- tor-relays - lists.torproject.org

whonix tor-relay - help needed
by peter.zehetner＠liwest.at 25 Feb '18

25 Feb '18

Hi there! I try to configure a tor relay on an whonix-gateway but I allways receive the answer that my server has not managed to confirm that its ORPort and its DIRPort are rechable. How can I fix this? Thanks Peter

3 2

torproject.org outages? (was Re: Tor Relay Setup)
by tor 24 Feb '18

24 Feb '18

> Relay search appears to be down right now. It seems the website (https://www.torproject.org) and package repos (ex: deb.torproject.org) are currently down as well. Anyone working on it?

3 2

Not in the cached consensus
by katan＠ono.com 22 Feb '18

22 Feb '18

My LorneMalvo relay not in the cached consensus. Flags ok: running, v2dir, valid according to consensus-health. No estimate of my bandwidth never. Why? Best regards P.S.: Sorry for my english

2 4

Is it possible to run a Web server and tor ORPort on the same port?
by pikami 22 Feb '18

22 Feb '18

Hello, I was wondering if it's possible to run a Web server and tor ORPort on the same port. I'm using nginx for my web server and I'm using ports 80 and 443, it would be cool if the ORPort could also be 443, that would help people that are behind firewalls, but I can't find any solution for this on google. Is there any way to accomplish this? -- Sent from my Android device with K-9 Mail. Please excuse my brevity.

4 4

scale_active_circuits assertion fail
by Logforme 21 Feb '18

21 Feb '18

My relay (855BC2DABE24C861CD887DB9B2E950424B49FC34) just crashed with the following error: Feb 20 14:33:40.000 [err] tor_assertion_failed_(): Bug: ../src/or/circuitmux_ewma.c:711: scale_active_circuits: Assertion e->last_adjusted_tick == pol->active_circuit_pqueue_last_recalibrated failed; aborting. (on Tor 0.3.2.9 ) Feb 20 14:33:40.000 [err] Bug: Assertion e->last_adjusted_tick == pol->active_circuit_pqueue_last_recalibrated failed in scale_active_circuits at ../src/or/circuitmux_ewma.c:711. Stack trace: (on Tor 0.3.2.9 ) <snip stack trace> The relay had been up for 23 days: Feb 20 12:55:12.000 [notice] Heartbeat: Tor's uptime is 23 days 17:59 hours, with 30352 circuits open. I've sent 20574.36 GB and received 20125.28 GB. When I checked htop earlier everything looked fine. Modest CPU and MEM usage. What went wrong and what can I do to prevent this from happening again?

2 2

dns name
by TorGate 20 Feb '18

20 Feb '18

Hi onion friends :-) i have 2 relays, configured with ipv4 adresses. I have write to my isp and asked: can you change the ripe data ? isp: no my: ok :-( , i can also not change the reverse dnsname 1. So the question: is that a god way to change the config from IP-adress to dnsname in the torrc. 2. Can i also set the hostname manualy ? On Atlas is that my isp. So when there is coming a abuse, all contact is going first to my isp, and not to me. 3. Is that ok when i change the exit-html expl. with my email and business adress regards Steffen TorGate torgate(at)linux-hus.dk OpenGPG 7FD5 65EF A4EF EEF3 7A13 4372 8409 49D6 01A2 0890

2 1

gabelmoo's BW scanner, temporary or permanent leave?
by starlight.2017q4＠binnacle.cx 19 Feb '18

19 Feb '18

noticed gablemoo's BW scanner is offline and the entry for it at https://consensus-health.torproject.org/#bwauthstatus was removed; is it gone or just taking an extended break?

2 2

torservers.net DNS failure rate
by nusenu 19 Feb '18

19 Feb '18

Hi Moritz and Jens, Arthur's DNS exit scanner is detecting a high DNS failure rate on some of your tor instances: https://arthuredelstein.net/exits/ Would be great if you could look into this. thanks, nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

3 2

New Relay
by Gary 18 Feb '18

18 Feb '18

Hello. I recently set up a new relay, jaffacakemonster2, I would be grateful if someone could answer some questions for me. 1. The bandwidth on Atlas is listed as "0". Is this a wait a few days/new relay issue or a configuration issue. I was surprised to find exit relays are default now, I hope I didn't disable too much so to speak. 2. My family on Atlas - the little numbers in brackets are not all the same, I only run two relays, however on the listings it reports sometimes two sometimes three. Are you meant to include "yourself" in the torrc or only other relays?? Thanks.

