- tor-relays - lists.torproject.org

fresh assault on Tor network
by starlight.2018q2＠binnacle.cx 24 Jun '19

24 Jun '19

https://metrics.torproject.org/userstats-relay-country.html?start=2017-06-2…

3 3

Become a Fallback Directory Mirror
by gus 24 Jun '19

24 Jun '19

Dear Relay Operators, Do you want your relay to be a Tor fallback directory mirror? Will it have the same address and port for the next 2 years? Just reply to this email with your relay's fingerprint. If your relay is on the current list, you don't need to do anything. If you're asking: Q: What's a fallback directory mirror? Fallback directory mirrors help Tor clients connect to the network. For more details, see [1]. Q: Is my relay on the current list? Search [2] and [3] for your relay fingerprint or IP address and port. [2] is the current list of fallbacks in Tor. [3] is used to create the next list of fallbacks. Q: What do I need to do if my relay is on the list? Keep the same IP address, keys, and ports. Email tor-relays if the relay's details change. Q: Can my relay be on the list next time? We need fast relays that will be on the same IP address and port for 2 years. Reply to this email to get on the list, or to update the details of your relay. Once or twice a year, we run a script to choose about 150-200 relays from the potential list [3] for the list in Tor [2]. Q: Why didn't my relay get on the list last time? We check a relay's uptime, flags, and speed [4]. Sometimes, a relay might be down when we check. That's ok, we will check it again next time. It's good to have some new relays on the list every release. That helps tor clients, because blocking a changing list is harder. cheers, gus [1] https://trac.torproject.org/projects/tor/wiki/doc/FallbackDirectoryMirrors [2] https://gitweb.torproject.org/tor.git/tree/src/or/fallback_dirs.inc [3] https://gitweb.torproject.org/tor.git/tree/scripts/maint/fallback.whitelist [4] https://trac.torproject.org/projects/tor/attachment/ticket/21564/fallbacks_…

13 19

Re: [tor-relays] Become a Fallback Directory Mirror
by teor 23 Jun '19

23 Jun '19

Hi, > On 24 Jun 2019, at 02:49, tschador(a)posteo.de wrote: > > On 2019-06-23 14:32, teor wrote: > >> But your relay needs a DirPort to be a fallback directory mirror. >> Here are some instructions for different platforms: >> https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#Platformspecifi… > > This should be clarified in the Tor manual [1] too! > > "Tor will contact the authority at ipv4address to download directory > documents. The provided port value is a dirport; clients ignore this in > favor of the specified "orport=" value. If an IPv6 ORPort is supplied, > Tor will also download directory documents at the IPv6 ORPort." > > Am I right that for fallback directory mirrors DirPort is needed but > ignored by clients? It is needed to make sure that the relay serves directory documents. We run a script that uses the DirPort to check the download speed. > Possibly this explains why I lost the fallback > directory flag since I have removed the DirPort in torrc … Fallbacks need the same ports, IP addresses, and keys for 2 years. That includes the DirPort. It's not possible to configure a fallback without a dirport: FallbackDir ipv4address:port orport=port id=fingerprint [weight=num] [ipv6=[ipv6address]:orport] (The first port is a dirport, and both dirport and orport are required.) I have updated the template: https://trac.torproject.org/projects/tor/wiki/doc/UpdatingFallbackDirectory… And opened a ticket for the man page: https://trac.torproject.org/projects/tor/ticket/30955 T

1 0

Tor memory leak (0.3.5.7)?
by Roman Mamedov 23 Jun '19

23 Jun '19

Hello, As sometimes happens, I notice my nodes getting into swap heavily. This time: ------------ KiB Mem: 1010576 total, 897388 used, 113188 free, 5144 buffers KiB Swap: 1048572 total, 123592 used, 924980 free. 61732 cached Mem PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 4740 debian-+ 25 5 565448 259032 15204 R 63.2 25.6 1621:47 tor 4765 debian-+ 25 5 491636 200812 13136 S 32.9 19.9 678:36.65 tor total used free shared buffers cached Mem: 1010576 870392 140184 4 1144 64604 -/+ buffers/cache: 804644 205932 Swap: 1048572 123592 924980 ------------ After killing PID 4740 and starting that instance again (now PID 25456): ------------ KiB Mem: 1010576 total, 691264 used, 319312 free, 4336 buffers KiB Swap: 1048572 total, 58624 used, 989948 free. 209692 cached Mem Unknown command - try 'h' for help PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 4765 debian-+ 25 5 491636 195900 8584 R 38.3 19.4 678:56.29 tor 25456 debian-+ 20 0 441092 240824 140452 S 29.9 23.8 0:28.48 tor total used free shared buffers cached Mem: 1010576 663816 346760 12 4344 209692 -/+ buffers/cache: 449780 560796 Swap: 1048572 58624 989948 ------------ How come killing a Tor instance which was shown to be using 259 MB of RAM, has freed up 355 MB, even counting the new copy of Tor which was started in its place and is already using 240 MB? The math only adds up to 19 MB delta, not 355. As this memory usage doesn't seem to be attributed to Tor, it reminds me of that major memory leak which was fixed some time ago, so maybe it was not fixed entirely? -- With respect, Roman

1 0

Re: [tor-relays] tor update question
by Olaf Grimm 21 Jun '19

21 Jun '19

On Website: "update to latest upstream release (bz#1679732) How to install sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-EPEL-2019-f8311ec8a2" Not working! The command there is "dnf". A replacement with "yum" get the following error on my system: "[root@75f449 ~]# yum upgrade --enablerepo=updates-testing --advisory=FEDORA-EPEL-2019-f8311ec8a2 Geladene Plugins: fastestmirror Error getting repository data for updates-testing, repository not found [root@75f449 ~]# " Any other solution available? Olaf Am 20.06.19 um 21:31 schrieb nusenu: >> I am running Centos7 (CentOS Linux release 7.6.1810 (Core)) and Tor >> v. 0.3.5.7. Now I see in nyx that is is unrecommended, but the epel >> repo doesn't have 0.3.5.8. Should I be adding another repo, or just >> wait, or try to compile my own? > You can get tor 0.3.5.8 on CentOS 7 by enabling the updates-testing repo > > https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-f8311ec8a2 > > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

tor update question
by torix＠protonmail.com 20 Jun '19

20 Jun '19

Dear List, I am running Centos7 (CentOS Linux release 7.6.1810 (Core)) and Tor v. 0.3.5.7. Now I see in nyx that is is unrecommended, but the epel repo doesn't have 0.3.5.8. Should I be adding another repo, or just wait, or try to compile my own? TIA, --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 1

Wrong country and AS number/ name
by ILikeTor 20 Jun '19

20 Jun '19

Hello everybody, I have set up a relay about 3 days ago now. I am hosting my relay at a German hosting provider called "contabo", but the relay search of Tor Metrics tells me that the relay is based in the United States and that the AS number and name are unknown. Does someone know what I could do to fix this? Link: https://metrics.torproject.org/rs.html#details/53E89AD9B9320749F04DCA757F1C… Thanks in advance :) ILikeTor (or so - I definitely need a better nickname :/)

3 2

Tor Debian repo update
by Peter Ludikovsky 20 Jun '19

20 Jun '19

Hello, Does the official Tor Project repo provide upgrades to the new 0.4.0.5 stable for anyone? I can see the new packages in pool/main/t/tor/, but the package index in dists/stretch/main/binary-amd64/Packages still points to 0.3.5.8. Regards, /peter

