- tor-relays - lists.torproject.org

Re: [tor-relays] Fwd: Tor Guard Relay
by Mirimir 13 Jul '18

13 Jul '18

On 06/09/2018 01:51 PM, Keifer Bly wrote: > I just scanned the picture files using Avast, which I use a a lot and it is > a pretty great anti virus program based off of my use with it. Here is the > contents of the email in programming code; I don't know about other email > services but in Gmail this can be retrieved by signing into the web version > (in a web browser) clicking the more options button (next to the replay > button) and clicking "show original". > >>From what I can tell looking at the code, it is encoded using base64 and > the ip address of the web server it was sent from is 104.161.37.109. > > However, as for telling anything else, it seems like that would be > difficult to do without the right equipment. Let me know what you think. Thanks for source with headers. I don't see anything useful, though, I do see that "In-Reply-To: <5b182b2c.1c69fb81.390f6.f0ea(a)mx.google.com>" is correct, so the sender is probably subscribed to the list. Getting that right from messages in the online archives would be nontrivial. But damn: "I joined this site so that i could weed through the guys who aren’t serious and reliable enough to invite to my house where i feel comfortable." Trolling the tor-relays list for nice guys to date? That is bizarre. > On Sat, Jun 9, 2018 at 5:26 PM Mirimir <mirimir(a)riseup.net> wrote: > >> On 06/09/2018 05:28 AM, Keifer Bly wrote: >>> I was asked by mirmir to send one of the emails as a txt file, and so >> here >>> it is. It is at the google drive link below, I had tried to send it as an >>> attachment, but got a note back saying it was being held because it was >> too >>> big. The zip file contains the contents of the email and the attached >>> images. Thank you. I will try creating a spam filter for the email domain >>> they are coming from, though a few of them have come from yahoo.com >> domain, >>> which annoyingly I can't really block as some of my legitimate contacts >> use >>> yahoo mail. I could try reporting this to Google, what do you think? >>> >>> >> https://drive.google.com/open?id=0B_cH2cPZZmbTMmE2Ni1hc1BZbXliM0hMaTZnN19Gc… >> >> Thanks. But the text there doesn't contain headers. But that's less an >> issue, because from headers aren't spoofed. The question now is whether >> this is simple trolling, or attempts to infiltrate machines of relay >> operators. Someone experienced with malware analysis could examine the >> images for attack code, as Roman suggested. But that's over my head. >> >> Blocking *.mexyst.com domains, as Neel suggested, will likely stop most >> of them, with little or no downside. But blocking yahoo.com isn't >> workable for many. But if they're all as salacious as Keifer's example, >> blocking on language seems workable. Or language plus domain. >> >> As with Efail, this is a reminder of the risks of decoding HTML, loading >> embedded images, and fetching remote content. And the importance of >> compartmentalizing email and browsing from credentials for relay >> management (and other high-impact stuff, such as finances). >> >>> On Fri, Jun 8, 2018 at 9:57 PM Mirimir <mirimir(a)riseup.net> wrote: >>> >>>> On 06/08/2018 05:03 PM, Keifer Bly wrote: >>>>> This is one of the about 20 emails that have been received. Upon >> looking >>>> it >>>>> looks like they are spoofing the [tor-relays] subject line. My >> apologies >>>>> for the subject change but could not find a way to forward the emails >>>>> without forwarding them from an old conversation. Thank you. (The >> subject >>>>> this is in reference to is "Spam Emails Received From This Mailing >>>> List"). >>>> >>>> OK, so they're just using subject lines from the list. And not spoofing >>>> the from address. >>>> >>>> But what you forwarded doesn't include the headers. By googling, I get >>>> this: >>>> >>>> | 1) Open the message in your Gmail inbox. >>>> | 2) Click the down-arrow in the top-right corner of the message. >>>> | 3) Click the "Show original" link toward the bottom of the options >>>> | box. The message will open in a separate window with the full >>>> | message headers at the top. >>>> >>>> Just save that as a text file, and send it to me as an attachment. >>>> >>>> Why the bloody hell someone would target users of this list in that way >>>> is bizarre. And why you? Rather than me, who is admittedly an outspoken >>>> jerk sometimes ;) >>>> >>>>> ---------- Forwarded message --------- >>>>> From: Becky Janet <beckyjanet335900(a)re.mexyst.com> >>>>> Date: Fri, Jun 8, 2018 at 7:48 PM >>>>> Subject: Re: [tor-relays] Tor Guard Relay >>>>> To: Keifer Bly <keifer.bly(a)gmail.com> >>>>> >>>>> >>>>> first you need to trust someone to find real sex partner. So if you >> want >>>> to >>>>> find real sex partner then you need to trust me. Always i'm telling you >>>>> it's totally f r e e. Just connect with My Private Page >>>>> <http://datingflirt.info/1stold> by submitting you mail, name, age >> etc. >>>> I'm >>>>> assure you if it's ask any cc then no need to connect with me. So just >>>>> trust and try. Trust Me & Try It Now NCTB ; After completing this task >>>>> check your mail ,Automatically you will get my personal phone no in >> your >>>>> mail within 5 min. Just check your mail (inbox/s p a m) and call me >> asap. >>>>> I'm waiting for your cam >>>>> >>>> _______________________________________________ >>>> tor-relays mailing list >>>> tor-relays(a)lists.torproject.org >>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >>>> >>> >> _______________________________________________ >> tor-relays mailing list >> tor-relays(a)lists.torproject.org >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >> >

