- tor-relays - lists.torproject.org

Has the storm passed?
by Ana Lucia Cortez 16 Jan '18

16 Jan '18

About 36 hours ago I tentatively disabled all my firewall rules who where limiting connections to my relay. Everything looks pretty normal, I see no spikes, no errors, no failures. > Jan 15 10:18:36 Tor-relay: > Heartbeat: > Tor's uptime is 4 days 18:00 hours, > with 36,596 circuits open. > I've sent 4,962.80 GB > and received 4,935.38 GB. > Circuit handshake stats since last time: > 244,441 / 244,441 TAP, > 10,558,601 / 10,558,601 NTor. > Since startup, > we have initiated > 0 v1 connections, > 0 v2 connections, > 2 v3 connections, and > 71,189 v4 connections; > and received > 1 v1 connections, > 31,976 v2 connections, > 53,960 v3 connections, and > 755,679 v4 connections. While I still see a lot of Hetzners & Co. in my top 30 connections, they seem to behave better. > Conn Subnet AS Org > 18 46.188.***.0/17 AS8334 2COM Co ltd. > 17 192.243.***.0/20 AS39572 Internet Service Solution Corp. (ISSC-11) > 14 24.60.***.0/14 AS7922 Comcast Cable Communications, LLC (CCCS) > 13 192.99.***.0/16 AS16276 OVH Hosting, Inc. (HO-2) > 12 212.109.***.0/23 AS29182 CJSC Server WebDC colocation > 11 213.239.***.0/18 AS24940 Hetzner Online AG > 10 95.65.***.0/17 AS31252 SC STARNET SRL > 10 213.239.***.0/18 AS24940 Hetzner Online AG > 9 139.59.***.0/16 DigitalOcean, LLC (AP) > 9 163.172.***.0/16 AS12876 Online SAS -- Relay:32E7AAF1F602814D699BEF6761AD03E387758D49

3 2

could Tor devs provide an update on DOS attacks?
by starlight.2017q4＠binnacle.cx 16 Jan '18

16 Jan '18

I realize we're in the middle of the Christmas / New Year dead week, but it would be great one of the developers could says something (anything) about the ongoing denial-of-service attacks. My node crashed a second time a fews days back, and while the second iteration of hardening appears have held, I see many others crack under the stress. If one opens a control channel and issues setevents extended orconn volumes of 650 ORCONN ... LAUNCHED ID=nnnn 650 ORCONN ... FAILED REASON=CONNECTREFUSED NCIRCS=x ID=nnnn messages appear. First I though these were operators with some new mitigation, but finally realized the relays are crashed and have not yet dropped off the consensus.

3 6

When is 0.3.2.9 available to download?
by Gary Smith 15 Jan '18

15 Jan '18

Hi, Firstly, on 9th of this month, tor 0.3.2.9 was released, I was wondering when it is available the official repos via apt-get? I'd rather not compile from source because its on a its on a pi and will takes ages and I will be effectively loosing auto-updates for tor. I have been testing the 0.3.2.8-alpha in a VM for a while and I am looking forward to using the new stable release. Confusingly, https://www.torproject.org/download/download.html reports that the latest stable version number (0.3.2.9) is greater than the alpha (0.3.2.8-rc) am I missing something? Secondly, I think the "Raspbian is not Debian" warning should be removed from https://www.torproject.org/docs/debian.html.en which while technically true gives users a false impression as tor will indeed work fine on a Raspberry Pi 2 / 3 (armhf not armel like Pi 1). Thanks.

2 2

Combined relay and hidden service, good idea or not?
by tortilla＠mantablue.com 15 Jan '18

15 Jan '18

When operating a hidden service and a relay in one tor instance, tor currently warns: [warn] Tor is currently configured as a relay and a hidden service. That's not very secure: you should probably run your hidden service in a separate Tor process, at least -- see https://trac.torproject.org/8742 First, that issue has been fixed and closed. Second, I had read in the past opinions stating: When operating a hidden service, running a relay helps mix traffic so that anyone observing traffic from the machine cannot easily run an analysis targeted at a hidden service that might exist on that machine. The text of the startup warning seems to contradict that belief. Is there more to know, or is the warning only applicable to the now-closed information leak? Can someone kindly clarify the current best practice in this regard and address whether or not that warning should be removed from tor's startup diagnostics?