3 2

Moving Exit Node
by Yggdrasil Admin 20 Jun '19

20 Jun '19

Hi at all. Yesterday i was kicked by my hosting provider urdn (https://urdn.com.ua) kicked me because "someone we can't name here, wasn't happy" about what i did on a non urdn server. That's why they nullrouted my ipv4 and made the Exit Node inaccessible. After a talk with the support over jabber he told my that the server was still accessible over ipv6 so i backuped my identity keys and tried to setup my exit node on another server which wasn't possible because it alway tried to connect to the nullrouted ipv4. My main question is: Can i setup my exit node on another server with another ipv4 or is this impossible? Regards

2 1

Re: [tor-relays] Questions about relays on IPv6
by teor 19 Jun '19

19 Jun '19

Hi, > On 19 Jun 2019, at 05:56, tschador(a)posteo.de wrote: > > I have enabled IPv6 on my Relay [1] and setup a new one [2]. > Both got the additional Flag 'ReachableIPv6' - fine. > > In the 'IPv6 HOWTO' [3] I found: > > "Since clients only use the ORPort (because it's more anonymous2), and > relays only use IPv4, there is no reason to configure an IPv6 DirPort - > if you do, it will never be used." > > Hmm - 'relays only use IPv4' seems to be true. Until now I can see only > incoming connections from the authorities; no other IPv6 and no outgoing > IPv6 connection while on [1] there are over 6800 und on [2] over 4800 > IPv4 connections! > > So I wonder: Does it make sense to setup IPv6 non-exit relays when IPv6 > is not used? Or must I wait patiently - how long? If your relay becomes a Guard, a small number of clients will use its IPv6 ORPort. We want to use IPv6 more in tor, but we have to write the code to do it, and work out if it has any anonymity issues. I updated the wiki page so it is clearer: https://trac.torproject.org/projects/tor/wiki/doc/IPv6RelayHowto?action=dif… > [1] 6A7551EEE18F78A9813096E82BF84F740D32B911 (Tormachine) > [2] 9556D34D97C0382E8B9901B036ACAA2F2B453FEC (Tormachine2) > [3] https://trac.torproject.org/projects/tor/wiki/doc/IPv6RelayHowto T

1 0

Re: [tor-relays] Questions about relays on IPv6
by Charly Ghislain 19 Jun '19

19 Jun '19

Basically, assuming relays communicate between them over ipv4, guards and exits supporting ipv6 would allow clients with ipv6-only connectivity to join the network, and establish connections to ipv6-aware servers. So I guess it makes sense if you relay ever gets the guard flag. On Wed, Jun 19, 2019 at 10:21 AM <tschador(a)posteo.de> wrote: > > Hello, > > I have enabled IPv6 on my Relay [1] and setup a new one [2]. > Both got the additional Flag 'ReachableIPv6' - fine. > > In the 'IPv6 HOWTO' [3] I found: > > "Since clients only use the ORPort (because it's more anonymous2), and > relays only use IPv4, there is no reason to configure an IPv6 DirPort - > if you do, it will never be used." > > Hmm - 'relays only use IPv4' seems to be true. Until now I can see only > incoming connections from the authorities; no other IPv6 and no outgoing > IPv6 connection while on [1] there are over 6800 und on [2] over 4800 > IPv4 connections! > > So I wonder: Does it make sense to setup IPv6 non-exit relays when IPv6 > is not used? Or must I wait patiently - how long? > > Thanks. > > [1] 6A7551EEE18F78A9813096E82BF84F740D32B911 (Tormachine) > [2] 9556D34D97C0382E8B9901B036ACAA2F2B453FEC (Tormachine2) > [3] https://trac.torproject.org/projects/tor/wiki/doc/IPv6RelayHowto > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

exit relay "internal error"
by dns1983＠riseup.net 19 Jun '19

19 Jun '19

Hello, I have an exit relay on a debian remote vm. Yesterday, after I installed the last linux security update, I rebooted It, and than I had a problem with additional IPs, that were no more being assigned. In order to understand if it were a problem caused by the last upgrade I restored a previous backup, that I made on May with tar. I didn't solved the problem restoring the backup, so I opened a ticket with my provider. Now they have fixed this issue, but my tor instance is going in loop. The log says: ... Jun 18 13:33:31.000 [notice] Bootstrapped 0%: Starting Jun 18 13:33:32.000 [notice] Starting with guard context "default" ============================================================ T= 1560854012 INTERNAL ERROR: Raw assertion failed at ../src/lib/ctime/di_ops.c:179: ! old_val/usr/bin/tor(dump_stack_symbols_to_error_fds+0x33)[0x55a17b410943] /usr/bin/tor(tor_raw_assertion_failed_msg_+0x86)[0x55a17b410fd6] /usr/bin/tor(dimap_add_entry+0xa0)[0x55a17b411ba0] /usr/bin/tor(construct_ntor_key_map+0x69)[0x55a17b357969] /usr/bin/tor(server_onion_keys_new+0x4d)[0x55a17b39f4dd] /usr/bin/tor(+0x66e27)[0x55a17b287e27] /usr/bin/tor(threadpool_new+0x18b)[0x55a17b3b3f0b] /usr/bin/tor(cpu_init+0x9d)[0x55a17b28828d] /usr/bin/tor(run_tor_main_loop+0x136)[0x55a17b27a496] /usr/bin/tor(tor_run_main+0x1215)[0x55a17b27b935] /usr/bin/tor(tor_main+0x3a)[0x55a17b278a8a] /usr/bin/tor(main+0x19)[0x55a17b278609] /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1)[0x7ffb901ba2e1] /usr/bin/tor(_start+0x2a)[0x55a17b27865a] Jun 18 13:33:33.000 [notice] Tor 0.3.5.8 opening log file. ... What could be the problem? thanks Gigi

2 3

Having trouble getting my relay to be picked up
by Stephen Downward 16 Jun '19

16 Jun '19

Good evening, I am having some trouble running a tor relay node. I have forwarded TCP 9001, and can confirm I can access it from outside of my network. I used the following instructions to set up my node: https://trac.torproject.org/projects/tor/wiki/TorRelayGuide/DebianUbuntu Here is the relevant snippet from my log file: Jun 15 23:31:00 TorRelay systemd[1]: Starting Anonymizing overlay network for TCP... Jun 15 23:31:01 TorRelay tor[3488]: Jun 15 23:31:01.127 [notice] Tor 0.2.9.16 (git-9ef571339967c1e5) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.1.0j and Zlib 1.2.8. Jun 15 23:31:01 TorRelay tor[3488]: Jun 15 23:31:01.127 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning Jun 15 23:31:01 TorRelay tor[3488]: Jun 15 23:31:01.127 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc". Jun 15 23:31:01 TorRelay tor[3488]: Jun 15 23:31:01.127 [notice] Read configuration file "/etc/tor/torrc". Jun 15 23:31:01 TorRelay tor[3488]: Jun 15 23:31:01.131 [notice] Based on detected system memory, MaxMemInQueues is set to 1125 MB. You can override this by setting MaxMemInQueues by hand. Jun 15 23:31:01 TorRelay tor[3488]: Configuration was valid Jun 15 23:31:01 TorRelay tor[3491]: Jun 15 23:31:01.288 [notice] Tor 0.2.9.16 (git-9ef571339967c1e5) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.1.0j and Zlib 1.2.8. Jun 15 23:31:01 TorRelay tor[3491]: Jun 15 23:31:01.288 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning Jun 15 23:31:01 TorRelay tor[3491]: Jun 15 23:31:01.288 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc". Jun 15 23:31:01 TorRelay tor[3491]: Jun 15 23:31:01.288 [notice] Read configuration file "/etc/tor/torrc". Jun 15 23:31:01 TorRelay tor[3491]: Jun 15 23:31:01.292 [notice] Based on detected system memory, MaxMemInQueues is set to 1125 MB. You can override this by setting MaxMemInQueues by hand. Jun 15 23:31:01 TorRelay tor[3491]: Jun 15 23:31:01.292 [notice] Opening OR listener on 0.0.0.0:9001 Jun 15 23:31:05 TorRelay systemd[1]: Started Anonymizing overlay network for TCP. As you can see, I'm not getting "Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.", which would indicate that the relay is working properly. The server does not have any outgoing connections blocked. I am unsure what to do in order to get this to work - some help would be beneficial. Thanks!