4 9

bridge not accessible through obfs4 port
by entensaison＠use.startmail.com 13 Jul '18

13 Jul '18

Dear friends, I am uncuccessfully running a bridge that uses obfs4 as pluggable transport. (At least it should.) Today I actually tried to connect to it and it is possible to connect to the bridge using the ORport. But when I tried to start tor browser with this setting to use obfs4: obfs4 12.345.67.89:1111 (only with the right numbers) it got stuck at "establishing an encrypted network connection". I checked on canyouseeme.org and both the vanilla ORport and the obfs4 port seem to be accessible from outside. My router is set to allow TCP and UDP on the port for obfs4. What could be causing the problem? Cheers, Lo Am Mittwoch, 11. Juli 2018 um 20:47 schrieb Keifer Bly <keifer.bly(a)gmail.com>: > > In comparison how much bandwidth would a Tor bridge user per month? > > It would be tough to give an exact answer to that is it depends on > how many people are connecting through your specific bridge. However > in general the bandwidth requirements would be much less, as bridges > are used for mostly areas where the tor network is blocked whereas > one of the exit relays is used by every client that uses tor at all. > > You can find more information on this topic here > > >> https://metrics.torproject.org/stats.html > > This page contains information about how much traffic different types > of relays generally send and receive over time, etc. > > PS, my apologies if this comes through twice for some reason. My > email client is acting a bit strange at the moment. > > On Wed, Jul 11, 2018 at 9:04 AM Nathaniel Suchy <me(a)lunorian.is> > wrote: >> Hi. I would like to run a public OBFS4 Tor Bridge. Digitalocean’s >> price changes made running an exit too expensive. In comparison how >> much bandwidth would a Tor bridge use per month? >> >> Cheers, >> Nathaniel >> _______________________________________________ >> tor-relays mailing list >> tor-relays(a)lists.torproject.org >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

3 3

Relay Search feature request: add consensus weight line/graph
by nusenu 12 Jul '18

12 Jul '18

I filed a RS feature request that should help you better understand / interpret relay trending (relay doing better or worse?) https://trac.torproject.org/projects/tor/ticket/26767 Relay Search has two graphs showing bw history data and relative values (fraction and probabilities): consensus weight fraction middle probability guard probability exit probability written bytes per second read bytes per second One of the most relevant question for a relay operator is: How is my relay doing? Is it doing better or worse than usually? A good data point to answer this is to look at the cw value over time (not cw fraction) since the probabilities and fraction values are relative and not directly controllable by the operator (i.e. other operators add relays). This will allow relay operators to answer questions like: "My cw fraction decreased, was it because my cw decreased or did my cw remain stable and someone else added more resources?" a graph showing the ratio between cw fraction to cw would also be nice since it answers above question more directly without having to compare the cw and cw fraction lines manually onionoo data: https://metrics.torproject.org/onionoo.html#weights_relay_consensus_weight the onion box displays a cw graph: https://raw.githubusercontent.com/ralphwetzel/theonionbox/master/docs/images/weights.png

1 0

Bridge bandwidth usage?
by Nathaniel Suchy 11 Jul '18

11 Jul '18

Hi. I would like to run a public OBFS4 Tor Bridge. Digitalocean’s price changes made running an exit too expensive. In comparison how much bandwidth would a Tor bridge use per month? Cheers, Nathaniel

2 1

Re: [tor-relays] Thoughts on automatically updating tor software on macos High Sierra
by Keifer Bly 10 Jul '18

10 Jul '18

Tried that twice now and it has not worked. It’s strange, the error terminal returns when trying to launch the script to upgrade tor is this iMac:~ oldimac$ launchctl load -w /Library/LaunchDaemons/starttorupgrade.plist /Library/LaunchDaemons/starttorupgrade.plist: Path had bad ownership/permissions This is very odd. I set the permissions to read and write for all users, but yet this error is still happening. I changed the permissions for the whole lanchdaemons folder as well and still no resolve to this. I even tried signing into the root user in Terminal to see if that would resolve the issue, it did not. Here is the code for the two scripts I wrote, they were too big to send as attachments. Perhaps I am doing something wrong? I do not know. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Label</key> <string>com.oldimac.upgradetor</string> <key>ProgramArguments</key> <array> <string>/Library/LaunchDaemons/upgradetor.plist </string> </array> <key>StartInterval</key> <integer>80000</integer> </dict> </plist> code for upgradetor.plist: > brew upgrade tor > On Jul 9, 2018, at 8:45 PM, Keifer Bly <keifer.bly(a)gmail.com> wrote: > > Tried that twice now and it has not worked. It’s strange, the error terminal returns when trying to launch the script to upgrade tor is this > > > iMac:~ oldimac$ launchctl load -w /Library/LaunchDaemons/starttorupgrade.plist > /Library/LaunchDaemons/starttorupgrade.plist: Path had bad ownership/permissions > > This is very odd. I set the permissions to read and write for all users, but yet this error is still happening. I changed the permissions for the whole lanchdaemons folder as well and still no resolve to this. I even tried signing into the root user in Terminal to see if that would resolve the issue, it did not. I’ve attached the scripts I created if someone wouldn’t mind helping me take a look tp see if anything is wrong? Thank you.

