- tor-relays - lists.torproject.org

DigitalOcean bandwidth billing changes
by Ralph Seichter 02 May '18

02 May '18

Looks like DigitalOcean has just begun measuring bandwidth usage "officially", starting yesterday: https://www.digitalocean.com/community/tutorials/digitalocean-bandwidth-bil… "Based on our analysis of the historical usage patterns of our customers, less than one percent of users will exceed their pooled allowance." I had heard of the One Percent, but never thought I'd become a part of that illustrious group... :-) -Ralph

15 22

Help With Autoupdating Tor Software
by Keifer Bly 02 May '18

02 May '18

Hello, So on Mac OS X, I am using crontab to automatically run a script I wrote for Mac OS High Sierra to automatically update the tor relaying software every day at 1am. The cron command I am using is this: 0 1 * * * /Users/oldimac/Desktop/update\ tor.scpt The script I wrote seems to work fine for updating tor, however it seems to have trouble updating homebrew. Here are the contents of the script: do shell script "$ which brew /usr/local/bin/brew update" do shell script "$ which brew /usr/local/bin/brew upgrade tor" end When the script is run, the output is this: sh: $: command not found Error: tor 0.3.2.10 already installed So it seems to be that it updates tor ok but when it tries to update homebrew the error is “command not found”. I previously tried do shell script “brew update” however that only turns to a "command not found" error and only works in terminal but not AppleScript. Also, after writing the crontab command, I launched crontab via terminal via running “crontab” which loads to a blank Terminal screen. Do you know of a way I can check the script actually ran? Thank you very much.

4 9

Info about Provider Scaleway and cheap "ARM server"
by Olaf Grimm 02 May '18

02 May '18

Dear readers, I tried to use different operating systems and hardware architectures for my Tor relays for diversity. So I came to the Parisian provider Scaleways, which has a cheap offer for ARM servers for € 2.99 per month. Debian was available with architecture "armhf / armv7l". I knew that, but I did not want to believe it. After performance trouble and a server crash I tested "/etc/cpuinfo" and 'lscpu'. There are Raspberry Pi in the cloud! From my personal device at home I know, that full cpu performance will kill the device due to overheating. Oh no! Must change to the next offer with x86_64 for € 11,99 / month. What can I expect? An old Pentium with 400MHz? https://www.scaleway.com/baremetal-cloud-servers/ My order was "C1 - A true metal ARM server running in the cloud." "4 Dedicated ARM Cores, 2GB Memory, 50GB SSD Disk / 200Mbit/s unmetered bandwith" The information for interested parties only. No discussion required. Olaf

3 2

>1100 relays still run end-of-life tor versions
by nusenu 01 May '18

01 May '18

As of today, with the EOL date of tor 0.2.5 the amount of EOL relays increased to over 1100 and more than 7% of the tor network capacity. https://nusenu.github.io/OrNetStats/#end-of-life-relays-share Here is the list of affected operators by contactInfo sorted by consensus weight fraction. https://gist.githubusercontent.com/nusenu/b867fb18c00dd1893820408877ed1470/… (the first 8 readable entries are in BCC) We encourage everyone to configure their relays to do updates automatically: https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#AutomaticSoftwa… Happy updating! nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

1 0

create Tor-Guard and Tor-Middle
by dave` dave 29 Apr '18

29 Apr '18

i want to build my own Guard-Relay and Middle-Relay and use them. i already have Tor-Bridge and Exit-Relay and i want to add the Guard and Middle, but i don't know how.

3 4

Tor relay marked as hibernating?
by Nathaniel Suchy (Lunorian) 29 Apr '18

29 Apr '18

Hi, The Tor relay https://metrics.torproject.org/rs.html#details/B0BF533DA3BC09DEEB4AF2BEC16F… of mine is marked as hibernating however I have not set a bandwidth limit. Any idea on why this is happening? Cheers, Nathaniel Suchy

3 2

Timeframe for a relay to be removed from the consensus and tor metrics
by Nathaniel Suchy (Lunorian) 28 Apr '18

28 Apr '18

While setting up my fleet of Tor Relays, one relay IP Address 206.189.165.140 had a bad config so I decided to delete it from the cloud provider and setup a new one in its place. When will it be removed from the tor consensus and tor metrics for the downtime? Cheers, Nathaniel

2 2

nyx tor controller password
by smichel0 27 Apr '18

27 Apr '18

Hello! I want to monitor my new tor relay (set up on a raspbian pi 3 by migrating my former relay incl. keys) with nyx. When try to start nyx by "nyx" in the command line "Tor controller password" is prompted. I can't find a password except the hashpassword in the torrc-file but that doesn't work. I tried to set a password by "tor --hash-password <password>" but it didn't work as well. When I start nyx with sudo it works and I can see that tor is doing well. Any solutions? Sent with [ProtonMail](https://protonmail.com) Secure Email.

4 6

reminder: Tor 0.2.5.x LTS will reach its end-of-life in a few days on 2018-05-01
by nusenu 27 Apr '18

27 Apr '18

Hi, this is a reminder that in a few days the tor LTS branch 0.2.5.x will reach its end-of-life date [1]. Currently there are still over 440 relays (~3.2% of the network capacity) running that tor version [2]. Please upgrade to one of the currently supported tor versions: - 0.2.9.x - 0.3.1.x - 0.3.2.x If you are still on Debian oldstable (jessie) with tor 0.2.5.16 you have multiple options: - use the the torproject's debian repository (tor 0.3.2.10) https://www.torproject.org/docs/debian.html.en#ubuntu - use debian backports (tor 0.2.9.14) https://packages.debian.org/jessie-backports/tor - or upgrade to debian stable (stretch) (tor 0.2.9.14) [1] https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTor… [2] https://nusenu.github.io/OrNetStats/#tor-version-distribution-relays -- https://mastodon.social/@nusenu twitter: @nusenu_

1 0

What's the timeline for a Tor relay to start routing a large amount of traffic?
by Nathaniel Suchy (Lunorian) 27 Apr '18

27 Apr '18

I started to run a few Tor Exit Relays (My exit policy only allows ports 80 and 443 only to minimize the amount of abuse) a few days ago. Currently Tor Metrics shows the relays are only advertising 700Kb/s despite the fact the minimum port speed on the VPSes I host on is 100Mb/s. I've been told by friends of mine it's because it's a new relay - at what point does the relay start to route a large amount of traffic equivalent to the port speed. I'm hoping to contribute to the Tor Project in a variety of ways over the next few months and the summer and starting relays is a first step. Cheers, Nathaniel

3 3

FW: Relay unreachable by authorities (Was: Re:Questiononrelay allowed downtime)
by Keifer Bly 27 Apr '18