10 18

Fwd: [tor-announce] Tor 0.3.2.9 is released (new stable series)
by r1610091651 15 Jan '18

15 Jan '18

Hi I was wondering if anyone knows when this release would become available as a Ubuntu package? I'm using the repository below but it's not there yet. deb-src http://deb.torproject.org/torproject.org xenial main (I did try to ask Nick) Thx On Tue, 9 Jan 2018 at 16:31 Nick Mathewson <nickm(a)torproject.org> wrote: > On Tue, Jan 9, 2018 at 9:49 AM, Nick Mathewson <nickm(a)torproject.org> > wrote: > > (If you are about to reply saying "please take me off this list", > > instead please follow these instructions: > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-announce/ > > . If you have trouble, it is probably because you subscribed using a > > different address than the one you are trying to unsubscribe with. > > You will have to enter the actual email address you used to > > subscribe.) > > > > After months of work, Tor 0.3.1.7 is now available! This is the first > > stable release in the 0.3.2.x series, and we hope you find it useful. > > By which I mean, of course, that 0.3.2.9 is now available. > > Thanks to the 12 people who have already told me about this in the > last 30 minutes, and my apologies for the extra email. > _______________________________________________ > tor-announce mailing list > tor-announce(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-announce >

2 2

Re: [tor-relays] Marker branch for current tor release(s)
by Chad MILLER 15 Jan '18

15 Jan '18

I second this. There's a recommended-versions list in the consensus, but you have to already have Tor available and running to get it. Maybe also publish in a DNS TXT record or something? On Jan 5, 2018 00:48, "Andreas Krey" <a.krey(a)gmx.de> wrote: Hi everybody, https://www.torproject.org/download/download.html.en in the source code 'tab' states the current stable and alpha version of tor. Would it be possible to publish the current states as branches 'stable' and 'alpha' (or 'testing', or 'unstable') in the git repo? That would help us tor-from-source builders to just fetch the repo, and if the respective branch changes, to rebuild and redeploy. Looking for a new release tag or screen-scraping said web page is a bit hairy, and feels unnecessary. - Andreas -- "Totally trivial. Famous last words." From: Linus Torvalds <torvalds(a)*.org> Date: Fri, 22 Jan 2010 07:29:21 -0800 _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

