- tor-relays - lists.torproject.org

Re: [tor-relays] bug message from 02/28/2020 on 4.5.6
by William Kane 01 Mar '21

01 Mar '21

Hi Matt, this is non fatal and as you can see by the most recent log entries, you could ignore it - anyway, some contributor warned about this occurring with more recent tor builds since the way tor probes for listening sockets has changed / it now always binds to all IPv4 & IPv6 addresses and then does reachability checks for each? It was something along the lines of that. What if you manually specify your listening IP addresses and port like I do: ORPort 37.157.195.83:38619 ORPort [2a02:2b88:2:1::3239:0]:38619 This should satisfy tor, at least it does on 0.4.4.6 which is the newest version available through the official ArchLinux repositories, not sure about 0.4.5.x branch which states the following in it's change log: This release series introduces significant improvements in relay (IPv6) address discovery. That would be much safer and cleaner than tor trying to guess which addresses it's supposed to bind to anyway :-) Thank you for running a relay! Best Regards, William 2021-03-01 12:49 GMT, William Kane <ttallink(a)googlemail.com>: > Hi Matt, > > this is non fatal and as you can see by the most recent log entries, > you could ignore it - anyway, some contributor warned about this > occurring with more recent tor builds since the way tor probes for > listening sockets has changed / it now always binds to all IPv4 and > IPv6 addresses an does reachability checks for each? > > It was something along the lines of that. > > What if you manually specify your listening IP addresses and port like I > do: > > ORPort 37.157.195.83:38619 > ORPort [2a02:2b88:2:1::3239:0]:38619 > > This should satisfy tor, at least it does on 0.4.4.6 which is the > newest version available through the official ArchLinux repositories, > not sure about 0.4.5.x branch which states the following in it's > changelog: > > This release series introduces significant improvements in relay > (IPv6) address discovery. > > That would be much safer and cleaner than tor trying to guess which > addresses it's supposed to bind to anyway :-) > > Hope I helped, > William > > > > 2021-02-28 15:28 GMT, tor <tor(a)kevinandmatt.com>: >> Hi All, >> This popped up today after running successfully for about a week. >> -matt >> >> >> x 09:32:50 [NOTICE] Self-testing indicates your ORPort *.*.*.*:443 is >> reachable from the outside. Excellent. Publishing server descriptor. >> x 09:32:50 [NOTICE] Now checking whether IPv4 ORPort *.*.*.* :443 is >> reachable... (this may take up to 20 minutes -- look for log messages >> indicating success) >> x 09:32:26 [NOTICE] External address seen and suggested by a directory >> authority: *.*.*.* >> x 09:30:52 [NOTICE] Bootstrapped 100% (done): Done >> x 09:30:52 [NOTICE] Bootstrapped 95% (circuit_create): Establishing a >> Tor >> circuit >> x 09:30:52 [NOTICE] Bootstrapped 90% (ap_handshake_done): Handshake >> finished with a relay to build circuits >> x 09:30:52 [NOTICE] Bootstrapped 89% (ap_handshake): Finishing handshake >> with a relay to build circuits >> x 09:30:52 [NOTICE] Bootstrapped 85% (ap_conn_done): Connected to a >> relay >> to build circuits >> x 09:30:52 [NOTICE] Bootstrapped 80% (ap_conn): Connecting to a relay to >> build circuits >> x 09:30:52 [NOTICE] Bootstrapped 75% (enough_dirinfo): Loaded enough >> directory info to build circuits >> x 09:30:51 [NOTICE] Bootstrapped 68% (loading_descriptors): Loading >> relay >> descriptors >> x 09:30:51 [NOTICE] Bootstrapped 63% (loading_descriptors): Loading >> relay >> descriptors >> x 09:30:51 [NOTICE] Bootstrapped 55% (loading_descriptors): Loading >> relay >> descriptors >> x 09:30:50 [NOTICE] Bootstrapped 50% (loading_descriptors): Loading >> relay >> descriptors >> x 09:30:50 [NOTICE] Bootstrapped 45% (requesting_descriptors): Asking >> for >> relay descriptors >> x 09:30:50 [NOTICE] Bootstrapped 15% (handshake_done): Handshake with a >> relay done >> x 09:30:50 [NOTICE] Bootstrapped 14% (handshake): Handshaking with a >> relay >> x 09:30:50 [WARN] Bug: >> /usr/lib/aarch64-linux-gnu/libevent-2.1.so.6(+0x21a10) [0xffff8575ba10] >> (on >> Tor 0.4.5.6 ) >> x 09:30:50 [WARN] Bug: /usr/bin/tor(+0x81854) [0xaaaae3745854] (on Tor >> 0.4.5.6 ) >> x 09:30:50 [WARN] Bug: /usr/bin/tor(+0x21419c) [0xaaaae38d819c] (on Tor >> 0.4.5.6 ) >> x 09:30:50 [WARN] Bug: /usr/bin/tor(consider_publishable_server+0x5c) >> [0xaaaae377099c] (on Tor 0.4.5.6 ) >> x 09:30:50 [WARN] Bug: /usr/bin/tor(router_rebuild_descriptor+0x90) >> [0xaaaae3770588] (on Tor 0.4.5.6 ) >> x 09:30:50 [WARN] Bug: /usr/bin/tor(router_build_fresh_descriptor+0x44) >> [0xaaaae377016c] (on Tor 0.4.5.6 ) >> x 09:30:50 [WARN] Bug: /usr/bin/tor(+0xabaa0) [0xaaaae376faa0] (on Tor >> 0.4.5.6 ) >> x 09:30:50 [WARN] Bug: /usr/bin/tor(relay_addr_learn_from_dirauth+0x1a8) >> [0xaaaae38d6bb0] (on Tor 0.4.5.6 ) >> x 09:30:50 [WARN] Bug: /usr/bin/tor(tor_bug_occurred_+0x164) >> [0xaaaae37c15dc] (on Tor 0.4.5.6 ) >> x 09:30:50 [WARN] Bug: /usr/bin/tor(log_backtrace_impl+0x68) >> [0xaaaae37b5fc0] (on Tor 0.4.5.6 ) >> x 09:30:50 [WARN] Bug: Tor 0.4.5.6: Non-fatal assertion !(!ei) failed in >> relay_addr_learn_from_dirauth at >> ../src/feature/relay/relay_find_addr.c:235. Stack trace: (on Tor 0.4.5.6 >> ) >> x 09:30:50 [WARN] tor_bug_occurred_(): Bug: >> ../src/feature/relay/relay_find_addr.c:235: >> relay_addr_learn_from_dirauth: >> Non-fatal assertion !(!ei) failed. (on Tor 0.4.5.6 ) >> x 09:30:50 [NOTICE] Unable to find IPv4 address for ORPort 443. You >> might >> want to specify IPv4Only to it or set an explicit address or set Address. >> x 09:30:50 [NOTICE] Opened Control listener connection (ready) on >> /run/tor/control >> qj 09:30:50 [NOTICE] Opening Control listener on /run/tor/control >> >