2 2

Thoughts on automatically updating tor software on macos High Sierra
by Keifer Bly 09 Jul '18

09 Jul '18

Hello list, So for a while I have been struggling to find a way to automatically update the tor relay software on macOS High Sierra. What I am currently doing is running a batch file that runs the command “brew upgrade tor” continuously. However, I am attempting to find a way to do this automatically on macos High Sierra where the process doesn’t have to be running every second. Here’s the unfortunate thing, on the newest macos operating systems, it appears there is no possible way to run terminal commands automatically, as crontab has been disabled / removed from newer mac operating systems (I discussed this with Apple technical support) and applications to run scripts automatically are incompatible with newer macos. Any thoughts on this would be appreciated, thank you.

3 2

DNS Time Outs
by Paul Templeton 09 Jul '18

09 Jul '18

Hi all, how often does the site https://arthuredelstein.net/exits/ update. 'coffswifi4' was reporting 60% timeouts but I have setup a stand alone DNS for it and would like to know if its resolved the problem. I think this is why it kept on being dropped from the consensus... For nusenu - Yes I have setup DNSSEC :-) Regards, Paul 137CF322859E400455E457DB920F65FFDD222CDF

3 3

Re: [tor-relays] DNS Time Outs
by Paul Templeton 09 Jul '18

09 Jul '18

> Exits don't get dropped from the consensus for DNS failures. > The directory authorities only check ORPort connectivity. Then I have two separate problems...

1 0

tor alpha users: if you are still running 0.3.3.5-rc..
by nusenu 07 Jul '18

07 Jul '18

Dear debian/ubuntu tor alpha repo users, there is an oddly high number of relays running 0.3.3.5-rc which was the last version before the 0.3.3.x alpha repo has been discontinued. If you are doing apt upgrades and don't get tor v0.3.3.7 your sources list is likely incorrectly setup (only containing the experimental lines without the tor stable lines), please ensure you copy and paste the sources.list lines from https://www.torproject.org/docs/debian.html.en#ubuntu after choosing your settings from the drop down. Note: as already noted on this list, the page is slightly outdated. If you want to help testing 0.3.4.x you should replace '0.3.3.x' with '0.3.4.x' in your sources.list bonus points if you want to share the reason why you had a misconfigured sources.list file (maybe we can improve / avoid that somewhere) -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

3 8

Is a relay on mobile broadband possible in Australia?
by I 06 Jul '18

06 Jul '18

6 22

Re: [tor-relays] Is a relay on mobile broadband possible in Australia?
by Paul Templeton 06 Jul '18

06 Jul '18

> What provider - I used to run one on iiNet broadband. Just went online - iiNet does have this service anymore... https://www.iinet.net.au/internet/broadband/mobile/

1 0

Do not be intimidated "Zwiebelfreunde" and all others
by onion 05 Jul '18

05 Jul '18

out of German newspaper taz: https://www.taz.de/Kommentar-Razzien-bei-Netzaktivisten/!5515912/ https://www.taz.de/Kommentar-Razzien-bei-Netzaktivisten/%215515912/

2 1

Re: [tor-relays] tor-relays Digest, Vol 89, Issue 49
by dave levi 05 Jul '18

05 Jul '18

first, Thank you all for you answers and help. let me make it a bit harder. now, im running a relay which is Guard and Exit relays. i have defined in my relay(the server that's running the relay in /torrc file) to be "AllowSingleHopExits 1" and set in my computer that running the TOR(in /torrc file) with the 1(one) hop to: "ExcludeSingleHopRelays 0" and "AllowSingleHopCircuits 1" so now every thing needs to be ok right? but, still its not working On Tue, Jun 26, 2018 at 5:34 PM, <tor-relays-request(a)lists.torproject.org> wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Is Tor-network protected from using one hop? (dave levi) > 2. Re: Is Tor-network protected from using one hop? (Logforme) > 3. Re: Is Tor-network protected from using one hop? (Matt Traudt) > 4. Re: Is Tor-network protected from using one hop? (Nagaev Boris) > 5. Re: Is Tor-network protected from using one hop? > (Roger Dingledine) > 6. Re: Is Tor-network protected from using one hop? (Matt Traudt) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 26 Jun 2018 17:16:46 +0300 > From: dave levi <levi72827(a)gmail.com> > To: tor-relays(a)lists.torproject.org > Subject: [tor-relays] Is Tor-network protected from using one hop? > Message-ID: > <CAJUku5hQa5JCk1UCn_CynyVG=kxhXkQpC0-ApW=k7vJxPrTM5g@ > mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > I'm testing few things in Tor and I noticed that if im changing(from the > source code) the number of hop's(nodes) to be more then 3 hop's it work's > fine(slowly, but still working) and if im sting only 2 hop's its still > works great. but, when i'm setting only 1 hop, i can open the Tor-browser > but i can't use it(Tor-browser) to visit site(regular site or onion site > too). so im thinking maybe the Tor-network have protected from users who > are using 1 hop? >

1 0

OutboundBindAddressExit
by Paul Templeton 05 Jul '18

05 Jul '18

Can you only bind one address or is there a way to use multiple? P 609662E824251C283164243846C035C803940378

2 4

A general question for relay operators
by George 04 Jul '18

04 Jul '18

Greetings relay operators. A question that came up offline for relay operators can be summed up in one sentence, paraphrased from flexlibris: as a relay operator, what "things" do you wish you knew before you started running a relay? I'm really curious, in particular, to hear from those relay operators who are less connected to others, and are maybe more isolated physically from the community. In the long-ago past, many of us ran exit nodes without giving it much thought or preparation leading to ISP issues, but that seems less common today. For others, there might be a learning curve in keeping a network service up with decent uptime, while updating the relevant ports and operating system. There's no irrelevant answers to this, including more boring issues such as paying for the relay, choosing a provider or experiences as a (conscious) exit node operator. Bonus point for showing relation between your total costs per 1Mbps. Not only should this discussion be useful on list, but it might provide more content for the relay operator guide. g -- 34A6 0A1F F8EF B465 866F F0C5 5D92 1FD1 ECF6 1682

