- tor-relays - lists.torproject.org

memory requirements
by notatorserver 03 Mar '18

03 Mar '18

Hi, I have just setup a tor-relay and I am wondering if the resource requirements are still current: "A non-exit relay faster than 40MBit/s should have at least 1 GB of RAM."[1] My relay is sitting at ~2.77G currently. I set the option: MaxMemInQueues 6GB Just wondering if this is any cause for concern? I realize the utilization is less than the limit but I just don't remember relays I have run in the past using this much memory. Thanks [1] https://trac.torproject.org/projects/tor/wiki/TorRelayGuide Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2

Port not rechable
by peter.zehetner＠liwest.at 03 Mar '18

03 Mar '18

I've opend the ports in my router. Could anybody be so kind to check my log and tell me wether it's ok or not? Mar 03 00:05:38.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Mar 03 00:05:45.000 [notice] Performing bandwidth self-test...done. Mar 03 00:09:29.000 [notice] Self-testing indicates your DirPort is reachable from the outside. Excellent. Publishing server descriptor. Mar 03 00:52:15.000 [notice] Tor 0.2.9.14 opening log file. Mar 03 00:52:47.000 [warn] Controller gave us config lines that didn't validate: RelayBandwidthBurst must be at least equal to RelayBandwidthRate. Mar 03 01:03:52.000 [notice] Tor 0.2.9.14 opening log file. Mar 03 01:04:03.000 [notice] Tor 0.2.9.14 opening log file. Mar 03 01:04:29.000 [notice] Tor 0.2.9.14 opening log file. Mar 03 04:33:03.000 [notice] Received reload signal (hup). Reloading config and resetting internal state. Mar 03 04:33:03.000 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc". Mar 03 04:33:03.000 [notice] Read configuration file "/etc/tor/torrc". Mar 03 04:33:03.000 [notice] Tor 0.2.9.14 opening log file. Mar 03 06:04:27.000 [notice] Heartbeat: Tor's uptime is 5:59 hours, with 2 circuits open. I've sent 70.69 MB and received 76.91 MB. Mar 03 06:04:27.000 [notice] Circuit handshake stats since last time: 0/0 TAP, 4/4 NTor. Mar 03 06:04:27.000 [notice] Since startup, we have initiated 0 v1 connections, 0 v2 connections, 0 v3 connections, and 64 v4 connections; and received 0 v1 connections, 0 v2 connections, 10 v3 connections, and 193 v4 connections. Mar 03 07:35:04.000 [notice] Received reload signal (hup). Reloading config and resetting internal state. Mar 03 07:35:04.000 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc". Mar 03 07:35:04.000 [notice] Read configuration file "/etc/tor/torrc". and: Mar 03 07:35:04.000 [notice] Tor 0.2.9.14 opening new log file. Mar 03 08:12:11.000 [warn] Failed to start child process "tor-fw-helper" in state 9: No such file or directory -Peter Am 02.03.2018 um 22:18 schrieb Matthew Finkel: > Hi! > > On Fri, Mar 02, 2018 at 09:34:02PM +0100, peter.zehetner(a)liwest.at wrote: >> OK, now I've set PortForwarding in Tor-Arm from "False" to "True", then restarted Tor: > > Hrm, I'm not sure this will do what you want. In fact, this may do > absolutely nothing. Do you have administative access into your network > router? Maybe there is a website interface you used. This is where you > should configure port forwarding. Unfortunately this is complicated and > not easy plug-n-play. > >> >> ...has not managed to confirm that its DirPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check... >> >> I'm going to run a non-exit-relay and I'm going to do this at home. >> >> Peter >> > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

No exit at home !!!
by for this post anon 03 Mar '18

03 Mar '18

Roger say it right: No exit relay at home! I write this mail in anon because I had bad experience with that. I had the experience to get visitors early in the morning from the police department some months ago. After that I must by new computers... Use ISP's only for exits. Or you want "fun". xyz