27 Apr '18

From: Keifer Bly Sent: Thursday, April 26, 2018 4:08 PM To: tor-relays(a)lists.torproject.org Subject: FW: [tor-relays] Relay unreachable by authorities (Was: Re:Questiononrelay allowed downtime) From: Keifer Bly Sent: Thursday, April 26, 2018 4:01 PM To: tor-relays(a)lists.torproject.org Subject: RE: [tor-relays] Relay unreachable by authorities (Was: Re:Questionon relay allowed downtime) That’s what’s strange. I have double checked the tor logs and the only warning that appears is the “tor cannot help you if you use it wrong” warning; that’s the only one that appears. I did some research, and according to https://serverfault.com/questions/145907/does-mac-os-x-throttle-the-rate-of…, Mac os does have a maximum amount of network connections it does allow at once. To find mine out, I tried running this in terminal Launchctl limit maxfiles The return was this: maxfiles 256 unlimited. I tried attaching a photo of the output but got a message back saying it was held because it was too big (the file was about 6mb). I wonder if this would mean mac os only allows 256 connections at once? How could I modify my torrc file to not go over the max allowed connections by mac os and still be a useable relay? Thank you. From: teor Sent: Thursday, April 26, 2018 3:38 PM To: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] Relay unreachable by authorities (Was: Re: Questionon relay allowed downtime) On 27 Apr 2018, at 08:23, Keifer Bly <keifer.bly(a)gmail.com> wrote: My apologies. The fingerprint is DB1AF6477BB276B6EA5E72132684096EEE779D30 Here are the contents of my torc file (the isp beeng run from is Charter Communications, the only isp that is available where I live. You might want to use a pastebin service for large files. Or cut out all the commented stuff before posting your torrc. I do not remember applying any descriptor limit and do not see one here. The file descriptor limit is imposed by the OS. The default can be low. Here is how you can find out: Please check the logs for warnings and notices. Sometimes tor logs a warning when it starts up (for example, low file descriptors), and then the issue happens later. What’s strange is my internet connection is working fine and I am able to visit websites, making it not seem like it is overloaded. Tor requires thousands of simultaneous connections. Tor requires constant uptime. Internet browsing requires a few connections. It works when the network is interrupted. Seems strange. Does Charter have any strange policies against running tor relays (has anyone ever had a documented here problem with running a relay on Charter before)? Thank you. You should ask your ISP. T

4 10

Goes the ORPort into "Consensus Weight" calculation ?
by Toralf Förster 27 Apr '18

27 Apr '18

For family:D11D11877769B9E617537B4B46BFB92B443DE33D - running at the same IP - I do wonder about the differences of the values 44300 versus 36800 (one is 1 1/2 year, the other is 1/2 year old). -- Toralf PGP C4EACDDE 0076E94E

2 1

Question on relay allowed downtime
by Keifer Bly 26 Apr '18

26 Apr '18

Hello, So recently I had an uptime of about 3-4 days but then I had to restart my computer to install an operating system update (the OS in question being Mac OS X High Sierra). I know I am not to worry about what flags I have as long as I am not a bad relay, but am curious, what is the allowed downtime the network allows to do things like install operating system updates, etc, without significantly impacting time between failures? Thank you.

3 5

Running relays in universities? Exit nodes, perhaps? Please share your experience!
by Gunnar Wolf 26 Apr '18

26 Apr '18

TL;DR - Have you got official permission to operate Tor exit nodes within an university campus/network? Relay nodes, even? Please share me how this permission was achieved! (or even if it was denied, please tell me!) Hi, I know this list is mostly technical in nature, so sorry for presenting a very different kind of topic here; I will send a very similar message to the tor-teachers list, but I believe the population of this list to be interesting.. I am trying to get my university's (Universidad Nacional Autónoma de México) OK to run an exit node from our campus' network. I currently operate one relay, am willing to set up some extra relays, and have at least one colleague in a different research institute with a relay of his own, but I believe we should aim for exit nodes. Now, I don't want to set it up in a rogue fashion, as I'm sure that the university's NOC or CERT would not take long to get complaints and require me to shut it down. I have already made an official request for the permission to run an exit node and (as expected) it was turned down. Quoting (translation mine) the reasons for rejection, 1. This assignation is not factible because the Tor network is not compatible with the Acceptable Usage Policies of RedUNAM, being this infrastructure oriented to the service of institutional goals. 2. While the Tor network can have reseearch purposes, due to its nature and the hiding of IPv4 addresses and anonymous connectivity, it is susceptible to be used by third parties from outside the University with purposes conflicting with those specified in item 1, without any possibility of control or regulation from the University's part or from your project. 3. Even more so: The Tor network, due to its definition and structure, can potentially incorporate third people with malicious or even delictive intentions, which would affect not only the computers or networks in your Institute or all of the University, but also networks outside the institution's control So, I want to gather experiences from operators in different universities or research institutions. Which way did you have to argue? How hard was to get this OK? Did you ask a permission for a specific project, or as part of your networking infrastructure in general? Did you ask this before setting up the exit node, or as a "fait accompli" gathering not-too-ill results for a given time period? Any help and pointers are welcome!

8 8

control who can connect me
by dave` dave 25 Apr '18

25 Apr '18

im using VMware Ubuntu 16.04 using SSH. im running Exit-Relay and i want to control who can connect to my Exit-Relay, is there a way to do that- though the Exit-Relay settings, or the SSH settings? and there will be an even better way: if i can say who is the specific ip that can connect to me. Thank You!

5 5

Can i use the same ip for Tor bridge and Exit-Relay to work together?
by dave` dave 25 Apr '18

25 Apr '18

Im working on project in Tor and im running Exit-Relay and Tor-Bridge together(on the same ip). for that im using VMware Ubuntu 16.04 with SSH. im using "arm" option tor run the Tor through terminal this is my "torrc" file through SSH: SocksPort 0 ORPort 443 BridgeRelay 1 Exitpolicy reject *:* PublishServerDescriptor 0 Nickname Test ExitRelay 1 ControlSocket 0 ContactInfo human(a)gmail.com now, im testing the Exit-Relay through "Windows" and sets in "torrc": Exitnodes ip(my servers ip) and is works. and now im testing my Tor-Bridge through Tor-Browser: my ip:port| my fingerprint and it works but when im running them both on my computer- changing the "torrc" file(in windows) and set in Tor-Browser to use my Bridge its not working. i need them to work together for this project. edit: after few hours the Tor-Brigade are still working buy when im trying to use the Exit-Relay its seams like every thing is ok but i can't get into to the Tor net.(in my browser i see my Exit-Relay ip but cant get into the internet)

2 3

Consensus Weight Definiton
by Keifer Bly 23 Apr '18

23 Apr '18

Hello, I am wondering, could you please explain exactly what “Consensus Weight” is? I had had a good uptime, about five days, then my darn computer that I run my relay off of froze for about 40 minutes this morning and I had no choice but to reboot the tor software, setting my current uptime back to 0 days. However, it has a consensus weight of 523, is this a good rating? Does this have an effect on things such as what flags a relay has (mine currently being Fast, V2Dir, Running, and Valid)? The relay in question can be found here: https://metrics.torproject.org/rs.html#details/DB1AF6477BB276B6EA5E72132684… I know the stable flag (which I have had on and off since starting my relay, don’t currently have it but relay seems to receive traffic nonetheless) depends on uptime history, not exact current uptime, but am curious, is there an easy to check my current uptime history? Also, I thought I’d share an applescript I wrote to automatically update the tor relay software and homebrew one minute after midnight every day. Here is the source code (written using AppleScript editor) do shell script "$ which brew /usr/local/bin/brew update" do shell script "$ which brew /usr/local/bin/brew upgrade tor" end When it runs, it comes up with this error, saying tor is already up to date. sh: $: command not found Error: tor 0.3.2.10 already installed (1) As this is the only error that appears, I’d take it that the script works It can be scheduled to run automatically at midnight every night via this method I found here: https://apple.stackexchange.com/questions/24862/how-can-i-configure-my-comp… I am curious to know what you all think of this tactic if you will, please let me know as you can give it to others if you wish. Thank you.