5 7

PerConnBWRate, RelayBandwidthRate, BandwidthRate
by nusenu 18 Feb '18

18 Feb '18

Hello, I've got two questions regarding some bw related torrc settings. 1) after reading tor's manpage section about PerConnBWRate: > PerConnBWRate N > bytes|KBytes|MBytes|GBytes|TBytes|KBits|MBits|GBits|TBits If set, do > separate rate limiting for each connection from a non-relay. You > should never need to change this value, since a network-wide value is > published in the consensus and your relay will use that value. > (Default: 0) I was wondering what value dir auths set in consensus, but I was not able to find anything that looked like it in consensus [1]. dir-spec [2] > "perconnbwrate" and "perconnbwburst" -- if set, each relay sets > up a separate token bucket for every client OR connectio [...]> First-appeared: 0.2.2.7-alpha > Removed-in: 0.2.2.16-alpha Does that mean that dir auths stopped including it since tor 0.2.2.16-alpha should we update the manpage then? Is there a default value if consensus does not say anything about it or is there no per connection limit in that case? 2) Is there a RelayBandwidthRate torrc setting in addition to BandwidthRate so tor instances which act as clients and relays at the same time can have independent bw rates for each role (client, relay)? BandwidthRate -> affects client and relay role RelayBandwidthRate -> affects only relay role is this correct? [1] https://collector.torproject.org/recent/relay-descriptors/consensuses/2018-… [2] https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n1847 -- https://mastodon.social/@nusenu twitter: @nusenu_

2 1

DoS stats from exits running 0.3.3.2-alpha
by nusenu 17 Feb '18

17 Feb '18

I was wondering if these unfriendly tor clients are using tor's default path selection or something else. If they do tor exit relays would have much smaller values in their DoS stats, right? Would any tor exit operator (listed bellow) running 0.3.3.2-alpha be willing to share (obfuscated/not exact counters) of their DoS log entries? (only if you do not have any additional firewall rules filtering packets) | abuse(a)to-surf-and-protect.net | | replace k with c : kontakt @ zwiebeltoralf . de | | <rok AT sent dot com> | | florentin aatt rochet ddoott be; LTC: LhRqJZu6U87BJNSUbkACHzVQsK39hJ3sMB | | tor-relays(a)coldhak.ca | | abuse(a)to-surf-and-protect.de | | J. Random Hacker <anonymizer(a)ccc.de> | | Exit by Reporters without Borders via https://www.torservers.net/ | | Neel Chauhan <neel AT neelc DOT org> | BTC: 1KogNvxdcXydDUNrPgqgtgV3AWktKPqXpS | | Random Person <tor AT cusse.org> | | OctaneZ-TOR <OctaneZ+toroperator(a)gmail.com> | | https://www.torservers.net/donate.html <support .AT. torservers .DOT. net> | | shallot protonmail com | | Random Person <killertor.abuse at gmail point com> | | Brandon Kuschel <kusch023 AT NOSPAM umn dot edu> | | <admin AT openbsd DOT se> | -- https://mastodon.social/@nusenu twitter: @nusenu_

6 9

cosworth@fni.pl Tor Relays MyFamily Configuration
by nusenu 17 Feb '18

17 Feb '18

Hello cosworth(a)fni.pl, thanks for adding 3 more relays, please do not forget to set your MyFamily option in your torrc files. https://torproject.org/relay-guide#ImportantifyourunmorethanoneTorinstance Let us know if you need help with that setting. regards, nusenu https://metrics.torproject.org/rs.html#search/contact:cosworth@fni.pl ornetradar(a)riseup.net: > 2018-02-16 > > | Up | Ext | JoinTime | IP | AS | CC | ORp | Dirp | OS | Version | Nickname | eFamMembers | FP | > |------+-------+------------+---------------+-----------------------+------+-------+--------+-------+-----------+------------+---------------+------------------------------------------| > | 1 | 0 | 13:06:34 | 52.158.232.63 | Microsoft Corporation | us | 443 | 0 | Linux | 0.2.9.14 | Cosworth1 | 1 | 8F9FE423932770C5912DCB10B1A0A797F4CFA782 | > | 1 | 0 | 13:07:24 | 40.65.111.124 | Microsoft Corporation | us | 443 | 0 | Linux | 0.2.9.14 | Cosworth2 | 1 | 59C8A3663F4CB5399DC5D3E9C8455ECD0818519C | > | 1 | 0 | 13:07:57 | 52.151.41.244 | Microsoft Corporation | us | 443 | 0 | Linux | 0.2.9.14 | Cosworth3 | 1 | 6466190F47F0E6DDBA566A64518E4317BCD123DE | > > https://nusenu.github.io/OrNetRadar/2018/02/16/a1 -- https://mastodon.social/@nusenu twitter: @nusenu_

