- tor-relays - lists.torproject.org

tor relay - impact on e-mail system reputation
by dlugasny＠protonmail.com 22 Nov '18

22 Nov '18

Hi, I haven an e-mail server which has a lot of not consumed resources (CPU/Traffic etc.). Base on my practice I know that my E-mail server will loose reputation if Tor relay will run on the same IP. Is there any other way to utilize resources of that machine without any reputation impact on the IP. Thanks in advance for any feedback. Cheers Dlugasny Sent with [ProtonMail](https://protonmail.com) Secure Email.

5 5

Blutmagie retired
by starlight.2018q2＠binnacle.cx 22 Nov '18

22 Nov '18

The operator of Blutmagie Torstatus, Olaf Selke has retired the service. For years Blutmagie has been a fantastic resource for the Tor community and I am writing to express my gratitude to Olaf for his wonderful contribution and the time and effort he expended maintaining it. Thank you Olaf!

9 17

tor relay on freebsd - how to upgrade it
by dlugasny＠protonmail.com 21 Nov '18

21 Nov '18

Hi, since few days nyx showing that my Tor relay is outdated. (Tor 0.3.4.8) This relay is running on Freebsd. I have not so big expirience with BSD systems... Does any one could help me to update my tor relay ? Thanks in advance for any support. Cheers Dlugasny Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2

Updating tor relay software to 0.3.4.9 through google backup and sync on Windows 10
by Keifer Bly 18 Nov '18

18 Nov '18

Hello list, So I am in a bit of a dilemma. I am currently away from the computer where my obfs4 bridge at https://metrics.torproject.org/rs.html#details/148BD64BED9F2C27637D986DE032… runs off of and will be so for the next two weeks. I had set up TeamViewer so I could remote administer my bridge while I could not physically access the machine. But then, like a complete dork, I forgot TeamViewer automatically changes the connection password every few days or so, I am waiting to hear back from them if they can reset it for me. I am trying to access it because my bridge is currently running tor 0.3.4.8 (via the tor expert bundle) and am trying to update it to tor 0.3.4.9, but now may not be able to do so because the TeamViewer password changed (smacks face for forgetting it does that). I am running my relay via the tor expert bundle, which is just checked and is still on tor 0.3.4.8 (I am guessing the tor expert bundle is updated on a somewhat different schedule). I use Google Backup and Sync to automatically backup my tor bridge keys, etc, and tor.exe is also backed up. Probably not, but I wonder if there would be a way to upload tor 0.3.4.9.exe in place of 0.3.4.8 and sync it to my computer? Probably not as this bridge is running on a Windows machine, but thoughts are appreciated. Thank you.

1 0

cyb3r1n73L Relays MyFamily Configuration
by nusenu 18 Nov '18

18 Nov '18

Hi cyb3r1n73L, thanks for adding so many new tor exit relays to the network. Please do not forget to set your "MyFamily" configuration parameter on all your relays, so Tor clients are not at risk of using your relays in multiple positions in a single circuit. You can find the instructions in the Tor relay guide: https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#Importantifyour… > 2018-11-17 > > | Up | Ext | JoinTime | IP | AS | CC | ORp | Dirp | OS | Version | Nickname | eFamMembers | FP | > |------+-------+------------+--------------+--------------------+------+-------+--------+-------+-----------+------------+---------------+------------------------------------------| > | 1 | 1 | 17:17:39 | 158.255.3.14 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | hollow | 1 | 008164D073537EEE099B83935A87A80FABCE365D | > | 1 | 1 | 17:36:32 | 158.255.3.22 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | plague | 1 | 04148208898E2CB692E66545AC3999F2E46EFC9F | > | 1 | 1 | 20:00:36 | 158.255.3.37 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | crow | 1 | 1AAE2E257FBD5669C3788BC9152CFCC3F08A2005 | > | 1 | 1 | 20:00:45 | 158.255.3.27 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | phoenix | 1 | 069CBCAC9BA17A7DB338EADB77B583DB3B9EB575 | > | 1 | 1 | 20:00:45 | 158.255.3.35 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | charade | 1 | B7130260E4FCBE73EB3A0707925C5C64693777C5 | > | 0 | 1 | 20:00:46 | 158.255.3.39 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | aspect | 1 | 97EEA4F9B39405D7B33C154CB5E346FFBAE520AA | > | 1 | 1 | 20:00:46 | 158.255.3.36 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | oddity | 1 | B79B76BECA45EDC29E36CCBF8DD614F9214B69FC | > | 1 | 1 | 20:00:47 | 158.255.3.38 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | acid | 1 | D95ADED4FF29B2C256FD3AA67C1E2A662F751D89 | > | 1 | 1 | 21:37:25 | 158.255.3.39 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | aspect | 1 | C8DA052842E29A8153A2F769BC387865C2F75F4C | > 2018-11-14 > > | Up | Ext | JoinTime | IP | AS | CC | ORp | Dirp | OS | Version | Nickname | eFamMembers | FP | > |------+-------+------------+-----------------+------+------+-------+--------+-------+-----------+------------+---------------+------------------------------------------| > | 1 | 1 | 19:08:13 | 185.234.217.231 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | indie | 1 | B82A940CDAD62501EB8B1BB74FAE2D11B72D9F18 | > | 1 | 1 | 19:20:08 | 185.234.217.232 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | coyote | 1 | 171BD73EB0C2B0AA37769716B6CAE903B7A364E1 | > | 1 | 1 | 19:26:20 | 185.234.217.233 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | cryo | 1 | 1A5AB832F2091EB5AFAD1FFB1895FBA4D7EFB6BC | > | 1 | 1 | 19:31:16 | 185.234.217.234 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | rags | 1 | E1430BEB656EA0702636CCF5722DADFE30C5B581 | > | 1 | 1 | 19:36:11 | 185.234.217.235 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | gigi | 1 | 34CB1480BD47F7258E86496900B2AC169E19EEA5 | > | 1 | 1 | 19:43:12 | 185.234.217.241 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | slash | 1 | 927ABD6372C0A333E2FD74248267CF29DE6C0CC2 | > | 1 | 1 | 19:47:10 | 185.234.217.242 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | rebel | 1 | F9211E9641A980BD24D3C3D6AEC289A303B50A44 | > | 1 | 1 | 19:50:57 | 185.234.217.243 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | reaper | 1 | 27157FFFF473AF58B66B43EA1DEF8B38DC480C10 | > | 1 | 1 | 19:55:32 | 185.234.217.244 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | buster | 1 | 42B4FE0E2DED79C3C76E0847C2BC5280763A9184 | > | 1 | 1 | 22:31:42 | 185.234.217.245 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | jazzy | 1 | 35832538B8EF7577628DC65AA489B0DFD7ECEA16 | -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

