- tor-relays - lists.torproject.org

Tor Meetup in Hamburg, April 26th
by Alexander Dietrich 27 Apr '19

27 Apr '19

English: We would like to invite people interested in the Tor project and relay operators in the Hamburg area to meet at University of Hamburg, Department of Computer Science. There will be an introduction to Tor, a Q&A session and a brief announcement about a newly founded Hamburg-based Tor association. We would love for relay operators to meet and discuss ways of strengthening the network. Be seeing you! When: Friday, April 26th, 7:00 PM Where: Informatikum, Building F, Room F-027 University of Hamburg, Vogt-Kölln-Straße 30, 22527 Hamburg Public Transportation: https://www.hvv.de/(Destination: Informatikum) Deutsch: Wir möchten am Tor-Projekt interessierte Menschen und Relay-Betreiber aus Hamburg und Umgebung einladen, sich am Informatikum der Universität Hamburg zu treffen. Es wird eine Tor-Einführung, eine Frage-Antwort-Runde und eine kurze Ankündigung eines neugegründeten Hamburger Tor-Vereins geben. Wir würden uns freuen, wenn sich Relay-Betreiber treffen und Wege diskutieren, das Netzwerk zu stärken. Wir sehen uns! Wann: Freitag, 26. April 2019, 19:00 Uhr Wo: Informatikum, Gebäude F, Raum F-027 Universität Hamburg, Vogt-Kölln-Straße 30, 22527 Hamburg ÖPNV: https://www.hvv.de/(Ziel: Informatikum) Kind regards, Alexander -- PGP Key: https://dietrich.cx/pgp | 0x52FA4EE1722D54EB

1 1

relay unresponsive - relay resumed - stable-flag
by digitalist00 27 Apr '19

27 Apr '19

Hello! Maybe this is the cause why I've lost my stable-flag. Does anybody know how to fix this. The relay runs on a Raspberry. Need any further information? Yours digitalist [Unbenannt.JPG] Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2

firewall ports needed to run a middle relay
by torix＠protonmail.com 26 Apr '19

26 Apr '19

I need to move to a new router, which, unlike the old Verizon home router, doesn't have a quick DMZ host to which I attach the tor telay's local ip address. So I think I need to do port forwarding, and for that what rules do I need? My torrc config has: ControlPort 9052 ORPort 8443 DirPort 8080 So I forwarded 8443 and just in case, 8080. But the number of my connexions kept dropping, so I put it back in the DMZ and it started getting new ones again. Trying to figure out if I screwed up the config gui, or if I need to add other ports. Did I miss a port? TIA, --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

5 6

Re: [tor-relays] Research on the live Tor Network and the Tor Research Safety Board
by nusenu 25 Apr '19

25 Apr '19

FYI nusenu wrote (2019-04-20): > Hi there, > > we noticed your tor relays and were wondering whether you > submitted your research to the Tor Research Safety Board > for review since your email address and amount of relays suggests > you are doing research. > > https://research.torproject.org/safetyboard.html > > https://nusenu.github.io/OrNetRadar/2019/04/17/a3 > > kind regards, > nusenu > > -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

1 0

ipv6 behaviour consensus
by Charly Ghislain 19 Apr '19

19 Apr '19

Hi list, Last reply from s7r on jake Visser' issue included a link to an open issue waiting for a consensus on a mailing list: https://trac.torproject.org/projects/tor/ticket/29570 Not sure if teor implied the dev mailing list or this one, but maybe gathering feedback from operators is a good idea. AFAIC, as avee stated on the ticket I don't find the current setup much confusing. The documentation on ipv6 setup was not as clear as one would expect, I came across what appeared to be outdated docs, and I think this is the area that could be improved to eases operator setup. I agree with Avee that any update on that matter should be backward compatible, allowing relays running behind custom natted networks to continue operating without any trouble. I feel there is an issue in case the operator advertises an unreachable ip6 address in the config. This seems like a configuration error that should be spotted by a self-reachability mechanism that is yet to come, like for ipv4. I can imagine however that directories could be able to flag the relay as reachable over ipv4 and not over ipv6, and that the relay would still be usable over ip4. I thought it was the case actually. Please provide your feedback. ip6 is around for so long, it is depressing to see how hard it is for so many software to provide a nice user experience with it. Regards, Charly