1 0

Relay stuck at Bootstrapped 0%
by Paul 17 Feb '18

17 Feb '18

I am running two relays on debian (one on Raspian 9 and one on Debian 9) and one of them for over three months now. Some time ago the older one started to loop at startup. I reinstalled tor and it worked for some time only to loop again. The last notices entry looks like this "Feb 16 19:36:14.000 [notice] Bootstrapped 0%: Starting" and the next is "Feb 16 19:42:08.000 [notice] Tor 0.2.9.14 (git-a211f886ad759cab) opening log file." then it tells about opening the listeners and parsing the GEOIP files, then my relay identity and the bootstrapped 0% entry again (left some informational entries out). The debug log looks like it is getting descriptors and stuff correctly. What could be the problem?

2 7

Relay Search has moved!
by Iain Learmonth 17 Feb '18

17 Feb '18

Hi All, Relay Search has moved! It is no longer to be found at atlas.torproject.org (although a redirect is in place). The new home is at: https://metrics.torproject.org/rs.html If you prefer an onion service: http://rougmnvswfsmd4dq.onion/rs.html Thanks, Iain.

3 7

Api for atlas.torproject.org
by flipchan 17 Feb '18

17 Feb '18

Hey, Im trying to write an ip checker script for a mail server/firewall and i want to be able check if the ip is a tor relay, is their a api for looking up ips on atlas.torproject.org ? Or any other easier way to do it in like python :) -- Take Care Sincerly flipchan layerprox dev

6 6

tonull list
by TorGate 16 Feb '18

16 Feb '18

Hi to all, what is the best way to intergrade the tonull list in the torrc ? ExitPolicy https://tornull.org/tornull-bl.txt <https://tornull.org/tornull-bl.txt> is that working ? or via a include ? regards Steffen TorGate torgate(at)linux-hus.dk

2 2

DoS mitigation
by Fabian A. Santiago 16 Feb '18

16 Feb '18

Hello, I've been browsing the list archives looking for mentions of DOS mitigation. last night my exit relay went offline and when i logged into it, CPU was sitting at 100% and atlas reported mine as down and another service i have checking up time also did as well. so i rebooted my server and it was fine. i found this thread: 1) Drops off consensus for 1-2hours and returns w/o hsdir: DOS_CC_CIRCUIT_BURST_DEFAULT 90 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 100 FW: 20 connects per /32 ip, rate limited to 3 per sec. 2) Good (stable): DOS_CC_CIRCUIT_BURST_DEFAULT 50 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 50 FW: 20 connects per /32 ip, rate limited to 3 per sec. 3) Good (stable): DOS_CC_CIRCUIT_BURST_DEFAULT 20 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 20 FW: 20 connects per /32 ip, rate limited to 3 per sec. 4) Too conservative: DOS_CC_CIRCUIT_BURST_DEFAULT 10 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 10 FW: 20 connects per /32 ip, rate limited to 3 per sec. 5) Good (newly): DOS_CC_CIRCUIT_BURST_DEFAULT 50 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 50 FW: 100 connects per /32 ip, rate limited to 15 per sec. are these good mitigations? what else can or should be done? limiting memory use helpful? I'm running on ubuntu 16.04 and am using ufw for my firewall currently. are there any other suggestions given my platform? thanks for your help. -- Thanks, Fabian S. OpenPGP: 3C3FA072ACCB7AC5DB0F723455502B0EEB9070FC

2 1

torservers internet connection
by TorGate 15 Feb '18

15 Feb '18

Hi again to all, i planing more torserver but what is the best solution for a god connection. there are 2 tor servers with a Bandwidth limit: 14.6 MB/s, burst: 29.3 MB/s is this enogth ? The internet connection has 60MB. Is this a god ide to setup more servers on this 60MB connection ? regards Steffen TorGate torgate(at)linux-hus.dk