2 1

Home Router limits question
by torix＠protonmail.com 16 Jun '19

16 Jun '19

Would tor show something in its log if I were hitting my router's limit? Seeing nothing there or in my router's gui log interface, but not sure what I should expect to see. TIA, --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

3 2

Setting Tor Relay to Hibernate After 100Mbits
by Keifer Bly 04 Jun '19

04 Jun '19

Hi all, so as of Google Clouds pricing plans on outgoing traffic, I am attempting to set my relay to hibernate after sending 100 mbits of data per month. Does this torrc configuration look like it would do that? SOCKSPort 0 ORPort 65534 ExitPolicy reject *:* ContactInfo keiferDoTblyAtgmaildOtcom Nickname torworld RelayBandwidthRate 100 MBits RelayBandwidthBurst 100 MBits AccountingMax 100 MBits AccountingStart month 1 00:00 AccountingRule out Thanks all. --Keifer

5 6

Curious up disclosure possible?
by Dr Gerard Bulger 04 Jun '19

04 Jun '19

Conclusion...avoid http, 80 ? https://blog.duszynski.eu/tor-ip-disclosure-through-http-301-cache-poisonin… Gerry Mobile Device > On 3 Jun 2019, at 9:26 pm, Keifer Bly <keifer.bly(a)gmail.com> wrote: > > So I am trying to limit as google cloud has strict pricing plans. Perhaps I should go back to just running a bridge for now. What would the traffic limit for a useful relay be? Thanks. > >> On Mon, Jun 3, 2019 at 10:40 AM Matt Traudt <pastly(a)torproject.org> wrote: >> On 6/3/19 13:20, Keifer Bly wrote: >> > Hi all, so as of Google Clouds pricing plans on outgoing traffic, I am >> > attempting to set my relay to hibernate after sending 100 mbits of data >> > per month. Does this torrc configuration look like it would do that? >> > >> > SOCKSPort 0 >> > >> > ORPort 65534 >> > >> > ExitPolicy reject *:* >> > >> > >> > ContactInfo keiferDoTblyAtgmaildOtcom >> > >> > Nickname torworld >> > >> > RelayBandwidthRate 100 MBits >> > >> > RelayBandwidthBurst 100 MBits >> > >> > AccountingMax 100 MBits >> > >> > AccountingStart month 1 00:00 >> > >> > AccountingRule out >> > >> > Thanks all. >> > >> >> 100 Megabits is 12.5 Megabytes, and approximately ~10 page loads of the >> average web page these days (as unscientifically eye-balled by me). >> >> Further, setting RBR and RBB to 100 Mbits (per second) means you could >> theoretically hit your tiny AccountingMax in the first second of every >> month. >> >> An AccountingMax of 100 Megabits is almost assuredly not what you >> actually want. >> >> I'm wondering if there was some confusion about the difference between >> speed and a simple of bytes. Confusingly, Tor uses the same unit strings >> (like "MBits") for both, but mentally we should be adding "per second" >> for torrc options like RelayBandwidthRate. >> >> 100 Megabits per second is a reasonable RBR setting for a reasonable >> relay. 100 Megabits per month is a useless relay. >> >> Hope that helps. >> >> Matt >> _______________________________________________ >> tor-relays mailing list >> tor-relays(a)lists.torproject.org >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > -- > --Keifer > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

Auto Upgrading Tor Using Unattended Ugrades
by Keifer Bly 03 Jun '19

03 Jun '19

Hello all, So I am now auto upgrading tor using the method at https://trac.torproject.org/projects/tor/wiki/TorRelayGuide/DebianUbuntuUpd… Upon testing, this is what I got. Initial blacklisted packages: Initial whitelisted packages: Starting unattended upgrades script Allowed origins are: [] Checking: firefox-esr ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: google-cloud-sdk ([<Origin component:'main' archive:'cloud-sdk-stretch' origin:'cloud-sdk-stretch' label:'cloud-sdk-stretch' site:'packages.cloud.google.com' isTrusted:True>]) Checking: google-compute-engine ([<Origin component:'main' archive:'google-compute-engine-stretch-stable' origin:'google-compute-engine-stretch-stable' label:'google-compute-engine-stretch-stable' site:'packages.cloud.google.com' isTrusted:True>]) Checking: google-compute-engine-oslogin ([<Origin component:'main' archive:'google-compute-engine-stretch-stable' origin:'google-compute-engine-stretch-stable' label:'google-compute-engine-stretch-stable' site:'packages.cloud.google.com' isTrusted:True>]) Checking: libavcodec57 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: libavfilter6 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: libavformat57 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: libavresample3 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: libavutil55 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: libpostproc54 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: libswresample2 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: libswscale4 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>]) Checking: python-google-compute-engine ([<Origin component:'main' archive:'google-compute-engine-stretch-stable' origin:'google-compute-engine-stretch-stable' label:'google-compute-engine-stretch-stable' site:'packages.cloud.google.com' isTrusted:True>]) Checking: python3-google-compute-engine ([<Origin component:'main' archive:'google-compute-engine-stretch-stable' origin:'google-compute-engine-stretch-stable' label:'google-compute-engine-stretch-stable' site:'packages.cloud.google.com' isTrusted:True>]) pkgs that look like they should be upgraded: Fetched 0 B in 0s (0 B/s) fetch.run() result: 0 blacklist: [] whitelist: [] No packages found that can be upgraded unattended and no pending auto-removals What I am attempting to do is automatically install new tor versions when they are released. Will this do that automatically? How can I keep this process running? Thanks. --Keifer

3 9

Relay Consensus Low
by Matt Westfall 02 Jun '19

02 Jun '19

My tor node: https://metrics.torproject.org/rs.html#details/B1B10104EB72A1FBBF6687B05F19… Doesn't ever go up above 8800 or so. One thing I notice in Nyx is that my connections never go above about 2000 in and out connections. I have advertised bandwidth of just shy of a gigabit in my config. I understand now that the "advertised bandwidth" is calculated based on observed traffic through the node, which while more reliable and avoids abuse, seems to be counter productive to a degree. Ultimately what do I need to do to get more traffic through my node? Cause I have a 2Gbps fiber sitting here basically doing nothing so I was giving 1Gbps to tor :) Config -------------- RunAsDaemon 1 ControlPort 9051 ORPort 9001 ORPORT [2001:559:c290::fffb]:9001 RelayBandwidthRate 45 MB # Throttle traffic to 100KB/s (800Kbps) RelayBandwidthBurst 50 MB # But allow bursts up to 200KB/s (1600Kbps) DirPort 9030 # ExitPolicy reject *:* # no exits allowed ExitPolicy reject6 *:* Any suggestions appreciated. Matt Westfall President & CIO ECAN Solutions, Inc. Everything Computers and Networks 804.592.1672