5 6

Debugging relays not showing online
by Jake Visser 18 Apr '19

18 Apr '19

Hi all, I am looking for some help in debugging a strange one.... EO runs ~30ish relays in our /24; but we currently have 4 relays that don't want to play nice and are reporting offline (although look to be online). The effected relay IPs are: 23.129.64.157 23.129.64.164 23.129.64.170 23.129.64.174 The first 3 do show on Metrics, and when they are restarted or rebuilt (we use relayor), metrics does pick it up.. in terms that its "uptime" is updated to reflect the restart, although still marked offline. The 4th - doesn't show at all... it is in the family members though. Looking more closely at: 23.129.64.157 (183C8C6727E2137AF278B3850AD5D9C2304B98C9); using nyx with debug messaging; 2 hours after a restart, I can still see active circuits, and I can see it doing "things" [logs bellow], and http://23.129.64.157 loads (we run the exit page). Is there anything I could be doing or look at to indicate what might be creating such a strange issue? All the other relays in the family seem to be working fine.. https://metrics.torproject.org/rs.html#search/family:183C8C6727E2137AF278B3… (and all built and managed with relayor using offline keys..). These have been online for about 10 days now. Help / guidance would be greatly appraised... Thanks, Jake Events (DEBUG-ERR, NYX NOTICE-ERR): x 10:48:54 [DEBUG] conn_read_callback: socket 18 wants to read. [181 duplicates hidden] x 10:48:50 [DEBUG] connection_or_process_cells_from_inbuf: 14: starting, inbuf_datalen 0 (0 pending in tls object). [83 duplicates hidden] x 10:48:50 [DEBUG] connection_or_process_cells_from_inbuf: 14: starting, inbuf_datalen 514 (0 pending in tls object). [83 duplicates hidden] x 10:48:50 [DEBUG] connection_buf_read_from_socket: After TLS read of 514: 543 read, 0 written [99 duplicates hidden] x 10:48:50 [DEBUG] connection_buf_read_from_socket: 14: starting, inbuf_datalen 0 (0 pending in tls object). at_most 16448. [105 duplicates hidden] x 10:48:50 [DEBUG] conn_read_callback: socket 14 wants to read. [83 duplicates hidden] x 10:48:43 [INFO] update_consensus_router_descriptor_downloads: 0 router descriptors downloadable. 0 delayed; 6722 present (0 of those were in old_routers); 0 would_reject; 0 wouldnt_use; 0 in progress. [9 duplicates hidden] x 10:48:39 [DEBUG] connection_or_process_cells_from_inbuf: 25: starting, inbuf_datalen 0 (0 pending in tls object). [1 duplicate hidden] x 10:48:39 [DEBUG] connection_or_process_cells_from_inbuf: 25: starting, inbuf_datalen 514 (0 pending in tls object). [1 duplicate hidden] x 10:48:39 [DEBUG] conn_read_callback: socket 25 wants to read. [1 duplicate hidden] x 10:48:39 [DEBUG] connection_or_process_cells_from_inbuf: 17: starting, inbuf_datalen 0 (0 pending in tls object). [1 duplicate hidden] x 10:48:39 [DEBUG] connection_or_process_cells_from_inbuf: 17: starting, inbuf_datalen 514 (0 pending in tls object). [1 duplicate hidden] x 10:48:39 [DEBUG] conn_read_callback: socket 17 wants to read. [1 duplicate hidden] x 10:48:39 [DEBUG] connection_handle_write_impl: After TLS write of 514: 0 read, 543 written [17 duplicates hidden] x 10:48:39 [DEBUG] flush_chunk_tls: flushed 514 bytes, 0 ready to flush, 0 remain. [17 duplicates hidden] x 10:48:39 [DEBUG] conn_write_callback: socket 25 wants to write. [1 duplicate hidden] x 10:48:39 [DEBUG] conn_write_callback: socket 17 wants to write. [1 duplicate hidden] x 10:48:39 [DEBUG] run_connection_housekeeping: Sending keepalive to (199.58.81.140:443) [1 duplicate hidden] x 10:48:39 [DEBUG] run_connection_housekeeping: Sending keepalive to (154.35.175.225:443) [1 duplicate hidden] x 10:48:16 [INFO] routerlist_remove_old_routers: We have 6869 live routers and 820 old router descriptors. [8 duplicates hidden] x 10:48:16 [DEBUG] resolve_my_address: Resolved Address to '23.129.64.157'. [8 duplicates hidden] x 10:48:13 [DEBUG] connection_or_process_cells_from_inbuf: 23: starting, inbuf_datalen 0 (0 pending in tls object). [1 duplicate hidden] x 10:48:13 [DEBUG] connection_or_process_cells_from_inbuf: 23: starting, inbuf_datalen 514 (0 pending in tls object). [1 duplicate hidden] x 10:48:13 [DEBUG] conn_read_callback: socket 23 wants to read. [1 duplicate hidden] x 10:48:13 [DEBUG] conn_write_callback: socket 23 wants to write. [1 duplicate hidden] x 10:48:13 [DEBUG] run_connection_housekeeping: Sending keepalive to (128.31.0.34:9101) [1 duplicate hidden] x 10:48:09 [DEBUG] conn_write_callback: socket 14 wants to write. [1 duplicate hidden] x 10:48:09 [DEBUG] run_connection_housekeeping: Sending keepalive to (217.20.130.72:9001) [1 duplicate hidden] x 10:46:53 [DEBUG] connection_or_process_cells_from_inbuf: 21: starting, inbuf_datalen 0 (0 pending in tls object). [1 duplicate hidden] x 10:46:53 [DEBUG] connection_or_process_cells_from_inbuf: 21: starting, inbuf_datalen 514 (0 pending in tls object). [1 duplicate hidden] x 10:46:53 [DEBUG] conn_read_callback: socket 21 wants to read. [1 duplicate hidden] x 10:46:53 [DEBUG] conn_write_callback: socket 21 wants to write. [1 duplicate hidden] x 10:46:53 [DEBUG] run_connection_housekeeping: Sending keepalive to (194.109.206.212:443) [1 duplicate hidden] x 10:46:40 [DEBUG] connection_or_process_cells_from_inbuf: 20: starting, inbuf_datalen 0 (0 pending in tls object). [1 duplicate hidden] x 10:46:40 [DEBUG] connection_or_process_cells_from_inbuf: 20: starting, inbuf_datalen 514 (0 pending in tls object). [1 duplicate hidden] x 10:46:40 [DEBUG] conn_read_callback: socket 20 wants to read. [1 duplicate hidden] x 10:46:40 [DEBUG] conn_write_callback: socket 20 wants to write. [1 duplicate hidden] x 10:46:40 [DEBUG] run_connection_housekeeping: Sending keepalive to (171.25.193.9:80) [1 duplicate hidden] x 10:46:26 [DEBUG] connection_or_process_cells_from_inbuf: 19: starting, inbuf_datalen 0 (0 pending in tls object). [1 duplicate hidden] x 10:46:26 [DEBUG] connection_or_process_cells_from_inbuf: 19: starting, inbuf_datalen 514 (0 pending in tls object). [1 duplicate hidden] x 10:46:26 [DEBUG] conn_read_callback: socket 19 wants to read. [1 duplicate hidden] x 10:46:26 [DEBUG] conn_write_callback: socket 19 wants to write. [1 duplicate hidden] x 10:46:26 [DEBUG] run_connection_housekeeping: Sending keepalive to (204.13.164.118:443) [1 duplicate hidden] x 10:46:23 [DEBUG] connection_or_process_cells_from_inbuf: 22: starting, inbuf_datalen 0 (0 pending in tls object). [1 duplicate hidden] x 10:46:23 [DEBUG] connection_or_process_cells_from_inbuf: 22: starting, inbuf_datalen 514 (0 pending in tls object). [1 duplicate hidden] x 10:46:23 [DEBUG] conn_read_callback: socket 22 wants to read. [1 duplicate hidden] x 10:46:22 [DEBUG] conn_write_callback: socket 22 wants to write. [1 duplicate hidden] x 10:46:22 [DEBUG] run_connection_housekeeping: Sending keepalive to (86.59.21.38:443) [1 duplicate hidden] x 10:46:10 [DEBUG] consdiffmgr_cleanup: Looking for consdiffmgr entries to remove qj 10:45:58 [DEBUG] connection_or_process_cells_from_inbuf: 15: starting, inbuf_datalen 0 (0 pending in tls object). [1 duplicate hidden]

3 3

Quoting spam considered harmful
by Ralph Seichter 18 Apr '19

18 Apr '19

* Seby: > This dude just won't stop harassing us with masked advertising, > commercial offers and monetary asks. [...] My mail killfile is useful for discarding mail by specific senders, but quoting their posts negates that effect, so please don't. Thanks. -Ralph

2 5

Re: [tor-relays] [tor-talk] Anyone interested in running FreeBSD or Linux Exit Relays on AS19624?
by grarpamp 17 Apr '19

17 Apr '19

On 4/17/19, Seby <seby2kt14(a)gmail.com> wrote: > Here we go again... Not really different than all the quasi or non profit tor node groups posting their news now and then. Nos onions, torservers, emerald onions, noisebridge, etc. Hey look at me, join us, give us money, we're doing stuff, etc. So long as it supports the overlay networks, gets nodes running on them, etc... some diversity in approach to that isn't going to kill you, else hit your 'block' button. Maybe even some new operators-to-be like the offer of somehow working together with a hosters to get started funding and running their nodes that they would otherwise not be so confidant to do right away as a first step. Worry about MyFamily and good ops instead. > stop OMFG yes, please stop top posting, all of you.

1 0

Anyone interested in running FreeBSD or Linux Exit Relays on AS19624?
by Conrad Rockenhaus 17 Apr '19

17 Apr '19

For a small donation in relation to the number of physical CPUs (and x cores each) plus bandwidth you want, (mbp/s or gbp/s) I can provide you your own instance on my OpenStack cloud that I just built out on AS19624. No exit policy restrictions, I handle all abuse complaints, so you won’t have to worry about any abuse takedowns. This is the only time I’ll mention it here. If anyone is interested, please email me directly. Thanks, Conrad

4 3

Making use of new bandwidth
by Logforme 11 Apr '19

11 Apr '19

I run the non-exit relay: https://metrics.torproject.org/rs.html#details/855BC2DABE24C861CD887DB9B2E9… The relay run on a debian stretch machine with an i5-4670 at 3.8GHz with 4GB memory. CPU usage at 250Mbps traffic is around 40% of 1 core out of 4. On April 1st my ISP doubled my bandwidth, from 250Mbps to 500Mbps. So far the Tor bandwidth authorities seems to not have picked up on all the new bandwidth. The observed bandwidth number has changed twice, increasing with small amounts. How long does it take for the BW authorities to eventually observe a BW closer to 500Mbps. Weeks? Months? The reason I ask is that I wonder if I should run a second Tor instance or if the current one will be able to make use a a reasonable part of the 500Mps.