1 0

bug message from 02/28/2020 on 4.5.6
by tor 28 Feb '21

28 Feb '21

Hi All, This popped up today after running successfully for about a week. -matt x 09:32:50 [NOTICE] Self-testing indicates your ORPort *.*.*.*:443 is reachable from the outside. Excellent. Publishing server descriptor. x 09:32:50 [NOTICE] Now checking whether IPv4 ORPort *.*.*.* :443 is reachable... (this may take up to 20 minutes -- look for log messages indicating success) x 09:32:26 [NOTICE] External address seen and suggested by a directory authority: *.*.*.* x 09:30:52 [NOTICE] Bootstrapped 100% (done): Done x 09:30:52 [NOTICE] Bootstrapped 95% (circuit_create): Establishing a Tor circuit x 09:30:52 [NOTICE] Bootstrapped 90% (ap_handshake_done): Handshake finished with a relay to build circuits x 09:30:52 [NOTICE] Bootstrapped 89% (ap_handshake): Finishing handshake with a relay to build circuits x 09:30:52 [NOTICE] Bootstrapped 85% (ap_conn_done): Connected to a relay to build circuits x 09:30:52 [NOTICE] Bootstrapped 80% (ap_conn): Connecting to a relay to build circuits x 09:30:52 [NOTICE] Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits x 09:30:51 [NOTICE] Bootstrapped 68% (loading_descriptors): Loading relay descriptors x 09:30:51 [NOTICE] Bootstrapped 63% (loading_descriptors): Loading relay descriptors x 09:30:51 [NOTICE] Bootstrapped 55% (loading_descriptors): Loading relay descriptors x 09:30:50 [NOTICE] Bootstrapped 50% (loading_descriptors): Loading relay descriptors x 09:30:50 [NOTICE] Bootstrapped 45% (requesting_descriptors): Asking for relay descriptors x 09:30:50 [NOTICE] Bootstrapped 15% (handshake_done): Handshake with a relay done x 09:30:50 [NOTICE] Bootstrapped 14% (handshake): Handshaking with a relay x 09:30:50 [WARN] Bug: /usr/lib/aarch64-linux-gnu/libevent-2.1.so.6(+0x21a10) [0xffff8575ba10] (on Tor 0.4.5.6 ) x 09:30:50 [WARN] Bug: /usr/bin/tor(+0x81854) [0xaaaae3745854] (on Tor 0.4.5.6 ) x 09:30:50 [WARN] Bug: /usr/bin/tor(+0x21419c) [0xaaaae38d819c] (on Tor 0.4.5.6 ) x 09:30:50 [WARN] Bug: /usr/bin/tor(consider_publishable_server+0x5c) [0xaaaae377099c] (on Tor 0.4.5.6 ) x 09:30:50 [WARN] Bug: /usr/bin/tor(router_rebuild_descriptor+0x90) [0xaaaae3770588] (on Tor 0.4.5.6 ) x 09:30:50 [WARN] Bug: /usr/bin/tor(router_build_fresh_descriptor+0x44) [0xaaaae377016c] (on Tor 0.4.5.6 ) x 09:30:50 [WARN] Bug: /usr/bin/tor(+0xabaa0) [0xaaaae376faa0] (on Tor 0.4.5.6 ) x 09:30:50 [WARN] Bug: /usr/bin/tor(relay_addr_learn_from_dirauth+0x1a8) [0xaaaae38d6bb0] (on Tor 0.4.5.6 ) x 09:30:50 [WARN] Bug: /usr/bin/tor(tor_bug_occurred_+0x164) [0xaaaae37c15dc] (on Tor 0.4.5.6 ) x 09:30:50 [WARN] Bug: /usr/bin/tor(log_backtrace_impl+0x68) [0xaaaae37b5fc0] (on Tor 0.4.5.6 ) x 09:30:50 [WARN] Bug: Tor 0.4.5.6: Non-fatal assertion !(!ei) failed in relay_addr_learn_from_dirauth at ../src/feature/relay/relay_find_addr.c:235. Stack trace: (on Tor 0.4.5.6 ) x 09:30:50 [WARN] tor_bug_occurred_(): Bug: ../src/feature/relay/relay_find_addr.c:235: relay_addr_learn_from_dirauth: Non-fatal assertion !(!ei) failed. (on Tor 0.4.5.6 ) x 09:30:50 [NOTICE] Unable to find IPv4 address for ORPort 443. You might want to specify IPv4Only to it or set an explicit address or set Address. x 09:30:50 [NOTICE] Opened Control listener connection (ready) on /run/tor/control qj 09:30:50 [NOTICE] Opening Control listener on /run/tor/control

1 0

Relay metrics - chart never populates
by marsbanks 27 Feb '21

27 Feb '21

Does anyone know why I never see any data in the chart showing the number of clients using my bridge over time? https://metrics.torproject.org/rs.html#details/A675511F2F8EDD6974C3C093B8F3… I'm just concerned I haven't configured something correctly. Thanks. Sent with [ProtonMail](https://protonmail.com) Secure Email.

1 0

current requirements for Fast and HSDir flags
by Scott Bennett 26 Feb '21

26 Feb '21

What are the current requirements to get an HSDir flag assigned to a relay? MYCROFTsOtherChild has, at last heartbeat message, been up for 35 days and 7 hours. To the best of my knowledge, it has not had an HSDir flag in the consensus at any time since it was last started more than a month ago. What are the current requirements to get a Fast flag assigned to a relay? MYCROFTsOtherChild often runs busily at 330 KB/s to 350 KB/s. Sometimes since it was last started over a month ago it has had a Fast flag in the consensus, and at other times it has not. The Fast flag seems to come and go like the wayward breezes. The Bandwidth= value in the consensus entry for MYCROFTsOtherChild has varied from somewhere in the 30s to the 110s, AFAI have seen, but is always subject to the delayed effects of the presence or absence of the Fast flag, of course, and prior to the currently running instance has also been subject to the presence or absence of the HSDir flag. The authorities have seemed to be acting more or less at random when assigning flags for the consensus for many months. Does the tor project envision any timeline for a return to rational, predictable behavior on the part of the authorities? Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at sdf.org *xor* bennett at freeshell.org * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************

1 0

Re: [tor-relays] IPv6
by Dr Gerard Bulger 25 Feb '21

25 Feb '21

Thinking of IPv6: How far has the team got in implementing IPv6 only OR port facility ? Currently you can only run tor relay of any sort if there is open IPv4 OR port to the internet. This is getting a bit quaint. I am sure I am not alone in having much wasted bandwidth that could be put to good Tor use but they are only accessible via IPv6, while they can exit of course IPv4 and IPv6 I realise that so far, despite IPv6 being open on my main exit for some years, there is still little IPv6 traffic, but that might suddenly change. Gerry From: tor-relays <tor-relays-bounces(a)lists.torproject.org> On Behalf Of Onion Operator Sent: 24 February 2021 10:08 To: tor-relays(a)lists.torproject.org Subject: [tor-relays] IPv6 auto-discovery vs. privacy extensions Saluton, My relay started to log this message since 0.4.5.5: Auto-discovered IPv6 address [...]:443 has not been found reachable. However, IPv4 address is reachable. Publishing server descriptor without IPv6 address. [2 similar message(s) suppressed in last 2400 seconds] I think it started with the introduction of IPv6 auto-discovery. The problem, as I understand it, is that my relay has IPv6 privacy extensions enabled and therefore the IPv6 detection logic gets fooled. Indeed the IPv6 I see in the logs is one of the temporary addresses used as client towards other relays. Relevant config is: ORPort 443 IPv4Only ORPort [...]:443 IPv6Only I added the IPv{4,6}Only options only in searching a solution to this problem, before 0.4.5.5 the IPv6 relay worked perfectly without. In reading the documentation of AddressDisableIPv6 I got the impression that if (any?) ORPort is configured with IPv4Only the IPv6 auto-discovery gets disabled but evidence does not support my understanding. Is it a bug? Any other way to disable IPv6 auto-discovery? -- flev

4 5

Stable flag and client load
by enrollado 22 Feb '21

22 Feb '21

I am running a bridge, realseven, fingerprint 10B5293C71793DC1E56A5B17434C0539F70FBB38. It's been up for 71 days and has yet to get the stable flag or more than 3 or 4 connected clients. Is there something misconfigured? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ No me preguntas nada, no te diré una mentira. Enrollado Sent with ProtonMail Secure Email.