4 5

Release 0.3.2.9 "expert bundle" for Win x64 available?
by Peter Ott 14 Jan '18

14 Jan '18

0 *H÷ 010 +0 *H÷ $ Content-Type: multipart/alternative; boundary="----=_NextPart_000_007B_01D38D3C.21C81030" This is a multipart message in MIME format. ------=_NextPart_000_007B_01D38D3C.21C81030 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi, is there already a built for the new stable 0.3.2.9 "expert bundle" Win x64 available or any idea when it will be distributed? Thanks in advance Peter ------=_NextPart_000_007B_01D38D3C.21C81030 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta = http-equiv=3DContent-Type content=3D"text/html; = charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 15 = (filtered medium)"><style></style></head><body lang=3DDE = link=3D"#0563C1" vlink=3D"#954F72"><div class=3DWordSection1><p = class=3DMsoNormal><span lang=3DEN-GB>Hi,<o:p></o:p></span></p><p = class=3DMsoNormal><span lang=3DEN-GB>is there already a built for the = new stable 0.3.2.9  “expert bundle” Win x64 available = or any idea when it will be distributed?<o:p></o:p></span></p><p = class=3DMsoNormal><span lang=3DEN-GB>Thanks in = advance<o:p></o:p></span></p><p class=3DMsoNormal><span = lang=3DEN-GB>Peter<o:p></o:p></span></p><p = class=3DMsoNormal><o:p> </o:p></p></div></body></html> ------=_NextPart_000_007B_01D38D3C.21C81030-- Ö00 /\ß8ígPGüóÛP00 *H÷ 0u10 UIL10U StartCom Ltd.1)0'U StartCom Certification Authority1#0!UStartCom Class 1 Client CA0 161125184133Z 200225184133Z0h1&0$U For login authentication only10Upeter.ott(a)df7fe.de1!0 *H÷ peter.ott@df7fe.de0"0 *H÷ 0 ÅkìŽLÒõŽxÿKAŸ€à3¬×Œ£œ±WëØ¯6êæJ±²Òè þm1ðv¥éÛW~&$ÄûÂ#Òl®Ôæ2oÀDj*Ð ÜÑDbU÷ ÔäŸ4XÜMÏâBÍ¥ýñõ³ÖÂ(6ÄÕÿïA3TÖYnùÎ2Á%ø©éRèA¢|áÀñ»°*ó^Ø-gÒ~_;Ê&Çç>ç5â+P|râ "AÅÀõÄà%H_×qÀßª±Ð í»Ùœ dò Cb^XÊø?và·Iè¡ú.Nç.ýGu.&£¶0²0Uÿ°0U%0++0 U00Ue)$vg È«ø/úœé[Áêq¬0U#0$l9aŸI·F+É(µ'Hmh0o+c0a0$+0http://ocsp.startssl.com09+0-http…10/0- + )'http://crl.startssl.com/sca-client1.crl0U0peter.ott(a)df7fe.de0#U0http://www.startssl.com/0GU @0>0<+µ70-0++https://www.startssl.com/policy0 *H÷ 7^dîRÑ£€üjÍï·Æ:w«µkÏ-ÇL ,Äù9¿iÒ*U²*Ðo'æÀiOËV_ñº¿ŠŸ4áãÂ/WÁ²³ïþ€oÁ»6rÕbùÖøCf/oÐbïS7ÿ+ËFÚÆ`Î7Ò¡Vyfß¡šVß>ÚLC'íCøÍS4ôÉÝ%ê÷5o¿1¶EÓ®íðøéŽX)¢úO¶Ÿ}W«wïwTÈN.4ÀªYïT %tÒqËC_ü€F ·ÛFcKÒÇÈN}Ò¶'+=±ÂH'Rk(å0â0Ê k§} ×ÖQ ùYäçŽá0 *H÷ 0}10 UIL10U StartCom Ltd.1+0)U"Secure Digital Certificate Signing1)0'U StartCom Certification Authority0 151216010005Z 301216010005Z0u10 UIL10U StartCom Ltd.1)0'U StartCom Certification Authority1#0!UStartCom Class 1 Client CA0"0 *H÷ 0 œ}Ú÷Ã¢}ö[ýÛ[_®uÀµ¯$¬»WyØ5ì |Ì Ðvün£qY§)\aL$dõÑY¢ÄG|B"äQûÇ€ÿÄ©æVDº#'ŒÁFØÌËÎ ék9O_]*Ïz÷_kÏU.u3µör #œ:Úáì²C<ožÆg íT)Ké ÉXah8ËvÆ[²\KqídlOÁ)3+u7åJ5Ù"Á;[ÈvfÊL/"2Ï©²Jï#ð¡4×¬[¡UúÎ ÏTŒŠB, aŽË²ø¶¡a®7Há¯µ<ùÒöÞ=q³£d0`0Uÿ0U%0++0Uÿ0ÿ02U+0)0' % #!http://crl.startssl.com/sfsca.crl0f+Z0X0$+0http://ocsp.startssl.com00+0$http://aia.startssl.com/certs/ca.crt0U$l9aŸI·F+É(µ'Hmh0U#0Nï€@[¥i0Ê4hCÐA®ò0?U 80604U 0,0*+http://www.startssl.com/policy0 *H÷ ã÷ì[á#'#œ4ðpnRÛ¡ØÐN®â`ì]K"#Hÿì*ß·Ô¹£Ï;UªÊA8òæìÒÍeg{°ozmY¥Á³E60æA·ß)wXRK¡6»c^ï-A¬œëlæãÈéà^ñŠ²k[ž³³':ŽG=¹á;¿oLv¿{µ$Bò³5ê;8Èb,ZPŒ4Âþ{o[-§à»¢jå õå×m)ê¯Â[ë[þ«§Øý¢îüæ4 s.cà|ÀÒŽ¢v¡YLJ<À¡|ÖÉÓ¯gu±0ÓjéD2 @¶hÓl+:ÁjŸ\ìze_Öa@¢ìHyMŒHãIÀNxp£®K?