- tor-relays - lists.torproject.org

"Your IP seems to have changed" notice
by Alexander Nasonov 29 Mar '18

29 Mar '18

This morning (9:30 UTC), my relay (nebo.xmmswap.com) printed 09:30:08.000 Your IP seems to have changed to <<Search Guide AS36029 range>> (METHOD=GETHOSTNAME HOSTNAME=nebo). Updating. 09:30:08.000 Our IP Address has changed from 217.182.198.76 to <<Search Guide AS36029 range>>; rebuilding descriptor (source: METHOD=GETHOSTNAME HOSTNAME=nebo). ... Six minutes later it was back to normal: 09:36:08.000 Your IP address seems to have changed to 217.192.198.76 (METHOD=INTERFACE). Updating. What was that? A DNS hijack? I'm running 0.3.2.10 on NetBSD. My DNS upstream is GoDaddy. Secondary DNS is OVH. -- Alex

2 3

Hello new exit operator privateinternetaccess.com
by nusenu 28 Mar '18

28 Mar '18

Hello PIA, I noticed that you added 47 new tor exit relays [1] and wanted to welcome you as an exit relay operator. Are you planing to run them for a longer time or is this a short term operation? thanks, nusenu [1] https://nusenu.github.io/OrNetRadar/2018/03/27/a8.html -- https://mastodon.social/@nusenu twitter: @nusenu_

1 0

Please use mailing lists for questions
by teor 28 Mar '18

28 Mar '18

Hi, In the past few weeks, at least 5 relay operators have emailed me directly to ask questions. I haven't answered most of those emails, because I was on leave, then at a meeting, then on leave again. I won't have time to check all my backlog for another 1-2 weeks. If you want a quick answer to your question, use a mailing list. If it doesn't matter who answers your question, use a mailing list. If your answer contains private information, redact it, then use a mailing list. If your question can only be answered by a single person, then use a mailing list, so other people can learn the answer. Please try really hard to use a list. Emailing a single person doesn't scale. And please don't feel hurt if someone asks you to use a list. It means your question is valuable to other people. T

1 0

Decommissioning (middle) relay
by tor-relays 27 Mar '18

27 Mar '18

In case anyone is keeping an eye on things or otherwise monitoring relays, I have just decommissioned the relay "wsmith6079" (with fingerprint 01AE002B4E60AE5A8FF40FDB67260F85AB0878AE) within the last several minutes. This relay has been in service for a little over two years but, unfortunately, it's time has come. Thanks.

2 1

My relay lost concensus
by victoring＠riseup.net 27 Mar '18

27 Mar '18

Hi, After a power cut a couple of weeks ago, my tor relay is not longer part of the consensus: B33BFA9AA0005730C1C0E8F7E6F53CF3C5716BD6 Current tor process has been running since 2018-03-14. How much time is it needed to come back? Cheers, S

2 4

arm crashes
by smichel0 26 Mar '18

26 Mar '18

Hello, from time to time, arm looks like below: https://smichel.ocloud.de/index.php/s/q2knnq3AD67rPjK But with a simple keystroke (arrow) it runs again. After a few days it seems to crash completely: https://smichel.ocloud.de/index.php/s/GjwdCLebR4iDkuv I dont't know then, if the relay is still working. Last time this happend, I simply startet arm again and it worked. But thiis way I will never reach the guard-flag :) Yours SMichel Sent with [ProtonMail](https://protonmail.com) Secure Email.