5 8

Dirauth running new bandwidth scanner version
by juga 10 Apr '19

10 Apr '19

Hi!, >From this moment longclaw is using a new bandwidth scanner version [0]. If you detect any issues with longclaw's voted bandwidth, please email me or open a ticket in Tor project trac [1]. Thanks, juga. [0] sbws.rtfd.io [1] trac.torproject.org

1 0

Advertised Bandwidth/Consensus Weight Dropping: Is Verizon FiOS throttling Tor Relays?
by Neel Chauhan 09 Apr '19

09 Apr '19

Hi tor-relays@ mailing list, I run the following Tor middle relay on a 300 Mbps symmetrical Verizon FiOS connection: https://metrics.torproject.org/rs.html#details/2A65713649C1FD68764DBF43C463… My setup is as follows: * HPE MicroServer Gen10 (AMD X3421) running FreeBSD 12.0 * Tor relay in FreeBSD 12.0 jail, with "RelayBandwidthRate 0" * Linksys WRT1900AC running OpenWrt The Linksys is connected directly to Verizon's ONT (which converts fiber/GPON to Ethernet) and no Verizon-branded router is used in my setup. The problem is that after setting up my relay, I had my Tor Advertised Bandwidth and Consensus Weight values trend downwards for the past week. Sometimes, I have occasional spikes in consensus weight. This relay has a new fingerprint, but used this server with another fingerprint as well. On the previous fingerprint, I reached a peak of 19.5 MB/s (~160 Mbps) for the Advertised Bandwidth but has dropped to ~10 MB/s (~80 Mbps). The previous fingerprint also had the same server and router. I am thinking the issue is one of the two: 1. Tor bandwidth authority nodes are overloaded or have bad connectivity to Verizon 2. Verizon is intentionally throttling Tor on FiOS 3. The relay ramp-up phase is still in action for my relay and I need to wait I am suspecting reason 2, as I had seen my bandwidth values drop, and unable to reach higher values. For some reason, other relays on AS701 (Verizon's AS Number) have higher Advertised Bandwidth/Consensus Weight values than me (around ~18.7MB/s on the fastest relay): https://metrics.torproject.org/rs.html#search/as:AS701 Sometimes, the other FiOS relays can go up to ~23 MB/s (~184 Mbps). Is Verizon throttling Tor or are Tor bandwidth authority nodes just overloaded (or have bad peering with Verizon)? Or is it just the relay ramp-up phase in action? Thank You, Neel Chauhan

1 0

Another Slow Relay
by Ben Riley 09 Apr '19

09 Apr '19

Hi everyone, I've read over a couple of other threads regarding relays being slow, however, I can't figure out why mine is running as slow as it is. I used to have a FAST flag and was getting a throughput of several hundred KB/sec on my relay. Now I can't remember if I upgraded TOR or just updated the OS, but I lost the flag. I figured that I'd changed something and would have to 'earn' it again after a few days, week and now months? According to NYX, my average is 6.4KB/sec. I did have the limit set to 1MB and 2MB burst for the last few months thinking that would be more than enough. This morning I changed those (via NYX) to 0 (default) 1GB/s and it looks like it's starting to climb. My internet connection is on a home set up with a connection speed of about 97Mb, so plenty of speed available. If you look at my previous reports on: https://metrics.torproject.org/rs.html#details/9F19251CEE17B1E05084898D164F… there appears to be a massive drop off in speed during Feb 2019. I'm open to suggestion. Additionally, I'm considering opening an exit port, but everyone seems to say that is a REALLY bad idea on a home set up. Plus I don't really know what I'm doing :)

3 5

Please help, my relay is unresponsive
by digitalist00 08 Apr '19

08 Apr '19

Dear helpers! Nyx says that my relay is unresponsive and that it was resumed. As I write this mail I have already 334 duplicates hidden. What's my problem and how can I solve this? The relay runs on a Raspberry Pi and is connected via LAN. Yours Digitalist [Unbenannt.JPG] Sent with [ProtonMail](https://protonmail.com) Secure Email.

4 16

IPv6 not provided, guard relay
by digitalist00 08 Apr '19

08 Apr '19

Hello! I have read that it's recommended to enable IPv6 for a tor middle relay. But my provider doesn't offer IPv6. Is IPv6 required to become a guard middle relay? Yours Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2

Relay C19B33758B3A5144894233EC4C95D7985B9FD101
by ylms 08 Apr '19

08 Apr '19

Hello, I just setup a new exit, I know it takes time to "train", but I would be interested in tips on how to tweak it. I just replaces a old exit that used the same IP, but unfortunately we lost that config/key. So any tips are welcome in general. I also have some questions. Atlas does not show any IPv6 address, is this normal? WHat loglevel can I set to see if there is any problems, to find possible improvements? I know the logging should not be changed, but I want tot make sure tor works fine, so I would like to see some more information for now. Thanks for your help. yl

6 14

Re: [tor-relays] Relay C19B33758B3A5144894233EC4C95D7985B9FD101
by ylms 08 Apr '19

08 Apr '19

On 4/5/19 12:36 PM, torgate(a)linux-hus.dk wrote: > hi, the adress is in use check what is running on your system and check > also the ports sudo lsof -i -P -n | grep LISTEN does not show any ports used twice for the same address. yl

1 0

is a good idea to run a ssh honeypot?
by caioau 07 Apr '19

07 Apr '19

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, I been running a relay for almost 1,5 year, and in the beginning I didn't change the default 22 ssh port but a lot of people were trying to login , no worries I only allow public key authentication. So I was wondering if I could record the attacks, so I find this https://haas.nic.cz/ service and I'm running on my relay, is it a good idea? Thanks Sent with ProtonMail Secure Email. -----BEGIN PGP SIGNATURE----- Version: ProtonMail Comment: https://protonmail.com wsBcBAEBCAAGBQJcqlUBAAoJEO6drAP5JZWbZ30H/i5UlyLceKIKB1osoA16 W0x2YZWoLw8Lvifxt0ijwQSLdzU5H1CTXxHoQJLpygESdGJMbBYiOGirRnWR nnlHqnbHHwUbZDUsxUBZTBrutwVaXXmswYyfrgZvJo17ocSaT2goaPJ0F9oK JHpzDegTOIE6hbwUI3BnDLI6u7/gCE1ZvgrzSbIvXebZ8XKC67j0AwhKMX0Q zUjLpXQ2eq5XLKPlOnXUc/i6xYCIoNjoBRSHX95hd2N4zy7xuZ3UhrVn0ZBi 7ZRjo77h7BeRsB3F9bA61DfgN9pM+J+R9sPU3qYClXPB/cOJmyVqVFtcT7NK 0Tz+mfbFNI8KfhN9ZHMS16Q= =FsLz -----END PGP SIGNATURE-----