3 2

Port not rechable
by peter.zehetner＠liwest.at 03 Mar '18

03 Mar '18

Hi, I'm still trying to run a tor delay. Here's the error: Your server (81.10.248.112:80) has not managed to confirm that its DirPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. But canyouseeme.org said: Your ISP is not blocking port 80 Whats's wrong? Thanks Peter

6 6

Port not rechable
by peter.zehetner＠liwest.at 02 Mar '18

02 Mar '18

OK, now I've set PortForwarding in Tor-Arm from "False" to "True", then restarted Tor: ...has not managed to confirm that its DirPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check... I'm going to run a non-exit-relay and I'm going to do this at home. Peter Am 02.03.2018 um 20:42 schrieb Matthew Finkel: > On Fri, Mar 02, 2018 at 08:27:29PM +0100, peter.zehetner(a)liwest.at wrote: >> Hi, I'm still trying to run a tor delay. Here's the error: >> > > Thank you for running a relay. > >> Your server (81.10.248.112:80) has not managed to confirm that its DirPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. > > I do not see port 80 open, either: > > $ torsocks nc -v 81.10.248.112 80 > Ncat: Version 7.40 ( https://nmap.org/ncat ) > Ncat: Connection timed out. > >> >> But canyouseeme.org said: Your ISP is not blocking port 80 > > Maybe "not blocking" does not mean "is open". > > Are you running this relay at your home? If yes, then that is not > recommended, but you may need to allow port 80 on your firewall/router. > You may need to use port forwarding or add your computer into the DMZ > (if your router supports this). > > If you're not running this relay from home, is the server directly > connected to the Internet or is there a router/switch/blackbox in the > middle? > >> >> Whats's wrong? >> >> Thanks >> >> Peter > >> _______________________________________________ >> tor-relays mailing list >> tor-relays(a)lists.torproject.org >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

Port not rechable
by peter.zehetner＠liwest.at 02 Mar '18

02 Mar '18

There is no firewall installed. Peter Have you double-checked your firewall? -Cody On 03/02/2018 11:27 AM, peter.zehetner(a)liwest.at mailto:peter.zehetner@liwest.at wrote: > > Hi, I'm still trying to run a tor delay. Here's the error: > > Your server (81.10.248.112:80) has not managed to confirm that its DirPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. > > But canyouseeme.org said: Your ISP is not blocking port 80 > > Whats's wrong? > > Thanks > > Peter > > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org mailto:tor-relays@lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org mailto:tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

Upcoming security releases for Tor 0.2.9 and up.
by Nick Mathewson 01 Mar '18

01 Mar '18

Hi! This coming week, we'll be putting out new stable releases for 0.2.9 and later supported branches to fix a few security bugs. The highest-severity bug to be fixed is severity "medium". (See https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/Securit… for information about how we rank security issues.) These releases will also backport the anti-DoS features from Tor 0.3.3. Relays and authorities should be sure to upgrade once packages are available; these issues are not high-priority for clients. best wishes, -- Nick

4 5

Unmeasured Flag
by Matthew Glennon 28 Feb '18

28 Feb '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 So if I'm understanding this correctly, we're still having problems with a bw testing nodes and that is why my relay has the unmetered flag? -----BEGIN PGP SIGNATURE----- Version: Keybase OpenPGP v2.0.76 Comment: https://keybase.io/crypto wsBcBAABCgAGBQJalsdlAAoJEHIAmlM/NGGbpQcH/16WQLlMAAVzx4blIRV2bIJF Hwdyj4FFQ+Ms0hHhj1DwMkB6EMa11kogLA8k+NGim8QeF2Qyobd1lARUXjZdfbV5 s/L6JYYCO+PsJxJY2+nOU41HUps1w5zLfFy+ekxkVwsX8dXq+SVy06+1HXfjY2uT HJnIpkx9/IZWMjJzRv33ylIMDq4u0MltJr+4MRrb5rSn6+9pz9m4z6CeUKJbsiLh nE0YRblkRwfrlVCP3VTaaRyQdMUwWzKwnB9S8dtKGDKb+tYz4QduFuzBf1eGGrO7 cp9GeHiittyBSGylRWveQgbkzwXRGPuUGtabXutQRqGXDvanDtEroHg+hUP0SEw= =b7/2 -----END PGP SIGNATURE-----