6 10

Onionoo and ASN Number/AS Name
by Conrad Rockenhaus 02 Jun '19

02 Jun '19

Hello, Onionoo returns “unknown” for my ASN for some reason (should return 63080) and returns “unknown” for AS Name (Should be GreyPony Consultants - as named in ARIN). I’m trying to find out where things might be potentially breaking here before I start connecting to the route servers at DE-CIX next week. Has anyone seen this type of issue before? Thanks, Conrad

4 3

Verizon.com blocked on Tor Middle Relay on FiOS
by Neel Chauhan 31 May '19

31 May '19

Hi, I have a Tor middle relay on Verizon FiOS. If I try to access Verizon.com on the FiOS connection running a Tor middle relay, I get this error: > Access denied, in accordance with Verizon Information Security Policy > Please contact us if there is a legitimate business need to access this > content. They gave an email address to the EdgeCast NOC that I contacted, but the EdgeCast support said I should contact FiOS and not EdgeCast, even though I think the blocking is on EdgeCast's side (if it was on FiOS then I would get a "Hmm. We’re having trouble finding that site" error from Firefox). Other Verizon sites such as Verizon Wireless and Verizon Media/Oath properties like AOL/Yahoo/Tumblr/HuffPost/etc. are not blocked on FiOS running Tor (heck, I can even sign up for Tumblr on exit relays), even though these other Verizon sites also use EdgeCast. For those who have middle relays on their home broadband connection (not bridge or exit), both on Verizon FiOS and other ISPs regardless of country or technology, please test for if Verizon.com is blocked. Thank You, Neel Chauhan

5 5

Tor relay operators meetup, 25/05/2019 @ RADIX hacklab, Athens
by Vasilis 28 May '19

28 May '19

Dear Tor friends and relay operators, Next Saturday (25.05.2019) a Tor relay operators meetup will take place at RADIX hacklab in Athens. When: Saturday, May 25th, 2019 Time: 19:00 / 7:00 PM Where: Kaniggos 34 & Stournari, Athens 10682, Greece Event link: https://radix.one/en/2019-05-18-tor-meetup/ Hope to see many of you there. Cheers, ~Vasilis -- Fingerprint: 8FD5 CF5F 39FC 03EB B382 7470 5FBF 70B1 D126 0162 Pubkey: https://pgp.mit.edu/pks/lookup?op=get&search=0x5FBF70B1D1260162

1 1

Tor Relay Operator Meeting at the Gulaschprogrammiernacht
by Christophe Kemp 27 May '19

27 May '19

Hello everyone, there will be a Tor Relay Operator Meeting at the Gulaschprogrammiernacht :) You will find soon more information here: https://entropia.de/GPN See you there! Best regards Chrëscht International Ambassador Frënn vun der Ënn A.S.B.L

1 1

VPNs and Ports
by grarpamp 24 May '19

24 May '19

>> On May 23, 2019, at 4:39 AM, Wallichii <wallichii(a)riseup.net> wrote: >> >> On Thu, 23 May 2019 04:15:36 -0500 >> Conrad Rockenhaus <conrad(a)rockenhaus.com> wrote: >> >>> I’ll be starting a free VPN service soon to allow users that are >>> blocked from using Tor at their location to access Tor. To prevent >>> abuse of the service, I plan on restricting the ability of the VPN to >>> only access 53, 80, 443, 8080, 8443, 9001, and 9030. Are there any >>> other ports I should consider keeping open for the service? >> >> IMO setting up a bridge will help more users because not everyone is >> going to trust someone on the internet giving free proxy, you should >> run a bridge if you want to help more users. That would be an input VPN... perhaps useful if DPI was breaking user's tor access protocols (to bridges or regular entry guards), but not their VPN traffic. Output VPN's could also be useful to allow tor users to bind their stack to it over tor, thus permitting UDP back and forth from clearnet... typical with voice video comms and a bunch of other applications that have been disabled for tor users becase tor only supports TCP. Operators would have to publish their VPN node info somewhere for users to use... or getbridges, getvpns. There are prior exploratory threads on this here before. Operators can also be running and supporting VPNGate.net service as both input and output.

1 0

Tor relay says it is reachable, but is not appearing on the network.
by Keifer Bly 24 May '19

24 May '19

Hi all, something very strange is going on with my relay called torworld. For some reason, the tor software is reporting that the relay is reachable and the relay is sending and receiving data (please see the attached screenshot), but after several days the relay is not appearing on the tor relay list. This seems strange and any ideas as to why this might be happening is appreciated. Thank you. running on Debian via Google Cloud VPS. Thank you. --Keifer

4 13

Scanning relays looking for onions
by Jordan 24 May '19

24 May '19

Looks like someone is making HTTP requests to known relays with a host header of an onion address. I have a webserver that returns 200 OK to all requests for honeypot-related fun and well... I can only imagine what they think my relay hosts as a result. Stay safe out there friends. 2019-05-23T02:43:58Z 5.8.10.[snip] 200 jg4rli4xoagvvmw47fr2bnnf[snip].onion / -- Jordan https://yui.cat/

1 0

new tor middle relay error
by Keifer Bly 23 May '19

23 May '19

Hi all, So I am running a new tor middle relay via a Google Cloud VPS but after the relay running for 1 day I am seeing this error May 16 18:23:50.000 [notice] Heartbeat: It seems like we are not in the cached consensus. Any thoughts on why this is happening is appreciated, thank you. --Keifer

2 2

forward relay connections
by tor-relay＠riseup.net 23 May '19

23 May '19

Hello dear friends I'm running a non exit relay on a debian machine (in the next few months I will switch to *BSD) on a Lime2. I'm running an exit relay too on a remote VM. I would turn my non-exit relay in an exit one, but for obvious reasons, I don't want to run It from my shitty ISP IP. I could give 10-14 mbps from my home connection, so I think that the lime2 would be powerful enough to run It properly. Do you think would be feasible to use SSH to forward all connections, except DNS queries, between my Lime2 and the remote VM in order to use an additional VM's IP? Could you give me some tips please? cheers Gigi

4 5

Tor relay problem
by findmei 21 May '19

21 May '19

Hi guys, I recently set up a tor relay on Centos7.But when I check the node at https://metrics.torproject.org/, i see that the relay is offline.Even though it is online.I looked tor log file. There was two common warning. May 15 14:42:13.000 [warn] Unable to stat resolver configuration in '/etc/resolv.conf': Permission denied May 15 14:49:13.000 [warn] HTTP status 307 ("Temporary Redirect") was unexpected while uploading descriptor to server '86.59.21.38:80'. Possibly the server is misconfigured? I try to chmod 777 /etc/resolv.conf for this warning " /etc/resolv.conf': Permission denied".But it didnt work it.And then i searched it on google for "HTTP status 307 ("Temporary Redirect")" .But i didn't find solution.Any suggestions? /etc/tor/torrc => https://paste.ubuntu.com/p/tD6zg2mwZy/ /var/log/tor/notices.log => https://paste.ubuntu.com/p/JsPGdgFJyT/ systemctl statust tor -l => https://paste.ubuntu.com/p/qpppzVK8qR/ Sent with [ProtonMail](https://protonmail.com) Secure Email.