1 0

upgrade theonionbox
by TorGate 16 Nov '18

16 Nov '18

Hi to all, i have truble with a upgrade of onionbox. :~ % sudo pip install --upgrade theonionbox Password: Collecting theonionbox Using cached https://files.pythonhosted.org/packages/f6/90/bab164846bc3f59c2b05f9c15bcf6… Requirement already satisfied, skipping upgrade: psutil>=5.4.0 in /usr/local/lib/python2.7/site-packages (from theonionbox) (5.4.3) Requirement already satisfied, skipping upgrade: requests>2.18 in /usr/local/lib/python2.7/site-packages (from theonionbox) (2.18.4) Requirement already satisfied, skipping upgrade: PySocks>=1.6.7 in /usr/local/lib/python2.7/site-packages (from theonionbox) (1.6.8) Requirement already satisfied, skipping upgrade: bottle>=0.12.13 in /usr/local/lib/python2.7/site-packages (from theonionbox) (0.12.13) Requirement already satisfied, skipping upgrade: stem<=1.6,>=1.5.4 in /usr/local/lib/python2.7/site-packages (from theonionbox) (1.6.0) Requirement already satisfied, skipping upgrade: tzlocal>=1.5 in /usr/local/lib/python2.7/site-packages (from theonionbox) (1.5.1) Requirement already satisfied, skipping upgrade: urllib3>=1.22 in /usr/local/lib/python2.7/site-packages (from theonionbox) (1.22) Requirement already satisfied, skipping upgrade: apscheduler<3.*,>=2.1.2 in /usr/local/lib/python2.7/site-packages (from theonionbox) (2.1.2) Requirement already satisfied, skipping upgrade: futures>=3.2 in /usr/local/lib/python2.7/site-packages (from theonionbox) (3.2.0) Requirement already satisfied, skipping upgrade: chardet<3.1.0,>=3.0.2 in /usr/local/lib/python2.7/site-packages (from requests>2.18->theonionbox) (3.0.4) Requirement already satisfied, skipping upgrade: certifi>=2017.4.17 in /usr/local/lib/python2.7/site-packages (from requests>2.18->theonionbox) (2017.11.5) Collecting idna<2.7,>=2.5 (from requests>2.18->theonionbox) Downloading https://files.pythonhosted.org/packages/27/cc/6dd9a3869f15c2edfab863b992838… (56kB) 100% |################################| 61kB 1.4MB/s Requirement already satisfied, skipping upgrade: pytz in /usr/local/lib/python2.7/site-packages (from tzlocal>=1.5->theonionbox) (2017.3) Installing collected packages: theonionbox, idna Found existing installation: theonionbox 4.1 Uninstalling theonionbox-4.1: Successfully uninstalled theonionbox-4.1 Error unknown encoding: string-escape while executing command /usr/local/bin/python2.7 -u -c "import setuptools, tokenize;__file__='/tmp/pip-install-6jsgKW/theonionbox/setup.py';f=getattr(tokenize, 'open', open)(__file__);code=f.read().replace('\r\n', '\n');f.close();exec(compile(code, __file__, 'exec'))" install --record /tmp/pip-record-saoyTd/install-record.txt --single-version-externally-managed --compile Running setup.py install for theonionbox ... error Rolling back uninstall of theonionbox Exception: Traceback (most recent call last): File "/usr/local/lib/python2.7/site-packages/pip/_internal/cli/base_command.py", line 143, in main status = self.run(options, args) File "/usr/local/lib/python2.7/site-packages/pip/_internal/commands/install.py", line 366, in run use_user_site=options.use_user_site, File "/usr/local/lib/python2.7/site-packages/pip/_internal/req/__init__.py", line 49, in install_given_reqs **kwargs File "/usr/local/lib/python2.7/site-packages/pip/_internal/req/req_install.py", line 791, in install spinner=spinner, File "/usr/local/lib/python2.7/site-packages/pip/_internal/utils/misc.py", line 659, in call_subprocess stdout=stdout, cwd=cwd, env=env, File "/usr/local/lib/python2.7/subprocess.py", line 394, in __init__ errread, errwrite) File "/usr/local/lib/python2.7/subprocess.py", line 1046, in _execute_child child_exception = pickle.loads(data) File "/usr/local/lib/python2.7/pickle.py", line 1388, in loads return Unpickler(file).load() File "/usr/local/lib/python2.7/pickle.py", line 864, in load dispatch[key](self) File "/usr/local/lib/python2.7/pickle.py", line 977, in load_string self.append(rep.decode("string-escape")) LookupError: unknown encoding: string-escape

2 1

Re: [tor-relays] Bridge Relay Internet Speed Much Slower Than Actual Internet Speed
by entensaison＠use.startmail.com 16 Nov '18

16 Nov '18

Hi Keifer, > Hello List, my bridge relay at > https://metrics.torproject.org/rs.html#details/148BD64BED9F2C27637D986DE032… > > Is reporting the relay speed is between 50 kb/s and 60 kb/s, when the > speed of the internet connection it is running off of is actually > much faster than this, generally about 50mbps (the relay is running > on a home internet connection, where the isp is Charter > Communications / Spectrum). As a result, I have the “fast” flag > on/off randomly. > > I do not want my bridge to suck up a huge amount of my internet > speed, but why would the tor software report relay speed that is so > much slower than the speed of the internet connection it runs off of? > > Any thoughts are appreciated, thank you The advertised bandwidth is not the bandwidth of your connection but the bandwidth observed. Your relay probably hasn't been used as a relay so far. When it's being used the advertised bandwidth will rise. Are bridges chosen based on their advertised bandwidth?

5 6

Explaining Tor to worried parent
by DrNotThatEvil 14 Nov '18

14 Nov '18

Hi everybody, My exit got suspended for a little a few hours today, even tho I contacted my isp before to explain the situation (it was related to a spam blacklist suspend policy). I got the matter resolved quickly but due to the annoyance I mentioned it to a parent. The conversation quickly devolved into worry and fear advising me to stop running it, to be honest now that I think about it from her perspective I can't blame her for thinking like this. However the responses and explanations from my end never hit the mark, I know why I'm doing it I know their might be risks but that I'm doing something that I believe in. Have you guys/gals ever faced situations similar to this? How did you handle it? Secondly she also raised the following question: 'if you don't do it somebody else will, so why do you put yourself at risk? Thirdly she detected from the conversation that a Exit Relay might not be free from legal issues and I can't say that this is not the case, but I do think her view of these issues is utmost grim bringing up my future and employment opportunities. How would do you view/explain the severity of these legal issues? Kind Regards, Willmar

5 9

Bittorrent Legal Noise, Advocacy [re: Explaining Tor to worried parent]
by grarpamp 14 Nov '18

14 Nov '18

> Yeah, one of the complete bullshit things. I get around 200 emails per day > like this one: > > Protocol: BITTORRENT This should tend to diminish when you begin creating and showing people how to use filesharing and distributed storage protocols operating entirely within the various encrypted anonymous overlay and storage networks that exist out there. Talking "Privacy" and "Freedom" is hardly enough to get any percentage of various communities migrating inside and safely using these networks, nor to get much change in the world, you have to show them how to use real world apps over those nets. The *years* of anti speech and dis enablement from Tor about agnostic Bittorrent in particular has no doubt hindered some onionification et al of same. So you get that many more bullshit emails and leave lots of unprotected non private and un free peoples still out hanging using clearnet. > I run into this all the time whilst proselytizing for Tor, as for > example at a local non-profit makerspace recently. "Kiddie porn! FBI > raids!" was the hue and cry, whereupon people's brains shut down. But > this is very much a public relations issue Jacob Appelbaum has some great presentations and arguments made very much in the public free speech space mentioning and addressing some of what you speak of. You should look them up on youtube. Move to tor-talk to discuss more. Obligatory PJDU... https://www.youtube.com/watch?v=jW3PFC86UNI > I mentioned [Tor] to a parent. > > The conversation quickly devolved into worry and fear advising me to > stop running it, > to be honest now that I think about it from her perspective I can't > blame her for thinking like this. > However the responses and explanations from my end never hit the mark, I > know why I'm doing it > I know their might be risks but that I'm doing something that I believe in. > > Have you guys/gals ever faced situations similar to this? How did you > handle it? > > Secondly she also raised the following question: > 'if you don't do it somebody else will, so why do you put yourself at risk? > > Thirdly she detected from the conversation that a [node] might not > be free from legal issues and > I can't say that this is not the case, but I do think her view of these > issues is utmost grim bringing up > my future and employment opportunities. > How would do you view/explain the severity of these legal issues?

1 0

Become a Fallback Directory Mirror
by Colin Childs 13 Nov '18

13 Nov '18

Hello Tor Relay Operators, Do you want your relay to be a Tor fallback directory mirror? Will it have the same address and port for the next 2 years? Just reply to this email with your relay's fingerprint. If your relay is on the current list, you don't need to do anything. If you're asking: Q: What's a fallback directory mirror? Fallback directory mirrors help Tor clients connect to the network. For more details, see [1]. Q: Is my relay on the current list? Search [2] and [3] for your relay fingerprint or IP address and port: [2] is the current list of fallbacks in Tor. [3] is used to create the next list of fallbacks. Q: What do I need to do if my relay is on the list? Keep the same IP address, keys, and ports. Email tor-relays if the relay's details change. Q: Can my relay be on the list next time? We need fast relays that will be on the same IP address and port for 2 years. Reply to this email to get on the list, or to update the details of your relay. Once or twice a year, we run a script to choose about 150-200 relays from the potential list [3] for the list in Tor [2]. Q: Why didn't my relay get on the list last time? We check a relay's uptime, flags, and speed [4]. Sometimes, a relay might be down when we check. That's ok, we will check it again next time. It's good to have some new relays on the list every release. That helps tor clients, because blocking a changing list is harder. Q. I already have a relay in the fallback list, can I add another? We will pick up to 7 relays per operator to be in the fallback list. Please send any relays that you would like considered for the fallback list. Thanks for considering and/or being a fallback directory mirror! [1]: https://trac.torproject.org/projects/tor/wiki/doc/FallbackDirectoryMirrors <https://trac.torproject.org/projects/tor/wiki/doc/FallbackDirectoryMirrors> [2]: https://gitweb.torproject.org/tor.git/tree/src/or/fallback_dirs.inc <https://gitweb.torproject.org/tor.git/tree/src/or/fallback_dirs.inc> [3]: https://gitweb.torproject.org/tor.git/tree/scripts/maint/fallback.whitelist <https://gitweb.torproject.org/tor.git/tree/scripts/maint/fallback.whitelist> [4]: https://trac.torproject.org/projects/tor/attachment/ticket/21564/fallbacks_… <https://trac.torproject.org/projects/tor/attachment/ticket/21564/fallbacks_…>

8 9

Configuring relay
by DeMarcus Sullivan 12 Nov '18

12 Nov '18

I am running the latest version on Tor 8.0.3 on my Windows desktop. I would like to run a non-exit relay 24/7 and I'm having trouble finding the step-by-step process to do so. Before I could just copy amd paste the torrc configuration text in the torrc file. It seems that has changed because now Tor won't run properly when I change the torrc file.