4 12

Advertised bandwidth
by Ian Zimmerman 23 Apr '18

23 Apr '18

In /etc/tor/torrc, I have: ahiker!507 ~# fgrep -i bandwidth /etc/tor/torrc | grep -v '^#' RelayBandwidthRate 64 MBytes RelayBandwidthBurst 512 MBytes But metrics.torproject.org says: Details for: ahiker Configuration Nickname ahiker OR Addresses IPv4 Advertised Bandwidth 55.99 KiB/s Why? -- Please don't Cc: me privately on mailing lists and Usenet, if you also post the followup to the list or newsgroup. To reply privately _only_ on Usenet and on broken lists which rewrite From, fetch the TXT record for no-use.mooo.com.

2 1

Relay conf
by Michael Harris 22 Apr '18

22 Apr '18

Relay configure and started, stops abruptly. Any advice would be appreciated /var/log/tor/log Last three lines: Tor has successfully opened a circuit. Looks like client is functionality is working Bootstrap 100%: Done Interrupt: Exiting cleanly

2 1

Guard node configuration?
by Gabe D. 21 Apr '18

21 Apr '18

Hi guys. I've a relay running on Tor. It's an exit node now. And I noticed it has an entry guard flag which is great. But probability of it being an entry relay is 0%. How can I utilise this server to be an entry relay? How does one configure this and how does it work?

5 6

Home made method of auto updating Mac OS X relating software
by Keifer Bly 20 Apr '18

20 Apr '18

Hello List, I thought I’d share an applescript I wrote to automatically update the tor relay software and homebrew one minute after midnight every day. Here is the source code (written using AppleScript editor) do shell script "$ which brew /usr/local/bin/brew update" do shell script "$ which brew /usr/local/bin/brew upgrade tor" end When it runs, it comes up with this error, saying tor is already up to date. sh: $: command not found Error: tor 0.3.2.10 already installed (1) As this is the only error that appears, I’d take it that the script works It can be scheduled to run automatically at midnight every night via this method I found here: https://apple.stackexchange.com/questions/24862/how-can-i-configure-my-comp… I am curious to know what you all think of this tactic if you will, please let me know as you can give it to others if you wish. Thank you. Sent from my iPhone

1 0

Re: [tor-relays] Whatever happened to those 47 PrivateInternetAccess exit relays?
by us-drone-killing-empire＠scryptmail.com 19 Apr '18

19 Apr '18

Thanks arma! And I hope it goes well for them and other VPN providers start running their own exit relays.Best wishes,--------------------------------------------On Thu Apr 19 2018 at 6:24:41 PM, Roger Dingledine <arma(a)mit.edu> wrote: .showMessage{white-space: pre-line;}On Thu, Apr 19, 2018 at 01:21:00PM +0000, nusenu wrote:> us-drone-killing-empire(a)scryptmail.com:> > Good day,They happened to pop up not so long> > ago,https://nusenu.github.io/OrNetRadar/2018/03/27/a8.htmlDid they> > abandon them?> > They lived for less than two days, so this might have just been a test.> > Someone from the torproject wrote me that they are in contact with them > (or at least were in contact by the end of last month).I asked Steph for some hints, and she pointed me tohttps://twitter.com/piacsm/status/979101507617415168"We have R&D in progress and we will let the community know when weare ready"So it sounds like it *was* them running the relays, and hopefully theywill decide to take the next step whe n the time is right.--Roger_______________________________________________tor-relays mailing listtor-relays@lists.torproject.orghttps://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Whatever happened to those 47 PrivateInternetAccess exit relays?
by us-drone-killing-empire＠scryptmail.com 19 Apr '18

19 Apr '18

Good day,They happened to pop up not so long ago,https://nusenu.github.io/OrNetRadar/2018/03/27/a8.htmlDid they abandon them? Did they feel the abuse that would come out of them was too much for them to handle?I don't know but it seems the Tor network would really benefit from their exit contribution that spanned many countries.--Best wishes,

5 4

Protonmail now does VPNs
by I 19 Apr '18

19 Apr '18

"TOR over VPN ProtonVPN also integrates with the TOR anonymity network. With a single click, you can route all your traffic through the Tor network and access Onion sites."

1 0

Trouble with relay stability
by Keifer Bly 16 Apr '18

16 Apr '18

Hello, due to a recent power outage at where I run my relay http://torstatus.blutmagie.de/router_detail.php?FP=db1af6477bb276b6ea5e7213… Torland at, it could possibly have lost its stable flag (not sure yet). The outage is lasting about 3 hours or so. If I had the stable flag for about 4 days then my power went out for about three hours, hoe long would that take to regain the stable flag based on mtbf? Thank you very much.

3 4

No stable flag from 6 out of 9?
by Ole Rydahl 15 Apr '18

15 Apr '18

My relay nicknamed dobbo appear to be partly in "bad standings" on most of the consensus authorities. I stumbled upon another relay - matlink - with a similar faith. I suspect something in my setup to be the culprit. The only thing in the log that looks a bit suspicious is a warning about a mismatch in ssl versions - "OpenSSL version from headers does not match the version we're running with". Plenty of traffic - just curious.. /Ole Rydahl

3 12

Tor relay software automatic updates
by Keifer Bly 15 Apr '18

15 Apr '18

Hello I am running my tor relay “torland” on Mac OS X via this guide here https://www.torproject.org/docs/tor-doc-osx.html.en I am wondering, is there a way to configure the tor relaying software to automatically check for software updates and install them automatically if there are any? Thank you.

3 4

Re: [tor-relays] Let's increase the amount of exit relays doing DNSSEC validation
by Dhalgren Tor 15 Apr '18

15 Apr '18

Respectfully, I disagree. https://lists.torproject.org/pipermail/tor-relays/2015-October/007904.html Thank you for the thought however.