9 15

Coordinated raids of Zwiebelfreunde at various locations in Germany
by nusenu 04 Jul '18

04 Jul '18

https://blog.torservers.net/20180704/coordinated-raids-of-zwiebelfreunde-at… https://www.ccc.de/en/updates/2018/hausdurchsuchungen-bei-vereinsvorstanden… "The board members of the association are not considered suspects but witnesses in the ongoing investigation." "Just to recap: The mere presence of an e-mail address at a large free provider on a website has caused law enforcement authorities to deduce that a German association that helps raise funds for this provider must be connected to this website somehow."

5 5

DSL interruption
by Paul 04 Jul '18

04 Jul '18

^ r | rt rt | rt rt | rt rt rt | rt rt rt rt | rt rt rt rt | rt rt rt rt rt | rt rt rt rt rt rt | rt rt rt rt rt rt rt | rt rt rt rt rt rt rt -+---------------------------------------------------------------------------> | 12 13 14 15 16 17 18 19 20 21 22 23 00 01 02 03 04 05 06 07 08 09 10 11 h rx (MiB) tx (MiB) h rx (MiB) tx (MiB) h rx (MiB) tx (MiB) 12 11.14 14.76 20 666.90 679.48 04 11.68 15.05 13 98.65 102.77 21 27.54 29.01 05 22.50 22.41 14 961.83 954.33 22 49.58 51.97 06 14.50 17.09 15 1028.29 1021.80 23 50.87 51.47 07 11.75 15.13 16 1529.16 1520.73 00 28.72 29.68 08 10.71 13.05 17 1779.50 1768.45 01 16.91 19.62 09 32.82 14.84 18 2477.60 2456.01 02 10.76 14.93 10 13.86 15.48 19 2380.83 2358.08 03 10.06 12.70 11 1.57 2.32 From time to time I do get DSL interruptions which look like above on the traffic on one of my smaller relays. This usually last until I restart the machine manually. Anybody having a good quick idea, script to solve this and restart automatically when DSL is up again? Its on Raspian latest.. Thanks and regards Paul

2 1

killall -hup command
by Keifer Bly 04 Jul '18

04 Jul '18

Hello, So recently I rebooted my relay using the killall tor -hup command (while I was trying to mae some changes to my torrc file). My relays uptime was not changed at all by this, having a current uptime of about 6 days. However, I noticed today at http://torstatus.blutmagie.de/router_detail.php?FP=db1af6477bb276b6ea5e7213… My relay lost the stable flag (which it had had for the last about two months). I know not to worry about exactly what flags I have all the time, but it raises the question of what eactly the killall -hup command does? Thanks.

4 5

Turning down my relay from DigitalOcean
by Guillermo Narvaez 03 Jul '18

03 Jul '18

Hello everyone, Sadly I'm stoping the tor daemon in my relay due high cost of bandwidth ($100), in the meantime I start to search an optional hosting. My apologies! -Guillermo

10 11

Contact info obfscation
by Keifer Bly 02 Jul '18

02 Jul '18

Hello, I am aware that email addresses used in the “ContactInfo: “ in a relay operator’s torrc file is publicly listed on the tor relay. However, what I am wondering, is there a way to obfuscate the email address on http://torstatus.blutmagie.de/router_detail.php?FP=db1af6477bb276b6ea5e7213… to appear as “k—f---b--(a)g-ail.xn--com-9o0a or something of the sorts, while keeping the real email address readable for tor cloud to send mail to? It seems like obfuscating the email address in the torrc file would cause it to become unreadable to the tor project as well. Thank you.

10 23

Problem implementing IPv6 and NYX info
by arisbe 01 Jul '18

01 Jul '18

This year I've modified most of my exit relays to function as IPv6 in/out. The process was easy with the exception of two [0], [1]. I requested and received an IPv6 address, netmask and gateway from these ISPs. I then modified my /etc/network/interfaces file as follows leaving the IPv4 lines in tack: iface eth0 IPv6 static address 2a06:1700:0:1b:: netmask 64 gateway 2a06:1700:0:1b::1 ip addr shows the IPv6 address as global. I added a single line to torrc following the IPv4 line: ORPort 9001 ORPort [2a06:1700:0:1b::1]:9001 After a restart, both relays ramped up to a volume of connections where I was comfortable that the changes were good. Visiting them 12 hours later I find connections in the few hundred and no flags. About half of the connections were from non-Tor servers. The Tor daemon was running and had a PID. Logs showed the relay operational and nothing peculiar. Tor metrics shows the relay as down. I've commented out the IPv6 ORPort line to get both of these exits going again. The procedure I outlined has worked four other times for me. So what gives? Can anyone steer me toward the problem? And, finally, a quick question: Does NYX display incoming and outgoing IPv6 relay information? I assume ARM does not. Arisbe [0] [4061C553CA88021B8302F0814365070AAE617270] [1] [9B31F1F1C1554F9FFB3455911F82E818EF7C7883]