2 2

anyone else getting sync floods from russia?
by niftybunny 22 Feb '21

22 Feb '21

https://i.imgur.com/nDbaXqH.png <https://i.imgur.com/nDbaXqH.png> https://i.imgur.com/Y5259wW.png It is now on a daily bases and it is starting to suck. nifty

4 8

Re: [tor-relays] Nyx
by Dr Gerard Bulger 21 Feb '21

21 Feb '21

Fixed it by installing from deb file. -----Original Message----- From: Dr Gerard Bulger <gerard(a)bulger.co.uk> Sent: 21 February 2021 19:09 To: 'tor-relays(a)lists.torproject.org' <tor-relays(a)lists.torproject.org> Subject: Nyx Sorry if wrong forum Nyx install out of the box, never had this error on starting before Ubuntu 18.04 Traceback (most recent call last): File "/usr/bin/nyx", line 11, in <module> load_entry_point('nyx==2.0.4', 'console_scripts', 'nyx')() File "/usr/lib/python3/dist-packages/pkg_resources/__init__.py", line 480, in load_entry_point return get_distribution(dist).load_entry_point(group, name) File "/usr/lib/python3/dist-packages/pkg_resources/__init__.py", line 2693, in load_entry_point etc Tor itself is running happily What dependency is it missing. Purge and reinstall made no difference. Gerry

1 0

Nyx
by Dr Gerard Bulger 21 Feb '21

21 Feb '21

Sorry if wrong forum Nyx install out of the box, never had this error on starting before Ubuntu 18.04 Traceback (most recent call last): File "/usr/bin/nyx", line 11, in <module> load_entry_point('nyx==2.0.4', 'console_scripts', 'nyx')() File "/usr/lib/python3/dist-packages/pkg_resources/__init__.py", line 480, in load_entry_point return get_distribution(dist).load_entry_point(group, name) File "/usr/lib/python3/dist-packages/pkg_resources/__init__.py", line 2693, in load_entry_point etc Tor itself is running happily What dependency is it missing. Purge and reinstall made no difference. Gerry

1 0

metrics
by Manager 21 Feb '21

21 Feb '21

2 1

relayor v21.0.0 is released
by nusenu 20 Feb '21

20 Feb '21

Hi, relayor v21.0.0 is released. relayor is an ansible [1] role that helps you with running tor relays with minimal effort (automate everything). https://github.com/nusenu/ansible-relayor [1] https://www.ansible.com/ This version contains a bugfix: * the GPG key for deb.torproject.org expired and we shipped the expired version, we now fetch the public key directly from torproject.org instead of shipping it with the ansible role. The relayor signing key itself has also been updated: https://keys.openpgp.org/search?q=A7B5DB91CE04C9E0BE66446B8CBE52BD4D705DE9 https://github.com/nusenu/ansible-relayor/releases/tag/v21.0.0 kind regards, nusenu -- https://nusenu.github.io

1 0

TOR Exit Relay Bandwidth Drop
by pimpnet 19 Feb '21

19 Feb '21

I run a fast tor exit relay. It goes to 100MB/s easy after a few days but every 2 weeks something happens (no hardware/network issue on this node locally) and the tor bandwidth drops down to 1-2MB/s. Then I have to stop the tor service and start it again after a couple mins. Most of the times, I am not aware this has happened and the exit relay then takes 10 days to start pumping full bandwidth again The server runs Ubuntu 18.04 LTS Seeking advice from some big brains here, thanks.

1 0

orport
by Anonforpeace 18 Feb '21

18 Feb '21

Hello: Am trying to configure my bridge according to instructions on Tor site. Using Ubuntu. No matter what port I pick for the ORPort I keep getting this error: Unable to find IPv4 address for ORPort 80. You might want to specify IPv4Only to it or set an explicit address or set Address. Have never seen this before. Please help. Thanks

3 4

Optimizing Tor Relay
by friendlyexitnode 17 Feb '21

17 Feb '21

Hello everyone, I'm running a very small family of exit nodes (who are friendly) and was curious if anyone had any advice on ways to optimize their relay configuration? I'm running them all on Ubuntu 20.04. I've reviewed the [Arch Wiki,](https://wiki.archlinux.org/index.php/Tor#+100Mbps_Exit_Relay_configu… but didn't notice much of an improvement. Anyone have an advice to improve Tor performance for relays? - The Friendly Exit Node Family

2 1

Is my relay broken? No stable, hsdir or guard flags
by raltullou＠posteo.org 17 Feb '21

17 Feb '21

Hi, I'm looking for help because I can't figure out what's going on. https://metrics.torproject.org/rs.html#details/11DF0017A43AF1F08825CD5D9732… - At the beginning of January the relay seems to have lost the guard flag - A week ago I checked and noticed that the relay had also lost the stable flag despite having an uptime of >2 months at that point - A week ago I rebooted the server but the situations hasn't changed - flags are still gone - metrics.torproject graphs show that the server has been transmitting data the entire time - so it doesn't seem like I missed some downtime - Serverlogs show no problems - Relay has been running continuously for almost 4 years and only gets rebooted for kernel/tor upgrades -> so uptime and MTBF should not be a problem Is there a problem on my side? Is there anything I can do or check? It is a fallback relay - is it still useful as such? TY

4 7

Huge increase in bridge connections
by Eddie 14 Feb '21

14 Feb '21

Just trying to understand if this is normal or if something else is going on. I have 2 bridges on a VPS. One is designated as "moat", the other "email". Until earlier today, for over a year, both averaged under 10 unique clients, per 6-hour reporting period. Today, the "moat" bridge, in a single period went from single digits to almost 300 unique clients. Is this normal/possible or what other explanation could there be.

4 3

Bridge Location matter?
by Astroskis Lists 13 Feb '21

13 Feb '21

Hello, Does the physical location matter for a Bridge? For example if I'm able to put it in a unusual geographical place would that benefit the network? I'm asking because I believe when you request a bridge it does not take location into account so would it matter? Thank you

3 3

ulyssa
by Anonforpeace 12 Feb '21

12 Feb '21

Hello: Does anyone know what repo I need to install for Linux Mint Ulyssa 20.1? Trying to update my bridge and can't find this repo. Thanks

2 1

Re: [tor-relays] 'reserved' bridge distribution mechanism average time until use
by Robert Bloch 11 Feb '21

11 Feb '21

How long does it take for a bridge with 'reserved' bridge distribution to see its first user? On average.