3 3

Re: [tor-relays] less than 3 bw auths available: self-measurement (with 10k cap in effect)
by Stian Fauskanger 27 Feb '18

27 Feb '18

if your relays behave strangely in terms of bandwidth seen, than this might be due to the fact that there are less than 3 bw auth votes available. If you run a fast relay it is capped to 10k cw. This affects currently the 857 fastest relays. It also affects "low-consensus" relays. I have a bw=5k relay which almost doubled the amount of traffic, increasing steadily from 14.30 UTC until 19.00 UTC [a.k.a. now]. I assume this is because 5k is a much higher percentage of the total bw now compared to when fast nodes was not capped at 10k and at the same time, 5k didn't "give" me enough traffic to meet RelayBandwidthRate. ~ Stian

1 0

IPv6 for the nifty?
by nusenu 26 Feb '18

26 Feb '18

Hi Markus, since you are by far the biggest exit relay operator I was wondering if you have any plans to get IPv6 connectivity? thanks, nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

3 3

Tor Relay Setup
by Gabe D. 26 Feb '18

26 Feb '18

Hey Guys, Ive an issue... I wanted to aid the network and setup a tor exit node, however its failing to do so, everything looks perfect config wise and it says "publishing server descriptor" no errors but the node never shows up in tor atlas, is there something i may be doing wrong? This is my config: ORPort 9001 ExitRelay 1 Nickname ** ContactInfo ** DirPort 80 DisableDebuggerAttachment 0 ControlPort 9051 CookieAuthentication 1

6 9

Relay failed logins
by Olaf Grimm 25 Feb '18

25 Feb '18

Dear guys, I am now on my server with SSH and get the message during login: ... Last failed login: Sat Feb 24 14:22:47 EST 2018 from 5.188.10.179 on ssh:notty There were 1343 failed login attempts since the last successful login. ... This simple relay (no exit) is online since less days. Location Moldavia / Trabia Network; VPS Is this amount of attacks regular? In the past i had a log file of 12MB on an other server - all failed logins. It is not a problem. It is only for my feeling "Ok, That's right!". Nickname node49c Olaf

6 5

whonix tor-relay - help needed
by peter.zehetner＠liwest.at 25 Feb '18

25 Feb '18

Hi there! I try to configure a tor relay on an whonix-gateway but I allways receive the answer that my server has not managed to confirm that its ORPort and its DIRPort are rechable. How can I fix this? Thanks Peter

3 2

torproject.org outages? (was Re: Tor Relay Setup)
by tor 24 Feb '18

24 Feb '18

> Relay search appears to be down right now. It seems the website (https://www.torproject.org) and package repos (ex: deb.torproject.org) are currently down as well. Anyone working on it?

3 2

Not in the cached consensus
by katan＠ono.com 22 Feb '18

22 Feb '18

My LorneMalvo relay not in the cached consensus. Flags ok: running, v2dir, valid according to consensus-health. No estimate of my bandwidth never. Why? Best regards P.S.: Sorry for my english

2 4

Is it possible to run a Web server and tor ORPort on the same port?
by pikami 22 Feb '18

22 Feb '18

Hello, I was wondering if it's possible to run a Web server and tor ORPort on the same port. I'm using nginx for my web server and I'm using ports 80 and 443, it would be cool if the ORPort could also be 443, that would help people that are behind firewalls, but I can't find any solution for this on google. Is there any way to accomplish this? -- Sent from my Android device with K-9 Mail. Please excuse my brevity.