ä% ã€ºRC£÷×:=£?^ÐØ&ÿµ×ë7³ï¬mÂŽ)õÝ«AŒ2;E~ VœB²1ÌÍÌ$ÜEvcKjØ(Oæìo«ÙŸU`"$©Òa¥Ð;Ò¡×âjœ0Îý$&<ÂÐ$Û+Í/Áxjz°ùbþ,7}W*ð1ÒÜºÃûtŠDv#Õ8ÌK %^ÀÎÒà¥£Pò>²é/iÓ?)yRÚuQá©ÿg^¢Æz÷çÅ`~ŒsPï9££0É0± 0 *H÷ 0}10 UIL10U StartCom Ltd.1+0)U"Secure Digital Certificate Signing1)0'U StartCom Certification Authority0 060917194636Z 360917194636Z0}10 UIL10U StartCom Ltd.1+0)U"Secure Digital Certificate Signing1)0'U StartCom Certification Authority0"0 *H÷ 0 ÁÛ ŒlF|x{µ3òrbÖÁ6 "$^ÎéwòC ¢d€Ì6ø8æ#ðnm±<Ýr£¡Ó=Ž3+Ó/¯þê°AYg¶Ä} tÖyL7zß9RY÷ôFC€ÒÒÃqóub4º,îí4ÐÇÍR=º3ÖÝMÞ;JKÂ&/úµr5wÊ<]æÊá&6v\Ût%þíµ ÝxÊ-0-ryúFÖ*š¹Š«IåòïÝä cSb©:ÌµfŠÂktä+áv>ŽmØöDásb;ÄŸ SV%lQ ÷ª«Ê¿výmóÛ¿=fŒVª¯H:Kß§XPÙ8u©[êCÿëèlMp[)eÝª]Ì¯1ìëÒèê{æn÷'fH×nBã?Þ!>{á pûcªšlTŽ\%zÉ¢ÉŠ»,~^MXnî Æ2ÿüôúÍnè6IŸHiÂM²iÁ Öúy"H¿º{iøpÇúz7ØØ ÒvOWÿ·ãÒÝïÂ`·g:ÝþªðÔr"ÎÆ¶ø¯ šÙûÆ¶µ\R<¶*s ³`òz/Û£nÿ&0õÝW¶=³¯+Å·vð¥Ö+*röã3] Kß»tRK£R0N0U0ÿ0U®0UNï€@[¥i0Ê4hCÐA®ò0dU]0[0, * (&http://cert.startcom.org/sfsca-crl.crl0+ ) '%http://crl.startcom.org/sfsca-crl.crl0]U T0P0L+µ70;0/+#http://cert.startcom.org/policy.pdf05+)http://cert.startcom.org/intermediate.pdf0Ð+0Ã0' Start Commercial (StartCom) Ltd.0Limited Liability, read the section *Legal Limitations* of the StartCom Certification Authority Policy available at http://cert.startcom.org/policy.pdf0 `HøB08 `HøB +)StartCom Free SSL Certification Authority0 *H÷ lôf4õÐ^} ìÚN8^ßŠ%K2Áè;ñ=ÝD [I)Ëf·±÷% <áÝ6+K»hÓ9f= &Çò9Q«{~ÕÎZäâWpiù^XŠ ßE8 ^WöbÇzæŒµòô©)ø²ãn(DÃÞ8©<¬CMdEÎÝ(©\òs{øè«±ó.\dns1:žŒ³ä}Q;ôMf{<íÓóePõ Ðu/¯ðêCøiyÄCFrãd6¯÷%8w~Ãkj¹ÃËDK¬xçÇ,KDÈ4R'Í ]ÁÕxòS2ÝfuÙµh(ûa.Ÿš8À¥gd./©pÇ|eõCT«Ý¥9`À4Ép,£õH{œ~k·ô";®øü*ÊúR ï¯KUëÁµð"¬4N&"¡,uJ·å}×ždÀ6ÒÉ/# Á;sI£jWåÖxÅCcãMàw-áeriG æV$û¿y©X.¹Ä ~ºm>²êJ9ØÐ+õ¿ìu¿Å ÜU7âû7Cb ÊçVKeêþlÁ$$¡4ëÿ"®}?ñeQ Š0j³ô ürè^1ä0à00u10 UIL10U StartCom Ltd.1)0'U StartCom Certification Authority1#0!UStartCom Class 1 Client CA/\ß8ígPGüóÛP00 + /0 *H÷ 1 *H÷ 0 *H÷ 1 180114123232Z0# *H÷ 1xûGM° 7ªÏc¶ÊWµÁ0 *H÷ 100 `He*0 `He0 *H÷ 0 `He0*H÷ 0 *H÷ @0+0 `He0 `He0 `He0 +7100u10 UIL10U StartCom Ltd.1)0'U StartCom Certification Authority1#0!UStartCom Class 1 Client CA/\ß8ígPGüóÛP00*H÷ 1 0u10 UIL10U StartCom Ltd.1)0'U StartCom Certification Authority1#0!UStartCom Class 1 Client CA/\ß8ígPGüóÛP00 *H÷ `<NILG8qŸA}QAºÓ@ZR\Hx¬ âMÞëßÅQ>QhšŽö¶ŠB²¢]û§×ÎÍ »)ÆOCJÉvÄ q4&kjó&ÈÓ®D÷£2Q:,Šáµ~ªm&=jñž8GDÑÿÙÀ_×R/É uiÞì èÖ×·W8švðÅŽA¥çÉ% :3à¢ysßÞ,¿Ô+``ôµGI':ØŠ[êð3õ5'ÛK+TkîÝÔXÐ M'&»ëyéyÚ;)]\ødg*Ú.óGäèu¿ôciÓ