5 5

relayor v0.4.0 is released
by nusenu 01 Jul '18

01 Jul '18

Hi, relayor v0.4.0 is released. relayor helps you with running relays with minimal effort (automate everything). https://github.com/nusenu/ansible-relayor This release contains important changes for exit operators that define their own exit policy, please _do_ read the changelog if you are an exit operator using relayor _before_ upgrading since it requires a minor configuration adjustment. If you do not change the default value for tor_ExitPolicy no configuration change is required. Changes since v0.3.3: ------------------------------ - major: change the format of tor_ExitPolicy (single-line to multi-line) previously it you defined the exit policy like: tor_ExitPolicy: "accept *:80, accept *:443, accept *:22" now you define your exit policy like this: tor_ExitPolicy: - accept *:80 - accept *:443 - accept *:22 - support multiple IP addresses for OutboundBindAddressExit - add support for OpenBSD 6.3 (drop 6.2) - add support for Ubuntu 18.04 (drop 16.04) - add support for Fedora 28 (drop 27) - drop support for Debian 8 and HBSD - increase min. tor version to 0.2.9.x - increase min. ansible verstion to 0.2.5.3 - add support for custom addition to MyFamily members - switch tor_alpha_version from 0.3.3.x to 0.3.4.x - Debian: switch to HTTPS (from HTTP) for repository traffic - reorder some torrc items Main benefits for a tor relay operator ====================================== * automation - no more manual setup tasks * security: offline Ed25519 master keys every tor instance is run with a distinct user * automatically makes use of IPv6 IPs (if available) * automatic tor instance generation (two by default - configurable) * enables tor's Sandbox feature by default on Debian-based systems * easily choose between alpha/non-alpha releases * easily restore a relay setup * easily choose between exit relay/non-exit relay mode * automatic deployment of a tor exit notice html page via tor's DirPort * automatic MyFamily management Supported Operating Systems ---------------------------- Debian 9 and Debian Testing OpenBSD 6.3 FreeBSD 10.4, 11.1 Ubuntu 18.04 CentOS 7 Fedora 28 regards, nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

1 1

fix this please
by I 30 Jun '18

30 Jun '18

3 5

Gentoo's Github hacked
by I 29 Jun '18

29 Jun '18

1 0

Tor Exit Node Winter Shutdown
by Jason Odoom 28 Jun '18

28 Jun '18

Hello relay operators, I regret to inform you all that I will be shutting down my Tor Exit node - Winter [0] after more than five years. Digital Ocean's new bandwidth policy has made it incredibly expensive to keep this online. I incurred almost $200 of usage. I was lucky enough to have received a deduction off of my bill. I also believe that in this case asking for donations will do little to help. I did not host this Exit node for accolade but because I truly believe in what the Tor project is doing. I will allocate my budget for the Exit node towards monthly contributions to Tor as an alternative. Hopefully in the future I will be able to return. It's been fun. 0: https://metrics.torproject.org/rs.html#details/9EC5E097663862DF861A18C32B37… Best, Jason - Jason Odoom GPG 9031B50D

2 2

A general question for relay operators
by arisbe 28 Jun '18

28 Jun '18

Hello George and all, When I was learning to implement Tor I had difficulty wading through the web pages for information. Some pages were obsolete, some poorly maintained (think Tor flow or good/bad hosting companies). The Tor manual is just a huge list of Tor terminology with no aids to help find things. The Tor project site has no site map. I still occasionally have the same problems when I try to find something. I found this very discouraging as I tried to grow my first Tor node without a live person to help me. I can imagine how daunting this would be to someone also trying to learn linux. Hey, thanks so much for asking. I appreciate your interest.

3 3

No IPv6 bridges from bridges.torproject.org
by Roman Mamedov 28 Jun '18

28 Jun '18

Hello, If you select "Do you need IPv6 addresses - Yes", it always results in an error "There aren't any bridges available". No matter if choosing obfs4 or none for the pluggable transport. Is that thing working? There should be at least one available (with obfs4, too), or at least I was under impression that I run one. As a side note, that page always loads in my native language with no way to switch to English -- pages which do this are the worst. In this case it means I can't usefully copy-paste you the exact error messages that I get. -- With respect, Roman

2 1

Is Tor-network protected from using one hop?
by dave levi 26 Jun '18

26 Jun '18

I'm testing few things in Tor and I noticed that if im changing(from the source code) the number of hop's(nodes) to be more then 3 hop's it work's fine(slowly, but still working) and if im sting only 2 hop's its still works great. but, when i'm setting only 1 hop, i can open the Tor-browser but i can't use it(Tor-browser) to visit site(regular site or onion site too). so im thinking maybe the Tor-network have protected from users who are using 1 hop?

6 6

Re: [tor-relays] tor-relays Digest, Vol 89, Issue 49
by dave levi 26 Jun '18

26 Jun '18

first, Thank you all for you answers and help. let me make it a bit harder. now, im running a relay which is Guard and Exit relays. i have defined in my relay(the server that's running the relay in /torrc file) to be "AllowSingleHopExits 1" and set in my computer that running the TOR(in /torrc file) with the 1(one) hop to: "ExcludeSingleHopRelays 0" and "AllowSingleHopCircuits 1" so now every thing needs to be ok right? but, still its not working On Tue, Jun 26, 2018 at 5:34 PM, <tor-relays-request(a)lists.torproject.org> wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Is Tor-network protected from using one hop? (dave levi) > 2. Re: Is Tor-network protected from using one hop? (Logforme) > 3. Re: Is Tor-network protected from using one hop? (Matt Traudt) > 4. Re: Is Tor-network protected from using one hop? (Nagaev Boris) > 5. Re: Is Tor-network protected from using one hop? > (Roger Dingledine) > 6. Re: Is Tor-network protected from using one hop? (Matt Traudt) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 26 Jun 2018 17:16:46 +0300 > From: dave levi <levi72827(a)gmail.com> > To: tor-relays(a)lists.torproject.org > Subject: [tor-relays] Is Tor-network protected from using one hop? > Message-ID: > <CAJUku5hQa5JCk1UCn_CynyVG=kxhXkQpC0-ApW=k7vJxPrTM5g@ > mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > I'm testing few things in Tor and I noticed that if im changing(from the > source code) the number of hop's(nodes) to be more then 3 hop's it work's > fine(slowly, but still working) and if im sting only 2 hop's its still > works great. but, when i'm setting only 1 hop, i can open the Tor-browser > but i can't use it(Tor-browser) to visit site(regular site or onion site > too). so im thinking maybe the Tor-network have protected from users who > are using 1 hop? >