4 4

scale_active_circuits assertion fail
by Logforme 21 Feb '18

21 Feb '18

My relay (855BC2DABE24C861CD887DB9B2E950424B49FC34) just crashed with the following error: Feb 20 14:33:40.000 [err] tor_assertion_failed_(): Bug: ../src/or/circuitmux_ewma.c:711: scale_active_circuits: Assertion e->last_adjusted_tick == pol->active_circuit_pqueue_last_recalibrated failed; aborting. (on Tor 0.3.2.9 ) Feb 20 14:33:40.000 [err] Bug: Assertion e->last_adjusted_tick == pol->active_circuit_pqueue_last_recalibrated failed in scale_active_circuits at ../src/or/circuitmux_ewma.c:711. Stack trace: (on Tor 0.3.2.9 ) <snip stack trace> The relay had been up for 23 days: Feb 20 12:55:12.000 [notice] Heartbeat: Tor's uptime is 23 days 17:59 hours, with 30352 circuits open. I've sent 20574.36 GB and received 20125.28 GB. When I checked htop earlier everything looked fine. Modest CPU and MEM usage. What went wrong and what can I do to prevent this from happening again?

2 2

dns name
by TorGate 20 Feb '18

20 Feb '18

Hi onion friends :-) i have 2 relays, configured with ipv4 adresses. I have write to my isp and asked: can you change the ripe data ? isp: no my: ok :-( , i can also not change the reverse dnsname 1. So the question: is that a god way to change the config from IP-adress to dnsname in the torrc. 2. Can i also set the hostname manualy ? On Atlas is that my isp. So when there is coming a abuse, all contact is going first to my isp, and not to me. 3. Is that ok when i change the exit-html expl. with my email and business adress regards Steffen TorGate torgate(at)linux-hus.dk OpenGPG 7FD5 65EF A4EF EEF3 7A13 4372 8409 49D6 01A2 0890

2 1

gabelmoo's BW scanner, temporary or permanent leave?
by starlight.2017q4＠binnacle.cx 19 Feb '18

19 Feb '18

noticed gablemoo's BW scanner is offline and the entry for it at https://consensus-health.torproject.org/#bwauthstatus was removed; is it gone or just taking an extended break?

2 2

torservers.net DNS failure rate
by nusenu 19 Feb '18

19 Feb '18

Hi Moritz and Jens, Arthur's DNS exit scanner is detecting a high DNS failure rate on some of your tor instances: https://arthuredelstein.net/exits/ Would be great if you could look into this. thanks, nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

3 2

New Relay
by Gary 18 Feb '18

18 Feb '18

Hello. I recently set up a new relay, jaffacakemonster2, I would be grateful if someone could answer some questions for me. 1. The bandwidth on Atlas is listed as "0". Is this a wait a few days/new relay issue or a configuration issue. I was surprised to find exit relays are default now, I hope I didn't disable too much so to speak. 2. My family on Atlas - the little numbers in brackets are not all the same, I only run two relays, however on the listings it reports sometimes two sometimes three. Are you meant to include "yourself" in the torrc or only other relays?? Thanks.

5 7

PerConnBWRate, RelayBandwidthRate, BandwidthRate
by nusenu 18 Feb '18

18 Feb '18

Hello, I've got two questions regarding some bw related torrc settings. 1) after reading tor's manpage section about PerConnBWRate: > PerConnBWRate N > bytes|KBytes|MBytes|GBytes|TBytes|KBits|MBits|GBits|TBits If set, do > separate rate limiting for each connection from a non-relay. You > should never need to change this value, since a network-wide value is > published in the consensus and your relay will use that value. > (Default: 0) I was wondering what value dir auths set in consensus, but I was not able to find anything that looked like it in consensus [1]. dir-spec [2] > "perconnbwrate" and "perconnbwburst" -- if set, each relay sets > up a separate token bucket for every client OR connectio [...]> First-appeared: 0.2.2.7-alpha > Removed-in: 0.2.2.16-alpha Does that mean that dir auths stopped including it since tor 0.2.2.16-alpha should we update the manpage then? Is there a default value if consensus does not say anything about it or is there no per connection limit in that case? 2) Is there a RelayBandwidthRate torrc setting in addition to BandwidthRate so tor instances which act as clients and relays at the same time can have independent bw rates for each role (client, relay)? BandwidthRate -> affects client and relay role RelayBandwidthRate -> affects only relay role is this correct? [1] https://collector.torproject.org/recent/relay-descriptors/consensuses/2018-… [2] https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n1847 -- https://mastodon.social/@nusenu twitter: @nusenu_