2 1

Tried to establish rendezvous on non-OR circuit
by TorGate 14 Jan '18

14 Jan '18

Hi to all, is this a problem :-) [WARN] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendevous (pending) [9 duplicates hidden] 18:34: and [WARN] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendevous (pending) [13 duplicates TorGate torgate(at)linux-hus.dk

2 1

AS "sprint S.A."
by nusenu 14 Jan '18

14 Jan '18

I'm proposing to remove these 5 exit relays as per the new contactInfo/MyFamily requirements, most of them signed up at the same time, use the same tor version and have the same exit policy. (I'm CC'ing tor-relays so the operator has a chance to see and react to this email as well) +---------------------+------------------------------------------+-------------+----------+---------+---------+ | first_seen | fingerprint | tor_version | nickname | or_port | contact | +---------------------+------------------------------------------+-------------+----------+---------+---------+ | 2018-01-09 13:00:00 | AC3F8121574050C595FED8ED44CEA2DCD75F9BAF | 0.2.4.29 | lacheses | 9001 | NULL | | 2018-01-13 20:00:00 | 9A90F846871641CB97C70B948963FCA3F7486E5A | 0.2.4.29 | Glaucus | 9001 | NULL | | 2018-01-13 20:00:00 | AF2B2D9A7C33E23C02A3AEA917DDC86663EBEF2A | 0.2.4.29 | Hemera | 9001 | NULL | | 2018-01-13 20:00:00 | E92D860BE6E3460ECB02E37A11DDEF87461EE08B | 0.2.4.29 | Demeter | 9001 | NULL | | 2018-01-13 21:00:00 | 0AE3AC492B709AA851488D01B1AD1EDFC040947F | 0.2.4.29 | Enyo | 9001 | NULL | +---------------------+------------------------------------------+-------------+----------+---------+---------+ ornetradar(a)riseup.net: > 2018-01-13 > > | Up | Ext | JoinTime | IP | CC | ORp | Dirp | Version | Contact | Nickname | eFamMembers | > |------+-------+------------+----------------+------+-------+--------+-----------+-----------+------------+---------------| > | 1 | 1 | 19:43:55 | 195.22.125.135 | pl | 9001 | 0 | 0.2.4.29 | None | Demeter | 1 | > | 1 | 1 | 19:44:06 | 195.22.125.141 | pl | 9001 | 0 | 0.2.4.29 | None | Glaucus | 1 | > | 1 | 1 | 19:44:10 | 195.22.125.144 | pl | 9001 | 0 | 0.2.4.29 | None | Hemera | 1 | > | 1 | 1 | 19:45:23 | 195.22.125.137 | pl | 9001 | 0 | 0.2.4.29 | None | Enyo | 1 | > > https://nusenu.github.io/OrNetRadar/2018/01/13/a2 -- https://mastodon.social/@nusenu twitter: @nusenu_

1 0

Question: systematic hacking on my social media accounts
by Paul Templeton 14 Jan '18

14 Jan '18

Hi all, Just wondering if anyone else has had this problem over the last week. I have had attempts (one successful) on my social media accounts. Just found it strange that it was more than one. They got into my Facebook page (Haven't used it for years) - Seems that they got access via really old personal questions that family have provided them via their online posts - ie happy birthday now that you are this old... and hows your dog m#### doing and my mum listing her maiden name etc. I can't get it through to people to stop them from having public profiles... SIGH. Mean while they have to put up with girly pics or unfriend me as i'm not interested in the account. A lesson for all. Paul 609662E824251C283164243846C035C803940378

2 1

which countries in the world are missing a Tor Relay?
by Fabio Pietrosanti - Lists 14 Jan '18

14 Jan '18

I was wondering which countries in the world are missing a Tor Relay? It would be nice to have a small project reporting which countries are still missing Tor relays, to invite people to find a way to run at least one there, being exotic places or just unusual places! Fabio

6 5

request for comments: The Tor Relay Guide (Draft)
by nusenu 12 Jan '18

12 Jan '18

The #Tor relay documentation on www.torproject.org has shown its age and some of us have been working on writing something new, currently it lives on trac but will live on a website eventually. The Tor Relay Guide https://trac.torproject.org/projects/tor/wiki/TorRelayGuide It also features instructions to setup automatic package updates for multiple Linux distributions. I'd like to get your feedback! The preferred location is via email or on the trac ticket: https://trac.torproject.org/projects/tor/ticket/24497 thanks, nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