1 0

cannot update respository
by Anonforpeace 10 Feb '21

10 Feb '21

Hello: I hope you can help. My bridge is offline because: Please upgrade! This version of Tor (0.4.2.7) is not recommended, according to the directory authorities. Recommended versions are: 0.3.5.10,0.3.5.11,0.3.5.12,0.3.5.13,0.4.3.3-alpha,0.4.3.4-rc,0.4.3.5,0.4.3.6,0.4.3.7,0.4.3.8,0.4.4.1-alpha,0.4.4.2-alpha,0.4.4.3-alpha,0.4.4.4-rc,0.4.4.5,0.4.4.6,0.4.4.7,0.4.5.1-alpha,0.4.5.2-alpha,0.4.5.3-rc,0.4.5.4-rc,0.4.5.5-rc,0.4.5.6 When I try to update it I get this: darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:~$ lsb_release -c Codename: ulyssa darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:~$ cd /etc/apt/sources.list bash: cd: /etc/apt/sources.list: Not a directory darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:~$ cd /etc/apt/sources.list.d/ darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ sudo nano /etc/apt/sources.list.d darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ ls official-package-repositories.list tor-project.list darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ sudo nano /etc/apt/sources.list.d/ darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ lsb_release -c Codename: ulyssa darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ sudo nano /etc/apt/sources.list.d/ darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E8… | gpg --import gpg: key EE8CBC9E886DDD89: 83 signatures not checked due to missing keys gpg: error writing keyring '/home/darkhoodie/.gnupg/pubring.kbx': Permission denied gpg: error reading '[stdin]': Permission denied gpg: import from '[stdin]' failed: Permission denied gpg: Total number processed: 0 darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ sudo wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E8… | gpg --import gpg: key EE8CBC9E886DDD89: 83 signatures not checked due to missing keys gpg: error writing keyring '/home/darkhoodie/.gnupg/pubring.kbx': Permission denied gpg: error reading '[stdin]': Permission denied gpg: import from '[stdin]' failed: Permission denied gpg: Total number processed: 0 darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ sudo gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | apt-key add - gpg: directory '/root/.gnupg' created gpg: keybox '/root/.gnupg/pubring.kbx' created gpg: WARNING: nothing exported E: This command can only be used by root. darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ sudo apt update Ign:1 http://packages.linuxmint.com ulyssa InRelease Hit:2 http://packages.linuxmint.com ulyssa Release Hit:3 http://archive.canonical.com/ubuntu focal InRelease Hit:5 http://security.ubuntu.com/ubuntu focal-security InRelease Hit:6 http://archive.ubuntu.com/ubuntu focal InRelease Hit:7 http://archive.ubuntu.com/ubuntu focal-updates InRelease Hit:8 http://archive.ubuntu.com/ubuntu focal-backports InRelease Ign:9 https://deb.torproject.org/torproject.org ulyssa InRelease Err:10 https://deb.torproject.org/torproject.org ulyssa Release 404 Not Found [IP: 95.216.163.36 443] Reading package lists... Done N: Ignoring file 'sources.list.d' in directory '/etc/apt/sources.list.d/' as it has an invalid filename extension E: The repository 'https://deb.torproject.org/torproject.org ulyssa Release' does not have a Release file. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ Not sure where I'm going wrong. Please help. Thank you

2 1

Re: [tor-relays] Tor on Rpi (relay.jackash@simplelogin.fr)
by Patrice Bönig 10 Feb '21

10 Feb '21

> Hello Patrice > > would be great if you can share your script , thanks. Hi, sure, with pleasure. But I have to say I am not a professional programmer. There are surely better ways to do this, but it works for me. Before you can use it you have to make it executable with this command: chmod +x build_tor_from_source.sh And make sure to read the info in the script. After that you are ready to roll. regards Patrice ## build_tor_from_source.sh ######################################################################## ####################################################### ## This script is for a automatic installation of tor out of the sources. ## What it will do: # # 1. It downloads the newest tarball, compiles and installs it. # 2. It copies the data dir (with the keys) and the torrc. # 3. It removes all installations files. # 4. It starts tor as the current user # 5. It adds tor as crontab (@bootup) of current user # 6. changes the permissions of the tor logs, tor folder and torrc for the current user # 6. At the end it shows the logs to check the tor startup process ## What are the requirements for this installation script # # - the torrc must be in the same folder as this script # - check the paths used in this script if they fit for your system (the default paths are for Pi OS) # - this script must be in a location where it has write permisssions (for example home folder of current user) ## What this script can't do # # Tor is not compiled wioth systemd support, so this won't work until you switch it on. ####################################################### #! /bin/bash # echo output colour # green="tput setaf 2" white="tput setaf 7" yellow="tput setaf 3" red="tput setaf 1" ##################### $yellow echo -e "\n\n####################" echo -e "# Tor Installation #" echo -e "####################\n" # show tor version for comparison $yellow echo -e "\nTor version on the system ->" $green tor --version | cut -b 13-20 echo # new line $yellow echo -e "Tor version online available ->" $green lynx -nonumbers -dump https://dist.torproject.org | grep "https://dist.torproject.org/tor-" | grep -v "alpha" | grep -v "rc" | grep -v "asc" | tail -1 | cut -b 33-40 # question for installation $red echo -e "\n\n" read -p "Installing new version? [y/n]: " -n 1 -r echo if [[ $REPLY =~ ^[Yy]$ ]] then $green echo -e "\nstopping tor on system...\n" $white sudo killall tor $green echo -e "\ndone.\n" $green echo -e "\nsystem update and installing needed packages...\n" $white sudo apt update sudo apt upgrade -y sudo apt install -y libevent-dev libssl-dev zlib1g-dev asciidoc lynx $green echo -e "\ndone.\n" $white build_dir="temp" mkdir $build_dir cd $build_dir # in ./temp $green echo -e "\ndownloading tor from git repo...\n" $white lynx -nonumbers -dump https://dist.torproject.org | grep "https://dist.torproject.org/tor-" | grep -v "alpha" | grep -v "rc" | grep -v "asc" | tail -1 | xargs wget tar -xvf tor*.tar.gz cd `ls -d */` # in ./temp/tor-* $green echo -e "\ndone.\n" $green echo -e "\nbacking up data dir, and changing its user..." $white sudo cp -arv /var/lib/tor ./tor sudo chown -R $(whoami) ./tor $green echo -e "\ndone.\n" $green echo -e "\ncompiling, removing old version, installing new version...\n" $white ./configure && make && sudo make uninstall && sudo make install $green echo -e "\ndone.\n" $green echo -e "\ncopying torrc and restoring data directory...\n" $white sudo cp -av ../../torrc /usr/local/etc/tor/torrc sudo chwon $(whoami):root /usr/local/etc/tor/torrc sudo cp -arv ./tor /var/lib/tor $green echo -e "\ndone.\n" cd .. # in ./temp cd .. # in ./ $green echo -e "\nremoving build folder and system files...\n" $white sudo rm -R $build_dir sudo apt autoclean sudo apt autoremove $green echo -e "\ndone.\n" $green echo -e "\nadding tor as crontab to start tor on boot...\n" $white if sudo grep -q "@reboot /usr/local/bin/tor --quiet" /var/spool/cron/crontabs/$(whoami) then echo -e "tor is already present as crontab" else #echo -e "@reboot /usr/local/bin/tor --quiet" | sudo tee -a /var/spool/cron/crontabs/$(whoami) echo -e "tor is added as crontab" fi $green echo -e "\ndone.\n" $green echo -e "\nchanging user of log files...\n" $white sudo chown -R $(whoami) /var/log/tor $green echo -e "\ndone.\n" $green echo -e "\nstarting tor...\n" $white # start tor /usr/local/bin/tor --quiet echo # new line $yellow echo -e "\ntor log\n" $white sudo tail -c+1 -f /var/log/tor/notices.log else $white exit 1 fi ########################################################################