4 4

Re: [tor-relays] Trouble Running Middle Relay On Google Cloud Debian VBS
by Keifer Bly 18 May '19

18 May '19

--Keifer On Sat, May 18, 2019 at 2:28 PM Keifer Bly <keifer.bly(a)gmail.com> wrote: > I have a specified port (65534). I just tried changing the ip adress to > 35.232.92.24 <https://35.232.92.24/>, and the connection to that port is > allowed by the firewall. I will check again over the next day and see if > anything chages. It is strange the software says traffic is being received > and says " > --May 18 01:20:06.000 [notice] Self-testing indicates your ORPort is > reachable from the outside. Excellent. > May 18 01:20:08.000 [notice] Performing bandwidth self-test...done." > > So according to the software the relay is reachable and sending and > receiving traffic. Seems strange it appears unreachable to me. Wonder why > that might be. Thanks. > > > On Sat, May 18, 2019 at 1:42 PM Roman Mamedov <rm(a)romanrm.net> wrote: > >> On Wed, 15 May 2019 22:26:25 -0700 >> Keifer Bly <keifer.bly(a)gmail.com> wrote: >> >> > Hi all, >> > >> > So I am starting a new middle relay using a VPS hosted on Google Cloud >> > running Debian. though the relay is running, it is not appearing in the >> > consensus after 10 hours. Here is the tor log, any thoughts on what is >> > going on would be greatly appreciated thank you. >> >> > May 15 18:23:53.000 [notice] Now checking whether ORPort >> > 35.238.140.120:65534 is reachable... (this may take up to 20 minutes -- >> > look for log messages indicating success) >> > May 15 18:23:54.000 [notice] Self-testing indicates your ORPort is >> > reachable from the outside. Excellent. >> >> FWIW this 35.238.140.120:65534 is not reachable right now from any of my >> machines. Did you change the port or IP since then? Also, I never used a >> Google >> VPS, but it appears you need to do extra steps to ensure you get a static >> external IP: >> >> https://cloud.google.com/compute/docs/ip-addresses/reserve-static-external-… >> Did you do that? >> >> >> -- >> With respect, >> Roman >> >

1 0

Trouble Running Middle Relay On Google Cloud Debian VBS
by Keifer Bly 18 May '19

18 May '19

Hi all, So I am starting a new middle relay using a VPS hosted on Google Cloud running Debian. though the relay is running, it is not appearing in the consensus after 10 hours. Here is the tor log, any thoughts on what is going on would be greatly appreciated thank you. May 15 18:23:47.096 [notice] Opening OR listener on 0.0.0.0:65534 May 15 18:23:47.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip. May 15 18:23:47.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6. May 15 18:23:47.000 [notice] Configured to measure statistics. Look for the *-stats files that will first be written to the data directory in 24 hours from now. May 15 18:23:47.000 [warn] You are running Tor as root. You don't need to, and you probably shouldn't. May 15 18:23:47.000 [notice] Your Tor server's identity key fingerprint is 'torworld 3A4E582092E7C6B822EC01F4D76F680F6C65B0A2' May 15 18:23:47.000 [notice] Bootstrapped 0%: Starting May 15 18:23:50.000 [notice] Bootstrapped 80%: Connecting to the Tor network May 15 18:23:51.000 [notice] Guessed our IP address as 35.238.140.120 (source: 193.23.244.244). May 15 18:23:52.000 [notice] Bootstrapped 85%: Finishing handshake with first hop May 15 18:23:52.000 [notice] Bootstrapped 90%: Establishing a Tor circuit May 15 18:23:53.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working. May 15 18:23:53.000 [notice] Bootstrapped 100%: Done May 15 18:23:53.000 [notice] Now checking whether ORPort 35.238.140.120:65534 is reachable... (this may take up to 20 minutes -- look for log messages indicating success) May 15 18:23:54.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. May 15 18:23:56.000 [notice] Performing bandwidth self-test...done. May 16 00:23:50.000 [notice] Heartbeat: It seems like we are not in the cached consensus. May 16 00:23:50.000 [notice] Heartbeat: Tor's uptime is 5:59 hours, with 0 circuits open. I've sent 789 kB and received 7.41 MB. May 16 00:23:50.000 [notice] Average packaged cell fullness: 100.000%. TLS write overhead: 27% May 16 00:23:50.000 [notice] Circuit handshake stats since last time: 0/0 TAP, 6/6 NTor. May 16 00:23:50.000 [notice] Since startup, we have initiated 0 v1 connections, 0 v2 connections, 0 v3 connections, and 8 v4 connections; and received 1 v1 connections, 0 v2 connections, 0 v3 connections, and 6 v4 connections. May 16 00:23:50.000 [notice] DoS mitigation since startup: 0 circuits rejected, 0 marked addresses. 0 connections closed. 0 single hop clients refused. May 16 00:58:51.000 [warn] Received http status code 404 ("Not found") from server '45.62.242.212:9030' while fetching consensus directory. I also had another thing I wanted to ask. I am working on a crontab script to automatically update and restart the tor relay once a month automatically, as I am already running a bridge on another network that needs to be updated manually. Does this script look like it would get the job done? I don't have much experience with crontab. # m h dom mon dow command 0 0 1 * * apt-get update apt update && apt install -y --only-upgrade tor killall tor tor root@instance-1:/home/keifer_bly# Thank you very much. --Keifer

4 7

Tor relay operator meetup in Mexico
by Jacobo Nájera 18 May '19

18 May '19

Hi We have our first relay operator meeting in Mexico, next week. More details here: https://blog.torproject.org/events/reunion-de-operadoras-y-operadores-mexico Thanks, Jacobo

1 0

Email Blocked by ISP
by K. Besig 17 May '19

17 May '19

I've run a home relay on and off for several years and recently, for the first time, had my email blocked by the ISP rendering it impossible to login into my 3rd party mail sever. When I contacted support I was informed my email password had been reset due to activity that resembled e-bombing/mass mailing. Only after submitting to a system scan while the rep waited on the phone,was I able to reset my password. I moved several months ago and went from a TWC legacy account to a Spectrum account. Wondering if anything other than lowering my tor bandwidth would keep them off my back...

5 4

Consensus-health - Guard flag
by lists＠for-privacy.net 08 May '19

08 May '19

Hello, I do not understand why relay A751D8BEE222564B7BA657F74B6658836FF1AEEA does not get a guard status. A few weeks ago I set AccountingMax on this relay. This is off for about 3 weeks. All servers are configured the same. https://metrics.torproject.org/rs.html#search/TorOrDie4privacyNET -- Ciao Marco!