4 6

denetron.com Tor Relays MyFamily Configuration
by nusenu 12 Jan '18

12 Jan '18

Hello, thanks for running Tor relays! Please do not forget to set your "MyFamily" configuration parameter on all your relays, so Tor clients are not at risk of using your relays in multiple positions in a single circuit. Some more background: https://hackernoon.com/some-tor-relays-you-might-want-to-avoid-5901597ad821 https://nusenu.github.io/OrNetStats/endtoend-correlation-groups Let us know if you need any help with this. thanks, nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

1 0

Faravahar - Scheduled Maintenance - Thursday, January 11, 2018 at 18:00:00 UTC to 22:00 UTC
by Sina Rabbani 12 Jan '18

12 Jan '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Scheduled Maintenance Thursday, January 11, 2018 at 18:00:00 UTC to 22:00 UTC Dear Tor Network, I am upgrading/replacing the hardware for Faravahar, and would like to announce a maintenance window: Scheduled Start: Thursday, January 11, 2018 at 18:00:00 Scheduled End: Thursday, January 11, 2018 at 22:00:00 During this event the server will be out of service and unavailable. I will reply to this email with updates when the work begins and upon completion. All the best, Sina -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJaVVAaAAoJEMeylP64yITyeR8P/jr13qhdtK/zWja9Ybp6NbBq +jWBSes/CGxLGtIRs/DIXF6jlhaPfM+yO/bhQ3MJvpa5ls50EPQhzEuUnbM3Zxtv 586cgclupXtDXyu8n7wbJRelmbRZ7Ef7mQDc9IaNU3J4UgzsS0bNghIKO1gfq2rc HK97JIqnGyPDjzrPvFatzdKWAkmIk6TR4c6zuCcHZqNChQxSkOge0acOo69fusL/ 4TQr69GOTklV6N3YVvo8OLzUlWNGGj1CHVN6nJD11NwyZFrQ6kC1PfaPcUNs0CUB ecge5FBXXFb1gDA9gr2THAdw++bmOZwaKKgqgyyU6qFhQkOHAnHhTh5Ef0YBIwXg l4m4FW+u91yfv2rHaXF2K4DgjhgKkjfmmsmT2NIIE7uCxtr8otmJQSyy6W8awn2Y ymoMUfCbqUD3QNUHU90PJmTSlzK2+Asp2cd8PdiIILXsmwVq+JBt09MnT/lDO/UH kxnNTK7VnVChpef40z1JyZKyGOeXc/a4O5VvyfvYDohe9sBiiINdfGz7RA6+BOsE ChUp8PiGimyWZpHVO7ccZyWya3mTT43HRJjr3U0LoZNBb1S/CwYre1B/7e2M3i/D WYOQc/ubTuw6ZOJ79QMxPdUR76WLsJi/ULZ1iqEwdyagg/jnUsDNMRYp4da12kij iESAh7F4Tom7zeh2xHh1 =qe70 -----END PGP SIGNATURE-----

1 2

Failing because we have 1354 connections already.Please read doc/TUNING for guidance.
by rush23＠gmx.net 11 Jan '18