1 0

tor on Ubuntu Server 20.04.2 LTS
by tor 09 Feb '21

09 Feb '21

Hi All, Which version of tor runs on Ubuntu Server 20.04.2 LTS 64bit, if any? Thanks matt

1 0

Re: [tor-relays] Tor relay failed to start after upgrade (0.4.4.6 --> 0.4.5.5) [solved]
by David Goulet 09 Feb '21

09 Feb '21

On 09 Feb (11:55:12), tschador(a)posteo.de wrote: > Tonight my Tor relay on Raspberry Pi (buster) was upgraded from > 0.4.4.6-1~bpo10+1 to 0.4.5.5-rc-1~bpo10+1 automaticly, but failed to start: > > --- > [notice] Opening OR listener on 0.0.0.0:587 > [notice] Opened OR listener connection (ready) on 0.0.0.0:587 > [notice] Opening OR listener on [::]:587 > [warn] Socket creation failed: Address family not supported by protocol > [notice] Opening Directory listener on 0.0.0.0:995 > [notice] Closing partially-constructed OR listener connection (ready) on > 0.0.0.0:587 > [notice] Closing partially-constructed Directory listener connection (ready) > on 0.0.0.0:995 > --- > > Until then there was no change in my torrc: > > ORPort 587 > DIRPORT 995 Oh wow, interesting, so your Pi doesn't support IPv6 for some reasons and it failed to start with this config. I have opened: https://gitlab.torproject.org/tpo/core/tor/-/issues/40283 In 0.4.5.x tor, things have changed where tor will try to auto discover an IPv6 and automatically bind to it if only "ORPort <PORT>" is used. In other words, it now binds to 0.0.0.0 and [::] by default. It then publish any discovered _usable_ and _reachable_ IPv4/IPv6. If it doesn't find any IPv6, it will still listen but won't publish any IPv6. > > It seems the value [address:] is no longer optional if you're not IPv6 ready > [1]: > > ORPort [address:]PORT|auto [flags] > DirPort [address:]PORT|auto [flags] > > So I have to change my torrc to: > > ORPort 0.0.0.0:587 > DIRPORT 0.0.0.0:995 Another option would have been to add the "IPv4Only" flag to the ORPort line and should have done it for you. Cheers! David -- YrY9JHvSOJpDfyKS5AyL8h/BjZ/SQEkh00q9ek+1BXk=

1 0

Re: [tor-relays] Tor on Rpi
by relay.jackash＠simplelogin.fr 09 Feb '21

09 Feb '21

Hello Patrice would be great if you can share your script , thanks.

1 0

Can't connect to bridge after rebuilding server
by Eddie 09 Feb '21

09 Feb '21

I had to rebuild my VPS today. Before doing so, I copied off everything I thought I needed to rebuild my bridges. Following the rebuild, the bridges appear to start correctly, according to both the logs and https://metrics.torproject.org/rs.html#search/OhNoAnotherBridge. However attempting to connect via the tor browser from my home system just hangs. The ports on the VPS are open. I can see an ESTABLISHED connection from home, but the browser just hangs throwing out this: [WARN] Proxy Client: unable to connect to aaa.bbb.ccc.ddd:443 ("general SOCKS server failure") Not sure what to check next.

2 3

key server error
by tor 09 Feb '21

09 Feb '21

Hello When I do the following command: :~ $ sudo gpg --keyserver keys.gnupg.net --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 I get: gpg: packet(13) too large gpg: read_block: read error: Invalid packet gpg: no valid OpenPGP data found. gpg: Total number processed: 0 thoughts? -matt

3 2

Tor on Rpi
by relay.jackash＠simplelogin.fr 09 Feb '21

09 Feb '21

Hello im running a tor relay on rpi 2 with version 0.4.2.7., on the Tor relay search i see my relay is outdated and flaged as not recomended, however on rpi i have tried update and upgrade many times and always get notification from apt that tor i already de newest version, also tried apt dist-upgrade but no luck. Any way to get the last version and get ride of not recomended flag from my relay? Thanks in advanced

2 1

Re: [tor-relays] Tor on Rpi (relay.jackash@simplelogin.fr)
by Patrice Bönig 08 Feb '21

08 Feb '21

Hi, I am also have a tor relay running, but on a RPI 4. No long time ago I stood at the same point as you are now. I than wrote me a skript, where it: 1. pulls the latest source 2. backs up the old data (identity) 3. compiles and installs tor 4. copies the old data on the new installation 5. adds tor to crontab 6. starts tor I think you must change some things to your need if you want to use it. If you want the script I can share it here, if it is allowed. If not I can send it to you via mail. regards Patrice > Hello > im running a tor relay on rpi 2 with version 0.4.2.7., on the? Tor relay search i see my relay is outdated and flaged as not recomended, however on rpi i have tried update and upgrade many times and always get notification from apt that tor i already de newest version, also tried apt dist-upgrade but no luck. > > Any way to get the last version and get ride of not recomended flag from my relay? >

1 0

Tor Time Logging
by Kathi 05 Feb '21

05 Feb '21

How do I change the time on my tor relay to local time? I'm not into the military/UTC thing at all. It's actually annoying for me. thanks for help!!

3 2

Possible (D)DoS attack on my relay michaelscott (47E1157F7DA6DF80EC00D745D73ACD7B0A380BCF)
by William Kane 04 Feb '21