3 2

# of connections of a exit relay dropped down by about 90% exactly after 1 month after installation time
by Toralf Förster 11 Nov '18

11 Nov '18

I do wonder why 2 exit relays (at the same IP address) dropped down from about 8,000 connections to about 1,000 connections after exactly 1 month + 2 hours after they were installed. Furthermore metrics.t.o shows: IPv4 Exit Policy Summary reject 1-65535 It is a hardened Gentoo with LibreSSL, no changes to torrc AFAICT. FWIW I do use offline keys here (for the first time) with a lifetime of 3 months. Rebooted today the system and upgraded from 0.3.5.3-apha to 0.3.5.4-alpha - doesn't helped. relays: https://metrics.torproject.org/rs.html#details/509EAB4C5D10C9A9A24B4EA0CE40… https://metrics.torproject.org/rs.html#details/63BF46A63F9C21FD315CD061B3EA… -- Toralf PGP C4EACDDE 0076E94E

3 9

Bridge Relay Internet Speed Much Slower Than Actual Internet Speed
by Keifer Bly 10 Nov '18

10 Nov '18

Hello List, my bridge relay at https://metrics.torproject.org/rs.html#details/148BD64BED9F2C27637D986DE032… Is reporting the relay speed is between 50 kb/s and 60 kb/s, when the speed of the internet connection it is running off of is actually much faster than this, generally about 50mbps (the relay is running on a home internet connection, where the isp is Charter Communications / Spectrum). As a result, I have the “fast” flag on/off randomly. I do not want my bridge to suck up a huge amount of my internet speed, but why would the tor software report relay speed that is so much slower than the speed of the internet connection it runs off of? Any thoughts are appreciated, thank you.

1 0

Monitoring exit node traffic by port?
by Isaac Grover, Aileron I.T. 10 Nov '18

10 Nov '18

Greetings fellow relay operators, Do you monitor outbound traffic from your relays by port? I run an exit node relay from my house allowing only "safe ports" that are not likely to generate complaints and I would like to keep an eye on how much traffic is coming from the Tor network through those ports to the Internet. Anyone? Do you use a tool like vnstat on the interface? Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" Office: 715-377-0440, Fax:715-690-1029, Web: www.aileronit.com

5 4

2 relays at the same IP address with a flat rate, 2 exits versus 1 exit + 1 non-exit
by Toralf Förster 09 Nov '18

09 Nov '18

I do wonder, if it makes sense under such circumstances to have 1 non-exit and 1 exit -or- would it be better to have 2 exits? -- Toralf PGP C4EACDDE 0076E94E

2 1

FOSDEM relay operator meetup
by Roger Dingledine 05 Nov '18

05 Nov '18

Many Tor people are planning to attend FOSDEM this year, and I've been thinking we should organize a relay operator meetup there. It's in Brussels at the beginning of February, so it's within easy-ish range of the French / Dutch / Luxembourg torservers partners. The plans are coming together here: https://trac.torproject.org/projects/tor/wiki/org/meetings/2019Brussels if you want to help make it happen. :) (This mail is a fresh thread, from an earlier thread on tor-project@ about how I won't be at CCC this year to help run a relay operator meetup there: https://lists.torproject.org/pipermail/tor-project/2018-November/002042.html ) Thanks! --Roger

1 0

when do dead "Alleged Family Members" disappear?
by Tim Kuijsten 04 Nov '18

04 Nov '18

In the past I've shortly ran a relay that I have shut down because of performance issues[1]. But even after a month now it still appears as an "alleged family member" on the Tor metrics website with the relay that I'm still operating[2]. Since the peer is gone for over a month now and won't be coming back, I wonder when it stops appearing as an alleged family member on the metrics page? (it is also no longer listed as MyFamily). -Tim [1] 2C76951164C5184A3B8B7CC1914B34E4622B225F [2] https://metrics.torproject.org/rs.html#details/B183A69592D2E8C8C487C054D084…

4 4

Why is my relay dying?
by Scott Ashcraft 03 Nov '18

03 Nov '18

https://metrics.torproject.org/rs.html#details/EC0ABA811E4EB33DAD8BC8B7037D… I honestly have no idea. I am running on Google Fiber and have set: RelayBandwidthRate 52000 KBytes RelayBandwidthBurst 104000 KBytes The spike in January is when I switched out some bad equipment. There were a couple of outages in late Feb/Mar for a few hours each, and then some (usually monthly) restarts since. I also at one point tried to add a Family Member which I have since removed. Other than that, there haven't been any changes to my setup. Aside from the addition, then removal of the family member, my torrc configuration hasn't changed since starting over a year ago. Any thoughts? I'd like to be more useful to the community,

4 4

Running relay on vmware ? is it secure to use Tor on virtual systems ?
by dlugasny＠protonmail.com 02 Nov '18

02 Nov '18

Hi, is it secure to run Tor Relay / Tor browser on Vmware ? On my Windows 10 desktop I have installed VMware Player where is running Ubuntu. I`m using that system to browse internet using Tor Browser. Is it secure to use Tor browser on virtual systems ? Cheers DLugasny

2 5

Re: [tor-relays] Running an exit node from home
by Isaac Grover, Aileron I.T. 01 Nov '18

01 Nov '18

Good morning Spiros, You are correct in that I won't maintain the exit flag without ports 80 and 443 open, *and* I lose my eligibility for a free t-shirt, *but* I am not likely to attract attention at my home either. =) Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" O: 715-377-0440, F:715-690-1029, W: www.aileronit.com LinkedIn: https://www.linkedin.com/in/IsaacGrover/ YouTube: https://www.youtube.com/channel/UCqrwZNFKdR-guKtuQzFPObQ

4 6

List purpose and moderation
by Colin Childs 31 Oct '18

31 Oct '18

Hello tor-relays, This message is to make everyone aware of the purpose of this list, and to notify that off-topic posting will result in moderation. This is to allow the list to continue being used as a relay operator support mechanism, and to make sure the people on the list for this purpose are not driven away by off-topic posts. The stated purpose of this list is as follows: Support and questions about running Tor relays (exit, non-exit, bridge) Topics relating to this are encouraged and accepted on the list at any time. However, this does not include: Posts intended to troll / annoy members of the list Acting as a support, publicity or communications channel for specific hosting providers Posts regarding general tech news of the day The tor-relays@ list is primarily a communication forum for current and prospective relay operators to obtain support, plus share stories and experiences. Relevant discussions about specific providers are also germane, although any usage of this list for the purposes of publicity or as a communications / support channel for providers is prohibited. Thank you all for being part of the relay operator community!

2 1

Running an exit node from home
by Isaac Grover, Aileron I.T. 31 Oct '18

31 Oct '18

Good morning, As a followup to my last (and other) posts on this list, I have been cautioned multiple times of running an exit node from my home. After careful consideration and previous direct feedback from this list, I configured an exit node with the following exit policy, which allows traffic on ports that are "safe" in my opinion, meaning that they're not likely to generate complaints or search warrants. accept *:5228 accept *:8333 accept *:9418 accept *:11371 reject *:* Regarding these aforementioned cautions, they all seem to be based on dated posts and/or irresponsible exit policies. I would not open any of the web, email, irc, remote desktop, ssh, etc. ports on an exit node based at home as those would generate complaints and/or search warrants very quickly, so I am open to discussion about modifying the groupthink behind this blanket "don't run an exit node at home" advice. Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" O: 715-377-0440<tel:715-425-0440>, F:715-690-1029<tel:715-690-1029>, W: www.aileronit.com<http://www.aileronit.com/> LinkedIn: https://www.linkedin.com/in/IsaacGrover/ YouTube: https://www.youtube.com/channel/UCqrwZNFKdR-guKtuQzFPObQ

4 3

Re: [tor-relays] freebsd relay doesnt receive any traffic (after 1 month)
by dlugasny＠protonmail.com 30 Oct '18