6 7

Metrics not functioning?
by Matthew Glennon 14 Apr '18

14 Apr '18

Are the right people aware that Metrics has been like this for most of the day? No matter what relay you look for it claims old data. https://metrics.torproject.org/rs.html#details/9695DFC35FFEB861329B9F1AB04C… -- Matthew Glennon matthew(a)glennon.online PGP Signing Available Upon Request https://keybase.io/crazysane

3 2

Tor Relay Stable Flag
by Keifer Bly 11 Apr '18

11 Apr '18

Hello, for a while now, I have been running a relay called torland at http://torstatus.blutmagie.de/router_detail.php?FP=db1af6477bb276b6ea5e7213… I am a little bit bummed right now. After working on it for the past week, I finally had the stable flag, however, unannounced my relay went offline for a while. I had been checking it regularly and everything said it was running fine until it randomly popped up and said it had been offline for the last three hours. I restarted the software immediately however by the time it appeared again it had lost the stable flag. I am little bit annoyed right now because I had been working to get the stable flag for the last several days and finally had it, then the tor network https://metrics.torproject.org/rs.html#details/DB1AF6477BB276B6EA5E72132684… came out of nowhere and suddenly said it had been offline for the last three hours despite the fact that I had been checking it every few minutes before hand and it said it was operating normally. I am also wondering, does how long a relay is offline for after loosing the stable flag effect how long it takes for the relay to regain it’s stable flag? Thank you. I am sorry if I seem frustrated, however it’s a bummer to me that I would have the stable flag then it would just come out of the blue that it had been offline for three hours despite saying online and working fine during that time when I did check it. Thank you very much.

3 6

Tor Browser and Relay
by Gary 11 Apr '18

11 Apr '18

Hello. I wish to know if it is possible to have Tor Browser use my relay for traffic instead of its own client on start up. At the moment if you change the proxy settings to your relay after startup 1) an observer would of noticed the specific Tor Browser traffic AND the relay 2) Tor Browser checks settings upon startup and if the proxy server setting is changed (eg 127.0.0.1:9050 instead of 127.0.0.1:9150) then it will refuse to start up. This isnt necessary a problem as you can just re-install / re-extract the bundle but upon start up you are still left with the default setting / specific Tor Browser traffic again. I am aware extra bytes will show up on relay search, is this better than not using Tor for my use at all? Thanks.

2 2

Let's increase the amount of exit relays doing DNSSEC validation
by nusenu 10 Apr '18

10 Apr '18

Dear Tor Exit Relay Operator, thanks for operating tor exit relays! In addition to forwarding packets exit relays also do DNS hostname resolution on behalf of tor clients. DNSSEC [1] is a standard that allows DNS clients to validate the authenticity of DNS records (if the domain owner choose to enable DNSSEC). By enabling DNSSEC on your exit relay DNS resolver you (and therefore also tor clients) are less prone to DNS-based attacks. A test of the tor network showed that only 74% of exit relay capacity does DNSSEC validation, please help us increase that number to >90% by enabling DNSSEC validation on your exit. Bellow is a list of tor ContactInfo strings from operators that currently do not enable DNSSEC validation yet. (The list is ordered by provided exit capacity - bigger operators are on the top) If you wonder "how do I enable DNSSEC?" I recommend a local caching unbound (https://unbound.net/) DNS resolver without using an upstream DNS forwarder. thanks for considering DNSSEC, nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_ [1] https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions +-----------------------------------------------------------------------------------------------------------------------------------------------------------+ | apx <kenan(a)sly.mn> - 114x2PzqXhfPjQUMVqkcpi8DZN9du8GJGV | | abuse[__aT ]necto|doT--|onion | | http://tor.jonny.mobi <torsupport .AT. jonny .DOT. mobi> | | tor.noisebridge.net <admin(a)tor.noisebridge.net> | | tor-relay-admin robgjansen com | https://onioncount.github.io/ | | Walter Heukels <walter(a)badexample.net> | | ICSI Research <icsi.tor.abuse(a)gmail.com> | | Tor Admin <tor-admin AT ip dot fail> | | tor-relays(a)coldhak.ca | | drift(a)multinet.no - 1Geq8GGC7qTh7dfptneAYtpeARPAL8B2kh | | sirmatt ksu edu 0x94FBBB0A https://onioncount.github.io/ | | 0x7A8647DB Daniel Winzen <d(a)winzen4.de> - 1CHvjeMJum2Zfd3JEdb35RUEdz1jjQvdPT | | <zwiebeln at online de> please donate BTC 1K38x9xqK3YDzjehYFAEPzsESEC4ScH5wJ | | John L. Ricketts, PhD <john AT quintex dot com> | | Eran Sandler <eran(a)sandler.co.il> | | BPM/Squalala - contact42bpm(at)gmail(dot)com | | Institute of Networks and Security <office(a)ins.jku.at> | | dhalgren.tor(a)gmail.com | | Random Person <tor AT cusse.org> | | Jens Ostermann <root AT tor-operator dot org> | | 0x9F29C15D42A8B6F3 Nos oignons <adminsys(a)nos-oignons.net> - 17WLwtW63FrHeMAEVkALnwhfmizBxGXDW1 | | kl.forwarder(a)gmail.com | | Tor Reactor <0d0[AT]protonmail.com> | u42omsvzmh7momdk.onion | BTC:13LDJSosDpDbNbXTiRuETdi2Czhq98NijP | Ether:0xBcfe6D44ce74E773011070B45bf482E7044F22aa | | openinternet.io