04 Feb '21

Hi community, Unfortunately my otherwise stable tor guard relay has recently lost it's guard flag, once again, due to what I think is a new type of (D)DoS attack, either directly targeted towards my tor relay, or against some other relays inside the network, facilitated through my relay. It all started to go downhill one month ago, on January 10th of this year - the linux kernel OOM killer decided to reap the tor process, multiple times in a row - it was violating the MaxMemInQueues setting of 732MB, the optimal value according to tor - on a virtual machine with a dedicated CPU core (and sadly, a lack of hardware AES acceleration, but that's off topic, by completely sandboxing and isolating the tor process, and then disabling all mitigations offered by the linux kernel, I still managed to achieve a peak throughput of 10mb/s while keeping other users and processes safe and sound - this made the relay the fastest tor relay belonging to my AS.. sorry, just bragging ;-)) which has 1024 megabytes of physical ram, and a swap partition with a size of 512 megabytes (vm.swappiness initially was 90, I've changed it to 70). The first time this happened, it came out of nowhere, so I wasn't closely monitoring the metrics page of my relay - this led to a downtime of 3 days, then leading to the loss of the guard flag. Since then, traffic on my relay has been limited to traffic coming from other relays, it is now exclusively a middle-only relay - it did not recover from the attack, even though I managed to achieve longer consecutive uptimes by tweaking MaxMemInQueues, first down to 704, then 672, and now 640MB. The only log entry I ever saw before the tor process got reaped is the following one: Feb 04 12:47:08 *hostname_redacted* tor[224]: Feb 04 12:47:08.000 [warn] Your computer is too slow to handle this many circuit creation requests! Please consider using the MaxAdvertisedBandwidth config option or choosing a more restricted exit policy. [93409 similar message(s) suppressed in last 60 seconds] Feb 04 12:48:08 *hostname_redacted* tor[224]: Feb 04 12:48:08.000 [warn] Your computer is too slow to handle this many circuit creation requests! Please consider using the MaxAdvertisedBandwidth config option or choosing a more restricted exit policy. [42527 similar message(s) suppressed in last 60 seconds] As you can tell by the date, this was today - after 3 weeks and 1 day, this noon, the process got OOM-killed again - I instantly noticed it, logged into the machine, installed updates, updated my pacman mirrorlist, the usual stuff - then I rebooted the machine, only to log in 5 minutes later to see tor using 100% of CPU time, with the log file getting spammed by this error - it started only 3 seconds after the relay published it's descriptor. Clearly, this is some sort of targeted attack against either my relay or someone is abusing it to attack someone or something else inside or outside the tor network. I did read the recent information on attacks regarding DirAuth's, but apparently a fix has been deployed on all of them, and checking the bandwidth stats of some of them, it seems to be working, somewhat. I wonder if this is the culprit here, this machine has been running tor relays since 2014, and I never had these problems with it before - even without lowering MaxMemInQueues. To me, that's just further proof that this is a targeted attack using my relay and before you ask, I know some KVM hypervisors are oversold, but my hosting company stopped selling KVM machines with mechanical host HDD's a few years ago, so new customers can't be the reason for all of this. Is there anything I can do to make my relay as stable as possible until the attacker(s) stop(s) hammering my relay? This doesn't seem to get caught by the built-in DoS prevention, so I didn't try tweaking the associated config options. Maybe someone from the tor team has a patch I can try applying? I'm not completely up to date on the newest tor shenanigans and pitfalls, so maybe it has already been posted on this mailing list, but I don't feel like reading a bazillion messages. For the time being, MaxMemInQueues will stay at 640 megabytes, to (hopefully) at least keep the relay up and running, even though performance, for anyone unlucky enough to build a circuit through it, will be affected, severely (despite all this, I'm still pushing around 11TB/s of traffic a month, I just don't know how much of it is legitimate..) - it's my duty as a relay operator to guarantee for the safety and usability of my tor relay, so I'm very eager to find a solution for this. Unfortunately, this is a live relay, otherwise I would probably try developing my own solution for the problem (including publishing it / making a pull request), but in this case repeated downtimes and restarts, which would be necessary when working on the source code, is absolutely not an option as it would possibly disrupt hundreds, if not thousands of clients. If anyone could point me in a direction, I'd really appreciate it. Thank you, William

1 1

sig ver error and more
by tor 04 Feb '21

04 Feb '21

Hi All, So everything had been working for over a year. Am currently on tor 4.2.7, stretch. When I went to update, I got: The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 < http://deb.torproject.org/> deb.torproject.org archive signing key My deb.torproject.org--keyring is version 2018.08.06 Is this the latest version? In trying to update deb.torproject.org--keyring, it says I'm on the latest, In trying: sudo apt-key adv --recv-keys --keyserver keys.gnupg.net 74A941BA219EC810 I get: packet too large invalid packet no valid openpgp data found Maybe I used the wrong key in the above command? thoughts? -matt

1 0

Exit relay operators please help test #2667 branch
by Roger Dingledine 04 Feb '21

04 Feb '21

Hello friendly relay operators, Another day, another weird thing with the Tor network. This time we have some jerk bombing the directory authorities with directory fetches, and doing it via exits: https://lists.torproject.org/pipermail/network-health/2021-January/000661.h… The network is mostly holding together, but I wouldn't say it is pretty. One of the long-term fixes will be ticket #2667: https://gitlab.torproject.org/tpo/core/tor/-/issues/2667 where exit relays refuse to let users connect back into the Tor network. David and I made a branch this evening that implements #2667, and it could use some testing. If you're comfortable building your exit relay from a git branch, please do, and let us know how it goes. It is the "ticket2667" branch on either https://git.torproject.org/user/arma/tor or https://gitlab.torproject.org/arma/tor/ And if your relay is currently using 100% cpu and/or way more bandwidth than usual, you might be especially excited to try out this patch. :) When the defense triggers, you will see an info-level log line like "%s tried to connect back to a known relay address. Closing." (where %s is the destination, so don't get upset at them. :) You can let us know how it's going either by mail just to me, or by a reply on the list, whichever you prefer. Once we know that you're running the branch, we can also probe your relay remotely to verify that it is correctly refusing those connections. Thanks! --Roger

4 6

Sig ver error
by tor 03 Feb '21

03 Feb '21

Hi all, I'm getting a signature verification error: $ sudo apt-get update Hit:1 http://mirrordirector.raspbian.org/raspbian stretch InRelease Hit:2 http://archive.raspberrypi.org/debian jessie InRelease Get:3 https://deb.torproject.org/torproject.org stretch InRelease [3528 B] Err:3 https://deb.torproject.org/torproject.org stretch InRelease The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 deb.torproject.org archive signing key Fetched 3528 B in 3s (998 B/s) Reading package lists... Done W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://deb.torproject.org/torproject.org stretch InRelease: The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 deb.torproject.org archive signing key W: Failed to fetch https://deb.torproject.org/torproject.org/dists/stretch/InRelease The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 deb.torproject.org archive signing key W: Some index files failed to download. They have been ignored, or old ones used instead. Any thoughts would be appreciated. thanks, matt

3 2

Re: [tor-relays] tor-relays Digest, Vol 120, Issue 25
by Patrice Bönig 03 Feb '21

03 Feb '21

Am 03.02.2021 um 21:14 schrieb Patrice Bönig: > I am now compiling the new 0.4.4.7 version and by that I saw that the > entry of "systemd support (--enable-systemd)" is is "no". So I assume > that the systemd functionality is not on board, or am I wrong? > How do I enable for the compiling process? > > regards > Karl > > >> Permissions issue of /var/lib/tor / DataDirectory most likely, and >> Tor can't fix it itself since it's likely owned by root, however the >> systemd unit starts it under a separate user. 2021-01-22 12:03 GMT, >> Patrice B?nig <mailinglist(a)pboenig.de>: >>> Hi @ list, >>> >>> I am operating a relay for several years and I really do like it and >>> will do it for more years. >>> >>> My current relay residents on Pi 4. At first I installed it via apt but >>> now the 32 Bit sources are no longer available. So I thought I could >>> build the from source. >>> >>> The building process went well but now I have a problem with the user >>> permissions. I can't get tor really running. >>> >>> _My first attempt was:_ >>> >>> To start tor with "systemctl start tor". But tor won't start and " >>> journalctl -u tor" says only this: >>> >>> Jan 22 09:06:23 rpi4tor systemd[1]: Starting LSB: Starts The Onion >>> Router daemon >>> Jan 22 09:06:23 rpi4tor systemd[1]: Started LSB: Starts The Onion Router >>> daemon >>> Jan 22 09:08:32 rpi4tor systemd[1]: Stopping LSB: Starts The Onion >>> Router daemon >>> Jan 22 09:08:32 rpi4tor systemd[1]: tor.service: Succeeded. >>> Jan 22 09:08:32 rpi4tor systemd[1]: Stopped LSB: Starts The Onion Router >>> daemon >>> lines 1-6/6 (END)...skipping... >>> -- Logs begin at Thu 2019-02-14 11:11:59 CET, end at Fri 2021-01-22 >>> 11:54:47 CET. -- >>> Jan 22 09:06:23 rpi4tor systemd[1]: Starting LSB: Starts The Onion >>> Router daemon processes... >>> Jan 22 09:06:23 rpi4tor systemd[1]: Started LSB: Starts The Onion Router >>> daemon processes. >>> Jan 22 09:08:32 rpi4tor systemd[1]: Stopping LSB: Starts The Onion >>> Router daemon processes... >>> Jan 22 09:08:32 rpi4tor systemd[1]: tor.service: Succeeded. >>> Jan 22 09:08:32 rpi4tor systemd[1]: Stopped LSB: Starts The Onion Router >>> daemon processes. >>> >>> _My second attempt was:_ >>> >>> I changed the user of all tor files to the current user "pi". After that >>> I was able to start tor with "tor --quiet" as user "pi". All went fine >>> until I rebooted the system and all my changes to "pi" where changed to >>> "debian-tor". >>> >>> _My third attempt was:_ >>> >>> I did "sudo tor --quiet". It works, but in "notices.log" is the >>> information that I shouldn't do that. >>> >>> >>> So, now I am standing here and don't know what to do. I would like to >>> start tor via systemd but I don't know what's wrong (maybe the >>> permissions). Does someone has a hint for me? >>> >>> regards, >>> Karl >>> >>> >>>