3 11

freebsd port 80 and 443
by TorGate 15 Feb '18

15 Feb '18

Hi to all, question: i have testet a config with ORPort 443 and dirport 80, hm but there are a permission issue with freebsd. On my testsystem is no http installed, Can i only install tor on freebsd with orport 9001 and dirport 9030 ? regards Steffen TorGate torgate(at)linux-hus.dk

7 12

torservers.net MyFamily Configuration
by nusenu 14 Feb '18

14 Feb '18

Hi Moritz, please have a look at your MyFamily configuration. https://nusenu.github.io/OrNetStats/endtoend-correlation-groups thanks, nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

2 1

ninja.turtle5 Tor Relays MyFamily Configuration
by nusenu 14 Feb '18

14 Feb '18

thanks for running Tor relays! Please do not forget to set your "MyFamily" configuration parameter on all your relays, so Tor clients are not at risk of using your relays in multiple positions in a single circuit. https://nusenu.github.io/OrNetStats/endtoend-correlation-groups Some more background: https://hackernoon.com/some-tor-relays-you-might-want-to-avoid-5901597ad821 Let us know if you need any help with this. regards, nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

1 0

hviv Tor Relays MyFamily Configuration
by nusenu 14 Feb '18

14 Feb '18

thanks for running Tor relays! Please do not forget to set your "MyFamily" configuration parameter on all your relays, so Tor clients are not at risk of using your relays in multiple positions in a single circuit. https://nusenu.github.io/OrNetStats/endtoend-correlation-groups Some more background: https://hackernoon.com/some-tor-relays-you-might-want-to-avoid-5901597ad821 Let us know if you need any help with this. regards, nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

1 0

Checking dos mitigation
by Felix 14 Feb '18

14 Feb '18

Hi everybody I tried several setups for dos mitigation since the dos code is available and came to the following results, where I think 5) is promising and 2) or 3) are fine. 1) Drops off consensus for 1-2hours and returns w/o hsdir: DOS_CC_CIRCUIT_BURST_DEFAULT 90 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 100 FW: 20 connects per /32 ip, rate limited to 3 per sec. 2) Good (stable): DOS_CC_CIRCUIT_BURST_DEFAULT 50 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 50 FW: 20 connects per /32 ip, rate limited to 3 per sec. 3) Good (stable): DOS_CC_CIRCUIT_BURST_DEFAULT 20 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 20 FW: 20 connects per /32 ip, rate limited to 3 per sec. 4) Too conservative: DOS_CC_CIRCUIT_BURST_DEFAULT 10 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 10 FW: 20 connects per /32 ip, rate limited to 3 per sec. 5) Good (newly): DOS_CC_CIRCUIT_BURST_DEFAULT 50 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 50 FW: 100 connects per /32 ip, rate limited to 15 per sec. Some hack to grab dos ips, their counts and defenses shows the well known ones like a hand full new ones. But no surprises. -- Cheers, Felix

2 2

bridge questions
by Arisbe 14 Feb '18

14 Feb '18

Hello Tor users, I have several quick question: Can bridges use an IPv6 ORPort? Is there any advantage to adding this to my bridges? Has anyone actually seen IPv6 connections on a bridge? Thanks for the feedback...

3 2

[err] tor_assertion_failed_(): Bug: src/or/connection.c:5113
by Toralf Förster 13 Feb '18

13 Feb '18

Got this today: Feb 13 22:02:49.000 [err] tor_assertion_failed_(): Bug: src/or/connection.c:5113: assert_connection_ok: Assertion (conn->type == CONN_TYPE_EXIT && conn->state == EXIT_CONN_STATE_RESOLVING) || connection_is_writing(conn) || conn->write_blocked_on_bw || (CONN_IS_EDGE(conn) && TO_EDGE_CONN(conn)->edge_blocked_on_circ) failed; aborting. (on Tor 0.3.3.2-alpha efc105716283bbdf) Before I changed the config from ExitRelay 1 IPv6Exit 1 to #ExitRelay 1 #IPv6Exit 1 and a little bit later to ExitRelay 0 IPv6Exit 0 -- Toralf PGP C4EACDDE 0076E94E

2 2