BTC: 15bx85H6pkkF4eHmkdVqnKDTHz28PDXcgu | | 0xDD7831FC Matthias Kretschmann <m AT kretschmann dot io> - 171qDmKEXm9YBgBLXyGjjPvopP5o9htQ1V | | Random Person <tor-admin(a)portaltodark.world> | | Bysmyyr You will find my name with google, then firstname(a)lastname.org | | tor AT garbage-juice dot com | | paul at coffswifi dot net | | Neel Chauhan <neel AT neelc DOT org> | BTC: 1KogNvxdcXydDUNrPgqgtgV3AWktKPqXpS | | TNinja <abuse-team _at_ tor _dot_ ninja> | | arisbe cni net | | support(a)xmission.com | | Felix <tornode.felix AT mailhero dot io> | | torproxy <torproxy AT protonmail dot com> | | DexterAdmin <dexter(a)prj.hu> | | Administrator admin(a)tor-hu.neuromorph.de | | relay(a)danwin1210.me | | relay-operator(a)riseup.net | | 0x6913c81c66f3c35d Gibberfish, Inc <info(a)gibberfish.org> | | Tor <tor(a)plutex.de> | | 0x547515FC HungaryTorExit <alice.middle.relay AT gmail dot com> | | <hostmaster at denetron dot com> | | uwe.kerner(a)yahoo.com | | Network Operations <tor(a)t-3.net> | | D5BACC8B1873BE240578026A278C70D69142FC5B Torexit Wall <torexitwall at firemail dot cc> | | see https://www.artikel5ev.de/torcontact/ | | [admin] <at> [bin] <dot> [ovh] bitcoin donations to 1JLqxShorKdrQYDZ3sPSN1CtKiGf2XknED | | <tor AT fkraus DOT com> | | 145tXZyQEfdmpYhmbFtYe84kjghB5ymPA4 swraysford at gmail | | J. Random Hacker <anonymizer(a)ccc.de> | | abuse(a)signal.center || noc(a)signal.center || tor(a)signal.center | | Any Body <info(a)vif.com> | | Cheena <cheena @ cheena . net> | | hello(a)libre.zone - 14EQvWT8AWRvJEUpSL9SQgaYRgt164Sza4 | | florentin aatt rochet ddoott be; LTC: LhRqJZu6U87BJNSUbkACHzVQsK39hJ3sMB | | tor at localhost dot lu | | Damien Desfontaines <spam.tor2(a)desfontain.es> | | Please see http://tor-exitnode-readme.noteleport.trade for contact information | | Somebody <mail(a)typhoon31.de> | | Tor Admin <tor -at- cs -dot- bu -dot- edu> | | TOR Administrator <tor AT corewars dot net> | | tor-relay-admin robgjansen com | | ury.tor.abuse(a)yandex.ru | | dobby_potter at aol.com or send Hedwig | | 2048R/EFC737D8 Tim Cinel <email(a)timcinel.com> | | 0x3C68C8DBCBA783EF Joel R. Voss <jvoss at altsci dot com> | | www.tocici.com <nospam AT tocici dot com> | | torexit(a)ilias.berlin | | <onions at mit dot edu> | | George Shuklin <george.shuklin(a)gmail.com> | | 022F 0FF2 CB04 2342 7178 334F BA3F 9725 266C DD10 | | kernelcorn at torproject.org, PGP 0xAD97364FC20BEC80 | | contact(a)tor-node.com | | <abuse at flokinet dot is> | | babut(a)yandex.ru | | <rok AT sent dot com> | | Tor Admin <tor(a)remote.sx> | | Arisia-TOR(at)proton - guess the rest of the domain (dot)com 13pMCL54qJ1L4GdWioGMRzYLYRbDTvkBvq | | Dennis Emory Hannon / BackplaneDNS - abuse at BackplaneDNS(dot)org / xmvf6csufv8o453 | | abuse(a)itbible.co.uk || BTC : 1GkNdAJfWD4aaf1wnCkxVX6VgxGJhHJjzY | | 4096R/34650013 La Quadrature du Net <tor(a)laquadrature.net> | | Steve <abuse AT now-dns dot com> | | Random Person <nobody AT example dot com> | | Itzhak Daniel <itzhak+tor(a)itk98.net> | | Tsen <tsenchi.ng AT yandex dot com> | | torprojectperso(a)outlook.fr | | < E52EE9DB AT protonmail dot ch > | | Josef Gajdusek <atx.tor ZAVINAC atx BODKA name> | | https://t.me/darkachfeedbackbot | | kurtixtr53 [AT] protonmail [DOT] com | | Brandon Kuschel <kusch023 AT NOSPAM umn dot edu> | | 0xBC71BC44 Duncan Townsend <duncant AT alum DOT mit DOT edu> | | Random Person <hiredpg ATSINE geeemail-no-eees dot com | | tequilaray at gmx dot com | | IEX NOC <noc(a)iextreme.org> | | 2048g/D72C4234 Andrey Lelikov <torinfo(a)lelik.org> | | Saint <griffin(a)cryptolab.net> | | petani <protprot AT papuasia dot org> | | LaMarre TAO Totalement, Amplement, Owned :P torrelayslamarre(a)gmail.com | | tor(a)diiv.com | | E745A4CC726A94229B2B2DEE58C4B928A3E218F6 | | 0x408B52D5 corcra corcra(a)riseup.net | | tor(at)h0sted(dot)net [tor-relay.co] | | managetor at gmail dot comma | | dalesolutions2016 at yahoo dooto commmo | | peterhrding1232 at gmail dot com | | 256E/7FEE2C1E Sid <sid(a)karunaratne.net> | | 4096R/0125D5C0 Philip Hands <phil(a)hands.com> | | Giulivo Navigante <giulivo dot navigante at gmail dot com> | | abuse(a)redbarnnetworks.com | | <tor AT jd dot nl> | | Person <e4b816 AT gmail dot com> | | Owner <tor [aat} fonts4eva d0t xyz> | | Zdravko Tzenov <torzpi222 AT gmail dot com> | | 0xC49D4040 seadog007 <007seadog(a)gmail.com> | | tor AT busybear DOT se | | <tor AT busybear DOT se> | | Tor node administrator <toradmin AT paulgreeff dot com> | | James Pichardo james(a)pichar.do | | watchme <mydisco .AT. s y s t e m l i DOT o r g> | | Nathan Fraser <ndf(a)metarace.com.au> | | tor(a)openended.eu - 1NBKmjqCAqxtnZ5cS7gHGKFwd2arWB6oxn | | amNzYWx6ZWJlckBnbWFpbC5jb20K (base64) | | 8192R/0xB431B67770E4AA38 Mikal Villa <meeh(a)sigterm.no> - 1LoveJttCUrrjwHxntwUp6PeEvL2UkFyWp | | 4096R/25B4C293 Matthias Urlichs <matthias(a)urlichs.de> | | 0x3BF1E275 Scott <scott AT spacepirates dot com> | | http://torexitnodev6.dynv6.net | | Fred Gilbert <fredglbrt1 AT gmail DOT com> | | 1024R/0FCE8549 Alexander Oelzant <alexander(a)oelzant.priv.at> | | Random Person <tor AT loah dot be> | | karpet RepoMAn Rat Capital-G Pot Commie! [tor-relay.co] | | OctaneZ-TOR <OctaneZ+toroperator(a)gmail.com> | | Luca Saiu <positron AT gnu dot org> | | Bert Bos <bert(a)phonk.net> | +-----------------------------------------------------------------------------------------------------------------------------------------------------------+