30 Oct '18

Hi Matt, thanks for Your hints. To build my BSD relay, I used some of the available in the internet BSD tutorials. It seems that I have copied some parameters without understanding what for they are. I would like to run non-exit tor relay. Which parameters should I commented out ? Documentation, in did I have to read it, but it would be much easier (much faster) to have some example which user can copy with some small modifications. Cheers Dlugasny Sent with ProtonMail Secure Email. ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, October 25, 2018 5:11 PM, Matt Traudt <pastly(a)torproject.org> wrote: > On 10/25/18 13:05, dlugasny(a)protonmail.com wrote: > > > Hi, > > few weeks ago ( more than 4) I have installed Freebsd with Tor relay > > service. > > System is connected to Tor network since more than one month but I see > > only 1-2 connections per day. > > I had Tor relay service on my Debian server for many years and I havent > > got any problems. With Freebsd its pain, nothing is working as expected. > > Any how I would like to build more BSD instances in few different > > countries, but first I need to know why its not working. > > Does any one could help me to do some troubleshooting ? > > Maybe some of the parameters in the torrc are blocking traffic ? > > My torrc without Hashedpassword, Nickname: > > ########################### > > SocksPort 0 > > Log notice file /var/log/tor/notices.log > > ControlPort 9051 > > ORPort 9001 > > RelayBandwidthRate 400 KBytes # Throttle traffic to 100KB/s (800Kbps) > > RelayBandwidthBurst 600 KBytes # But allow bursts up to 200KB (1600Kb) > > ContactInfo Dlugas-ny <dlugasny AT protonmail dot com> > > DirPort 9030 # what port to advertise for directory connections > > ExitPolicy reject : # no exits allowed > > PublishServerDescriptor 0 > > CellStatistics 1 > > ExtraInfoStatistics 1 > > ConnDirectionStatistics 1 > > EntryStatistics 1 > > LogMessageDomains 1 > > AvoidDiskWrites 1 > > WarnPlaintextPorts > > HeartbeatPeriod 1hours > > ServerTransportPlugin obfs2,obfs3 exec /usr/local/bin/obfsproxy managed > > ServerTransportPlugin obfs4 exec /usr/local/bin/obfsproxy managed > > ExtORPort auto > > ############################ > > Thanks in advance for any support > > This is a very confused torrc. What are you trying to accomplish with it? > > There's lines indicating you want to run a bridge > (ServerTransportPlugin, ExtORPort) > > There's a line indicating you don't want your bridge to be one > distrubted via BridgeDB (PublishServerDescriptor 0), yet you wonder why > no one is using your bride/relay. > > Please read > > https://trac.torproject.org/projects/tor/wiki/TorRelayGuide > > And don't set any options that it doesn't tell you to set. And don't set > options you don't understand. `man tor` can help you understand what > you're setting > > Matt

4 5

searching the tor-relays archives
by torix＠protonmail.com 30 Oct '18

30 Oct '18

Before I download months of gzipped archives and zgrep them myself, is there a way to search the messages themselves? I'm looking at: https://lists.torproject.org/pipermail/tor-relays/ but maybe there as another setup somewhere else. TIA, --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2

Re: [tor-relays] Monitoring exit node traffic by port?
by Isaac Grover, Aileron I.T. 30 Oct '18

30 Oct '18

Good morning all, My motivation for the traffic graphing per port was simply to get an idea if the ports were even being used, and I would only view them internally - would this still be a violation of user trust? Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" O: 715-377-0440, F:715-690-1029, W: www.aileronit.com LinkedIn: https://www.linkedin.com/in/IsaacGrover/ YouTube: https://www.youtube.com/channel/UCqrwZNFKdR-guKtuQzFPObQ

1 0

new log message: [warn] Unparseable microdescriptor
by Toralf Förster 30 Oct '18

30 Oct '18

Get this at my exit relay since yesterday: # head /tmp/warn.log Oct 23 23:30:17.000 [notice] Tor 0.3.5.3-alpha opening new log file. Oct 23 23:30:33.000 [warn] parse error: internal NUL character. Oct 23 23:30:33.000 [warn] Unparseable microdescriptor Oct 23 23:30:33.000 [warn] parse error: internal NUL character. Oct 23 23:30:33.000 [warn] Unparseable microdescriptor even with log level "debug" there seems to be no more information. Anything I should worry about? -- Toralf PGP C4EACDDE 0076E94E

3 3

Re: [tor-relays] New to Tor Relay, using Rasberry Pi3. Grateful for Help
by Judd Briggs 27 Oct '18

27 Oct '18

HI Matt and Felix. Thank you so much for the guidance. Matt you are right, I never really asked a question, but I think you have helped steer me in the right direction. Alex: Yes...typo on ORport....will fix that. Log file: Yes, it is in the right location, but crazily just stops....clean stop! Also, I went back and seriously studied the relay page. The RaspPi part is a bit confusing especially now, if Pi3 are not a problem, why does it state there is a problem?. But I understand wtih Pi3, more Debian items (TOR) are stable I will add to my source list Debian location which should allow me to update to the latest stable TOR on Debian. Can I have more than one source in the sourcelist? I had another question about the gg2g key thingy...I can't find the exact place in the Tor website. Wasn't sure where to do apt-get "?what?" Give me a couple of days to get back to you on my progress. Regarding the other question asked...yes, I restated like you posted. In next update, I will provide terminal window information. Thanks and best regards, Judd ************************************************************ Date: Fri, 26 Oct 2018 21:31:57 +0200 From: Felix <zwiebel(a)quantentunnel.de> To: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] New to Tor Relay, using Rasberry Pi3. Grateful for Help Message-ID: <5BD36BAD.4010005(a)quantentunnel.de> Content-Type: text/plain; charset=utf-8 Hi Judge The torrc shows 'ORPORT' instead of 'ORPort'. I remember some issues with case sensitive torrc entries. Can you try 'ORPort' ? SocksPort 0 Log notice file /var/log/tor/notices.log RunAsDaemon 1 ORPORT 9001 DirPort 9030 ExitPolicy reject *.* RelayBandwidthRate 200 KB RelayBandwidthBurst 400KB -> ORPort 9001 PS: *Lebowski1* how cool! -- Cheers, Felix ------------------------------ Date: Fri, 26 Oct 2018 08:59:09 -0400 From: Matt Traudt <pastly(a)torproject.org> To: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] New to Tor Relay, using Rasberry Pi3. Grateful for Help Message-ID: <0736abd6-3b7a-c5ff-a300-da79da2c0ddd(a)torproject.org> Content-Type: text/plain; charset=utf-8 On 10/26/18 08:38, Judd Briggs wrote: > Good evening, thanks for taking the time to help me. > > I am fairly new to Pi, Linux/Raspbian, and TOR. But I believe in what > TOR stands for so I wanted to do something with the Pi I had sitting around. > > [... snip ...] > > Appreciate any help. And by the way, i did go back and look through the > archives over the last several months and didn't find a solution. > > Best regards, > > Judge > Thanks for running a relay! You never actually asked a question so I can only guess what you're problem is and what you're looking for help on. In short, see Tor's official relay guide: https://trac.torproject.org/projects/tor/wiki/TorRelayGuide # Version 0.2.9.15 is part of the LTS release series and is an okay version to be running. If you're looking for a newer version of Tor, you'll need to add the Tor Project Debian repos. https://www.torproject.org/docs/debian.html.en#ubuntu Note that I'm only pretty sure the tor you'll get from there will work on rpi 3. Read the warnings on the page. # Am I running a relay correctly? Your torrc looks correct for running a non-exit relay. The logs you shared don't have the lines that I'd expect for any type of relay. Is your torrc located at /etc/tor/torrc? Did you start Tor via systemd like 'sudo systemctl restart tor' or from the command line manually? Hope that helps. Matt *******************************************************************************

1 0

Restore tor exit node
by node47＠torsrv.de 27 Oct '18

27 Oct '18

Dear all, I have the following problem: My VPS-Hoster has deleted my server. Now I reinstalled tor on fresh Debian 9 minimal in version 0.3.4.8 (as before). I also restored my keys from /var/lib/tor/keys and set the datadir in torrc to /var/lib/tor When I started the tor-service a new ed25519_signing_cert and ed25519_signing_secret_key were generated as well as a new fingerprint. The secret_* files still have the old timestamp but new fingerprint had been created. Now the server is listed 3 times in the relaysearch and my node is known as “new” node instead of getting the old fingerprint and the old flags/status. Who can assist me in how to do the restore of the fingerprint and how to correct the relaysearch?! Best regards from Germany Max