2 1

Re: [tor-relays] is a good idea to run a ssh honeypot?
by caioau 07 Apr '19

07 Apr '19

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I use ufw as my firewall and it's set to limit ssh so if there's someone brute forcing the ssh it will get blocked for a time Sent with ProtonMail Secure Email. ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Sunday, April 7, 2019 7:54 PM, Elmar Otter <mailer(a)elmarotter.eu> wrote: > Hello, > > Why don't you use Fail2Ban? > > Greatings, Elmar > > Op 07-04-19 om 21:52 schreef caioau: > > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA256 > > > > Hi, I been running a relay for almost 1,5 year, and in the beginning I didn't change the default 22 ssh port but a lot of people were trying to login , no worries I only allow public key authentication. > > > > So I was wondering if I could record the attacks, so I find this https://haas.nic.cz/ service and I'm running on my relay, is it a good idea? > > > > Thanks > > > > Sent with ProtonMail Secure Email. > > -----BEGIN PGP SIGNATURE----- > > Version: ProtonMail > > Comment: https://protonmail.com > > > > wsBcBAEBCAAGBQJcqlUBAAoJEO6drAP5JZWbZ30H/i5UlyLceKIKB1osoA16 > > W0x2YZWoLw8Lvifxt0ijwQSLdzU5H1CTXxHoQJLpygESdGJMbBYiOGirRnWR > > nnlHqnbHHwUbZDUsxUBZTBrutwVaXXmswYyfrgZvJo17ocSaT2goaPJ0F9oK > > JHpzDegTOIE6hbwUI3BnDLI6u7/gCE1ZvgrzSbIvXebZ8XKC67j0AwhKMX0Q > > zUjLpXQ2eq5XLKPlOnXUc/i6xYCIoNjoBRSHX95hd2N4zy7xuZ3UhrVn0ZBi > > 7ZRjo77h7BeRsB3F9bA61DfgN9pM+J+R9sPU3qYClXPB/cOJmyVqVFtcT7NK > > 0Tz+mfbFNI8KfhN9ZHMS16Q= > > =FsLz > > -----END PGP SIGNATURE----- > > > > _______________________________________________ > > tor-relays mailing list > > tor-relays(a)lists.torproject.org > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays -----BEGIN PGP SIGNATURE----- Version: ProtonMail Comment: https://protonmail.com wsBcBAEBCAAGBQJcqlaMAAoJEO6drAP5JZWbQWIH/ilOz3NVPG5J+GpiNDv5 ju59FlI0TaxdS30sR1AwPhEnROGfso0vELw9EXVgmUrZbYYK05pa95FnHEps bHQSTJhkD7bMHzMYs/5O/mWTLA3CNHBGOuJW42pC/5l8EG8/+/vxNMKpfDJD zmft+QketkX/0n0vznmrO4kwn8pKVagqcBvkIMFSA2KvYRW/ldFA2xkNk6oR NbKGUAcCCU29erzwpDPfK4XOf+Qeqmrr1QOCPtX1OYLJSYZJgArPtUrG7Wy9 gcEyHsUO4GfEbhGWMqUiRHR3nlZnzRlFaVyYAJ5h292dZU1hh/Zb11DoCRzS FJXH901okncTHTqzs9PVdx0= =itms -----END PGP SIGNATURE-----

1 0

FallbackDir
by Conrad Rockenhaus 07 Apr '19

07 Apr '19

Is their a need for any more FallbackDirs? Thanks, Conrad -- Conrad Rockenhaus https://www.rockenhaus.com Cell: (254) 292-3350 Fax: (254) 875-0459

2 1

exit operators: tor-exit-notice.html file needs updating to solve 404
by nusenu 07 Apr '19

07 Apr '19

Hi, due to some recent changes on the tor project website some URLs in the default tor-exit-notice html file that many exit operators use result in 404s. To prevent 404 simply add "2019." at the beginning of the URLs. If you are using ansible-relayor this is fixed in v19.1.5 (released on 2019-04-06). and rerunning the playbook should fix it for you unless you use a custom file via 'tor_exit_notice_file'. upstream: https://trac.torproject.org/projects/tor/ticket/30052 -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

3 5

Question about new website
by Keifer Bly 06 Apr '19

06 Apr '19

Hi all, the new website looks nice. I like the look of it. I have one question, where can the tor expert bundle be downloaded from now? Thanks. -- --Keifer

2 5

mailing list tone
by George 05 Apr '19

05 Apr '19

The mailing list is specifically for Tor relay operators and related issues. There's no space for personal attacks. Such attacks debase the main purpose of this mailing list, and set a negative tone for everyone, including those who are just watching the attacks. Additionally, condescending remarks like: >> No one else cares about you and your confused lackeys attempts to >> be big-boy tor relay operators. ...have no place here. Such remarks can discourage newcomers who are still learning, especially those who are not men. It reinforces the outdated idea that the relay operator community is a boys' club for the properly initiated. Let's respectfully help people who are still learning, and let's also be respectful about giving constructive feedback when people behave in ways we might not like. We want a mailing list environment that is conducive to both new and experienced relay operators to engage in fruitful discussions. We ask that you follow those guidelines, or leave. George for the Tor Community Council -- 34A6 0A1F F8EF B465 866F F0C5 5D92 1FD1 ECF6 1682

2 1

High Speed Exit Relay or just a plain Relay?
by Conrad Rockenhaus 05 Apr '19

05 Apr '19

Hello, I have a FreeBSD box on a 1 Gbit/s connection. I'm trying to determine if we need more high speed relays or high speed exit relays. The AS it's on has no plain relays, just exit relays. That's what has me wondering what to do. So, what is the general consensus - should it be an exit or just a plain relay? Thanks, Conrad -- Conrad Rockenhaus https://www.rockenhaus.com Cell: (254) 292-3350 Fax: (254) 875-0459

6 6

Re: [tor-relays] Hello
by Old Man Tor 04 Apr '19

04 Apr '19

Sorry to hear that, that's really unfortunate and I would never want to wish that upon anyone. I wish you a speedy recovery with hopefully no lasting side effects. That said, it has been a GOOD amount of quiet while you've been gone. For the love of god/shiva/onions, please don't let these new relays turn into Conrad and Nathaniel 'Cordially' Suchy's DeadGreyPonyIT show again. No one else cares about you and your confused lackeys attempts to be big-boy tor relay operators. If you wish to join the network again, please do it in the style of someone respectable like Quintex - He just 'does' it, and doesn't clog up everyone's inboxes with useless messages about new nodes/downtime/'customers'/things that should be experimented with or tested on your own first. It's not a competition to get the fastest speeds from a box, the most nodes (maybe a personal goal, being mindful of operator percentages) or anything else. We're just here for the bigger cause. We, and all tor users appreciate your efforts in running a relay of any kind, we can just do without the 'look at me' circus again. Love, Old Man Tor. [Sent from a throwaway account, over Tor of course. Cowardly, but I said what needed to be said that a lot of other relay operators are thinking but are too scared to say.] From:Conrad Rockenhaus<conrad(a)rockenhaus.com> Date: Thu Apr 4 04:48:01 UTC 2019 Subject: [tor-relays] Hello To: Tor Relay Mailinglist <tor-relays(a)lists.torproject.org> Hi Tor-Relays, I apologize that I just disappeared, I wound up with a massive stroke last year which was more significant than the last one and was hospitalized longer for recovery and rehabilitation. Things just kind of fell to the wayside since it's kind of hard to computer when you can't computer :P. Anyway, I've been home for the past few weeks and starting to get back into my old hobbies again. I brought two new exit relays up in NYC, one Linux, and one FreeBSD on 1 Gb/s Links. I have another FreeBSD box in NYC on a 1 Gb/s link that I'm trying to think if I should make an exit relay or just a regular relay. Relay names - greyponyitnyc001 and greyponyitnyc002. I hope everyone is having a good day! -- Conrad Rockenhaus https://www.rockenhaus.com Cell: (254) 292-3350 Fax: (254) 875-0459 _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

4 4

Representing Megabits correctly (ex: Slow Relay)
by grarpamp 04 Apr '19

04 Apr '19

>> 97Mb >> speeds at 11Mb/sec. >> couple of meg > be careful with > Megabit (Mb) vs. MegaByte (MB). > Here is the part with the important information: > With this option, and in other options that take arguments in bytes, > KBytes, and so on, other formats are also supported. Notably, "KBytes" > can also be written as "kilobytes" or "kb"; "MBytes" can be written as > "megabytes" or "MB"; "kbits" can be written as "kilobits"; and so forth. > Tor also accepts "byte" and "bit" in the singular. The prefixes "tera" > and "T" are also recognized. If no units are given, we default to bytes. > To avoid confusion, we recommend writing "bytes" or "bits" explicitly, > since it’s easy to forget that "B" means bytes, not bits. > > Copied from here: https://2019.www.torproject.org/docs/tor-manual.html.en > 97MBit/s, and it gives you a data rate > of 11MByte/s Much misuse and bad information here as usual. See my posts that include links to the actual worldwide ratified technical standards and the appropriate representation choices for pure network applications such as tor and routers, vs disk ram storage nasty phone companies silly webhosts etc.