5 18

relayor v0.3.3 is released
by nusenu 25 Mar '18

25 Mar '18

Hi, relayor v0.3.3 is released. relayor helps you with running relays with minimal effort (automate everything). https://github.com/nusenu/ansible-relayor Changes since v0.3.2: ------------------------------ - major workaround for an upstream bug in tor that prevented us from running more than 2 instances per server. This affected only users with a non-default tor_maxPublicIPs setting. (#153) Thanks to Tim Niemeyer (@RedDog99) (f3netze.de) for bringing this to our attention. - relayor now ships a kitchen file for integration testing (#149) Thanks to Ondrej Vaško (@Lirt) for the patch. Main benefits for a tor relay operator ====================================== * automation - no more manual setup tasks * security: offline Ed25519 master keys every tor instance is run with a distinct user * automatically makes use of IPv6 IPs (if available) * automatic tor instance generation (two by default - configurable) * enables tor's Sandbox feature by default on Debian-based systems * easily choose between alpha/non-alpha releases * easily restore a relay setup * easily choose between exit relay/non-exit relay mode * automatic deployment of a tor exit notice html page via tor's DirPort * automatic MyFamily management Supported Operating Systems ---------------------------- Debian 8, 9 and Debian Testing OpenBSD 6.2 FreeBSD 10.4, 11.1 HardenedBSD 11 Ubuntu 16.04 CentOS 7 Fedora 27 regards, nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

2 1

Hello new exit operator F3 Netze
by nusenu 25 Mar '18

25 Mar '18

Hello F3 Netze, I saw you recently added 8 new tor exit instances and wanted to thank you for contributing exit bandwidth to the tor network! Should there arise questions related to the operations of tor relays you can reach out to the public tor-relays mailing list [0]. Your AS information is not yet in Maxmind's databases so it does not show yet on Relay Search [1] pages but this will solve itself over time. I saw your have IPv6 addresses [2]. If your connectivity/routing allows also for IPv6 exiting and ORPorts, enabling IPv6 on your exits would be great and appreciated. Looking at your ORPorts and your perfect MyFamily configuration this looks like an ansible-relayor setup, in which case IPv6 will be automatically enabled on the next playbook run once the servers have IPv6 addresses (if you didn't opt-out). thanks for joining the network and happy packet forwarding! nusenu [0] https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays [1] https://metrics.torproject.org/rs.html#search/family:6BCB964AB74E23F8986BDA… [2] https://bgp.he.net/AS205100#_prefixes6 -- https://mastodon.social/@nusenu twitter: @nusenu_

3 7

Publishing bridge contact information
by Karsten Loesing 23 Mar '18

23 Mar '18

Hello relay and/or bridge operators, you might already know this: we're publishing sanitized versions of bridge descriptors on Tor Metrics. https://metrics.torproject.org/collector.html#bridge-descriptors We're using these sanitized descriptors to visualize interesting facts about Tor bridges, among other things: https://metrics.torproject.org/bridges-ipv6.html We're now considering to drop one step in the sanitizing step, which is to remove contact information. The result would be that we'd keep contact information in sanitized descriptors in the exact same way as the bridge operator put it into their torrc file. https://metrics.torproject.org/bridge-descriptors.html#contact https://trac.torproject.org/projects/tor/ticket/20983 Possible advantages are: - Relay Search would support searching for bridges by contact information. - People who keep a watching eye on the Tor network could reach out to bridge operators to inform them that they're running an outdated tor/PT version, or that running bridges and exits together is not cool. - If somebody ever revives OnionTip/TorTip, bridges could participate and receive donations for running a bridge. Or t-shirts, who knows. Note that I'm not promising either here, but without contact information, neither would even be possible. Possible disadvantages are: - If somebody runs a relay and a bridge, both with the same contact information, a censoring adversary might guess that the bridge might run on a nearby IP address as the relay. However, they could as well assume that for all relays and block or scan the IP space around all known relays. - Bridge operators might be surprised to see their contact information in a public archive. We do have a warning in the tor manual https://www.torproject.org/docs/tor-manual.html.en#ContactInfo, but maybe nobody reads the fine manual. Your opinion counts. Is this a good or a bad idea, and why? I'll keep this discussion open for a week and not start changing anything during that time. If you want to state your opinion, please do it on this list by Wednesday, February 14. Thanks! All the best, Karsten

8 21

DoSer is back, Tor dev's please consider
by starlight.2017q4＠binnacle.cx 23 Mar '18