1 0

Solving World's Tor Users Being Blocked by Websites (was: Tor exit bridges)
by grarpamp 07 May '19

07 May '19

On 5/7/19, nusenu <nusenu-lists(a)riseup.net> wrote: > > juanjo: >> Tor relays are public and easily blocked by IP. To connect to Tor >> network users where Tor is censored have to use bridges and even PTs. >> But, what happens on the exit? Many websites block Tor IPs so using >> it to access "clearweb" is not possible. Should we allow and start >> using "exit bridges"? In I2P we have not this problem since there is >> no central IP list of relays. > > there is no need to extend to one more hope to achieve this > > https://lists.torproject.org/pipermail/tor-dev/2018-March/013036.html > > https://lists.torproject.org/pipermail/tor-relays/2019-May/017273.html It's possible to augment such outbound solution offerings even further by running an OpenVPN termination service so users can transport UDP between clearnet as well. VPNGate.net project has an idea there too. Even large regional IPv6 pools could be bought and shared by operators and rotated through. More tor relay operators should consider some of the above options, whether as a requested "bridge" service mechanism, or listed in the consensus "contact" field, or as more of a standalone VPNGate support, or "ExitGate" project sort of arrangement. Using only tor right now, a user needs to use a clearnet service that does not scrape consensus, or one not fronted by services doing similar to CloudFlare's spiteful default tor blocking policy, or find a lucky exit within whatever geolocation game the clearnet service uses, or get lucky through traditional vpn or proxy. But those are only fun statistical hacks, not real long term solutions to the underlying problem. It's unfortunate that such braindead blocking, stupid policy regimes, sites refusal to developing creative solutions [1] for so many world's users legitimate privacy, info risk, anonymity needs... often results in users accounts being locked out and escalated into forcing disclosure of users private info and ID to sites to unlock them, thus exposing users to ongoing long term fraud, cost, and stress when that info (in most cases truly unnecessary to collect) is eventually shared misused and stolen by both sites and criminals... or outright auto deletion of user's valued account, built up social networks, etc... all for doing nothing wrong, and harming no one or thing. Death by DriveByExit :( And really shameful to deny world's users the right to simply read a website, be it social, commercial, information, etc or even sadly their own tax-theft funded governmental public sites doing this blocking too. There are some related projects, best practice, as well... https://trac.torproject.org/projects/tor/wiki/org/projects/WeSupportTor https://trac.torproject.org/projects/tor/wiki/org/projects/DontBlockMe https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-access Positive outreach and direct engagement by Tor community is key here, and perhaps not enough of that is happening, at least not publicly. It's a big enough issue that it really needs a dedicated, active, allied, and even funded subproject... a MegaProject that needs to happen. [1] Such as forfeitable cryptocurrency and mailed-in cash deposits refundable in time, increasing account priviledges and features based on account age and activity, community moderation and behaviour support within the sites, opensource third party tracking-free local SecurImage style captcha throughout a sites features, privacy preserving non-SMS non-Google/Apple pure TOTP authenticator protocols, PGP recovery, letting users simply *read* websites without any hindrance, while utilizing these methods only for *write* operations, etc and so many more ways you can envision... Cc'd for awareness and inclusion. *Please remove tor-dev and tor-relays, and move this to tor-talk or tor-access for ongoing discussion and progress. Thanks.

1 0

Pool of IP Addresses
by amytain 06 May '19

06 May '19

Is it possible to have a pool of ip addresses as the outbound ip addresses instead of just one?

4 6

dhcp lease question
by torix＠protonmail.com 05 May '19

05 May '19

Yesterday I put in a new router for my home connexion to Verizon. Up until now, I've had to bring down my router for 18 hours or so for me to get a new ip address, so this has never really come up before. But I noticed in the new interface that my dhcp lease from Verizon is only 2 hours long. I have had 5 or 6 ip changes that I noticed, and found my relay starting all over again this morning, building up its connexions again. I'm hoping that Verizon will settle down and start renewing my ip address instead of giving me another every few hours, but of course I don't know if their pool of addresses is running low and they are scrambling or what. Any thoughts? I don't think I can continue with my home relay in good conscience if people are getting kicked off several times a day. TIA, --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

5 5

unique .onion addresses decreasing a lot
by nusenu 05 May '19

05 May '19

Have a look at this graph: https://metrics.torproject.org/hidserv-dir-onions-seen.html?start=2019-02-0… Is this a measurement issue or did some major application migrate to v3 onion services? -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

2 1

Concern Over Bridge Distribution And Tor Updates
by Keifer Bly 05 May '19

05 May '19

Hello, So I am aware a new version of tor is now available, but am wondering, is there a way for relay / bridge operators to be notified when a new version of tor is available? Right now, it seems like the only way of knowing if an update for tor is available for our OS is to manually check. Thanks. I also wanted to say, I noticed that an available email provider to request bridges from is Yahoo Mail. Here’s my thought, Yahoo (alongside AOL) was bought by Verizon, so they are now owned by a phone carrier / ISP. This makes me wonder if Yahoo is still a safe email provider to send bridges to, seeing as their new privacy policy is essentially allowing them to use emails as public knowledge. Just a thought. Thanks all. --Keifer

3 4

Support tunneling
by amytain 05 May '19

05 May '19

Would it be possible to support gre tunneling for the inbound IP for the exit and outbound ips? Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 1

Anti-Sybil (re: Explain... all the Nodes)
by grarpamp 03 May '19

03 May '19

On 5/2/19, Herbert Karl Mathé <mail(a)hkmathe.de> wrote: > I strongly believe certain issues need be brought up into conscious, and > into presence: into discussion, actually. > > Therefore appreciating this as it might fit too well into context > > Keeping things below surface, or trying so, has too often proven to be a > very bad idea as these will come up sooner or later anyway, then with much > higher magnitude. Even worse, trust is then destroyed. As said before, the category of Anti Sybil Web of Trust Projects needs considered, and could even cover such speculative subjects. It's not about analysing the meta of one node or one operator, even if a true positive hit, in general the yield is approximately zero percent of any overlay network's nodes, it's about stepping back and agnostically analysing them all. Go investigate and collate all the possible meta informations... Node location, payment, OS, ISP, uptimes, anon / nym / PGP / GovID, workplace, politic, blogs, whatever else you can imagine, including incorporating what's already in the consensus, contact, MyFamily, nickname, both real world and virtual infos, operator to operator p2p Web of Trust... No node has to supply any infos. Put it all in a db and give users tools to select node sets. Some users might select State's, or State's workers or even Statist's nodes, over say anon nodes, as maybe they feel they have to play by some "rules" that anon nodes don't. Others might reject operators that post stupid pics on Facebook. Or all Ubuntu relays. Or nodes that engage in free speech they don't like, some in Tor Project would love that selector, lol. It doesn't matter, it's a meta project, with it you can accept or reject on whatever whim you wish by node fingerprints in your client. And if the Sybil WoT project ends up discovering some interesting potential threats classes among the entire node set, you win. Until then, you are potentially missing all of that, and are not raising Sybil's costs of doing business by forcing them to expend much resource into playing real world Web of Trust against users who might select to use various positive-meta-ranking and or WoT structures. Right now Sybil's cost is only a little hosting. If not, you can still report bad exits and other actual technical node and traffic mangling to tor-relays and or bad-relays, at least until someone DHT's or otherwise distributes tor away from the more centralized DA design. Note that Tor's architecture does not protect much against Global Passive Adversary of NSA style fiber Vampires, that threat does not require Sybil nodes, nor do they have to be Global or Govt, even Tier-N backbones can tap, analyse, and do nefarious things like and with that, including sell, give, and partner it all away. Though they can and do run Sybil nodes to help inject, manipulate, block, see, etc traffic, nodes, and clients. On flip perspective, maybe you really don't want to develop WoT's and such, simply because enabling creeping featureism of it all can lead to exclusivity and control whereby valuable anon diversity is selected away from and purged. That would be very bad. Either way, other than the usual design, protocol, code, and "Lawfare" exploit space, and the coming Quantum Compute adversary, Sybil and Vampire are likely todays biggest remaining threats to overlay networks. None of todays networks seem to be trying to do anything to stop Sybil, and only a few networks put Vampire as any sort of priority [1]. While Vampire may perhaps be solved with some technical measures, Sybil may require some sort sort of human based measures. [1] Curiously, cryptocurrencies do employ Anti-Sybil in various proofs of work (adversary cost raising), and can help defund Vampires.

