr '18

While setting up my fleet of Tor Relays, one relay IP Address 206.189.165.140 had a bad config so I decided to delete it from the cloud provider and setup a new one in its place. When will it be removed from the tor consensus and tor metrics for the downtime? Cheers, Nathaniel

2 2

nyx tor controller password
by smichel0 27 Apr '18

27 Apr '18

Hello! I want to monitor my new tor relay (set up on a raspbian pi 3 by migrating my former relay incl. keys) with nyx. When try to start nyx by "nyx" in the command line "Tor controller password" is prompted. I can't find a password except the hashpassword in the torrc-file but that doesn't work. I tried to set a password by "tor --hash-password <password>" but it didn't work as well. When I start nyx with sudo it works and I can see that tor is doing well. Any solutions? Sent with [ProtonMail](https://protonmail.com) Secure Email.

4 6

reminder: Tor 0.2.5.x LTS will reach its end-of-life in a few days on 2018-05-01
by nusenu 27 Apr '18

27 Apr '18

Hi, this is a reminder that in a few days the tor LTS branch 0.2.5.x will reach its end-of-life date [1]. Currently there are still over 440 relays (~3.2% of the network capacity) running that tor version [2]. Please upgrade to one of the currently supported tor versions: - 0.2.9.x - 0.3.1.x - 0.3.2.x If you are still on Debian oldstable (jessie) with tor 0.2.5.16 you have multiple options: - use the the torproject's debian repository (tor 0.3.2.10) https://www.torproject.org/docs/debian.html.en#ubuntu - use debian backports (tor 0.2.9.14) https://packages.debian.org/jessie-backports/tor - or upgrade to debian stable (stretch) (tor 0.2.9.14) [1] https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTor… [2] https://nusenu.github.io/OrNetStats/#tor-version-distribution-relays -- https://mastodon.social/@nusenu twitter: @nusenu_

1 0

What's the timeline for a Tor relay to start routing a large amount of traffic?
by Nathaniel Suchy (Lunorian) 27 Apr '18

27 Apr '18

I started to run a few Tor Exit Relays (My exit policy only allows ports 80 and 443 only to minimize the amount of abuse) a few days ago. Currently Tor Metrics shows the relays are only advertising 700Kb/s despite the fact the minimum port speed on the VPSes I host on is 100Mb/s. I've been told by friends of mine it's because it's a new relay - at what point does the relay start to route a large amount of traffic equivalent to the port speed. I'm hoping to contribute to the Tor Project in a variety of ways over the next few months and the summer and starting relays is a first step. Cheers, Nathaniel

3 3

FW: Relay unreachable by authorities (Was: Re:Questiononrelay allowed downtime)
by Keifer Bly 27 Apr '18

27 Apr '18

From: Keifer Bly Sent: Thursday, April 26, 2018 4:08 PM To: tor-relays(a)lists.torproject.org Subject: FW: [tor-relays] Relay unreachable by authorities (Was: Re:Questiononrelay allowed downtime) From: Keifer Bly Sent: Thursday, April 26, 2018 4:01 PM To: tor-relays(a)lists.torproject.org Subject: RE: [tor-relays] Relay unreachable by authorities (Was: Re:Questionon relay allowed downtime) That’s what’s strange. I have double checked the tor logs and the only warning that appears is the “tor cannot help you if you use it wrong” warning; that’s the only one that appears. I did some research, and according to https://serverfault.com/questions/145907/does-mac-os-x-throttle-the-rate-of…, Mac os does have a maximum amount of network connections it does allow at once. To find mine out, I tried running this in terminal Launchctl limit maxfiles The return was this: maxfiles 256 unlimited. I tried attaching a photo of the output but got a message back saying it was held because it was too big (the file was about 6mb). I wonder if this would mean mac os only allows 256 connections at once? How could I modify my torrc file to not go over the max allowed connections by mac os and still be a useable relay? Thank you. From: teor Sent: Thursday, April 26, 2018 3:38 PM To: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] Relay unreachable by authorities (Was: Re: Questionon relay allowed downtime) On 27 Apr 2018, at 08:23, Keifer Bly <keifer.bly(a)gmail.com> wrote: My apologies. The fingerprint is DB1AF6477BB276B6EA5E72132684096EEE779D30 Here are the contents of my torc file (the isp beeng run from is Charter Communications, the only isp that is available where I live. You might want to use a pastebin service for large files. Or cut out all the commented stuff before posting your torrc. I do not remember applying any descriptor limit and do not see one here. The file descriptor limit is imposed by the OS. The default can be low. Here is how you can find out: Please check the logs for warnings and notices. Sometimes tor logs a warning when it starts up (for example, low file descriptors), and then the issue happens later. What’s strange is my internet connection is working fine and I am able to visit websites, making it not seem like it is overloaded. Tor requires thousands of simultaneous connections. Tor requires constant uptime. Internet browsing requires a few connections. It works when the network is interrupted. Seems strange. Does Charter have any strange policies against running tor relays (has anyone ever had a documented here problem with running a relay on Charter before)? Thank you. You should ask your ISP. T