1 0

Hello
by Conrad Rockenhaus 04 Apr '19

04 Apr '19

Hi Tor-Relays, I apologize that I just disappeared, I wound up with a massive stroke last year which was more significant than the last one and was hospitalized longer for recovery and rehabilitation. Things just kind of fell to the wayside since it's kind of hard to computer when you can't computer :P. Anyway, I've been home for the past few weeks and starting to get back into my old hobbies again. I brought two new exit relays up in NYC, one Linux, and one FreeBSD on 1 Gb/s Links. I have another FreeBSD box in NYC on a 1 Gb/s link that I'm trying to think if I should make an exit relay or just a regular relay. Relay names - greyponyitnyc001 and greyponyitnyc002. I hope everyone is having a good day! -- Conrad Rockenhaus https://www.rockenhaus.com Cell: (254) 292-3350 Fax: (254) 875-0459

3 2

Spamcop question
by ylms 04 Apr '19

04 Apr '19

Hello fellow Tor-Exit operators, today I got the following Abuse message: //Start [ SpamCop V5.0.0 ] This message is brief for your comfort. Please use links below for details. Email from 5.199.130.188 / Tue, 19 Mar 2019 12:20:30 +0000 https://www.spamcop.net/w3m?i=.....(removed) 5.199.130.188 is open proxy, see: https://www.spamcop.net/mky-proxies.html [ Offending message ] Return-Path: <admin(a)abc.gr> X-Original-To: bingobongo69(a)cd.ru Delivered-To: bingobongo69(a)cd.ru Received: from 31.184.255.247 (unknown [5.199.130.188]) by relay (Postfix) with ESMTPSA id 7cqntswbr6frkskj for <bingobongo69(a)cd.ru>; Tue, 19 Mar 2019 12:20:30 +0000 Message-ID: <EAAACECBFAFDDACFCAEABBBEC(a)abc.gr> From: <admin(a)abc.gr> To: <bingobongo69(a)cd.ru> Subject: smtp:>>smtp.efg.es,587,test(a)efg.es,123456>> Date: Tue, 19 Mar 2019 13:20:18 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1251"; Content-Transfer-Encoding: 7bit smtp:>>smtp.efg.es,587,test(a)efg.es,123456>> veblcshgtpwfdonxkebdghrwf pboqjycmmdslmliomafclayaheiuft uybveafdbnsuydqvbgyukf zsszifpadkpaufibjosuk //End I wasn't sure what to remove from the abuse message so I removed all the domains to protect the owners of these hosts/addresses, I hope I didn't miss any. My question, what did I miss in in the exit policy, I have used the following in the torrc. Maybe I did not miss anything at all. Thanks for helping me to understand how the spammer could use the the exit for spamming. I assume with the reduced exit policy spammers should not be enabled to use the exit. // torrc # Reduced Exit policy according to: https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy ExitPolicy accept *:20-21 # FTP ExitPolicy accept *:22 # SSH ExitPolicy accept *:23 # Telnet ExitPolicy accept *:43 # WHOIS ExitPolicy accept *:53 # DNS ExitPolicy accept *:79 # finger ExitPolicy accept *:80-81 # HTTP ExitPolicy accept *:88 # kerberos ExitPolicy accept *:110 # POP3 ExitPolicy accept *:143 # IMAP ExitPolicy accept *:194 # IRC ExitPolicy accept *:220 # IMAP3 ExitPolicy accept *:389 # LDAP ExitPolicy accept *:443 # HTTPS ExitPolicy accept *:464 # kpasswd ExitPolicy accept *:465 # URD for SSM (more often: an alternative SUBMISSION port, see 587) ExitPolicy accept *:531 # IRC/AIM ExitPolicy accept *:543-544 # Kerberos ExitPolicy accept *:554 # RTSP ExitPolicy accept *:563 # NNTP over SSL ExitPolicy accept *:587 # SUBMISSION (authenticated clients [MUA's like Thunderbird] send mail over STARTTLS SMTP here) ExitPolicy accept *:636 # LDAP over SSL ExitPolicy accept *:706 # SILC ExitPolicy accept *:749 # kerberos ExitPolicy accept *:853 # DNS over TLS ExitPolicy accept *:873 # rsync ExitPolicy accept *:902-904 # VMware ExitPolicy accept *:981 # Remote HTTPS management for firewall ExitPolicy accept *:989-990 # FTP over SSL ExitPolicy accept *:991 # Netnews Administration System ExitPolicy accept *:992 # TELNETS ExitPolicy accept *:993 # IMAP over SSL ExitPolicy accept *:994 # IRCS ExitPolicy accept *:995 # POP3 over SSL ExitPolicy accept *:1194 # OpenVPN ExitPolicy accept *:1220 # QT Server Admin ExitPolicy accept *:1293 # PKT-KRB-IPSec ExitPolicy accept *:1500 # VLSI License Manager ExitPolicy accept *:1533 # Sametime ExitPolicy accept *:1677 # GroupWise ExitPolicy accept *:1723 # PPTP ExitPolicy accept *:1755 # RTSP ExitPolicy accept *:1863 # MSNP ExitPolicy accept *:2082 # Infowave Mobility Server ExitPolicy accept *:2083 # Secure Radius Service (radsec) ExitPolicy accept *:2086-2087 # GNUnet, ELI ExitPolicy accept *:2095-2096 # NBX ExitPolicy accept *:2102-2104 # Zephyr ExitPolicy accept *:3128 # SQUID ExitPolicy accept *:3389 # MS WBT ExitPolicy accept *:3690 # SVN ExitPolicy accept *:4321 # RWHOIS ExitPolicy accept *:4643 # Virtuozzo ExitPolicy accept *:5050 # MMCC ExitPolicy accept *:5190 # ICQ ExitPolicy accept *:5222-5223 # XMPP, XMPP over SSL ExitPolicy accept *:5228 # Android Market ExitPolicy accept *:5900 # VNC ExitPolicy accept *:6660-6669 # IRC ExitPolicy accept *:6679 # IRC SSL ExitPolicy accept *:6697 # IRC SSL ExitPolicy accept *:8000 # iRDMI ExitPolicy accept *:8008 # HTTP alternate ExitPolicy accept *:8074 # Gadu-Gadu ExitPolicy accept *:8080 # HTTP Proxies ExitPolicy accept *:8082 # HTTPS Electrum Bitcoin port ExitPolicy accept *:64738 # Mumble ExitPolicy reject *:* Regards yl

4 4

IRC relay operator meetup - April 4th
by Colin Childs 01 Apr '19

01 Apr '19

Hi everyone, This is the announcement that we will be holding the April IRC relay operator meetup this Thursday, April 4th, at 22:00UTC in #tor-meeting on irc.oftc.net. As usual, please add any agenda items to the pad below that you would like to discuss! https://storm.torproject.org/shared/_595igXmpGkxq4FdyusPOI-6zzbvwzcodMl4hl2… <https://storm.torproject.org/shared/_595igXmpGkxq4FdyusPOI-6zzbvwzcodMl4hl2…>