23 Mar '18

Please note: Here parameter DoSCircuitCreationMinConnections=1 is set (rather than the default value of 3). Mar 11 17:23:53 Tor[]: DoS mitigation since startup: 0 circuits rejected . . . . . . Mar 22 11:23:54 Tor[]: DoS mitigation since startup: 299608 circuits rejected. . . Mar 22 17:23:54 Tor[]: DoS mitigation since startup: 806025 circuits rejected. . . I.E. mitigation circuit rejections increased 170% in six hours after moving vaguely for over ten days. Also: top - 19:05:53 up 11 days. PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 1998 tor 20 0 662m 611m 108m R 47.2 15.4 7901:32 tor 2000 tor 20 0 662m 611m 108m S 42.2 15.4 343:28.28 tor 2001 tor 20 0 662m 611m 108m R 56.8 15.4 343:24.46 tor I.E. crypto workers pegged after barely registering since DoSer shut it down on March 7th. 'iptables' mitigation rule here shows the DoS source-IPs ablaze. ========== Suggestion: DoSCircuitCreationMinConnections=1 be established in consensus

3 3

Re: [tor-relays] Previous Guard not getting Guard flag back
by starlight.2017q4＠binnacle.cx 22 Mar '18

22 Mar '18

>While I understand that my relay lost the guard flag because of a weekend >of downtime, I would expect that it would get it back after a while of >stable again? Anyone able to shed some light on when it will get the flag >back? >https://metrics.torproject.org/rs.html#details/924B24AFA7F075D059E8EEB284CC… Guard flag calculation is somewhat involved (due to several get-out-jail promotions/bypasses), but the essential part is weighted uptime in excess of the median uptime of guard candidates, or 98% whichever is lower. Presently the authorities have it somewhere around 96% (they do not publish the value). Your relay is at about 91% and will be back as a Guard in less than five days when it will hit 97%. The attached XLS shows it roughly, left side today and right side as-of 3/26. Uptime data came from the "1_month" section of https://onionoo.torproject.org/uptime?search=NSDFreedom Built this sheet for myself recently and simply stuffed in data for your relay. Enjoy. P.S. If anyone spots flaws in the approach, please comment.

1 5

tor-instance-create vs. /etc/tor/torrc
by Igor Mitrofanov 22 Mar '18

22 Mar '18

Hi, I use tor-instance-create to spawn a number of relay instances. However, there seems to be one extra instance running - the default one that reads /etc/tor/torrc (and not /etc/tor/instances/INSTANCE/torrc). How do I disable that default tor relay? It opens port 9050 and does who else knows what by default. I can delete /etc/tor/torrc and it seems to do the trick, however, I am not sure how permanent this change will be with automatic package updates. Thanks!

4 3

exit operators: DNS failure rate increased - please check your DNS
by nusenu 22 Mar '18

22 Mar '18

Dear Exit relay operators, first of all thanks for running exit relays! One of the crucial service that you provide in addition to forwarding TCP streams is DNS resolution for tor clients. Exits relays which fail to resolve hostnames are barely useful for tor clients. We noticed that lately the failure rates did increase again and would like to urge you to visit Arthur's "Tor Exit DNS Timeouts" page that shows you the DNS error rate for exit relays: https://arthuredelstein.net/exits/ (the page is usually updated once a day) Please consider checking your DNS if your exit consistently shows a high (>=20%) timeout rate - and make sure you run an up to date tor version. If you are an exit operator but have no (or no working) ContactInfo, please consider updating that field in your torrc so we can reach you if something is wrong with your relay. thanks for caring, nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

1 1

Previous Guard not getting Guard flag back
by Matthew Glennon 21 Mar '18

21 Mar '18

While I understand that my relay lost the guard flag because of a weekend of downtime, I would expect that it would get it back after a while of stable again? Anyone able to shed some light on when it will get the flag back? https://metrics.torproject.org/rs.html#details/924B24AFA7F075D059E8EEB284CC… Thanks -- Matthew Glennon matthew(a)glennon.online PGP Signing Available Upon Request https://keybase.io/crazysane