4 10

Goes the ORPort into "Consensus Weight" calculation ?
by Toralf Förster 27 Apr '18

27 Apr '18

For family:D11D11877769B9E617537B4B46BFB92B443DE33D - running at the same IP - I do wonder about the differences of the values 44300 versus 36800 (one is 1 1/2 year, the other is 1/2 year old). -- Toralf PGP C4EACDDE 0076E94E

2 1

Question on relay allowed downtime
by Keifer Bly 26 Apr '18

26 Apr '18

Hello, So recently I had an uptime of about 3-4 days but then I had to restart my computer to install an operating system update (the OS in question being Mac OS X High Sierra). I know I am not to worry about what flags I have as long as I am not a bad relay, but am curious, what is the allowed downtime the network allows to do things like install operating system updates, etc, without significantly impacting time between failures? Thank you.

3 5

Running relays in universities? Exit nodes, perhaps? Please share your experience!
by Gunnar Wolf 26 Apr '18

26 Apr '18

TL;DR - Have you got official permission to operate Tor exit nodes within an university campus/network? Relay nodes, even? Please share me how this permission was achieved! (or even if it was denied, please tell me!) Hi, I know this list is mostly technical in nature, so sorry for presenting a very different kind of topic here; I will send a very similar message to the tor-teachers list, but I believe the population of this list to be interesting.. I am trying to get my university's (Universidad Nacional Autónoma de México) OK to run an exit node from our campus' network. I currently operate one relay, am willing to set up some extra relays, and have at least one colleague in a different research institute with a relay of his own, but I believe we should aim for exit nodes. Now, I don't want to set it up in a rogue fashion, as I'm sure that the university's NOC or CERT would not take long to get complaints and require me to shut it down. I have already made an official request for the permission to run an exit node and (as expected) it was turned down. Quoting (translation mine) the reasons for rejection, 1. This assignation is not factible because the Tor network is not compatible with the Acceptable Usage Policies of RedUNAM, being this infrastructure oriented to the service of institutional goals. 2. While the Tor network can have reseearch purposes, due to its nature and the hiding of IPv4 addresses and anonymous connectivity, it is susceptible to be used by third parties from outside the University with purposes conflicting with those specified in item 1, without any possibility of control or regulation from the University's part or from your project. 3. Even more so: The Tor network, due to its definition and structure, can potentially incorporate third people with malicious or even delictive intentions, which would affect not only the computers or networks in your Institute or all of the University, but also networks outside the institution's control So, I want to gather experiences from operators in different universities or research institutions. Which way did you have to argue? How hard was to get this OK? Did you ask a permission for a specific project, or as part of your networking infrastructure in general? Did you ask this before setting up the exit node, or as a "fait accompli" gathering not-too-ill results for a given time period? Any help and pointers are welcome!

8 8

control who can connect me
by dave` dave 25 Apr '18

25 Apr '18

im using VMware Ubuntu 16.04 using SSH. im running Exit-Relay and i want to control who can connect to my Exit-Relay, is there a way to do that- though the Exit-Relay settings, or the SSH settings? and there will be an even better way: if i can say who is the specific ip that can connect to me. Thank You!

5 5

Can i use the same ip for Tor bridge and Exit-Relay to work together?
by dave` dave 25 Apr '18

25 Apr '18

Im working on project in Tor and im running Exit-Relay and Tor-Bridge together(on the same ip). for that im using VMware Ubuntu 16.04 with SSH. im using "arm" option tor run the Tor through terminal this is my "torrc" file through SSH: SocksPort 0 ORPort 443 BridgeRelay 1 Exitpolicy reject *:* PublishServerDescriptor 0 Nickname Test ExitRelay 1 ControlSocket 0 ContactInfo human(a)gmail.com now, im testing the Exit-Relay through "Windows" and sets in "torrc": Exitnodes ip(my servers ip) and is works. and now im testing my Tor-Bridge through Tor-Browser: my ip:port| my fingerprint and it works but when im running them both on my computer- changing the "torrc" file(in windows) and set in Tor-Browser to use my Bridge its not working. i need them to work together for this project. edit: after few hours the Tor-Brigade are still working buy when im trying to use the Exit-Relay its seams like every thing is ok but i can't get into to the Tor net.(in my browser i see my Exit-Relay ip but cant get into the internet)