1 0

Protecting the bridge port from active probes
by Marek Szuba 30 Mar '19

30 Mar '19

Hello, I run a private obfuscated Tor bridge for myself and some friends. All in all it has worked fine so far but having recently run some security scans on the bridge host, I now wonder how resistant to active probing my bridge is. Apologies if this has already been asked, I have yet to find a searchable archive of this list. Anyway, here is my logic. In order to operate properly, my bridge must have its ORPort reachable from the Internet. I have chosen a port to be used for this purpose at random but these days, scanning all 64k TCP ports on a host takes mere minutes. The X.509 server certificate offered on the ORPort is rather suspicious, if only because of the randomly generated name; I suspect there might be other peculiarities as well. Therefore, I strongly suspect that it wouldn't take more than a few minutes for any attacker employing active probing to detect my bridge and block access to it. Does this make sense? And in any case, is there anything else I could do to protect my bridge against active probing? The best I could come up with is to make the bridge host periodically change the ORPort, I reckon wouldn't really help because if I had to restart tor on the bridge every few minutes the it wouldn't be of much use connectivity-wise. Having the border firewall block or slow down suspected port scans might perhaps make it possible to change the ORPort less frequently but alas, I have no control over the border firewall beyond being able to ask to open or close specific ports on my host. Thank you in advance for your time. -- MS

4 5

Tor website overhaul -- who deserves punishment?
by Ralph Seichter 30 Mar '19

30 Mar '19

Not sure if this is the right place to vent, but here goes: Whoever changed the Tor website's design seems to a) have a serious vision impairment and b) done his utmost to hide access to the Tor source code. I think the site feels dumbed down to cater only to those with the shortest attention spans (and bad eyesight) now. Also, as a relay and exit operator, I care most about the source code and documentation, not some management summary. Was there no QA process involved before rolling out the new website? Annoyed, Ralph

15 22

New TOR
by TERRY McKINNEY 30 Mar '19

30 Mar '19

Say what you like.Tor was great.Now it isn’t.I don’t know code.I do know function. terryGmckinney 201-8725 Oak st Vancouver,BC.Canada V6P4B4 (604)2639203

2 1

Relay without OpenSSL
by Alexander Nasonov 29 Mar '19

29 Mar '19

I recently tried updating one of my relays to Tor 0.4.0.1 compiled with NSS (and without OpenSSL) but it failed to start, see the logs below. I wonder if this configuration is supported at all and whether I should try running a brand new relay instead of updating? Alex [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [notice] Bootstrapped 15% (handshake_done): Handshake with a relay done [notice] Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits [notice] Bootstrapped 90% (ap_handshake_done): Handshake fininshed with a relay to build circuits [notice] Bootstrapped 95% (circuit_create): Establishing a Tor circuit [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [notice] Bootstrapped 100% (done): Done [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) -- Alex

3 5

Relay operators meetup Valencia (28.03.2019)
by Vasilis 27 Mar '19

27 Mar '19

Dear Tor friends and relay operators, Tomorrow (28.03.2019) a relay operators meetup will take place at HackerspaceVLC. When: Thursday, March 28th, 2019 Time: 18:30 Where: Hackerspace Valencia Calle Francisco Martínez, 19, Bajo CP 46020, Valencia (Benimaclet), España Map coordinates: https://www.openstreetmap.org/?mlat=39.48828&mlon=-0.35839#map=19/39.48828/… Event link: https://blog.torproject.org/events/tor-meetup-valencia Hope to see many of you there! Cheers, ~Vasilis

1 0

(no subject)
by Ahmed Ahmed 22 Mar '19

22 Mar '19

2 1

(no subject)
by Ahmed Ahmed 22 Mar '19

22 Mar '19

Aboskenaa(a)gmail.com

1 0

bride&relay one host
by lists＠for-privacy.net 22 Mar '19

22 Mar '19

Hello, Can you run a bride and a middle-relay together on a host? I mean for the safety of users. IPv6 is usually a /64 network and the various IPv4 are usually also from a subnet. -- Ciao Marco!

4 4

IRC meetup time poll
by Colin Childs 22 Mar '19

22 Mar '19

Hi everyone, We are looking at changing the current IRC relay operator meetup time, as well as adding additional times throughout the month. I have created a poll at https://xoyondo.com/dp/oyUpcPqhnnJ6TWz <https://xoyondo.com/dp/oyUpcPqhnnJ6TWz> to collect time preferences for the next meetup (all times are GMT+0). Please add your time preferences by March 15th (1 week from today) to help us better select times that work for you! Thanks, I hope you all have a great weekend!

1 2

New Relay: ShawnWebb01
by Shawn Webb 22 Mar '19

22 Mar '19

Hey all, A few days ago, I put up a new relay on a PC Engines device running HardenedBSD 13-CURRENt/amd64: https://metrics.torproject.org/rs.html#details/57869F7458002476F6AC78F7A61C… I should update ContactInfo soon to reflect the ContactInfo format nusenu would like relays to use. IPv4 address of the relay comes from Verizon FiOS and IPv6 comes from Hurricane Electric's TunnelBroker. Please let me know if you have any questions, comments, or concerns. Thanks, -- Shawn Webb Cofounder and Security Engineer HardenedBSD Tor-ified Signal: +1 443-546-8752 Tor+XMPP+OTR: lattera(a)is.a.hacker.sx GPG Key ID: 0x6A84658F52456EEE GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE

1 0

IFF relay operator meetup
by Colin Childs 20 Mar '19

20 Mar '19

Hi everyone, The Tor Project is hosting a relay operator meetup at the 2019 IFF[1]! If you are attending the IFF, please join us on Wednesday, April 3rd @ 16:00 in Los Naranjos! We will discuss common issues operators face, as well as how we can all help to grow the relay operator community both locally and globally. Note: Los Naranjos is inside the IFF venue. You will need to have a ticket for the IFF in order to attend this event. [1] https://platform.internetfreedomfestival.org/en/IFF2019/public/schedule/cus…

1 0

Bridge relay
by Cuco Cuquito 20 Mar '19

20 Mar '19

Can I run a bridge if I have only dynamic IP ? thx

4 5

update tor relay version
by FreeNetwork 18 Mar '19

18 Mar '19

Hello ! I have been hosting tor relay for 3 years and still have a version problem. Let me explain: at the installation of my relay no problem, then a few weeks after an additional flag appears when I consult the relay search tool to display the data on my relay: This relay is running a Tor version that is not recommended by the directory authorities and may contain know issues. This includes both obsolete and experimental versions. The version number used: Tor 0.3.4.9 on Linux I have already tried to update packages without success via an apt-get update I would not want to have to reinstall my relay entirely. What is the solution ? Other questions, can you confirm to me that in case of migration on another server the only key files to preserve are: - ed_master_id_secret_key - secret_id_key - secret_onion_key_ntor I tried to copy these keys to another server without success. Are relays associated with the IP address of the server? Sorry for my english ! thank you in advance for your help