3 3

[tor-talk] Explain yourself Conrad Rockenhaus
by Stirling Newberry 03 May '19

03 May '19

> I met Conrad online in September 2013, not long after the Washington Navy Yard shootings. Which is how I remember when. He mentioned that he was serving in the Navy then. And I vaguely recall that he's posted on Tor lists about the military using Tor. So you met Conrad on Grindr in September 2013, not long after he was supposed of been shot by the Washington Navy Yard shooter? Did you tell him during the Grindr date that he was lucky to be alive so he could bring us Greypony? I wish the shooter would of killed him because Conrad deserves to be dead because of the hell the Greypony project brought us since 2013. Was he top or were you top? Did you suck or did he suck? or did you both suck? Did you do a good little rim afterwards? Sent with ProtonMail Secure Email.

5 4

ALL GREYPONY SERVERS ARE OPEN FOR DDOS
by Stirling Newberry 03 May '19

03 May '19

ATTENTION GREYPONY USERS ALL GREYPONY EXITS WILL BE TARGETED FOR DDOS. THIS REQUEST HAS COME FROM PRETTY HIGH UP. GAME OVER BITCHES. YOU GUYS ARE GOING TO BE DONE. LOIC WILL BE USED TO TARGET THE NODES. DON'T SAY YOU WERENT WARNED YOU STUPID SACKS OF FAGGOT SHIT. Sent with [ProtonMail](https://protonmail.com) Secure Email.

3 2

A forwarded response
by Anonymous Tormaster 03 May '19

03 May '19

I don't believe it's right that trolls get the right to basically accuse Conrad of violating the principles of the Tor network just because he wants to offer donation based FreeBSD VMs to run Tor Exits. He has stated that he is unable to post to the lists and he is not being provided a reason on why he is unable to post to the lists. I can understand somewhat that he might be advertising but I don't understand why he's publicly reprimanded then banished yet now we're allowing people to trash someone who has actually contributed somewhat decently to this community. This action or inaction is disgusting and unacceptable and fosters and unwelcoming and hostile user climate all because Conrad wanted to HELP. So I'm including his full reply he sent me and I'm sending it anonymously because that's what seems to be popular these days: Hello, I'm sure that this original email was a personal attack and trolling, but given that it has aroused some interest in some of the emails I have received off-list, and the fact that Herbert did make the comment that keeping things below the surface may destroy trust, I will answer your points in question, Mr. Revolution. > You worked at the National Reconnaissance Office of the United States which is the most secretive branch of the United States Intelligence Community > You worked at the Naval Security Group Activity which is the United States Navy's version of the National Security Agency I was previously stationed at the NRO/SPAWAR Washington DC and Temporarily Attached to NSGA/NIOC and NRL on several occasions while I was on Active Duty in the Navy. I was stationed at various places, attached to various commands, served in various capacities and I haven't kept my previous affiliation with the US Government a secret by any means at all. I have no reason to, in fact, I'm very proud of what I've done in service of my country. That being said, I've been retired from Active Duty as of February 25, 2015 and in civilian employment since and I haven't had any employment affiliated with any government agency. This point is kind of moot. I've never kept my Naval Service Hidden, in fact, I brought it up as examples of Government/Military uses of Tor on the mailing list. > You have a Security Clearance but you don't specify what type but I wonder why someone with a SECURITY CLEARANCE would want to work with Tor My security clearance serves no purpose at this point other than making criminal background checks easier and allowing me, as a cybersecurity professional, easier trusted access through organizations that utilize the Federal Government's security clearance adjudicative standards the ability to grant me access faster. This point is moot. > Teor called you out months ago as a US Government Spy and I'm glad that the Tor Community Council is calling you out with. People can post all of the advertising in the world but as long as you're called out Mr US Federal Government Spy then they're doing the right thing. I have no idea what you're talking about with Teor, I do know that when a bunch of the users of the previous iteration of GreyPony were posting about their relay speeds and what not he asked for the list to remain on topic, but I don't remember any pointed calls of Teor accusing me ever being a US Government Spy. I don't care for the Tor Community Council, because I believe it's quite odd of them to repeatedly condemn me yet be completely chill with this. Strange. > You are probably trying to push hacked FreeBSD or that hacked HardenedBSD stuff that no one cares about anyway. You should probably do a little research on how BSD operating systems, especially FreeBSD or HardenedBSD work, to realize how impossible it is for this to work. FreeBSD it's hard, HardenedBSD, I think it's about impossible, but I like the fact you're reaching who shot JFK? levels in your analysis here. > If people cared about more FreeBSD on Tor they would do it but obviously it's not a big issue!!! You see, people do care, because what's going to prevent the big bad spies like me from finding that exploit in all of the cool l33t Ubuntu b0xes you're running Tor on and bringing down 2/3s of the overlay network? That's why we have network diversification to prevent such a failure - if there's a bug or an anomaly that effects Linux for example, it won't effect the BSD, MacOS, and Windows relays, and we'll still have a functioning overlay network. That's the point of diversification. That's the point of promoting it. I'm sorry that you don't want to see that, but that's what it is - we have the resources up to prevent a problem prior to a problem occuring. > It's not a big issue to spin up our Hetzner exits at least we know that a spy not you isnt doing it!!! Cool, and when Hetzner finally decides to pull the plug on Tor exits because they had enough, what then? It never hurts to try to diversify AS assets either. Your characterization of me being a spy is completely illogical because if I were to act in such a capacity, I would just do it. I have the bandwidth to do it, I don't need people to do it for me, I would just set up relays and go for it. The question is - what would I be spying on? I mean, you make it sound like that the exit operator has the full picture in his/her view....except they don't. I see connections from other relays. Oh, don't we default to HTTPS-Everywhere in the Tor Browser package as well by the way? What exactly am I trying to spy on Mr. Revolution? In the end, here's what I think is going on. Several newbies started using GreyPony. Everything was fine, in fact, there was support for it on the mailing list until they started bragging about speeds in excess of 1 Gbit/s. Then the following things occurred (and if you look back at the mailing list history, you can see this): 1. There were complaints that said newbies were lying about their exit relay speeds, even though speeds are measured by the bwauths, so user reported speed really doesn't matter anymore, so this wasn't a valid complaint. 2. There were complaints that the relays should all be in the same MyFamily, even though we don't expect relays hosted on OVH, Hetzner, etc. to be reported on the same MyFamily, after all, I didn't have access to any of these relays, so this wasn't a valid complaint, as I was just hosting the relays. 3. Excess traffic was being generated about GreyPony, which Teor asked everyone to stop bringing up GreyPony until October because of all of it. This was a valid complaint. Due to all of the newbie bragging and honestly, because I was proud of the fact that I was helping out several people, I let myself get out of hand and replied to the emails as well, so I understood and cooled it. Now, again, I wind up back in the hospital, things go a little south for the project because I'm not around, but I come back and the project is ready to start again. Now GreyPony is back to the way that we originally intended it to be - a donation only project to provide FreeBSD/HardenedBSD exits to Tor. Most of the same guys that were running relays with the original one want to come back to the new one, plus some new people. I'm sorry that people wanting to help the Tor network by providing high performance FreeBSD Exit Relays angers you and some other of your fellow travellers so much. If it makes you happy, the project will go on with or with out your support.