4 3

Restore tor exit node
by node47＠torsrv.de 26 Oct '18

26 Oct '18

Dear all, I have the following problem: My VPS-Hoster has deleted my server. Now I reinstalled tor on fresh Debian 9 minimal (as before) in version 0.3.4.8 I restored my keys from /var/lib/tor/keys and set the datadir in torrc to /var/lib/tor When I started the tor-service a new ed25519_signing_cert and ed25519_signing_secret_key were generated as well as a new fingerprint. The secret_* files still have the old timestamp but new fingerprint had been created. Now the server is listed 3 times in the relaysearch and my node is known as “new” node instead of getting the old fingerprint and the old flags/status. Who can assist me in how to do the restore of the fingerprint and how to correct the relaysearch?! Best regards from Germany Max

1 0

Something Keeps Causing Tor Relay Software To Automatically Close On Windows 10?
by Keifer Bly 26 Oct '18

26 Oct '18

Hello, So for my bridge running on Windows 10, for some reason the tor expert bundle automatically closes after 1-2 days, as in the process just stops and the command line window it is in just closes. As you can imagine, this is frustrating for keeping the bridge stable and all. It is strange that this is happening as I am not closing the software it just shuts off automatically for some reason. Some of my thoughts on what could be causing this: 1. In my experience, the Windows CMD (which the tor expert bundle runs through) has the habit to automatically close the second a program sends a signal that isn’t immediately recognized by Windows, even if the command is from the program itself. I wonder if this could be the issue… 2. I will try running tor.exe as administrator and see if it happens again, maybe it’s an issue with the software not having enough permissions from the OS? Another thing I am trying this time is that according to https://ccm.net/faq/2353-prevent-the-command-prompt-closing-automatically, running the command cmd -K in the beginning should prevent the CMD from auto closing. Any other thoughts on why this might be happening is appreciated. The tor version is tor 0.3.4.8 on Windows 10. Thanks. --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

1 0

New to Tor Relay, using Rasberry Pi3. Grateful for Help
by Judd Briggs 26 Oct '18

26 Oct '18

Good evening, thanks for taking the time to help me. I am fairly new to Pi, Linux/Raspbian, and TOR. But I believe in what TOR stands for so I wanted to do something with the Pi I had sitting around. i have a clean install of Rasbian on my Pi3.I followed an Instructables guide to get most all of my settings for installing TorAll my Apt-gets update and upgrades are current.I am running Tor ver 0.2.9.15 (I need to figure out how to painlessless update that) Apparantely that is the latest version in the sources file. Below is my sources file content: deb http://raspbian.raspberrypi.org/raspbian/ stretch main contrib non-free rpi# Uncomment line below then 'apt-get update' to enable 'apt-get source'deb-src http://raspbian.raspberrypi.org/raspbian/ stretch main contrib non-free rpi#deb http://deb.torproject.org/torproject.org Rasbian main Here is my log file contents: Oct 25 21:23:04.000 [notice] Tor 0.2.9.15 (git-2dc1a1a2abab5403) opening new log file.Oct 25 21:23:04.579 [notice] Tor 0.2.9.15 (git-2dc1a1a2abab5403) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.1.0f and Zlib 1.2.8.Oct 25 21:23:04.579 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warningOct 25 21:23:04.579 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc".Oct 25 21:23:04.579 [notice] Read configuration file "/etc/tor/torrc".Oct 25 21:23:04.593 [notice] Opening Socks listener on 127.0.0.1:9050Oct 25 21:23:04.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.Oct 25 21:23:05.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.Oct 25 21:23:06.000 [notice] Bootstrapped 0%: StartingOct 25 21:23:06.000 [notice] Signaled readiness to systemdOct 25 21:23:07.000 [notice] Opening Socks listener on /var/run/tor/socksOct 25 21:23:07.000 [notice] Opening Control listener on /var/run/tor/controlOct 25 21:23:07.000 [notice] Bootstrapped 5%: Connecting to directory serverOct 25 21:23:07.000 [notice] Bootstrapped 10%: Finishing handshake with directory serverOct 25 21:23:09.000 [notice] Bootstrapped 15%: Establishing an encrypted directory connectionOct 25 21:23:09.000 [notice] Bootstrapped 20%: Asking for networkstatus consensusOct 25 21:23:09.000 [notice] Bootstrapped 25%: Loading networkstatus consensusOct 25 21:23:20.000 [notice] I learned some more directory information, but not enough to build a circuit: We have no usable consensus.Oct 25 21:23:20.000 [notice] Bootstrapped 40%: Loading authority key certsOct 25 21:23:21.000 [notice] Bootstrapped 45%: Asking for relay descriptorsOct 25 21:23:21.000 [notice] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 0/6404, and can only build 0% of likely paths. (We have 0% of guards bw, 0% of midpoint bw, and 0% of exit bw = 0% of path bw.)Oct 25 21:23:23.000 [notice] Bootstrapped 50%: Loading relay descriptorsOct 25 21:23:23.000 [notice] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 0/6404, and can only build 0% of likely paths. (We have 0% of guards bw, 0% of midpoint bw, and 0% of exit bw = 0% of path bw.)Oct 25 21:23:25.000 [notice] Bootstrapped 56%: Loading relay descriptorsOct 25 21:23:25.000 [notice] Bootstrapped 65%: Loading relay descriptorsOct 25 21:23:25.000 [notice] Bootstrapped 71%: Loading relay descriptorsOct 25 21:23:25.000 [notice] Bootstrapped 78%: Loading relay descriptorsOct 25 21:23:26.000 [notice] Bootstrapped 80%: Connecting to the Tor networkOct 25 21:23:26.000 [notice] Bootstrapped 90%: Establishing a Tor circuitOct 25 21:23:27.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.Oct 25 21:23:27.000 [notice] Bootstrapped 100%: DoneOct 25 21:58:10.000 [notice] Interrupt: exiting cleanly.(END) My torrc file is as follows...sorry there are lots of things commented out...I started with a template and just added a few lines as recommended by the Instructables. ## Configuration file for a typical Tor user## Last updated 22 September 2015 for Tor 0.2.7.3-alpha.## (may or may not work for much older or much newer versions of Tor.)#### Lines that begin with "## " try to explain what's going on. Lines## that begin with just "#" are disabled commands: you can enable them## by removing the "#" symbol.#### See 'man tor', or https://www.torproject.org/docs/tor-manual.html,## for more options you can use in this file.#### Tor will look for this file in various places based on your platform:## https://www.torproject.org/docs/faq#torrc SocksPort 0Log notice file /var/log/tor/notices.logRunAsDaemon 1ORPORT 9001DirPort 9030ExitPolicy reject *.*Nickname Lebowski1RelayBandwidthRate 200 KBRelayBandwidthBurst 400KB ## Tor opens a SOCKS proxy on port 9050 by default -- even if you don't## configure one below. Set "SOCKSPort 0" if you plan to run Tor only## as a relay, and not make any local application connections yourself.#SOCKSPort 9050 # Default: Bind to localhost:9050 for local connections.#SOCKSPort 192.168.0.1:9100 # Bind to this address:port too. ## Entry policies to allow/deny SOCKS requests based on IP address.## First entry that matches wins. If no SOCKSPolicy is set, we accept## all (and only) requests that reach a SOCKSPort. Untrusted users who## can access your SOCKSPort may be able to learn about the connections## you make.#SOCKSPolicy accept 192.168.0.0/16#SOCKSPolicy accept6 FC00::/7#SOCKSPolicy reject * ## Logs go to stdout at level "notice" unless redirected by something## else, like one of the below lines. You can have as many Log lines as## you want.#### We advise using "notice" in most cases, since anything more verbose## may provide sensitive information to an attacker who obtains the logs.#### Send all messages of level 'notice' or higher to /var/log/tor/notices.log#Log notice file /var/log/tor/notices.log## Send every possible message to /var/log/tor/debug.log#Log debug file /var/log/tor/debug.log## Use the system log instead of Tor's logfiles#Log notice syslog## To send all messages to stderr:#Log debug stderr ## Uncomment this to start the process in the background... or use## --runasdaemon 1 on the command line. This is ignored on Windows;## see the FAQ entry if you want Tor to run as an NT service.#RunAsDaemon 1 ## The directory for keeping all the keys/etc. By default, we store## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.#DataDirectory /var/lib/tor ## The port on which Tor will listen for local connections from Tor## controller applications, as documented in control-spec.txt.#ControlPort 9051## If you enable the controlport, be sure to enable one of these## authentication methods, to prevent attackers from accessing it.#HashedControlPassword 16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C#CookieAuthentication 1 ############### This section is just for location-hidden services ### ## Once you have configured a hidden service, you can look at the## contents of the file ".../hidden_service/hostname" for the address#### HiddenServicePort x y:z says to redirect requests on port x to the## address y:z. #HiddenServiceDir /var/lib/tor/hidden_service/#HiddenServicePort 80 127.0.0.1:80 #HiddenServiceDir /var/lib/tor/other_hidden_service/#HiddenServicePort 80 127.0.0.1:80#HiddenServicePort 22 127.0.0.1:22 ################ This section is just for relays ######################## See https://www.torproject.org/docs/tor-doc-relay for details. ## Required: what port to advertise for incoming Tor connections.#ORPort 9001## If you want to listen on a port other than the one advertised in## ORPort (e.g. to advertise 443 but bind to 9090), you can do it as## follows. You'll need to do ipchains or other port forwarding## yourself to make this work.#ORPort 443 NoListen#ORPort 127.0.0.1:9090 NoAdvertise## The IP address or full DNS name for incoming connections to your## relay. Leave commented out and Tor will guess.#Address noname.example.com ## If you have multiple network interfaces, you can specify one for## outgoing traffic to use.# OutboundBindAddress 10.0.0.5 ## A handle for your relay, so people don't have to refer to it by key.## Nicknames must be between 1 and 19 characters inclusive, and must## contain only the characters [a-zA-Z0-9].#Nickname ididnteditheconfig ## Define these to limit how much relayed traffic you will allow. Your## own traffic is still unthrottled. Note that RelayBandwidthRate must## be at least 75 kilobytes per second.## Note that units for these config options are bytes (per second), not## bits (per second), and that prefixes are binary prefixes, i.e. 2^10,## 2^20, etc.#RelayBandwidthRate 100 KBytes # Throttle traffic to 100KB/s (800Kbps)#RelayBandwidthBurst 200 KBytes # But allow bursts up to 200KB (1600Kb) Plus a bunch of other stuff that is commented out. Appreciate any help. And by the way, i did go back and look through the archives over the last several months and didn't find a solution. Best regards, Judge