2 3

Consensus Weight Definiton
by Keifer Bly 23 Apr '18

23 Apr '18

Hello, I am wondering, could you please explain exactly what “Consensus Weight” is? I had had a good uptime, about five days, then my darn computer that I run my relay off of froze for about 40 minutes this morning and I had no choice but to reboot the tor software, setting my current uptime back to 0 days. However, it has a consensus weight of 523, is this a good rating? Does this have an effect on things such as what flags a relay has (mine currently being Fast, V2Dir, Running, and Valid)? The relay in question can be found here: https://metrics.torproject.org/rs.html#details/DB1AF6477BB276B6EA5E72132684… I know the stable flag (which I have had on and off since starting my relay, don’t currently have it but relay seems to receive traffic nonetheless) depends on uptime history, not exact current uptime, but am curious, is there an easy to check my current uptime history? Also, I thought I’d share an applescript I wrote to automatically update the tor relay software and homebrew one minute after midnight every day. Here is the source code (written using AppleScript editor) do shell script "$ which brew /usr/local/bin/brew update" do shell script "$ which brew /usr/local/bin/brew upgrade tor" end When it runs, it comes up with this error, saying tor is already up to date. sh: $: command not found Error: tor 0.3.2.10 already installed (1) As this is the only error that appears, I’d take it that the script works It can be scheduled to run automatically at midnight every night via this method I found here: https://apple.stackexchange.com/questions/24862/how-can-i-configure-my-comp… I am curious to know what you all think of this tactic if you will, please let me know as you can give it to others if you wish. Thank you.

4 12

Advertised bandwidth
by Ian Zimmerman 23 Apr '18

23 Apr '18

In /etc/tor/torrc, I have: ahiker!507 ~# fgrep -i bandwidth /etc/tor/torrc | grep -v '^#' RelayBandwidthRate 64 MBytes RelayBandwidthBurst 512 MBytes But metrics.torproject.org says: Details for: ahiker Configuration Nickname ahiker OR Addresses IPv4 Advertised Bandwidth 55.99 KiB/s Why? -- Please don't Cc: me privately on mailing lists and Usenet, if you also post the followup to the list or newsgroup. To reply privately _only_ on Usenet and on broken lists which rewrite From, fetch the TXT record for no-use.mooo.com.

2 1

Relay conf
by Michael Harris 22 Apr '18

22 Apr '18

Relay configure and started, stops abruptly. Any advice would be appreciated /var/log/tor/log Last three lines: Tor has successfully opened a circuit. Looks like client is functionality is working Bootstrap 100%: Done Interrupt: Exiting cleanly

2 1

Guard node configuration?
by Gabe D. 22 Apr '18

22 Apr '18

Hi guys. I've a relay running on Tor. It's an exit node now. And I noticed it has an entry guard flag which is great. But probability of it being an entry relay is 0%. How can I utilise this server to be an entry relay? How does one configure this and how does it work?

5 6

Home made method of auto updating Mac OS X relating software
by Keifer Bly 20 Apr '18

20 Apr '18

Hello List, I thought I’d share an applescript I wrote to automatically update the tor relay software and homebrew one minute after midnight every day. Here is the source code (written using AppleScript editor) do shell script "$ which brew /usr/local/bin/brew update" do shell script "$ which brew /usr/local/bin/brew upgrade tor" end When it runs, it comes up with this error, saying tor is already up to date. sh: $: command not found Error: tor 0.3.2.10 already installed (1) As this is the only error that appears, I’d take it that the script works It can be scheduled to run automatically at midnight every night via this method I found here: https://apple.stackexchange.com/questions/24862/how-can-i-configure-my-comp… I am curious to know what you all think of this tactic if you will, please let me know as you can give it to others if you wish. Thank you. Sent from my iPhone

1 0

Re: [tor-relays] Whatever happened to those 47 PrivateInternetAccess exit relays?
by us-drone-killing-empire＠scryptmail.com 19 Apr '18

19 Apr '18

Thanks arma! And I hope it goes well for them and other VPN providers start running their own exit relays.Best wishes,--------------------------------------------On Thu Apr 19 2018 at 6:24:41 PM, Roger Dingledine <arma(a)mit.edu> wrote: .showMessage{white-space: pre-line;}On Thu, Apr 19, 2018 at 01:21:00PM +0000, nusenu wrote:> us-drone-killing-empire(a)scryptmail.com:> > Good day,They happened to pop up not so long> > ago,https://nusenu.github.io/OrNetRadar/2018/03/27/a8.htmlDid they> > abandon them?> > They lived for less than two days, so this might have just been a test.> > Someone from the torproject wrote me that they are in contact with them > (or at least were in contact by the end of last month).I asked Steph for some hints, and she pointed me tohttps://twitter.com/piacsm/status/979101507617415168"We have R&D in progress and we will let the community know when weare ready"So it sounds like it *was* them running the relays, and hopefully theywill decide to take the next step whe n the time is right.--Roger_______________________________________________tor-relays mailing listtor-relays@lists.torproject.orghttps://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Whatever happened to those 47 PrivateInternetAccess exit relays?
by us-drone-killing-empire＠scryptmail.com 19 Apr '18

19 Apr '18

Good day,They happened to pop up not so long ago,https://nusenu.github.io/OrNetRadar/2018/03/27/a8.htmlDid they abandon them? Did they feel the abuse that would come out of them was too much for them to handle?I don't know but it seems the Tor network would really benefit from their exit contribution that spanned many countries.--Best wishes,

5 4