3 2

new warning with Tor 0.3.4.0-alpha-dev (git-efc105716283bbdf)
by Toralf Förster 10 Apr '18

10 Apr '18

This happenes here now with that version usually once a day. Feb 19 18:59:00.000 [warn] Our clock is 1 minutes, 1 seconds behind the time published in the consensus network status document (2018-02-19 18:00:00 UTC). Tor needs an accurate clock to work correctly. Please check your time and date settings! Feb 19 18:59:00.000 [warn] Received microdesc flavor consensus with skewed time (CONSENSUS): It seems that our clock is behind by 1 minutes, 1 seconds, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. -- Toralf PGP C4EACDDE 0076E94E

4 4

Relay down again
by smichel0 10 Apr '18

10 Apr '18

Hello! Former my relay was connected via a powerline adapter and I often had connection problems. Then I connected it directlia via a LAN to the router and it worked for 3 days. This morning it was down again since 6 h (no traffic, no flags but the netbook still said that there is a internet connection). I tried to restart the relay but that didn't work, so I rebooted the hole machine and now the relay is up again (Nick: SMichel). I tried to check the logs, but that didn't help me. I suppose that the connection problem or whatever will persist.

2 1

My Exit node has lost all flags.
by Alan 09 Apr '18

09 Apr '18

So I moved my Exit node from a Centos install to Debian on the same ip and copied over the keys to keep things the same. I've been monitoring the speed and checking things are running properly. Today as i'm looking at nyx all the flags disappear and replaced with just the word 'none'. Did I do something wrong? pic: http://clutterbuck.uk/nyx-no-flags.png

2 1

Abuses for non-exit relay
by Felix 08 Apr '18

08 Apr '18

Happy today Since November my ISP and I received a hand full of abuses for a non-exit. It is about scanning ports and addresses of a certain let's say victim ISP. I received one other abuse with another server. For now I kindly want to ask if some operator received similar abuses for non-exits ? [1] Under my perspective it could be: - ip-spoofing. A third entity uses my ip and sends sync requests to the victim. There will never be a statefull connection, but the victim feels offended. As result the only one who gets trouble is me. - I got hacked (Uhh, don't like these words) which I suspect is not the case. Then statefull connections are possible and by scanning etc the attacker interfers the victim. We should not discuss this here. - There is some way out of the code which enables an attacker to perform solicited or unsolicited interference. Like [2] or not known or whatever. It is difficult to discuss with my ISP because the world expects the non-exits connect only inside the Tor network and onion services. Some facts: - The victim ISP hosts no relay - The relays are guards and potentially fallbacks (fallback and non-fallback share an ip) - I firewall blocked (outbound) all victim ISPs subnets. I logged some outbound trials but this could not stop the abuses. Why? May-be the victim ISP has changing ip ranges which usually happens from time to time or I do not know their subnets completely. Interesting was that one destination ip was x.x.x.0 which is subnet zero. - Currently I firewall block (inbound) all victim ISPs subnets and found log entries scanning (syn) my server on a non Tor port. Before blocking inbound, was there a way that someone from the vicitm ISP ip range can drive my relay (not server) to act like an offender back to the victims ISP? Pretty weired stuff but please swarm help! I apologize for my may-be foolish thoughts and please don't hit me too hard, though. [1] [tor-relays] abuse email for non-exit relay (masergy) https://lists.torproject.org/pipermail/tor-relays/2017-September/013030.html [2] Re to [1] https://lists.torproject.org/pipermail/tor-relays/2017-September/013041.html -- Cheers, Felix

3 2

Re: [tor-relays] Lost HSDir flag
by teor 08 Apr '18

08 Apr '18

> On 8 Apr 2018, at 16:25, tschador(a)posteo.de wrote: > > Hi, > > every time Tor is restarted (for example after upgrading) the HSDir flag > of my relay (6A7551EEE18F78A9813096E82BF84F740D32B911) is lost for 4 > days. Why? The minimum uptime for HSDirs is 96 hours (4 days): https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n2524 Why 4 days? HSDirs rotate every 24 hours. If a relay has been up for 4 days, then it is likely to be up for the next 24 hours. So it is given the flag. (If a HSDir goes down, it takes a few hours for clients and services to find out it is down. If too many HSDirs go down at the same time, the services assigned to those HSDirs are unreachable for a few hours. The minimum uptime reduces the risk of HSDir downtime.) T

1 0

empty exit policy if ipv6 address is not surrounded by [..]
by Toralf Förster 07 Apr '18

07 Apr '18

Hi atagar, ./run_nyx gives an empty exit policy: line in that case - is this bug or a feature? :-) Example for a wrong line: ExitPolicy reject6 <snip>/32 Good is ExitPolicy reject6 [<snip>]/32 Tested with latest stem and nyx Git trees. -- Toralf PGP C4EACDDE 0076E94E

2 1

Estimation of bridge traffic / Bridge or relay needed?
by Olaf Grimm 07 Apr '18

07 Apr '18

How can I check bridge traffic if it only occurs temporarily? That would also mean that there are enough bridges. I use the Tor browser with the bridge feature for me. I have relays 2x Ubuntu, 1x CentOS and 1x LFS running. Three are working at full capacity. Now I intend to establish a FreeBSD system. The provider does not allow an exit relay so that only "relay" or "bridge" remains. It was not possible to find an exit relay provider with FreeBSD for my financial resources. Should I set up a relay or bridge on www.bhost.net or cloudflexy.org? BHOST wants to become active in ASIA in 2018 too. BHOST: USA, Netherland, UK Cloudflexy: France, Romania Investments must be meaningful. (Of course I can configure a bridge for tests, but I do not know if I made a mistake or if there is no need for a bridge.) A short answer is sufficient. Thank you! Olaf

6 7

Ubuntu LTS about to ship with a soon-to-expire Tor version?
by Roger Dingledine 06 Apr '18

06 Apr '18

Do we have any good Ubuntu contacts here? I noticed today that Ubuntu Bionic LTS will come out this month: https://wiki.ubuntu.com/Releases and they are currently on track to include Tor 0.3.2.10: https://launchpad.net/ubuntu/bionic/+source/tor which is scheduled to go end-of-life before the end of 2018: https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTor… So we are on track for 4.5 years of sadness for Ubuntu users -- and since some of the most critical users of the Tor deb on Ubuntu are relay operators, this seems like a good time to try to rescue things. The best fixes I've thought of are to either: (A) Convince them to downgrade to Tor 0.2.9, which we will maintain for another few years. (B) Make a deal with them where they know that 0.3.2 will be abandoned soon, and that they'll move to our next LTS once it comes out. In the past we tried something like 'B' and it did not go smoothly. So I'm inclined to think 'A' is the better plan. See also this trac ticket where I'll aim to keep track of our progress: https://trac.torproject.org/25715 I'm also going to forward this note to tor-project@ in case there are better Ubuntu contacts there. Never a dull moment, --Roger