3 2

Re: [tor-relays] freebsd relay doesnt receive any traffic (after 1 month)
by dlugasny＠protonmail.com 25 Oct '18

25 Oct '18

Sent with ProtonMail Secure Email. ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, October 25, 2018 7:24 PM, <dlugasny(a)protonmail.com> wrote: > Dmitrii thanks for Your hints. > > Sent with ProtonMail Secure Email. > > ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ > On Thursday, October 25, 2018 7:02 PM, Dmitrii Tcvetkov demfloro(a)demfloro.ru wrote: > > > On Thu, 25 Oct 2018 17:48:09 +0000 > > dlugasny(a)protonmail.com wrote: > > > > > In did, I have to read more carefully attached documentation. > > > After small changes torrc looks like this: > > > Does any one of You see any wrong parameters ? > > > ########################## > > > SocksPort 0 > > > Log notice file /var/log/tor/notices.log > > > ControlPort 9051 > > > HashedControlPassword (for nyx) > > > ORPort 9001 > > > RelayBandwidthRate 400 KBytes # Throttle traffic to 100KB/s (800Kbps) > > > RelayBandwidthBurst 600 KBytes # But allow bursts up to 200KB (1600Kb) > > > ContactInfo Dlugas-ny <dlugasny AT protonmail dot com> > > > DirPort 9030 # what port to advertise for directory connections > > > ExitRelay 0 > > > ExitPolicy reject : # no exits allowed > > > PublishServerDescriptor 0 > > > CellStatistics 1 > > > ExtraInfoStatistics 1 > > > ConnDirectionStatistics 1 > > > EntryStatistics 1 > > > LogMessageDomains 1 > > > AvoidDiskWrites 1 > > > WarnPlaintextPorts > > > HeartbeatPeriod 1hours > > > DisableDebuggerAttachment 0 > > > > These are enough to run a relay: > > SocksPort 0 > > ORPort 9001 > > RelayBandwidthRate 400 KBytes > > RelayBandwidthBurst 600 KBytes > > Log notice file /var/log/tor/notices.log > > ContactInfo Dlugas-ny <dlugasny AT protonmail dot com> > > DirPort 9030 > > MyFamily "fingerprints go here" > > ExitRelay 0 > > ExitPolicy reject : > > MyFamily should contain comma separated list of fingerprints of all your > > guard, middle, exit relays if you have any. Each fingerprint should be > > prefixed with '$' symbol. It shouldn't contain fingerprints of your > > bridges. > > If you want to use Nyx then you can enable: > > ControlPort 9051 > > HashedControlPassword > > Nyx I`m using, because I can observe traffic. "socket -4l" doesnt provide informations about connections. > > > Option > > DisableDebuggerAttachment 0 > > is for debugging and should be set to 1 during normal operation. Yes, > > it allows to snoop on Tor circuits in Nyx, but is that really needed? > > Its active because I would like to see if its really working. > > > BTW you can use bits in bandwidth settings, > > e.g. "RelayBandwidthRate 4 Mbits" > > Other options are optional and should be evaluated each separately. For > > example I don't know why you don't want to publish server descriptor, > > what is the point of unpublished middle relay? > > I just commented out "PublishServerDescriptor" > > > Why avoid disk writes? Modern hardware won't be worn out just by Tor > > relay disc activity. Why WarnPlaintextPorts? It's a relay, not a > > client, as SocksPort is 0. > > I just commented out AvoidDiskWriters and WarnPlaintextPorts. > > > In general it's better to start with software defaults and alter the > > settings only if you need them altered. > > I know. I have simply blindly copied example torrc from one of the "best practise FreeBsd tor tutorials". > > Thanks for Your hints. > > I hope that in the next days my first BSD relay will start relaying :).

1 0

35C3 Leipzig Voucher
by Paul 25 Oct '18

25 Oct '18

Any kind person out there, that is willing to share its Voucher for a ticket to 35C3 in Leipzig with me? Thanks and regards Paul

2 2

freebsd relay doesnt receive any traffic (after 1 month)
by dlugasny＠protonmail.com 25 Oct '18

25 Oct '18

Hi, few weeks ago ( more than 4) I have installed Freebsd with Tor relay service. System is connected to Tor network since more than one month but I see only 1-2 connections per day. I had Tor relay service on my Debian server for many years and I havent got any problems. With Freebsd its pain, nothing is working as expected. Any how I would like to build more BSD instances in few different countries, but first I need to know why its not working. Does any one could help me to do some troubleshooting ? Maybe some of the parameters in the torrc are blocking traffic ? My torrc without Hashedpassword, Nickname: ########################### SocksPort 0 Log notice file /var/log/tor/notices.log ControlPort 9051 ORPort 9001 RelayBandwidthRate 400 KBytes # Throttle traffic to 100KB/s (800Kbps) RelayBandwidthBurst 600 KBytes # But allow bursts up to 200KB (1600Kb) ContactInfo Dlugas-ny <dlugasny AT protonmail dot com> DirPort 9030 # what port to advertise for directory connections ExitPolicy reject *:* # no exits allowed PublishServerDescriptor 0 CellStatistics 1 ExtraInfoStatistics 1 ConnDirectionStatistics 1 EntryStatistics 1 LogMessageDomains 1 AvoidDiskWrites 1 WarnPlaintextPorts HeartbeatPeriod 1hours ServerTransportPlugin obfs2,obfs3 exec /usr/local/bin/obfsproxy managed ServerTransportPlugin obfs4 exec /usr/local/bin/obfsproxy managed ExtORPort auto ############################ Thanks in advance for any support Cheers Dlugasny Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 1

Tor bridge on Windows 10 going down for a reason I cannot detect?
by Keifer Bly 24 Oct '18