4 4

How Greypony fucks everyone over
by Stirling Newberry 03 May '19

03 May '19

Greypony just attracts a bunch of script kiddies who have no business running HS relays. All of those morons that run instances with Greypony are lazy and cheap who don't want to pay for server colocation and don't want to pay their dues on their mailing list or by getting known. This isn't a welcoming community don't you get it!!!! You earn your keep and when youre granted the ability and permission to run an exit they will grant you the permission to run the EXIT. Obviously Conrad doesn't deserve his Freedom of Speech on here because it's the torproject's property and they can take it away from him. He doesn't deserve to speak because he's probably a closeted homosexual given the fact that he was in the Navy. No one cares about Greypony or freebsd Conrad. Just give it up. Greypony is like the crap that gets stuck in your dick after you're done vigorously fucking a girl in the ass for 10 hours. You'll get a sliver of impacted shit on your dick and that's Greypony a sliver of annoying impacted shit. Sent with [ProtonMail](https://protonmail.com) Secure Email.

1 0

Re: [tor-relays] [tor-talk] Tor diversity (was: Explain yourself Conrad Rockenhaus)
by René Ladan 02 May '19

02 May '19

Op do 2 mei 2019 09:43 schreef Tor Revolution < isupportthenewrevolution(a)protonmail.com>: > You are probably trying to push hacked FreeBSD or that hacked HardenedBSD > stuff that no one cares about anyway. If people cared about more FreeBSD on > Tor they would do it but obviously it's not a big issue!!! > Ignoring half-baked accusations against Conrad for now. Having relays running something else than Ubuntu *is* an important issue. This does not have to be FreeBSD/HardenedBSD, it can also be OpenBSD/NetBSD, MacOS, or even Windows. The point is that if someone (say the NSA) discovers a bug in Ubuntu which they can use to take over relays, and 95% (or so) of the relays run Ubuntu, then they can take over Tor. If a significant part of the relays run something else, then those relays are safe for the exploit and consequently becomes harder for the NSA to take over Tor. As for why 95% of the relays runs on Ubuntu, I guess it is legacy. At least https://support.torproject.org/#operators advertises multiple operating systems. See also https://torbsd.github.io/ René (running "ymkeo" on FreeBSD for almost 5 years now)

3 2

Re: [tor-relays] [tor-talk] Explain yourself Conrad Rockenhaus
by Tor Revolution 02 May '19

02 May '19

> This is another reminder to please keep posts on-topic and civil. > > This is not the place for personal attacks. > The sooner that the Tor community is rid of this filth known as "Conrad Rockenhaus" the sooner people will stop talking about him. Why are you defending him? > > > On 2 May 2019, at 09:43, Tor Revolution isupportthenewrevolution(a)protonmail.com wrote: > > Per your LinkedIn: > > You worked at the National Reconnaissance Office of the United States which is the most secretive branch of the United States Intelligence Community > > You worked at the Naval Security Group Activity which is the United States Navy's version of the National Security Agency > > You have a Security Clearance but you don't specify what type but I wonder why someone with a SECURITY CLEARANCE would want to work with Tor > > Teor called you out months ago as a US Government Spy and I'm glad that the Tor Community Council is calling you out with. People can post all of the advertising in the world but as long as you're called out Mr US Federal Government Spy then they're doing the right thing. You are probably trying to push hacked FreeBSD or that hacked HardenedBSD stuff that no one cares about anyway. If people cared about more FreeBSD on Tor they would do it but obviously it's not a big issue!!! It's not a big issue to spin up our Hetzner exits at least we know that a spy not you isnt doing it!!! > > > > Sent with ProtonMail Secure Email. > > > > ----------------------------------- > > > > tor-talk mailing list - tor-talk(a)lists.torproject.org > > To unsubscribe or change other settings go to > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk > > -- > > tor-talk mailing list - tor-talk(a)lists.torproject.org > To unsubscribe or change other settings go to > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

2 1

Explain yourself Conrad Rockenhaus
by Tor Revolution 02 May '19

02 May '19

Per your LinkedIn: You worked at the National Reconnaissance Office of the United States which is the most secretive branch of the United States Intelligence Community You worked at the Naval Security Group Activity which is the United States Navy's version of the National Security Agency You have a Security Clearance but you don't specify what type but I wonder why someone with a SECURITY CLEARANCE would want to work with Tor Teor called you out months ago as a US Government Spy and I'm glad that the Tor Community Council is calling you out with. People can post all of the advertising in the world but as long as you're called out Mr US Federal Government Spy then they're doing the right thing. You are probably trying to push hacked FreeBSD or that hacked HardenedBSD stuff that no one cares about anyway. If people cared about more FreeBSD on Tor they would do it but obviously it's not a big issue!!! It's not a big issue to spin up our Hetzner exits at least we know that a spy not you isnt doing it!!! Sent with [ProtonMail](https://protonmail.com) Secure Email.

1 0

SENDME CELL
by marziyeh latifi 30 Apr '19

30 Apr '19

Hello, I have two questions about SENDME cell in TOR: Is SENDME a Control cell or a Relay cell? Which node does interpret SENDME cells?The node that receives them or the edge node(client/exit)? thanks

2 2

Re: [tor-relays] Well, what exactly are you trying to contribute with your efforts?
by Conrad Rockenhaus 29 Apr '19

29 Apr '19

On Wed, Apr 17, 2019 at 5:49 PM Seby <seby2kt14(a)gmail.com> wrote: > > Here we go again... > This dude just won't stop harassing us with masked advertising, commercial > offers and monetary asks. Every time even the most boring thing needs to be > publicly shouted on these mail lists, every time he does something > extraordinary, something quite unusual that none of you mortals could ever > do like running a middle relay on a small virtual machine, or a 500KB/s > bridge. > Actually, it's not masked advertising for commercial offers. It's nonprofit solicitation to assist other users that are interested in expanding Tor's FreeBSD Resiliency. There's quite a few people that would like to help but aren't comfortable making the plunge on their own. Increasing the number of FreeBSD machines ensures we don't have a single point of failure as the number of Linux machines presently on Tor greatly outweighs the number of FreeBSD machines on Tor. This was previously discussed, but I'm sure you weren't paying attention, but that's where the project started from and it was always a nonprofit project to begin with. In addition, we're now assisting with AS divestment as well, to try to get people off of highly populated ASes so those don't form single points of failure. Which is another goal of the Project, from what I have been told. I understand you may not get that, so I'll explain it as simply as possible - too many middle relays and exits are getting service from the same service providers. We are trying to help provide another Tor friendly service provider to the table (which runs separately from this since that's a commercial operation). When we had are stuff fully online, we occupied all 15 top spots of the highest bandwidth exits in Canada. Right now my highest performing exit in the US is in the Top 10 but I've been scaling that exit down as I'm not sure if I'm keeping my personal items online anymore at this point. Finally, the GreyPony project has been there to make it be able for an enduser be able to easily setup and get going on their first new relay with dedicated support, sometimes people want that extra hand. Before you trash a project before you should learn about it, but all you've been doing is trashing things. Maybe you should try contributing to something and ignoring things you disagree with or asking questions if you don't understand it, instead of just resorting to talking trash about a project. I just makes it look like you have plenty of free time to mock others because you aren't helping others, but that's my take on things. -- Conrad Rockenhaus https://www.rockenhaus.com Cell: (254) 292-3350 Fax: (254) 875-0459

3 4

Reddit is starting to block my relays ...
by abuse net 28 Apr '19

28 Apr '19

https://i.imgur.com/nF3FR0V.png <https://i.imgur.com/nF3FR0V.png> WTF?

2 1