3 2

Heartfelt gratitude from censored region
by jackoreamnos＠tutanota.com 04 Apr '18

04 Apr '18

For those who may skip emails by the subject line, I resend my own email. There is a sinking feel in general over here, where a bunch of us learn more about Tor. We learnt we cannot run our own relays because here censorship is very strong; at the same time, we realize we have many relay operators in other countries to thank, for giving us a window into the world. Thank you. And I write this email over Tor. - Jack Date: 4. Apr 2018 03:55 From: jackoreamnos(a)tutanota.com <mailto:jackoreamnos@tutanota.com> To: tor-relays(a)lists.torproject.org <mailto:tor-relays@lists.torproject.org> Cc: tor-relays(a)lists.torproject.org <mailto:tor-relays@lists.torproject.org> Subject: Re: [tor-relays] tor-relays Digest, Vol 87, Issue 4 > We had some more discussions over here, and someone pointed out a key fact which we novices did not get at first - the Tor network does not REALLY trust the relay operators until the directory authorities DAs (whose IPs are hardcoded into the source code) can check them out and then vote about what they have learnt about these relays. If relays pass that test, they get onto a live document called the "Consensus" (between the DAs). So new clients to the network trust these DAs and they trust the consensus reached by the DAs. That is how new clients learn the network topology and find relays to connect to. > > So we were wrong on a few points: > (1) we thought we can contribute to the relay networks without being detected, but basically no - you cannot contribute to the relay network unless you are in the consensus, and if you are in the consensus, your IP address is world readable. > (2) a private bridge is providing relay WITHOUT publishing descriptors to the consensus, so it is a hybrid creature: (a) it appears as a client to the Tor network proper, being hidden from the consensus, and therefore cannot help relay traffic; (b) it appears as a relay server to connecting clients but unlike relays already on the consensus certain clients trust it because they know about the private bridge from channels they trust outside the Tor consensus; and these clients gain a extra measure of security from whatever obfuscation the bridge can offer. > > So by design, Tor does not trust and cannot completely trust a relay that just pops up one day. There is no way for Tor DAs to work with a relay node that hides itself behind a VPN. > > So in the area where we live, if we run a relay, we will be caught, plain and simple. No way around it. No way for us to contribute by running a relay. Zero, nada. We utterly depend on bridges hosted outside our geography, to have any hope of accessing Tor. Some of us who have facilities in another country might help, but for us that is comparatively difficult and expensive. > > The only reason I can access the "outside world" is due to people who hosts bridges for us. If you guys pack and go home, nothing we can do. Zero, nada. I am writing this email over Tor. > > - Jack > > 3. Apr 2018 16:02 by > development(a)jivanamara.net <mailto:development@jivanamara.net>> : > > >> Hey Jack, >> >> Here's my understanding of your concerns, anyone else please chime in if >> I'm mistaken anywhere. >> >> For running a normal relay compared to a client connecting to a relay >> via obfs4, it's less likely to be discovered by examining the content of >> traffic. The obfs4 protocol is designed to disguise the connection >> between a client (i.e. torbrowser). Once the traffic hits a relay, the >> interaction between relays contains less opportunities to identify it as >> tor traffic as opposed to any other encrypted traffic. >> >> That being said, there are a couple of other things that would make it >> very easy to identify a TOR relay. First, by default, relays are listed >> for anyone to examine. >> >> Second, if the authorities are watching, the change in traffic to/from >> your home computer will be pretty obvious. >> >> Regarding your concerns about children being inappropriately exposed to >> the dark web, running a relay will make very little difference compared >> to not running one. For your children to see the content of the dark >> web they'll need to install torbrowser (or equivalent) and that's going >> to be the same whether or not you're running a relay. The only >> potential difference is that if in your area it's very difficult to >> connect to the tor network and your children know you're running a >> relay, with some knowledge they could configure torbrowser to connect >> first to your relay. In some sense, if the authorities are successful >> in blocking access to the tor network, you could be enabling their romps >> on the dark web. >> >> HTH >> >> Jivan >> >> >> On 04/03/2018 02:38 AM, >> tor-relays-request(a)lists.torproject.org <mailto:tor-relays-request@lists.torproject.org>>> wrote: >>> Send tor-relays mailing list submissions to >>> >>> tor-relays(a)lists.torproject.org <mailto:tor-relays@lists.torproject.org> >>> >>> To subscribe or unsubscribe via the World Wide Web, visit >>> >>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays> >>> or, via email, send a message with subject or body 'help' to >>> >>> tor-relays-request(a)lists.torproject.org <mailto:tor-relays-request@lists.torproject.org> >>> >>> You can reach the person managing the list at >>> >>> tor-relays-owner(a)lists.torproject.org <mailto:tor-relays-owner@lists.torproject.org> >>> >>> When replying, please edit your Subject line so it is more specific >>> than "Re: Contents of tor-relays digest..." >>> >>> >>> Today's Topics: >>> >>> 1. Re: failed setup of obfs4 on relay (>>> jackoreamnos(a)tutanota.com <mailto:jackoreamnos@tutanota.com>>>> ) >>> 2. Re: failed setup of obfs4 on relay (>>> jackoreamnos(a)tutanota.com <mailto:jackoreamnos@tutanota.com>>>> ) >>> 3. Re: Estimation of bridge traffic / Bridge or relay needed? >>> (>>> jackoreamnos(a)tutanota.com <mailto:jackoreamnos@tutanota.com>>>> ) >>> >>> >>> ---------------------------------------------------------------------- >>> >>> Message: 1 >>> Date: Tue, 3 Apr 2018 05:00:18 +0200 (CEST) >>> From: <>>> jackoreamnos(a)tutanota.com <mailto:jackoreamnos@tutanota.com>>>> > >>> To: <>>> tor-relays(a)lists.torproject.org <mailto:tor-relays@lists.torproject.org>>>> > >>> Cc: <>>> tor-relays(a)lists.torproject.org <mailto:tor-relays@lists.torproject.org>>>> > >>> Subject: Re: [tor-relays] failed setup of obfs4 on relay >>> Message-ID: <>>> L98Ret7--3-0(a)tutanota.com <mailto:L98Ret7--3-0@tutanota.com>>>> > >>> Content-Type: text/plain; charset="utf-8" >>> >>> Thank you all, that was very helpful. - Jack >>> >>> 30. Mar 2018 20:53 by >>> arma(a)mit.edu <mailto:arma@mit.edu>>>> <>>> mailto:arma@mit.edu <mailto:mailto:arma@mit.edu>>>> >: >>> >>> >>>> On Fri, Mar 30, 2018 at 04:52:23PM -0400, Roger Dingledine wrote: >>>>> For obfs4, the active prober doesn't know the secret "cert" parameter, >>>> For far far more detail on the various pluggable transports and how >>>> they look on the wire, check out this awesome page that David Fifield >>>> put together: >>>> >>>> https://trac.torproject.org/projects/tor/wiki/doc/AChildsGardenOfPluggableT… <https://trac.torproject.org/projects/tor/wiki/doc/AChildsGardenOfPluggableT…>>>>> <>>>> https://trac.torproject.org/projects/tor/wiki/doc/AChildsGardenOfPluggableT… <https://trac.torproject.org/projects/tor/wiki/doc/AChildsGardenOfPluggableT…>>>>> > >>>> >>>> --Roger >>>> >>>> _______________________________________________ >>>> tor-relays mailing list >>>> tor-relays(a)lists.torproject.org <mailto:tor-relays@lists.torproject.org>>>>> <>>>> mailto:tor-relays@lists.torproject.org <mailto:mailto:tor-relays@lists.torproject.org>>>>> > >>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>>>>> <>>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>>>>> > >>>