24 Oct '18

Hello all, for some reason my tor bridge at https://metrics.torproject.org/rs.html#details/148BD64BED9F2C27637D986DE032… is randomly removed from the network. Tonight when I went to check it, tor metrics said it had said it was offline for the last 11 hours. This is very strange as I had not closed the tor software and my internet had not disconnected at all. Below is the tor log file, it is tor 0.3.4.8 on Windows 10, any thoughts would be great. Thanks. Oct 19 23:33:16.910 [notice] Tor 0.3.4.8 (git-da95b91355248ad8) running on Windows 8 with Libevent 2.1.8-stable, OpenSSL 1.0.2p, Zlib 1.2.11, Liblzma N/A, and Libzstd N/A. Oct 19 23:33:16.910 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning Oct 19 23:33:16.957 [notice] Read configuration file "C:\Users\keife\AppData\Roaming\tor\torrc.txt". Oct 19 23:33:16.972 [warn] Path for GeoIPFile (<default>) is relative and will resolve to C:\Users\keife\AppData\Roaming\tor\<default>. Is this what you wanted? Oct 19 23:33:16.972 [warn] Path for GeoIPv6File (<default>) is relative and will resolve to C:\Users\keife\AppData\Roaming\tor\<default>. Is this what you wanted? Oct 19 23:33:16.972 [notice] Based on detected system memory, MaxMemInQueues is set to 2048 MB. You can override this by setting MaxMemInQueues by hand. Oct 19 23:33:16.972 [notice] Scheduler type KISTLite has been enabled. Oct 19 23:33:16.972 [notice] Opening OR listener on 0.0.0.0:9002 Oct 19 23:33:16.972 [notice] Opening Extended OR listener on 127.0.0.1:0 Oct 19 23:33:16.972 [notice] Extended OR listener listening on port 56515. Oct 19 23:33:57.000 [notice] Parsing GEOIP IPv4 file C:\Users\keife\AppData\Roaming\tor\geoip. Oct 19 23:33:57.000 [notice] Parsing GEOIP IPv6 file C:\Users\keife\AppData\Roaming\tor\geoip6. Oct 19 23:33:57.000 [notice] Configured to measure statistics. Look for the *-stats files that will first be written to the data directory in 24 hours from now. Oct 19 23:33:58.000 [notice] Your Tor server's identity key fingerprint is 'torland 8C6C18F8D95918F9DC90A09827DAD285064F8872' Oct 19 23:33:58.000 [notice] Your Tor bridge's hashed identity key fingerprint is 'torland 148BD64BED9F2C27637D986DE032ECF14E5B9E9A' Oct 19 23:33:58.000 [notice] Bootstrapped 0%: Starting Oct 19 23:35:03.000 [notice] Starting with guard context "default" Oct 19 23:35:03.000 [notice] Bootstrapped 5%: Connecting to directory server Oct 19 23:35:05.000 [notice] Bootstrapped 10%: Finishing handshake with directory server Oct 19 23:35:05.000 [notice] Bootstrapped 15%: Establishing an encrypted directory connection Oct 19 23:35:05.000 [notice] Registered server transport 'obfs4' at '[::]:9002' Oct 19 23:35:05.000 [notice] Bootstrapped 20%: Asking for networkstatus consensus Oct 19 23:35:06.000 [notice] Bootstrapped 50%: Loading relay descriptors Oct 19 23:35:06.000 [notice] Guessed our IP address as 174.87.240.59 (source: 136.243.176.148). Oct 19 23:35:15.000 [notice] Bootstrapped 80%: Connecting to the Tor network Oct 19 23:35:15.000 [notice] Bootstrapped 90%: Establishing a Tor circuit Oct 19 23:35:18.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working. Oct 19 23:35:18.000 [notice] Bootstrapped 100%: Done Oct 19 23:35:18.000 [notice] Now checking whether ORPort 174.87.240.59:9002 is reachable... (this may take up to 20 minutes -- look for log messages indicating success) Oct 19 23:35:21.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor. Oct 19 23:36:44.000 [notice] Your network connection speed appears to have changed. Resetting timeout to 60s after 18 timeouts and 1000 buildtimes. Oct 19 23:36:45.000 [notice] Performing bandwidth self-test...done. Oct 20 05:35:00.000 [notice] Heartbeat: Tor's uptime is 5:59 hours, with 0 circuits open. I've sent 3.08 MB and received 14.49 MB. Oct 20 05:35:00.000 [notice] Heartbeat: In the last 6 hours, I have seen 0 unique clients. Oct 20 11:35:00.000 [notice] Heartbeat: Tor's uptime is 11:59 hours, with 1 circuits open. I've sent 4.38 MB and received 19.35 MB. Oct 20 11:35:00.000 [notice] Heartbeat: In the last 6 hours, I have seen 0 unique clients. Oct 20 17:35:00.000 [notice] Heartbeat: Tor's uptime is 17:59 hours, with 0 circuits open. I've sent 5.74 MB and received 23.84 MB. Oct 20 17:35:00.000 [notice] Heartbeat: In the last 6 hours, I have seen 0 unique clients. Oct 20 20:49:17.000 [notice] Channel padding timeout scheduled 180307ms in the past. Oct 20 23:35:00.000 [notice] Heartbeat: Tor's uptime is 23:59 hours, with 1 circuits open. I've sent 7.19 MB and received 28.20 MB. Oct 20 23:35:00.000 [notice] Heartbeat: In the last 6 hours, I have seen 0 unique clients. Oct 21 05:35:00.000 [notice] Heartbeat: Tor's uptime is 1 day 5:59 hours, with 0 circuits open. I've sent 8.77 MB and received 34.02 MB. Oct 21 05:35:00.000 [notice] Heartbeat: In the last 6 hours, I have seen 0 unique clients. Oct 21 11:35:00.000 [notice] Heartbeat: Tor's uptime is 1 day 11:59 hours, with 0 circuits open. I've sent 10.16 MB and received 38.10 MB. Oct 21 11:35:00.000 [notice] Heartbeat: In the last 6 hours, I have seen 0 unique clients. Oct 21 17:35:00.000 [notice] Heartbeat: Tor's uptime is 1 day 17:59 hours, with 1 circuits open. I've sent 11.54 MB and received 43.60 MB. Oct 23 00:47:29.000 [notice] Diagnostic for issue 8387: Found 1 one-hop circuits more than 1800 seconds old! Logging 1... Oct 23 00:47:29.000 [notice] #0 created at 2018-10-21 17:34:12. open, General-purpose client. Not marked for close. Package window: 1000. usable for new conns. Dirty since 2018-10-21 17:34:13 (112396 seconds vs 600-second cutoff). Oct 23 00:47:29.000 [notice] It has been 112368 seconds since I last called circuit_expire_old_circuits_clientside(). Oct 23 00:47:29.000 [notice] Heartbeat: In the last 6 hours, I have seen 0 unique clients. Oct 23 00:47:29.000 [warn] Your system clock just jumped 112349 seconds forward; assuming established circuits no longer work. Oct 23 00:47:31.000 [notice] Our directory information is no longer up-to-date enough to build circuits: We have no recent usable consensus. Oct 23 00:48:29.000 [notice] Heartbeat: Tor's uptime is 1 day 18:00 hours, with 1 circuits open. I've sent 11.54 MB and received 43.60 MB. Oct 23 00:48:29.000 [notice] Diagnostic for issue 8387: Found 1 one-hop circuits more than 1800 seconds old! Logging 1... Oct 23 00:48:29.000 [notice] #0 created at 2018-10-21 17:34:12. open, General-purpose client. Marked for close. Package window: 1000. Not usable for new conns. Dirty since 2018-10-21 17:24:13 (113056 seconds vs 600-second cutoff). Oct 23 00:48:29.000 [notice] It has been 59 seconds since I last called circuit_expire_old_circuits_clientside(). Oct 23 00:48:29.000 [notice] Heartbeat: In the last 6 hours, I have seen 0 unique clients. Oct 23 00:48:32.000 [notice] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. Oct 23 00:48:35.000 [notice] We now have enough directory information to build circuits. Oct 23 00:48:36.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working. Oct 23 00:48:36.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working. --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

5 9

Strength in numbers (of $$)
by I 24 Oct '18

24 Oct '18

4 3

Loss of Guard Flag
by Harkirat Virk 22 Oct '18

22 Oct '18

Hi, I am running an Tor Node nickname 3sKtjMnoiZAIGz07 from ip 59.179.28.221. I was given guard flag briefly on 20th Oct and flag removed on 22 Oct. My advertised bandwidth also dropped from 2.29 MiB/s to 1.79 MiB/s unceremoniously. The consensus weight reduced from 992 to 810. I have checked but did not find any discontinuity on the network end or any connections dropped. Will is be possible to confirm as the the exact reasons for loss of guard and drop in both advertised bandwidth and consensus weight. Regards, Loopback team