2 1

bridge installation help please
by I 26 Jun '18

26 Jun '18

4 11

Relay Guide - IPv6 Connectivity Testing
by Matthew Finkel 25 Jun '18

25 Jun '18

Over the last few days I've started thinking more about IPv6 and, inevitably, I started thinking about how we can improve support within the Tor network. Within the last few months, there were a few instances of relay operators seeking answers for why their relay did not have the running flag in the consensus. After some investigation, in some cases this was because the relay had an IPv6 ORPort configured but a majority of the IPv6-enabled directory authorities did not believe it was running. Unfortunately, despite IPv6 connectivity being a necessity now, ISP rollout is slow and on-going in some geographical areas and network peering arrangements are sometimes sub-standard or not stable. The Relay Guide[0] has a section describing how an operator can enable an IPv6 ORPort, and there's a supplementary page[1] specifically describing additional information about it. Considering there are potential critical failures when the IPv6 ORPort is configured, should the relay guide suggest the operator confirm they have IPv6 connectivity to all of the IPv6-enabled directory authorities[2] before enabling it ("Please ping6/telnet/nc to these hosts before enabling this.")? It would also be nice if the relay, itself, performed self-checks of this connectivity and printed a warning log if some failure-threshold is reached (and possibly disabling the IPv6 ORPort). But, in reality, this is a hack around a broken internet - and I hesitate advocating for something like this in tor. Maybe there is a compromise we can find between the relay operator manually testing connectivity periodically and tor automatically doing-smart-things. Thoughts? - Matt [0] https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#IPv6 [1] https://trac.torproject.org/projects/tor/wiki/doc/IPv6RelayHowto [2] https://gitweb.torproject.org/tor.git/tree/src/or/auth_dirs.inc

3 5

Number of connections on dir port
by Logforme 24 Jun '18

24 Jun '18

After reading this post https://lists.torproject.org/pipermail/tor-relays/2018-May/015277.html I started looking into what is happening on the dir port on my relay (855BC2DABE24C861CD887DB9B2E950424B49FC34) The bandwidth ratio of dir/or traffic is around 3% to 4%. Not excessive according to the linked post. Looking at the conntrack table I see many IP addresses (usually from Ukraine or Russia) with 100+ connections. Atm there are around 10 IP addresses with 100+ connections and around 30 with 10+ connections. None of the IP addresses I've looked at are Tor relays. Some questions: Is this expected behaviour against on a fallbackdir flagged relay? Does the DoS prevention implemented recently address abuse against the dir port? I read that newer Tor clients don't use the dir port. Correct? Do Tor relays use the dir port? Can I remove the dir port from my relay without reducing my relays usability to the network? Thank you for any answers.

2 1

Re: [tor-relays] Alleged Family Members
by Paul Templeton 24 Jun '18

24 Jun '18

> How long is the timeout for 'Alleged Family Members' to disappear on > 'metrics.torproject.org'? Can I force it? Shouldn't take long, but did you leave the relay finger print in the MyFamily section in the torrc file? P 609662E824251C283164243846C035C803940378

1 0

I get sad when :-(
by Paul Templeton 24 Jun '18

24 Jun '18

I get sad when I lose control over one of the bare metal systems I run and help desk is slow to respond over the weekend. Then you have to throw in the time differences, then the language - its a wonder anything runs... Just wanted to know if there is anyone I can hook up with to talk about some config/stability issues. I have two systems one a VPS the other bare metal and both will drop out of the consensuses about once a day(2 to 3 hours) but are running the whole time. I have 4 bare metal systems but none are at capacity and would like to find the best approach to get more out of them. Consensus is one issue that's limiting capacity usage. I would love to meet up but in a remote part of AU and I just quit my job after 15 years so haven't time to fly anywhere at this time... P 609662E824251C283164243846C035C803940378

3 4

Prepping bridges for censorship
by Keifer Bly 22 Jun '18

22 Jun '18

Hi, So I had a thought. It seems like a lot of the relays run off of various port numbers (of course). However if all of the relays and bridges are running off of various port numbers (ie 9001, 10000, etc.), couldn’t this stop censored users (who’s isp or local firewall only allows certain ports like 80 and 443) from being able to connect to the tor network even when using bridges due to the port that the bridge of guard relay being run on a port number that is blocked by the isp or local firewall? Just a thought.