2 1

Re: [tor-relays] tor-relays Digest, Vol 87, Issue 4
by Jivan Amara 03 Apr '18

03 Apr '18

Hey Jack, Here's my understanding of your concerns, anyone else please chime in if I'm mistaken anywhere. For running a normal relay compared to a client connecting to a relay via obfs4, it's less likely to be discovered by examining the content of traffic. The obfs4 protocol is designed to disguise the connection between a client (i.e. torbrowser). Once the traffic hits a relay, the interaction between relays contains less opportunities to identify it as tor traffic as opposed to any other encrypted traffic. That being said, there are a couple of other things that would make it very easy to identify a TOR relay. First, by default, relays are listed for anyone to examine. Second, if the authorities are watching, the change in traffic to/from your home computer will be pretty obvious. Regarding your concerns about children being inappropriately exposed to the dark web, running a relay will make very little difference compared to not running one. For your children to see the content of the dark web they'll need to install torbrowser (or equivalent) and that's going to be the same whether or not you're running a relay. The only potential difference is that if in your area it's very difficult to connect to the tor network and your children know you're running a relay, with some knowledge they could configure torbrowser to connect first to your relay. In some sense, if the authorities are successful in blocking access to the tor network, you could be enabling their romps on the dark web. HTH Jivan On 04/03/2018 02:38 AM, tor-relays-request(a)lists.torproject.org wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Re: failed setup of obfs4 on relay (jackoreamnos(a)tutanota.com) > 2. Re: failed setup of obfs4 on relay (jackoreamnos(a)tutanota.com) > 3. Re: Estimation of bridge traffic / Bridge or relay needed? > (jackoreamnos(a)tutanota.com) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 3 Apr 2018 05:00:18 +0200 (CEST) > From: <jackoreamnos(a)tutanota.com> > To: <tor-relays(a)lists.torproject.org> > Cc: <tor-relays(a)lists.torproject.org> > Subject: Re: [tor-relays] failed setup of obfs4 on relay > Message-ID: <L98Ret7--3-0(a)tutanota.com> > Content-Type: text/plain; charset="utf-8" > > Thank you all, that was very helpful. - Jack > > 30. Mar 2018 20:53 by arma(a)mit.edu <mailto:arma@mit.edu>: > > >> On Fri, Mar 30, 2018 at 04:52:23PM -0400, Roger Dingledine wrote: >>> For obfs4, the active prober doesn't know the secret "cert" parameter, >> For far far more detail on the various pluggable transports and how >> they look on the wire, check out this awesome page that David Fifield >> put together: >> >> https://trac.torproject.org/projects/tor/wiki/doc/AChildsGardenOfPluggableT… <https://trac.torproject.org/projects/tor/wiki/doc/AChildsGardenOfPluggableT…> >> >> --Roger >> >> _______________________________________________ >> tor-relays mailing list >> tor-relays(a)lists.torproject.org <mailto:tor-relays@lists.torproject.org> >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays> >

4 3

Re: [tor-relays] The IP of relay 6A7551EEE18F78A9813096E82BF84F740D32B911 has changed
by teor 03 Apr '18

03 Apr '18

> On 2 Apr 2018, at 02:19, tschador(a)posteo.de wrote: > > FYI > > My relay "TorMachine" (FallbackDir) has moved to another ISP. > > New IP is: 94.130.186.5 and will be longterm stable too. Thanks, we are tracking this change in: https://trac.torproject.org/projects/tor/ticket/24805#comment:16 T

1 0

decommissioning 2 fallback directory mirrors
by tor 03 Apr '18

03 Apr '18

I am planning on decommissioning the following 2 relays which have the FallbackDir flag: 175921396C7C426309AB03775A9930B6F611F794 1DBAED235E3957DE1ABD25B4206BE71406FB61F8 They've been running as fallback directory mirrors for 2+ years, but I'm unable to continue running them.

2 1

Outdated relay versions are they secure to use?
by Gary 03 Apr '18

03 Apr '18

Hello. Go to https://check.torproject.org > "...for more info about this relay...relay search" link If I receive a message saying this relay uses an outdated version does that mean that my traffic is any less secure? Does Tor take potentially insecure relay versions in to account when creating circuits? Thanks

3 2

failed setup of obfs4 on relay
by jackoreamnos＠tutanota.com 02 Apr '18

02 Apr '18

Am a novice compiling Tor (0.3.2.9) and been successful using this from a Tor Browser as a private bridge by entering "a.b.c.d:9001" into Tor Browser. However, pointing my Tor Browser to the obfs4 on the same machine fails with something like General SOCKS failure in the log. Below is my torrc: SOCKSPort 0 CookieAuthentication 1 ControlPort 9051 ORPort 9001 ExtORPort auto ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy # ServerTransportListenAddr obfs4 [::]:60443 ServerTransportListenAddr obfs4 0.0.0.0:60443 ExitRelay 0 BridgeRelay 1 PublishServerDescriptor 0 Tests I have done: (1) using obfs4 compiled from git repository, as well as the OS package. (2) opening port 60443, as well as dropping all firewalls - does not make a difference; meanwhile, pointing telnet at a.b.c.d 60443 connects successfully (3) using Tor Browser with default supplied obfs4 bridges works well (log shows I was able to download a list of bridges and their fingerprints). So I think I have ruled out problems with my Tor client (Tor Browser), and I have ruled out firewall configurations on the server, and ruled out obfs4 being blocked on my ISP. Since Tor itself works, and I have tried obfs4 from source as well as from the OS package, the only thing I can think of is something wrong with the config above. Any hints would be appreciated, as well as any steps I can do to further diagnose would be helpful. Thanks, Jack

3 5

running relay excluded from votes
by Dark Matter 01 Apr '18

01 Apr '18

Hello, my relay 69D9FF1BE14B9AE77701A6BCBC075FF837F5AFF9 (darkmatter) disappeared from all votes (and hence from the consensus) starting today at the voting for valid after 07:00:00. Any explanation for this behavior? There is nothing unusual in the relay's logs and there was no reboot today. In my opinion it's strange that a relay suddenly disappears from the votes. If I got it right, usually an authority votes for "not running" if a relay can't be reached for some reason. But ALL votes excluded my relay starting today at seven am. Would like to understand what happened... Bye, Dark

3 2

ansible-relayor, how to ?
by Petrusko 01 Apr '18

01 Apr '18

Hey! I'm planning to try the "ansible-relayor" to deploy some Tor relay instances. If I'm not wrong, it's a main goal ? 2 instances / IP... (soooory for being really noob about this!!!) But I'm lost... not found a tutorial, step by step, you know the tutorial so loved by all noobs! For now, on a fresh Debian8 install, there are : - tor 0.2.9.8 (fresh install from depo, client is ok when opening log file) - ansible - ansible-galaxy install nusenu.relayor - git clone https://github.com/nusenu/ansible-relayor (the folder is stored in my /home...) Will it configure (automatically) many torrc file per instance ? +every key files /relay ? (I'm not too much lost!) Do have I to do this install on every server built ? Or relayor can manage few servers on different locations ? Command lines list use this tool if available ? Many thx for help !!! (and hard work for this tool :) -- Petrusko C0BF 2184 4A77 4A18 90E9 F72C B3CA E665 EBE2 3AE5

6 9

My middle relay has 2x the no. of incoming as outgoing connexions
by torix＠protonmail.com 31 Mar '18

31 Mar '18

I'm asking because before the update to the tor v. 3.2.10 it was usually about even. I've let things settle in for a few weeks while the throughput dropped to half what it was before, but the 2 to 1 connexion imbalance which started a few days after the update has persisted. Should I worry? It does seem to be working. TIA, --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 1

Hello relay operator aahana*
by Vasilis 30 Mar '18

30 Mar '18

Dear relay operator, I noticed that you added 6 relays [1], thank you! Please be sure to set the `MyFamily` configuration parameter on all your relays [1], so Tor clients are not at risk of using your relays in multiple positions in a single circuit [2], [3]. Thank you for running Tor relays. [0] https://nusenu.github.io/OrNetRadar/2018/03/28/a4 [1] https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#Importantifyour… [2] https://hackernoon.com/some-tor-relays-you-might-want-to-avoid-5901597ad821 [3] https://nusenu.github.io/OrNetStats/endtoend-correlation-groups Cheers, ~Vasilis -- Fingerprint: 8FD5 CF5F 39FC 03EB B382 7470 5FBF 70B1 D126 0162 Pubkey: https://pgp.mit.edu/pks/lookup?op=get&search=0x5FBF70B1D1260162

1 0