2 1

Relay country mismatch
by nusenu 21 Oct '18

21 Oct '18

Hi Mariel The Tor Project uses Maxmind's data to map IP addresses to countries, your IP address block might get updated in Maxmind's file in the future and after onionoo (the data source behind Relay Search) updates its Maxmind file it might appear. This might take a while. kind regards, nusenu btw: please avoid sending the same email to multiple lists, tor-relays is the correct list for this. Mariel: > Hello, > > I am running a relay 3B03DE96FEFB384972D1D31A105DD70E6BDBF079 which has IP 5.188.238.58 and is hosted at G-Core labs Brazil datacenter, but Tor Metrics engine shows the IP country as Luxembourg - https://metrics.torproject.org/rs.html#details/3B03DE96FEFB384972D1D31A105D… > > The valid WHOIS data is: > % Abuse contact for '5.188.238.0 - 5.188.239.255' is 'abuse(a)gcore.lu' > > inetnum: 5.188.238.0 - 5.188.239.255 > netname: LU-GCORELABS-20120809 > country: BR > org: ORG-WIG6-RIPE > admin-c: LA5122-RIPE > tech-c: LA5122-RIPE > status: ALLOCATED PA > geoloc: -23.468962 -46.843583 > mnt-by: RIPE-NCC-HM-MNT > mnt-by: GCL1-MNT > mnt-lower: GCL1-MNT > created: 2018-03-13T10:06:22Z > last-modified: 2018-08-08T10:44:27Z > source: RIPE # Filtered > > Thus, since country is BR it should have be shown as Brazil. Can you fix this data somehow? Thanks in advance. > > > _______________________________________________ > metrics-team mailing list > metrics-team(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/metrics-team > -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

1 0

exit operators: overall DNS failure rate above 5% - please check your DNS
by nusenu 20 Oct '18

20 Oct '18

Dear Exit relay operators, (you are getting this email because you are a subscriber of the tor-relays mailing list or because you are among the top 10 affected parties - addressed via BCC to protect the address) first of all thanks for running exit relays! One of the crucial service that you provide in addition to forwarding TCP streams is DNS resolution for tor clients. Exits relays which fail to resolve hostnames are barely useful for tor clients. We noticed that lately the failure rates did increase again and would like to urge you to visit Arthur's "Tor Exit DNS Timeouts" page that shows you the DNS error rate for exit relays: https://arthuredelstein.net/exits/ (the page is usually updated once a day) Please consider checking your DNS if your exit relay consistently shows a non zero timeout rate - and make sure you run an up to date tor version. If you are an exit operator but have no (or no working) ContactInfo, please consider updating that field in your torrc so we can reach you if something is wrong with your relay. kind regards nusenu -- https://twitter.com/nusenu_

5 5

Why is there a difference in the amount of data tor has sent and received?
by Keifer Bly 17 Oct '18

17 Oct '18

Hello list, So when running my OBFS4 bridge I noticed something, tor recently popped up with a message saying “I’ve sent 30mb and received 104mb.” Why is there such a big difference in the amount of data my bridge has received and sent? Info – tor 0.3.4.8 running on Windows 10 (Although tor seems to think it’s running on Windows 8 for some reason)? Thanks. --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

2 1

Memory leak in 0.3.4.8?
by r1610091651 17 Oct '18

17 Oct '18

Hi I've noticed following after upgrading to latest stable version (0.3.4.8): Memory usage [image: image.png] Connection count [image: image.png] Cpu usage [image: image.png] You'll notice the upgrade happened around Saturday midnight. Known issue? Any work-around? Thanks Sebastian

5 4

Tor relays Workshop in FOSSCOMM
by George Kadianakis 17 Oct '18

17 Oct '18

Greetings list, a few days ago, Elias Papavasileiou did a "Setup your own Tor relay" workshop in the Greek open source conference FOSSCOMM. I attended the workshop and helped out a bit. During the workshop, a presentation was given describing how to setup a relay, and then we moved to hands-on, where we helped 3 groups of 2 people each setup a Tor bridge in their laptop. Even tho a laptop is definitely not the right platform for this, the idea was that if those people learned how to setup a Tor relay/bridge they could afterwards set it up themselves on proper hardware. A few takeaways: - Setting up a Tor relay is not easy even if it's just "apt-get tor, edit torrc, reload tor". There are various things that can go wrong in the between, and basically all groups asked for assistance even tho they all seemed experienced with Linux system administration. - Example of fail: One group put a wrong line in their torrc (they tried to launch with a low-port ORPort of 443 even tho they were not root), then had trouble debugging what's going on, then wiped logs and ran Tor manually as root. Tor overwrote the log file, permission issues occured, and Tor could not start again. We had to manually figure this out and remove the bad log file for Tor to work again. That took a while. - Example of fail: People kind of gave up reading all the comments in the Debian default torrc and asked us for assistance because they did not know what they had to do to make it work. aka what was necessary and what was optional. - After about 45 mins all three groups managed to successfuly run a bridge. I'm just mentioning these things here in case someone can relate and improve the situation. There might be a few things we can do (aka improve the default Debian torrc), or even provide images/docker/vagrant for relays. But I'm not good with these things so I can't really suggest things. Cheers!

2 1

"ORPort auto" versus "ORPort 9001" for a bridge
by Toralf Förster 17 Oct '18

17 Oct '18

I do wonder if the advice [1] is ok or wrong. [1] https://tor.stackexchange.com/questions/6370/how-to-run-an-obfs4-bridge -- Toralf PGP C4EACDDE 0076E94E

2 3

libssh vulnerability (CVE-2018-10933)
by Colin Childs 16 Oct '18

16 Oct '18

Hi tor-relays, This email is just to notify the list of a recent libssh vulnerability[1], and encourage any operators who may be running a vulnerable version of libssh to update. It appears this only impacts libssh in server mode: “This is an important security and maintenance release in order to address CVE-2018-10933., libssh versions 0.6 and above have an authentication bypass vulnerability in the server code. By presenting the server an SSH2_MSG_USERAUTH_SUCCESS message in place of the SSH2_MSG_USERAUTH_REQUEST message which the server would expect to initiate authentication the attacker could successfully authenticate without any credentials. The bug was discovered by Peter Winter-Smith of NCC Group.” Thanks for being relay operators! [1]: https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfi…

1 0

Circuit ID assignment
by Gabbi Fisher 15 Oct '18

15 Oct '18

Hi all, I wanted to learn more about how Tor circuit IDs work. Correct me if I'm wrong, but this is my current understanding: Each hop along the Tor network has its own circuit ID number. (No universal circuit ID number is used to identify a ip-to-ip stream of traffic). How are the circuit ID numbers determined at each hop? What generates the circuit ID number given to a packet? Thanks!

3 2

Why tor new version having problem's with switching tor.exe file
by dave` dave 14 Oct '18

14 Oct '18

In the old version of tor (less than 8.0) i could download the source code and recompile it( change the number of nodes for example) and create a new tor.exe file and switch it with the tor.exefile, that create with tor installation. but now, in the new version of tor the 8.0, and above, when im doing that i'm having error- 0xc00007b-which means that i'm working with 32 bit on 64 bit or 64 bit on 32 bit. i found work around way that i can install an old version of tor(less than 8.0 version) do the update to 8.0.2 and then i can change the tor.exe file without any error. why this thing happens?

2 1

Internal Services
by Sebastian Urbach 14 Oct '18

14 Oct '18

Good Morning, If someone on this list can take care of trac tickets directed to internal services please contact me. Thx. Sebastian -- Sincerely yours / M.f.G. / Sincères salutations Sebastian Urbach -- Zitat von Alissa Sinowjewna Rosenbaum aka Ayn Rand (1905-1982): We can igenore reality, but we cannot ignore the consequences of ignoring reality.

3 3

Re: [tor-relays] DSL Router
by Isaac Grover, Aileron I.T. 13 Oct '18

13 Oct '18

Good morning onion, I don't know what your definition of "new to networking" is but I'm going to assume you've been using consumer gear for your network. That being said, there is a learning curve to the Mikrotik though they do come with a working but very vanilla configuration out of the box. If you would like, I would be willing to help you with a working configuration if you decide to go with a Mikrotik for your network. Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" Office: 715-377-0440, Fax:715-690-1029, Web: www.aileronit.com

2 1

Exit Node shutdown
by Tyler Durden 13 Oct '18

13 Oct '18

Hi Our two exit nodes "chulak" and "aurora" will be terminated by the end of this month. Both are listed in the Fallback Directory Mirror list and need to be removed. Fingerprints: 379FB450010D17078B3766C2273303C358C3A442 B0279A521375F3CB2AE210BDBFC645FDD2E1973A The shutdown is due to an internal reorganization. Greetings Sam Grüneisen - President FVDE

3 2

Re: [tor-relays] DSL Router
by Isaac Grover, Aileron I.T. 13 Oct '18

13 Oct '18

Good morning, Both "cheap" and "useful" for running Tor nodes at home won't be found in big box retail ever, so I would take a look at the Mikrotik RB750Gr3 - it will do exactly what you want after it's configured properly. I used to have an RB1200 and recently upgraded to a CCR1009, both from Mikrotik, and have found them to be quite capable under heavy load. Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" Office: 715-377-0440, Fax:715-690-1029, Web: www.aileronit.com

5 4