4 6

Tor Relay Operators Needs
by Eran Sandler 22 Jun '18

22 Jun '18

Hi everyone, My name is Eran Sandler and I'm the Operator of tor4thepeople1 (98F44299592FC31FD3F2F8969D27374D00E96B9B) and tor4thepeople3 (CEACA34874EAD103D27CA6A7650B16112F12B209) - tor4thepeople2 had to go away, unfortunately. I also developed the gonionoo (https://github.com/erans/gonionoo) an Go wrapper around the Onionoo API. I've been running various tor relays and exit nodes since Sep/2015. Being a software developer by trade I've been thinking about projects and services that might help Tor Relay Operators and Tor in general and have a few ideas I wanted to pass along and see if anyone sticks. A few of the most notable ones are: - *Tor Weather Replacement* - ever since Tor Weather went down I've found that I actually miss it. It doesn't happen often that my relays are down but it does happen from time to time and in the past Tor Weather really helped get notified. A few things I thought about adding in addition to "Your node is down" alert are: - Node version is too old - New versions of Tor that are relevant to you are available etc - Sends node stats every given interval - *Free domain name for every Tor node operator who wants it*. A while back I purchased torexitnode.net and I wanted to develop a system that, upon verifying a running node (send an email to the published Email address of a node and verify its running) - will give a subdomain under torexitnode.net. I'm currently using it for tor4thepeople1.torexitnode.net and tor4thepeople3.torexitnode.net. I find that it makes things easier to explain when that's the node name. If you can get your hosting service to provide you with an updated reverse DNS for your IP address and point it to a subdomain of torexitnode.net it make it very clear that this is a Tor exit node. - *System to provide tor exit node verification*. Given a pre-registered app and callback and a fingerprint of a node it will find the Email of the operator and email a unique link. When that link is clicked a callback will be made to the preregistered URL - allowing a developer to verify that a certain node operator is truely the one accessing the service. That is actually needed for both of the services mentioned above. - *Simple package to run a webserver + customized tor exit node notice page* - similar to what I configured for http://tor4thepeople1.torexitnode.net. It's very useful and if we can get a super basic web server that only serves this page and would be easy to install (maybe even bundle with Tor) + let's encrypt integration (to serve it under SSL) it would provide great benefit to all operators. If you have additional ideas and or thoughts about the above projects or other projects please let me know. Looking forward to your thoughts. Thanks, Eran

5 13

Re: [tor-relays] tor-relays Digest, Vol 89, Issue 37
by Bill Chapman 20 Jun '18

20 Jun '18

> On Jun 20, 2018, at 1:48 PM, "tor-relays-request(a)lists.torproject.org" <tor-relays-request(a)lists.torproject.org> wrote: > > +

1 0

Relay bandwidth accounting
by Sean Brown 18 Jun '18

18 Jun '18

I just set up a new non-exit relay and in going through information to set up, I came across the T-shirt for contributing and in addition to running for 2 months it says "if you're not an exit but you average 500 KBytes/s traffic." What would be the best way to keep accounting of the traffic my relay is passing? I know of the metrics.torproject.org, is that all the project would need?

2 1

how to set-up multiple debian relays at once
by I 17 Jun '18

17 Jun '18

3 5

Spam Emails Received From This Mailing List
by Keifer Bly 16 Jun '18

16 Jun '18

Hello fellow relay operators, My apologies as this is not related to tor relays, however, there seems to be several spammers subscribed to the relay list. Every time I am involved in a discussion on this list, I receive 3-5 emails supposedly from girls wanting to meet up (for sex). The emails in question claim they are sent from email address tor-relays(a)lists.torproject.org (and always have the same email subject of the discussion I was involved in). I am somewhat in a trap as blocking them with spam filters would block all emails sent from the relay lists address. I am wondering what could be done about this (the email provider in question is Gmail). Thank you.

14 31

metricsbot broken
by Paul Templeton 15 Jun '18

15 Jun '18

Who ever looks after the @metricsbot@botsin.space its stopped working... Paul 609662E824251C283164243846C035C803940378

3 2

Bandwidth limits for Fallback Directory Mirror
by Cristian Consonni 15 Jun '18

15 Jun '18

Hi, due to the new DigitalOcean billing terms for bandwidth (see this other thread [1]), I have limited my relay bandwidth to be sure I will stay withing the limits: ``` RelayBandwidthRate 360 KB # Throttle traffic to 100KB/s (800Kbps) RelayBandwidthBurst 720 KB # But allow bursts up to 200KB/s (1600Kbps) ``` This is the relay: https://metrics.torproject.org/rs.html#details/1211AC1BBB8A1AF7CBA86BCE8689… The relay is also a Fallback Directory Mirror. I plan on keeping the relay running, but I was wondering if the new limits disqualify it or if they are a problem to let it be a fallback directory mirror. Thanks for you help. Cristian p.s.: I've also asked to DO if they could revert my last charges for the bandwidth, since they were quite steep and, frankly, unexpected. Let's see what they say... [1]: https://lists.torproject.org/pipermail/tor-relays/2018-April/015051.html

2 1

FW: [#79576] Spam Emails Being Sent To TOR Relay Operators
by Keifer Bly 13 Jun '18

13 Jun '18

Hill all, I wanted to inform that I filed a complaint about the spam emails and this is the reply I got. Cheers. From: support(a)ioflood.com Sent: Tuesday, June 12, 2018 7:43 PM To: Keifer Bly Cc: abuse(a)ioflood.com Subject: Re: [#79576] Spam Emails Being Sent To TOR Relay Operators Hi Keifer, I wanted to let you know that we've received your complaint regarding the spam emails and have forwarded it to the relevant customer so that they can resolved it. We do take these kinds of complaints seriously and will be following up with our customer to make sure the appropriate action is taken. In the meantime, if we can be of further assistance, please let me know. Thanks, -- Mabel To Input Output Flood, LLC We Love Servers web: www.ioflood.com email: mabel(a)ioflood.com Skype: ioflood_mabel_t twitter: @ioflood --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