3 5

Fwd: Fw: german plans on banning TOR
by flux 15 Mar '19

15 Mar '19

On 3/15/19 2:43 PM, Volker Mink wrote: > German gouvernment signs new darknet laws. Completely wrong. The Bundesrat does not sign any laws and it is not the German government. It forwards them to the Bundestag which will discuss and _perhaps_ sign it. So, not all is lost at this point. Additionally it seems to me that the intention, which potentially criminalizes running a tor relay in general, was removed by the committees. Nevertheless this peace of paper is completely useless and potentially dangerous even if its all about the so called darknet-stores. All the best flux PS: This is the wrong list as it is supposed to be used for administrative discussions. Please use the tor-talk list instead. > > > *Gesendet:* Montag, 11. März 2019 um 21:52 Uhr > *Von:* "Herbert Karl Mathé" <mail(a)hkmathe.de> > *An:* tor-talk <tor-talk(a)lists.torproject.org>, tor-relays > <tor-relays(a)lists.torproject.org>, "Seth David Schoen" <schoen(a)eff.org> > *Betreff:* [tor-relays] Fw: german plans on banning TOR > Please see below, as well as (German) legislation: > https://www.bundesrat.de/SharedDocs/drucksachen/2019/0001-0100/33-19.pdf?__…. > > Bigger picture likely to be behind as pointed out some days ago. > > Shit like this adding to tightening police forces' legislations in > various Federal States in not-so Good Old Germany. > > -- > Herbert Karl Mathé > > mail(a)hkmathe.de > PGP B9BF953500452875 https://www.hkmathe.de/pub_key_16-07-09.txt > @hkmathe > Beethovenstr. 13 60325 Frankfurt Germany > > > Begin forwarded message: > > Date: Wed, 6 Mar 2019 22:39:47 +0100 > From: Herbert Karl Mathé <mail(a)hkmathe.de> > To: niftybunny <abuse(a)to-surf-and-protect.net> > Cc: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] german plans on banning TOR > > > Let's be pragmatic: > > There's "anti-darkweb" propaganda been quite a while going on, mainly > by Federal Criminal Police Office, backed up by Christian (so-called) > Democrats, and the Nazi party, sure, pointing out like lots of > children's lives could be saved, or saved from being abused, resp., > when vanquishing "The Darkweb". Trucks (lorries), knifes, or similar > potentially lethal objects are not on their agenda. Police > spokespersons around the clock complaining being substantially > disadvantaged - should say: retarded??? > > Unsurprisingly, police forces in any legislation are not neutral, > these do not at all mirror society and its inherent diversity. Plus, > police forces very indirectly are serving the public, with any > misdemeanor or assaults to be prosecuted not before afterwards by > taking complex, costly and risky legal actions, never immediately, or > right in place. That makes a huge difference. > > What this legislation is very likely ending up is various courts > ruling through verdicts on eventually shutting down specific sites. > These verdicts might easily appear as being random, which is due to > immense lack of in-depth knowledge in related matters (see file > sharing dissuasions by dedicated law firms being backed by courts > having difficulties understanding IP addresses), also due to each and > every court ruling independent which makes it like gambling, these > courts at the same time being highly susceptible to what is believed > by them to be public opinion. > > The latter is what's being made up right with this legislative > initiative, leveraging Tor Project for staging some threat model. > Cynically enough, threat (by The Onion) again is from foreign, just > like for some time refugees had been said to be (evil propaganda which > obviously, and thank god, did not fully work out). > > In phase of weakness, it's always the outlandish being plead guilty, > being abused to deviate from domestic, and home-made, self-made failure. > > No facts yet, just some reflected opinions - as soon as such > legislation is out it'll be much harder to defend liberty. It's not > about paragraphs, or bits and bytes, it's about freedom and democracy. > > Free press, and journalists as individuals will as consequence be > under heavy suspicion for cooperating with elements of Dark Web. > > If Germany falls... > > -- > Herbert Karl Mathé > > mail(a)hkmathe.de > PGP B9BF953500452875 https://www.hkmathe.de/pub_key_16-07-09.txt > @hkmathe > Beethovenstr. 13 60325 Frankfurt Germany > > > > > On Wed, 6 Mar 2019 21:19:23 +0100 > niftybunny <abuse(a)to-surf-and-protect.net> wrote: > > > > "Zum anderen ist die Zugänglichmachung jedes > > > internetbasierten Angebots, das auf die Begehung jeglicher > > > Straftaten gerichtet ist, gleichermaßen strafwürdig." > > > > > > Thats every ISP on the world. Every ISP on the world lets you > connect to the internet. What they want to do is outlaw the running of > markets who promote drugs, weapons and cheese pizza. > > Thats already the case. The just want it in one law so they don't > have to process several accusations. > > > > I read it weeks ago and Tor will not be outlawed in this case. > > > > > "Betreiber, deren Angebote ohne entsprechende Zielrichtung zur > Förderung von Straftaten genutzt > > > werden, vom Tatbestand ausgenommen. “ > > > > Ebay will not get fucked, only if you have a market which prime > directive is to sell drugs, weapons and CP. > > > > > Referenced to § 129 StGB in the text: reference is made to > membership in a criminal organization. The Tor project will then be > declared as such. > > > > Dear god … > > > > > > > On 6. Mar 2019, at 20:35, Olaf Grimm <jeep665(a)posteo.de> wrote: > > > > > > Some contradictions in the recommendations of the committee: > > > > > > Take a look on page 6 and 7 (in german, translation of the > sentences below). > > > > > > "Zum anderen ist die Zugänglichmachung jedes > > > internetbasierten Angebots, das auf die Begehung jeglicher > > > Straftaten gerichtet ist, gleichermaßen strafwürdig." > > > > > > "Second, the availability of each > > > Internet-based offer, based on the commission of any > > > Criminal offenses is equally punishable." > > > > > > "Betreiber, deren Angebote ohne entsprechende Zielrichtung zur > Förderung von Straftaten genutzt > > > werden, vom Tatbestand ausgenommen. " > > > > > > "Operators whose offers are used without appropriate target > direction for the promotion of criminal offenses > > > be excluded from the facts." > > > > > > > https://www.bundesrat.de/SharedDocs/drucksachen/2019/0001-0100/33-1-19.pdf?… > <https://www.bundesrat.de/SharedDocs/drucksachen/2019/0001-0100/33-1-19.pdf?…> > > > > > > I think that's the first step to forbid Tor. The text indicates > operators. Is my relay abroad illegal because I'm German? > > > Referenced to § 129 StGB in the text: reference is made to > membership in a criminal organization. The Tor project will then be > declared as such. > > > > > > Olaf > > > > > > > > > > > > Am 06.03.19 um 15:47 schrieb Volker Mink: > [...] > > > > > > _______________________________________________ > > > tor-relays mailing list > > > tor-relays(a)lists.torproject.org > > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Fw: german plans on banning TOR
by Herbert Karl Mathé 15 Mar '19