1 0

Wildly Different BandWidth Numbers
by Eddie 03 Feb '21

03 Feb '21

Looking at the consensus health page for my relay D195E5CE8AE77BAC91673E6CFB7BD0AF57281646), I see wildly different values for bandwidth: bw=3060 bw=910 bw=340 bw=620 bw=5130 Why is there such a discrepancy. I'm guessing this has something to do with my relay bouncing in and out of Guard status on a regular basis (which I'm sure can't be a good thing). Is there anything I can do to maintain a consistent value, be it at one end of the scale or the other. Cheers.

2 1

Tor Version "Not Recommended" - V 4.2.7 - Raspberry PI - "armhf" not supported
by petrarca＠protonmail.ch 02 Feb '21

02 Feb '21

I noticed that my Relay got a "Not Recommended" Flag. It's running on version 4.2.7 currently. I checked a few things and this is poping up with a apt update on the Raspberry: N: Skipping acquire of configured file 'main/binary-armhf/Packages' as repository 'http://sdscoq7snqtznauu.onion/torproject.org buster InRelease' doesn't support architecture 'armhf' Did I do something wrong; any recommendations on how to fix this issue? Many thanks!

2 1

Regarding Guard status
by Jithin S 02 Feb '21

02 Feb '21

Hi, I have recently started running a TOR node with the nickname *CostlyOnion2. *At the time of writing of this email, the details of the node are as follows: *Uptime*: 14 days 3 hours 18 minutes and 0 second *Advertised Bandwidth*: 3.35 MiB/s *Flags*: *Fast Running Stable V2Dir Valid* *First Seen*: 2021-01-18 17:00:00 (14 days 19 hours 13 minutes and 32 seconds) *Last Restarted*: 2021-01-19 08:55:32 For current details, click here <https://metrics.torproject.org/rs.html#details/19EDB4798A4C170D603F86D8862B…> . My concern is how soon we will get a Guard status for our relay. I have read this <https://blog.torproject.org/lifecycle-new-relay> blog post regarding the life cycle of a relay. As it says, for a relay aged 8-68 days to get "Guard" status, we need to keep an eye on three factors *viz. *bandwidth, weighted fractional uptime, and time known. Suppose we keep running the relay all the time with the above-mentioned bandwidth(3.35 MiB/s), I would like to know about following - How long it will take to get the guard status? - My link bandwidth is quite high (close to 50MBytes/s), still the advertised is around 3.35MiB/s. What could be the possible factors for this? - As I am doing some analysis studies, we would also like to know what all factors we should take into account for the users to make use of our relay? I also request you to share any relevant resources for getting more information regarding the above questions, especially on the calculation of consensus weight. Thanks and regards, Jithin S

1 0

Metrics Error: staledesc
by lists＠for-privacy.net 29 Jan '21

29 Jan '21

Metrics showed my relay offline. But my Tor daemon is running normally. Then I saw _many_ relays suddenly have flag: staledesc ? https://metrics.torproject.org/rs.html#search/flag:staledesc https://metrics.torproject.org/rs.html#details/5D84900DBE6D6365684A9675B81A… -- ╰_╯ Ciao Marco! Debian GNU/Linux It's free software and it gives you freedom!

3 2

Re: [tor-relays] Noob query, wish to run a bridge relay for tor community.
by ramesh bhootra 27 Jan '21

27 Jan '21

Hi, I have been using Tor since a decade, always had limited resources and couldn't give back anything to the community. Now I wish to run relays in an effort to give back something. Right now I have a 100 mbps reliable internet connection on a gaming laptop with windows 10 "HP Envy K204tx", I disabled windows updates, and a good quality ethernet cable. Even though it's a laptop, I use it like a desktop, with hdmi out to a TV, ethernet cable, usb hubs and 24x7 electricity with lots of inverter (home ups) backup. I keep this laptop always stationary since I have another sleek and lightweight one which I use for portable purposes. Earlier my internet plan was limited to 500 gb per month but recently they upgraded it for free, now it's 3000 gb per month, which is too much for me and my family, we hardly use 300-400 gb per month. I was thinking about running a relay for Tor, (maybe a bridge relay) at night since both my laptop and internet are unused at night. I have following queries: 1. Can I run relay on my laptop simultaneously while using other internet services and browsers normally? 2. Is it possible to schedule everything automatically, say to run a relay from 1 am to 7 am then shut it down automatically after that? I start using it at 9 am and 2 hours of rest will be enough for the laptop. 3. I have Kaspersky internet security, will it create problems for running tor relays? Currently when I use tor browser as a client, I don't have any issues, kaspersky doesn't provide a warning, doesn't block any connections. 4. Do I need to be punctual in running the relay every day at the scheduled time? Is it okay if I can't run the relay on a few occasional days, for reasons like power outage, feeling sick, too busy etc? 5. Can I use a Tor browser (client) while running the relay? If yes, will I get faster browsing speed with that? >

5 4

build tor out of source -> permission problems?
by Patrice Bönig 27 Jan '21

27 Jan '21

Hi @ list, I am operating a relay for several years and I really do like it and will do it for more years. My current relay residents on Pi 4. At first I installed it via apt but now the 32 Bit sources are no longer available. So I thought I could build the from source. The building process went well but now I have a problem with the user permissions. I can't get tor really running. _My first attempt was:_ To start tor with "systemctl start tor". But tor won't start and " journalctl -u tor" says only this: Jan 22 09:06:23 rpi4tor systemd[1]: Starting LSB: Starts The Onion Router daemon Jan 22 09:06:23 rpi4tor systemd[1]: Started LSB: Starts The Onion Router daemon Jan 22 09:08:32 rpi4tor systemd[1]: Stopping LSB: Starts The Onion Router daemon Jan 22 09:08:32 rpi4tor systemd[1]: tor.service: Succeeded. Jan 22 09:08:32 rpi4tor systemd[1]: Stopped LSB: Starts The Onion Router daemon lines 1-6/6 (END)...skipping... -- Logs begin at Thu 2019-02-14 11:11:59 CET, end at Fri 2021-01-22 11:54:47 CET. -- Jan 22 09:06:23 rpi4tor systemd[1]: Starting LSB: Starts The Onion Router daemon processes... Jan 22 09:06:23 rpi4tor systemd[1]: Started LSB: Starts The Onion Router daemon processes. Jan 22 09:08:32 rpi4tor systemd[1]: Stopping LSB: Starts The Onion Router daemon processes... Jan 22 09:08:32 rpi4tor systemd[1]: tor.service: Succeeded. Jan 22 09:08:32 rpi4tor systemd[1]: Stopped LSB: Starts The Onion Router daemon processes. _My second attempt was:_ I changed the user of all tor files to the current user "pi". After that I was able to start tor with "tor --quiet" as user "pi". All went fine until I rebooted the system and all my changes to "pi" where changed to "debian-tor". _My third attempt was:_ I did "sudo tor --quiet". It works, but in "notices.log" is the information that I shouldn't do that. So, now I am standing here and don't know what to do. I would like to start tor via systemd but I don't know what's wrong (maybe the permissions). Does someone has a hint for me? regards, Karl