11 Jan '18

2 1

Nyx reported speed
by John D. McDonnell 10 Jan '18

10 Jan '18

I'm not sure if reporting is off or something isn't configured right or whatever it could be, but when running nyx, it is telling me that the measured rate is 229.0 B/s which to me, sounds ridiculously slow. Where is it getting the measured rate from? Is it a calculation on how much data is passing in a given time or some sort of speed test from another relay or where? While I've used Tor off and on for several years, I never ran a relay until now and I'm still not certain on several aspects, though I keep digging to make sure I can supply the best exit relays I can. (I currently host 2 exit relays and hope to bring up 3 more in the near future if I can find hardware to run them on. Though I may make one a bridge.) I have some spare internet connections that are provided to us that are 25/5 connections. I configured torrc with a 500KB/s limit with 600KB/s bursting as this should work nicely to use ~4Mbps of the 5Mbps that the connection supports and allows me some bandwidth to be able to connect to the machines for monitoring and troubleshooting as well as more than enough bandwidth for downloading updates and such. The line in nyx that I'm referring to is: Bandwidth (limit: 500 KB/s, burst: 600 KB/s, measured: 229.0 B/s): Where is it getting that 229.0 B/s rate and is there anything I can do to get it closer to the 500KB/s I am trying to share. Granted, I am using a Linksys e1200 and Belkin something-or-other that I can't remember off the top of my head running DD-WRT as routers in front of the servers. (I've pondered removing the router and just connecting the server directly to the internet and relying on pf for my firewalling, but I can't do that at the one location as I also have a couple other things connected to it. Both routers are higher end consumer routers with 32MB of RAM and has 32768 for maximum ports. (Currently just under 3000 active IP connections as I'm typing this e-mail.) I might just try this on my one exit to see if this is the bottleneck I'm hitting or if there's something else affecting it. When I had first put this in place, I was using an older Netgear ProVPN router of some sort, but I swapped it out due to it flagging NTP traffic as unknown even though my server was initiating the NTP requests. But I was maintaining 200KB/s+ connections fairly consistently. It now ranges all over the place and I'm not sure if that's an issue on my end or just part of the lifecycle of a relay. I just recently rebooted the machine this happened to pop up in the nyx log window as I was looking at this: 12:33:09 [NOTICE] Heartbeat: Tor's uptime is 4 days 23:59 hours, with 1928 circuits open. I've sent 37.89 GB and received 37.00 GB. To me, that seems a too low, but I've not sat down to do the math and maybe that's a good statistic for 5 days at 4Mbps. I'd appreciate any tips and pointers you can send my way. And if the consumer routers are the issue, I can move my one exit relay to one of the other connections I have and not use it at the location (or just run one that's slower) where I do use this backup internet connection. (It's handy to have a network that's not part of our internal network for testing.) Thanks for sticking with me through this whole e-mail and I apologize for rambling and jumping around a bit. I'm sure I left out some stuff and didn't clarify something else or something wasn't clear, so if you need more information, just ask. Thank you, John Penn Cambria School District This e-mail and any files transmitted with it are confidential and intended only for the person or entity to which it is addressed. If you have received this email in error, please notify the sender immediately via email and delete this email along with any attachments from your system. Any unauthorized or improper disclosure, copying, distribution, or use of the contents of this e-mail and attached documents is strictly prohibited. The views and opinions of this email or attachments are reflections of the author and are not necessarily the views and opinions of Penn Cambria School District. We do not accept responsibility or liability for any loss or damage from the receipt of this email, its use, or for any errors or omissions. www.pcam.org<http://www.pcam.org>

3 8

Configuring your relay
by Tommy Collison 09 Jan '18

09 Jan '18

Hi there, I'm Tor's writer/editor. We just got a question on Twitter that I'm stumped on, and I had a quick look through the documentation and didn't find anything. Can anyone shed some light? - Can you set up a relay to provide more bandwidth during specified hours? (e.g. more at night, less during the day.) - Is there a way of configuring the relay to work only on certain days? I assume not, and that this would have to be done manually, maybe with cron? Cheers, TC

3 2

Relay not listed in atlas
by Fabian A. Santiago 09 Jan '18

09 Jan '18

One of my relays is no longer listed in atlas. I'm curious why and how can I go about examining the issue? It had been running for several weeks at this point seemingly fine. My other relay lists it as an alleged family member but it's id is listed in a different color (yellow). Is this part of the ddos issue I've seen spoken of here? The server is accessible and Tor is running. System stats look fine. Any ideas? Thanks. -- Thanks, Fabian S. OpenPGP: 3C3FA072ACCB7AC5DB0F723455502B0EEB9070FC

3 5

Updated Fallback Directory Mirrors
by teor 09 Jan '18

09 Jan '18

Dear Relay Operators, Thanks to everyone who opted-in their relays as fallback directory mirrors. We rebuilt the list of fallbacks on the weekend. [0] The new list will come out in Tor 0.3.2.9. It will be backported to all supported Tor releases. [1] The FallbackDir flags on Consensus Health [2] have been updated. The flags on Relay Search (Atlas) [3] might take a few days to update. Don't worry if your relay missed out this time. It's still helping Tor users. And we will rebuild the fallback list again in 6-12 months time. You can keep replying to this thread to opt-in your relays. If you have multiple relays, you can opt-in as many as you like. (We picked up to 7 per operator this time, and we may pick more next time.) We are tracking fallback changes in this ticket [4]. T [0]: https://gitweb.torproject.org/tor.git/tree/src/or/fallback_dirs.inc https://trac.torproject.org/projects/tor/ticket/24801 [1]: 0.2.9, 0.3.0, and 0.3.1. (0.2.5 doesn't have the fallback feature). See https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTor… [2]: https://consensus-health.torproject.org/graphs.html [3]: For example, this relay is a new fallback: https://atlas.torproject.org/#details/001524DD403D729F08F7E5D77813EF12756CF… [4]: https://trac.torproject.org/projects/tor/ticket/24805 -- Tim / teor PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n ------------------------------------------------------------------------

2 1

what are these spikes
by Paul Templeton 09 Jan '18

09 Jan '18

Hi all, just a query - I get these unusual spikes on https://atlas.torproject.org/#details/867B95CACD64653FEEC4D2CEFC5C49B462030… (have a look at the three month chart) and I notice some of the other AU relays do the same. can anyone tell me what they are???? Paul