2 1

DoS stats from exits running 0.3.3.2-alpha
by nusenu 17 Feb '18

17 Feb '18

I was wondering if these unfriendly tor clients are using tor's default path selection or something else. If they do tor exit relays would have much smaller values in their DoS stats, right? Would any tor exit operator (listed bellow) running 0.3.3.2-alpha be willing to share (obfuscated/not exact counters) of their DoS log entries? (only if you do not have any additional firewall rules filtering packets) | abuse(a)to-surf-and-protect.net | | replace k with c : kontakt @ zwiebeltoralf . de | | <rok AT sent dot com> | | florentin aatt rochet ddoott be; LTC: LhRqJZu6U87BJNSUbkACHzVQsK39hJ3sMB | | tor-relays(a)coldhak.ca | | abuse(a)to-surf-and-protect.de | | J. Random Hacker <anonymizer(a)ccc.de> | | Exit by Reporters without Borders via https://www.torservers.net/ | | Neel Chauhan <neel AT neelc DOT org> | BTC: 1KogNvxdcXydDUNrPgqgtgV3AWktKPqXpS | | Random Person <tor AT cusse.org> | | OctaneZ-TOR <OctaneZ+toroperator(a)gmail.com> | | https://www.torservers.net/donate.html <support .AT. torservers .DOT. net> | | shallot protonmail com | | Random Person <killertor.abuse at gmail point com> | | Brandon Kuschel <kusch023 AT NOSPAM umn dot edu> | | <admin AT openbsd DOT se> | -- https://mastodon.social/@nusenu twitter: @nusenu_

6 9

cosworth@fni.pl Tor Relays MyFamily Configuration
by nusenu 17 Feb '18

17 Feb '18

Hello cosworth(a)fni.pl, thanks for adding 3 more relays, please do not forget to set your MyFamily option in your torrc files. https://torproject.org/relay-guide#ImportantifyourunmorethanoneTorinstance Let us know if you need help with that setting. regards, nusenu https://metrics.torproject.org/rs.html#search/contact:cosworth@fni.pl ornetradar(a)riseup.net: > 2018-02-16 > > | Up | Ext | JoinTime | IP | AS | CC | ORp | Dirp | OS | Version | Nickname | eFamMembers | FP | > |------+-------+------------+---------------+-----------------------+------+-------+--------+-------+-----------+------------+---------------+------------------------------------------| > | 1 | 0 | 13:06:34 | 52.158.232.63 | Microsoft Corporation | us | 443 | 0 | Linux | 0.2.9.14 | Cosworth1 | 1 | 8F9FE423932770C5912DCB10B1A0A797F4CFA782 | > | 1 | 0 | 13:07:24 | 40.65.111.124 | Microsoft Corporation | us | 443 | 0 | Linux | 0.2.9.14 | Cosworth2 | 1 | 59C8A3663F4CB5399DC5D3E9C8455ECD0818519C | > | 1 | 0 | 13:07:57 | 52.151.41.244 | Microsoft Corporation | us | 443 | 0 | Linux | 0.2.9.14 | Cosworth3 | 1 | 6466190F47F0E6DDBA566A64518E4317BCD123DE | > > https://nusenu.github.io/OrNetRadar/2018/02/16/a1 -- https://mastodon.social/@nusenu twitter: @nusenu_

1 0

Relay stuck at Bootstrapped 0%
by Paul 17 Feb '18

17 Feb '18

I am running two relays on debian (one on Raspian 9 and one on Debian 9) and one of them for over three months now. Some time ago the older one started to loop at startup. I reinstalled tor and it worked for some time only to loop again. The last notices entry looks like this "Feb 16 19:36:14.000 [notice] Bootstrapped 0%: Starting" and the next is "Feb 16 19:42:08.000 [notice] Tor 0.2.9.14 (git-a211f886ad759cab) opening log file." then it tells about opening the listeners and parsing the GEOIP files, then my relay identity and the bootstrapped 0% entry again (left some informational entries out). The debug log looks like it is getting descriptors and stuff correctly. What could be the problem?

2 7