3 2

Tor Community Night / Relay operator night in Barcelona
by Colin Childs 11 Jun '18

11 Jun '18

Hello tor-relays, The Tor Project will be holding a community night / operator meet up after-hours at the 2018 Privacy Enhancing Technologies Symposium (PETS2018) in Barcelona! This will be happening on July 24th, at 6:30 PM in the PETS main room at Centre de Cultura Contemporània de Barcelona. At 8:30PM we will be moving to a near-by Belgian bar called "Belchica" at Carrer de Villarroel, 60, 08011 for food and drink. There will be Vegan options available. This will be a great opportunity for the Tor relay operator community to meet and socialize. Within this event, there will be a dedicated relay operators meetup, which will begin at 7:00PM. We will discuss common issues operators face, potential solutions, as well as how we can all help to grow the relay operator community both locally and globally. We'll be on hand to answer questions and want to hear your feedback about the community, running relays, and what we can do to better support you. Full details on the event can be found on our blog at https://blog.torproject.org/meetup-tor-community-night-pets <https://blog.torproject.org/meetup-tor-community-night-pets> I look forward to hearing from you / seeing as many of you there as possible!

1 0

Tor Network Safety Precautions
by Keifer Bly 10 Jun '18

10 Jun '18

Hello, So I am aware that the tor network has some built in safety mechanisms to protect tor users from attacks (such as from malicious tor relays, surveillance based attacks, etc). I am aware of some of tors safety mechanisms; I know that tor will automatically switch out which relays the tor browser is connecting through so as to prevent relays from being able to log traffic flowing through them. I am also aware that tor browser will automatically redirect to https secure websites to prevent end to end correlation attacks on users. I am wondering, what are the other safety mechanisms that tor network does to prevent against attacks? Besides keeping the tor relay software on OS up to date (which I am doing), what are the safety precautions relay operators should consider (the OS my relay is running off of is macOS High Sierra). Thank you.

1 0

What is the different between Tor browser and Tor source code
by dave` dave 10 Jun '18

10 Jun '18

I know that i can download Tor Browser and use it as a regular browser with a touch of anonymity. but, if i want to change a few things in Tor i can change in .torrc file like the ExitNode, EntryNodeetc.. as i have here in Tor's manual: https://www.torproject.org/docs/tor-manual.html.en but, if i want to change a way more series things i need to change it from the source code for example the numbers of Nodes-hop make 1 one or 8 hop's: https://www.torproject.org/download/download.html.en after changing the source code i and to install it: ./configure && make install more info: https://www.torproject.org/docs/tor-doc-unix.html.en after changing thw source code as i want it compiled without any error's(Ubuntu 16.04 VMware). after the compiling im in kind of in dead end don't know what to do. i want to use the source code that i edit as a i use in regular Tor-Browser can i do that? Thank you!

6 14

Fwd: Tor Guard Relay
by Keifer Bly 09 Jun '18

09 Jun '18

This is one of the about 20 emails that have been received. Upon looking it looks like they are spoofing the [tor-relays] subject line. My apologies for the subject change but could not find a way to forward the emails without forwarding them from an old conversation. Thank you. (The subject this is in reference to is "Spam Emails Received From This Mailing List"). ---------- Forwarded message --------- From: Becky Janet <beckyjanet335900(a)re.mexyst.com> Date: Fri, Jun 8, 2018 at 7:48 PM Subject: Re: [tor-relays] Tor Guard Relay To: Keifer Bly <keifer.bly(a)gmail.com> first you need to trust someone to find real sex partner. So if you want to find real sex partner then you need to trust me. Always i'm telling you it's totally f r e e. Just connect with My Private Page <http://datingflirt.info/1stold> by submitting you mail, name, age etc. I'm assure you if it's ask any cc then no need to connect with me. So just trust and try. Trust Me & Try It Now NCTB ; After completing this task check your mail ,Automatically you will get my personal phone no in your mail within 5 min. Just check your mail (inbox/s p a m) and call me asap. I'm waiting for your cam

3 5

Tor Guard Relay
by Keifer Bly 07 Jun '18

07 Jun '18

Hello, I have one question. I have been running my relay “torland” at http://torstatus.blutmagie.de/router_detail.php?FP=db1af6477bb276b6ea5e7213… For roughly 3 months now (I am unsure exactly how many days). While my relay is marked “fast” and “stable” currently, it has never been marked as a “guard” relay. I believe being a “guard” relay requires at least 10mb/s for relay speed, but am wondering, do I need to configure my torrc file to allow it to be used as a guard relay and are there any risks for doing this (like there are in running in exit relay)? Thank you.

2 3

Why adding more Nodes won't help?
by dave` dave 06 Jun '18

06 Jun '18

Tor use 3 noes to enter the Tor-Network. why adding more nodes would not help my anonymity, as more nodes i have it need to be harder to track me. how can i add or subtract nodes.

4 11

Inbound-outbound connexion ratio in tor
by torix＠protonmail.com 05 Jun '18

05 Jun '18

Dear List, Since I started running Tor 0.3.2.10 a few months ago, I tend to have 2 to 3 times the number of inbound connexions as outbound, as reported by nyx. I am running a middle relay on Debian, no special anything. Right now, for instance my inbound connexions are 2345, outbound are 861. The numbers never quite used to match, which made sense, because of tor overhead, but in a middle relay wouldn't they generally be about the same? Just wondering, --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2