2 2

*BSD bridge operators
by George 08 Jan '18

08 Jan '18

For anyone running *BSD bridges that wasn't aware, there are obfs4proxy packages/ports available for each of the BSDs: FreeBSD as security/obfs4proxy-tor NetBSD as net/obfs4proxy OpenBSD as net/obfs4proxy DragonFlyBSD as security/obfs4proxy-tor For assisting aggressively censored users, bridges really should consider configuring obf4sproxy. g -- 34A6 0A1F F8EF B465 866F F0C5 5D92 1FD1 ECF6 1682

2 1

Really strange
by r1610091651 07 Jan '18

07 Jan '18

Outcome of a script to count # connections /24 range 11 188.214.30.* 20 37.48.104.* 22 37.48.86.* 33 5.79.72.* 48 212.32.226.* 97 212.32.239.* 197 149.202.66.* 294 5.79.103.* 303 198.7.59.* 358 207.244.110.* 380 162.210.192.* 394 207.244.70.* 395 199.115.112.* 499 54.36.51.* And that on my lowly relay (consesus of 1k) Other relays seeing this too?

3 10

Re: [tor-relays] [tor-dev] Relay diversity master thesis
by grarpamp 07 Jan '18

07 Jan '18

On Sun, Jan 7, 2018 at 8:29 AM, teor <teor2345(a)gmail.com> wrote: >> On 22 Dec 2017, at 11:23, Robin Descamps <robin.descamps(a)outlook.com> wrote: >> May I ask you advices/feedback about this master thesis plan? >> The master thesis plan: https://drive.google.com/open?id=1XEOSS29owavKJ_cJJAVaPiJe34Ez6XXx >> The poster: https://drive.google.com/open?id=1BlF2U-Kexyz6ihVSqvsVHv4PUsvXATc4 > In particular, operators that could perform end-to-end correlation? > Have you considered the relay's Operating System? If considering as yet non tor daemon, non measured, non consensus voted things like operators and OS, then you should extend research into similar meta parameters about the relays themselves such as datacenter hosted vs cable/dsl/fiber "home" relays, country locations, opposing legal jurisdictions, operation by "known" or "trusted" operators / entities or not, by working / fake / no contact info, by any PKI Web Of Trust asserted among operators, funding sources, employer / corporate / political / other affiliations, statistical analysis of historical relay "presence" on the network (add/drop/uptime, nicknames, movement, versions, bulk turnups, correlation groups, etc), and many more possible metas that people should think up and add to this list. That research then followed by development of third party subscription lists of categorized / ranked relays the user or tor daemon may further pluggably select from when choosing nodes to path through. There have been posts on tor-relays@ and tor-talk@ that mention more about these sorts of meta parameters. AFAIK, no one has done any research into them or their potential impact / benefits, whether to particularly affected, or for plain preferential choice users, or to the network as a whole. So the chance of a first good paper in the area awaits whoever does that meta analysis project. [xpost for open project oppurtunity]

1 0

Fallback Directory Mirror changed
by cxx 06 Jan '18

06 Jan '18

Hi there, took a while longer than expected, but my relay has now moved to a new IP address, it's running on 37.157.255.35 now, so it could be re-added to the list. Regards cxx > > On 16 Nov 2017, at 15:05, teor <teor2345(a)gmail.com> wrote: > >> On 15 Nov 2017, at 21:13, cxx <tor(a)cxx.rocks> wrote: > >> I have to move my node to another server, as this one is running > >> unstable in the past weeks. Unfortunately, I can't keep the ip-address > >> 217.79.190.25, which is in the the list of fallback > >> directory mirrors, so the IP should be removed or changed. > > Thanks for letting me know. > > We are tracking changes in this ticket, when we get enough, someone > > will do them all: > > https://trac.torproject.org/projects/tor/ticket/22321#comment:10 > > It looks like your relay hasn't moved. > We've removed it from the list for now. > When it gets its new address, please email tor-relays, and CC me.

1 0

collecting info on Wikipedia blocking non-exits
by Alison Macrina 05 Jan '18

05 Jan '18

Hi friends, I'd like to collect some anecdata about this issue regarding Wikipedia blocking edits from Tor non-exit relays: https://trac.torproject.org/projects/tor/ticket/24758 If you run a non-exit relay, would you be so kind as to go to wikipedia.org from that IP, click "edit" on any page, and report to me off-list if your relay is blocked or not? In your message, please give me your relay address and let me know if it's ever functioned as an exit before. Thank you! Alison -- Alison Macrina Community Team Lead The Tor Project

6 5