15 Mar '19

Please see below, as well as (German) legislation: https://www.bundesrat.de/SharedDocs/drucksachen/2019/0001-0100/33-19.pdf?__…. Bigger picture likely to be behind as pointed out some days ago. Shit like this adding to tightening police forces' legislations in various Federal States in not-so Good Old Germany. -- Herbert Karl Mathé mail(a)hkmathe.de PGP B9BF953500452875 https://www.hkmathe.de/pub_key_16-07-09.txt @hkmathe Beethovenstr. 13 60325 Frankfurt Germany Begin forwarded message: Date: Wed, 6 Mar 2019 22:39:47 +0100 From: Herbert Karl Mathé <mail(a)hkmathe.de> To: niftybunny <abuse(a)to-surf-and-protect.net> Cc: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] german plans on banning TOR Let's be pragmatic: There's "anti-darkweb" propaganda been quite a while going on, mainly by Federal Criminal Police Office, backed up by Christian (so-called) Democrats, and the Nazi party, sure, pointing out like lots of children's lives could be saved, or saved from being abused, resp., when vanquishing "The Darkweb". Trucks (lorries), knifes, or similar potentially lethal objects are not on their agenda. Police spokespersons around the clock complaining being substantially disadvantaged - should say: retarded??? Unsurprisingly, police forces in any legislation are not neutral, these do not at all mirror society and its inherent diversity. Plus, police forces very indirectly are serving the public, with any misdemeanor or assaults to be prosecuted not before afterwards by taking complex, costly and risky legal actions, never immediately, or right in place. That makes a huge difference. What this legislation is very likely ending up is various courts ruling through verdicts on eventually shutting down specific sites. These verdicts might easily appear as being random, which is due to immense lack of in-depth knowledge in related matters (see file sharing dissuasions by dedicated law firms being backed by courts having difficulties understanding IP addresses), also due to each and every court ruling independent which makes it like gambling, these courts at the same time being highly susceptible to what is believed by them to be public opinion. The latter is what's being made up right with this legislative initiative, leveraging Tor Project for staging some threat model. Cynically enough, threat (by The Onion) again is from foreign, just like for some time refugees had been said to be (evil propaganda which obviously, and thank god, did not fully work out). In phase of weakness, it's always the outlandish being plead guilty, being abused to deviate from domestic, and home-made, self-made failure. No facts yet, just some reflected opinions - as soon as such legislation is out it'll be much harder to defend liberty. It's not about paragraphs, or bits and bytes, it's about freedom and democracy. Free press, and journalists as individuals will as consequence be under heavy suspicion for cooperating with elements of Dark Web. If Germany falls... -- Herbert Karl Mathé mail(a)hkmathe.de PGP B9BF953500452875 https://www.hkmathe.de/pub_key_16-07-09.txt @hkmathe Beethovenstr. 13 60325 Frankfurt Germany On Wed, 6 Mar 2019 21:19:23 +0100 niftybunny <abuse(a)to-surf-and-protect.net> wrote: > > "Zum anderen ist die Zugänglichmachung jedes > > internetbasierten Angebots, das auf die Begehung jeglicher > > Straftaten gerichtet ist, gleichermaßen strafwürdig." > > > Thats every ISP on the world. Every ISP on the world lets you connect to the internet. What they want to do is outlaw the running of markets who promote drugs, weapons and cheese pizza. > Thats already the case. The just want it in one law so they don't have to process several accusations. > > I read it weeks ago and Tor will not be outlawed in this case. > > > "Betreiber, deren Angebote ohne entsprechende Zielrichtung zur Förderung von Straftaten genutzt > > werden, vom Tatbestand ausgenommen. “ > > Ebay will not get fucked, only if you have a market which prime directive is to sell drugs, weapons and CP. > > > Referenced to § 129 StGB in the text: reference is made to membership in a criminal organization. The Tor project will then be declared as such. > > Dear god … > > > > On 6. Mar 2019, at 20:35, Olaf Grimm <jeep665(a)posteo.de> wrote: > > > > Some contradictions in the recommendations of the committee: > > > > Take a look on page 6 and 7 (in german, translation of the sentences below). > > > > "Zum anderen ist die Zugänglichmachung jedes > > internetbasierten Angebots, das auf die Begehung jeglicher > > Straftaten gerichtet ist, gleichermaßen strafwürdig." > > > > "Second, the availability of each > > Internet-based offer, based on the commission of any > > Criminal offenses is equally punishable." > > > > "Betreiber, deren Angebote ohne entsprechende Zielrichtung zur Förderung von Straftaten genutzt > > werden, vom Tatbestand ausgenommen. " > > > > "Operators whose offers are used without appropriate target direction for the promotion of criminal offenses > > be excluded from the facts." > > > > https://www.bundesrat.de/SharedDocs/drucksachen/2019/0001-0100/33-1-19.pdf?… <https://www.bundesrat.de/SharedDocs/drucksachen/2019/0001-0100/33-1-19.pdf?…> > > > > I think that's the first step to forbid Tor. The text indicates operators. Is my relay abroad illegal because I'm German? > > Referenced to § 129 StGB in the text: reference is made to membership in a criminal organization. The Tor project will then be declared as such. > > > > Olaf > > > > > > > > Am 06.03.19 um 15:47 schrieb Volker Mink: [...] > > > > _______________________________________________ > > tor-relays mailing list > > tor-relays(a)lists.torproject.org > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >

3 2

Re: [tor-relays] Tor Exit Relay CPU Usage Running at 100% for 1 MB/s on FreeBSD
by Dhalgren Tor 12 Mar '19

12 Mar '19

https://trac.torproject.org/projects/tor/ticket/25461

1 0

Tor Exit Relay CPU Usage Running at 100% for 1 MB/s on FreeBSD
by Neel Chauhan 12 Mar '19

12 Mar '19

Hi tor-relays@ mailing list, I have set up two exit relays on a FreeBSD 12.0 dedicated server: https://metrics.torproject.org/rs.html#details/1CD029594B08E07F29B9420410C2… https://metrics.torproject.org/rs.html#details/A0EB2BD840838FAD51BDAD86B0BA… Looking at my top stats, I get CPU usage of 100% most of the time (meaning 95% of the time) on both instances pushing around ~1 MB/s with both instances. The server is a HP Blade server and has a single Intel Xeon L5520 CPU with 16GB of RAM. Tor is configured to have 150 Mbps per instance, with a total of two instances. Why am I getting this abnormal CPU usage? What's the solution? I don't want to use Linux but can use another *BSD or Solaris/Illumos if I must. -Neel === https://www.neelc.org

2 1

bastet BW scanner barking mad
by starlight.2018q2＠binnacle.cx 08 Mar '19

08 Mar '19

Anyone know what caused bastet's loss of grip on reality? 600 IPredator 440 xenoidRelay 300 PrivacyRepublic0001 270 ExitNinja 260 DipulseIT2 240 hyacinthinus 230 PIAzrhexit 230 Unnamed 220 volatile 210 Chenjesu 210 drazisil 210 exit3 210 radieschen 200 Spigen 200 TotorBE2 200 tagos

2 2

Suspicious activity
by Vort 06 Mar '19

06 Mar '19

Hello. Did anyone noticed unusual connection count spikes for their relays? My relay encountered several ~1k spikes with rise time ~= 10 minutes: https://imgur.com/a/6JvB7gp Maybe it is someone trying to fool anti-DDoS protection? -- Vort

1 0

Monthly IRC operator meetup - March 7th
by Colin Childs 05 Mar '19

05 Mar '19

Hi everyone, This is a reminder that the next IRC relay operator meetup will be held on Thursday, March 7th at 02:00UTC. These meetups take place on irc.oftc.net <http://irc.oftc.net/>, in #tor-meeting. We are also working on adding additional meetups throughout the month to better accommodate operators in different timezones, I hope to have more news about this shortly. I hope you’re all having a great week! Where: irc.oftc.net <http://irc.oftc.net/> @ #tor-meeting When: Thursday, March 7th @ 02:00UTC Agenda pad: https://storm.torproject.org/shared/7aCxQSwglBMGqO2o49g-_Iby9lDJgiaw8KLPL21… <https://storm.torproject.org/shared/7aCxQSwglBMGqO2o49g-_Iby9lDJgiaw8KLPL21…> (please feel free to add discussion items)

1 0

Relay Installed, port forwarded, but not responding
by Doug Roberts 04 Mar '19

04 Mar '19

I've installed the relay application, forwarded the ports as I normally do, but when I go to canyouseeme.org and try port 9001 or 9030, none of them show responding. I also don't see my IP in https://metrics.torproject.org/rs.html#search <https://www.google.com/url?q=https%3A%2F%2Fmetrics.torproject.org%2Frs.html…> even though it's been 6+ hours. A look at the routers shows that there is some traffic flowing through the ports, but it's so minimal I'm not sure what it is: https://is.gd/4NkFix Any ideas?

2 1