2 1

Server lost Stable flag but has more than 60 days uptime
by raltullou＠posteo.org 26 Jan '21

26 Jan '21

Hello list, I'm trying to find out why the server (https://metrics.torproject.org/rs.html#details/11DF0017A43AF1F08825CD5D9732…) has lost its stable flag. As far as I can see it is running a recent version of tor and has an uptime of over 60 days. Are there other reasons that factor into the Stable flag? The log file doesn't give my an indication that there is anything wrong, either. Any ideas?

4 4

Server under attack according to my hoster
by lists.torproject.org＠stein-io.de 22 Jan '21

22 Jan '21

Hi folks, I have a dedicated Server running with the red H in Germany. https://metrics.torproject.org/rs.html#details/1CD48F4ED0F1821FFBF1940802A1… Today I received a notification that my server is "under attack" since my server got over the threshold of 300k packets/s. At the time of the mail it seems to be about 450k pps . I checked a couple of IPs and most of them are other TOR-Relays or Exits. Would you recommend telling my Hoster that everything is all fine? Cheers

4 3

Blocking bittorrent
by kagaminesama 19 Jan '21

19 Jan '21

Hi, How do you block bittorrent nowadays? I read this page: https://gitlab.torproject.org/legacy/trac/-/wikis/BlockingBittorrent but http://www.trackon.org/api/all doesn't work anymore because the domain is expired. Do you know any alternatives? Sent with [ProtonMail](https://protonmail.com) Secure Email.

4 7

OrNetStats: Operator Level Graphs added
by nusenu 18 Jan '21

18 Jan '21

Hi, I've added new operator level pages with an interactive graph showing the aggregated guard/exit probability and advertised bandwidth over time across all relays for a given operator. This should allow you to see whether your bandwidth and fractions are growing or decreasing. You can - zoom within the graph to a specific time window (horizontal drag and drop), - change the scale on the y axis (vertical drag and drop) - zoom to a specific area (by selecting a rectangle) or use the preset time frames (week, month, year, ..). To give you a better idea of what these graphs look like, here is an example: https://nusenu.github.io/OrNetStats/www.f3netze.de.html The data source for these graphs is onionoo (torproject.org) it starts at 2019-10-31. The data granularity is about one value per day. kind regards, nusenu -- https://nusenu.github.io

7 18

Bridge Setup
by San Shi 13 Jan '21

13 Jan '21

Hello, I'm following the bridge setup for windows after not being able to start a tor browser for some reason and having some difficulty with the last step. After running tor.exe -f torrc, there is no notice file appearing where it should be, and Tor still seems to fail to setup. In the torrc.txt file I modified the "ORPort TODO1" and "ServerTransportListenAddr obfs4 0.0.0.0:TODO2" by replacing TODO1 and TODO2 with numbers greater than 1024 and less than 9000. I assume either I messed up modifying the text file or that the obsf4 port I selected is not reachable. Using the provided reachability test I tried ~15 4 digit numbers, using 0.0.0.0 as the IP and a 4 digit number in the appropriate range for the obsf4 port (none reachable). Any suggestions? Thanks!

3 2

Introducing new bridge status page
by Philipp Winter 12 Jan '21

12 Jan '21

As part of our ongoing effort to reimplement BridgeDB, we now have a bridge status page that shows if a bridge's pluggable transports work: https://bridges.torproject.org/status?id=FINGERPRINT FINGERPRINT is your bridge's fingerprint or its hashed fingerprint -- either works. The backend tests bridges every 18 hours by making a tor process fetch the bridge's descriptor. Tor bridges will soon log a URL pointing to this status page: https://gitlab.torproject.org/tpo/core/tor/-/issues/30477 As of today, 89% of all pluggable transports work. Cheers, Philipp

3 3

My relay software gets hung up on OVH
by Keifer Bly 11 Jan '21

11 Jan '21

2 1

Exit node in spain
by irr4z 11 Jan '21

11 Jan '21

Hello, everybody, Quickly, I write from Barcelona, I am interested in contributing to tor with exit nodes, but I am concerned about legal issues. I see that there is only 1 active exit node in Spain, and I wonder if it is so dangerous in my country :-) Any comment or feedback is welcome. Thanks and beers to everyone! Irr4z

4 5

Config question
by r1610091651 11 Jan '21

11 Jan '21

Hi Recently upgraded to 4.4.6 and noticed new (for me) entry in tor logs: Jan 11 09:24:28.000 [notice] While bootstrapping, fetched this many bytes: This message gets repeated every 6 hours, while there is little extra info added, as it relates to bootstrap / start-up process. I already have "AvoidDiskWrites 1" active in torrc. Is there a way to disable this extra logging? Thanks

1 0

Some ContactInfo Spec Adoption Stats
by nusenu 06 Jan '21

06 Jan '21

Hi, it is great to see that just 2-3 months after publishing version 2 of the ContactInfo Information Sharing Spec [1] there are already over 100 tor relays (>10% exit probability) making use of it, to allow for automated verification of the url field in the ContactInfo. If you are still using version 1 of the spec I'd encourage you to update to version 2, which usually isn't a big effort. Due to the adoption I also started to add stats for it to OrNetStats, but since the proofs and ContactInfo strings are public, everyone can verify it: https://nusenu.github.io/OrNetStats/#verified-operator-domains Currently it does only consider the well-known URI proofs (the DNS proof will also be added). It is also important to note that a verified domain does not say anything about the intentions of an operator, it just prevents things like [2] where a malicious entity claimed to be some other operator by using their ContactInfo without a good automated method to tell them appart, especially if MyFamily is not properly set. And it will also make things easier when tagging relays as "known" or "unknown" [3], since it allows tagging on an operator level instead of trying to figure out who the real operator behind each and every relay is, by using unverified ContactInfo claims manually. In the near future I'd like to make use of the data to generate operator level time series graphs and overall stacked graphs. If you would like to play with the ContactInfo strings yourself, here is an early parser: https://github.com/erans/torcontactinfoparser In the past we had a small error in the generator (field name "gpg:..." was used instead of "pgp:...") this has been fixed: https://torcontactinfogenerator.netlify.app/ kind regards, nusenu [1] https://lists.torproject.org/pipermail/tor-relays/2020-October/019024.html [2] https://lists.torproject.org/pipermail/tor-relays/2020-October/019045.html [3] https://gitlab.torproject.org/tpo/metrics/relay-search/-/issues/40001 -- https://mastodon.social/@nusenu

1 0