2 3

Hidden service error in log
by Gary 20 Mar '18

20 Mar '18

Hello. I made a "hello world" hidden service and I had to following message in the logs about exceeding launch limit. I have not seen this before. I had one onion for a while and added a second one recently - not sure if that matters as it is only complaining about the first one. I am not sure what / why it is exceeding launch limit, I would be grateful if someone could explain it to me. Thanks. Mar 14 12:43:24.000 [notice] Bootstrapped 100%: Done Mar 14 12:43:32.000 [warn] Hidden service 4l53ozkhv******* exceeded launch limit with 10 intro points in the last 202 seconds. Intro circuit launches are limited to 10 per 300 seconds. Mar 14 12:43:32.000 [warn] Service configured in "/var/lib/tor/hidden_service/": Mar 14 12:43:32.000 [warn] Intro point 0 at [scrubbed]: circuit is open Mar 14 12:43:32.000 [warn] Intro point 1 at [scrubbed]: circuit is open Mar 14 12:43:32.000 [warn] Intro point 2 at [scrubbed]: circuit is doing handshakes Mar 14 12:43:32.000 [warn] Intro point 3 at [scrubbed]: circuit is open Mar 14 12:43:32.000 [warn] Service configured in "/var/lib/tor/hidden2/": Mar 14 12:43:32.000 [warn] Intro point 0 at [scrubbed]: circuit is doing handshakes Mar 14 12:43:32.000 [warn] Intro point 1 at [scrubbed]: circuit is open Mar 14 12:43:32.000 [warn] Intro point 2 at [scrubbed]: circuit is open Mar 14 12:43:32.000 [warn] Intro point 3 at [scrubbed]: circuit is open Mar 14 12:44:25.000 [notice] Performing bandwidth self-test...done.

3 3

Atlas Country Flag
by Anders Burmeister 20 Mar '18

20 Mar '18

Gentlemen How come, after update to latest tor version. the small flags at Atlas start to behave abnormal? The case is, I have 6 relays: 2 France 1 Canada 1 Polen 1 Germany 1 UK The one in Canada and the two in France shows the correct Country Flag. But Germany, Polen and UK shows the France Flag. Should I take it personally, or just be patient and drink more coffee? Best regards Anders Sent with [ProtonMail](https://protonmail.com) Secure Email.

3 5

(no subject)
by Pat Cun 18 Mar '18

18 Mar '18

1

1 0

(no subject)
by wodencafe 18 Mar '18

18 Mar '18

hi Tor https://goo.gl/WCKrme wodencafe

1 0

stem library: huge difference between resolvers "proc" and others, eg. "netstat"
by Toralf Förster 17 Mar '18

17 Mar '18

I do wonder about the differences of "proc" versus the other 3 ("netstat, "lsof" and "ss") related to the Inbound/Outbound values at my Tor relay. As an example I copied below the output of "proc" and "netstat". Does anybody have a clue about those differences? mr-fox ~ # python ~/stem/docs/_static/example/relay_connections.py --ctrlport 9051 --resolver proc 0.3.4.0-alpha-dev uptime: 06:48:29 flags: Exit, Fast, Guard, Running, Stable, V2Dir, Valid +------------------------------+------+------+ | Type | IPv4 | IPv6 | +------------------------------+------+------+ | Inbound to our ORPort | 2107 | 6 | | Inbound to our DirPort | 15 | 0 | | Outbound to a relay | 1753 | 0 | | Outbound exit traffic | 155 | 302 | | Outbound uncategorized | 119 | 0 | +------------------------------+------+------+ | Total | 4149 | 308 | +------------------------------+------+------+ +------------------------------+------+------+ | Exit Port | IPv4 | IPv6 | +------------------------------+------+------+ | 80 (HTTP) | 111 | 61 | | 143 (IMAP) | 1 | 0 | | 443 (HTTPS) | 0 | 229 | | 465 (SMTP) | 1 | 0 | | 993 (IMAPS) | 13 | 0 | | 5222 (Jabber) | 8 | 2 | | 5223 (Jabber) | 6 | 0 | | 7777 | 1 | 0 | | 8080 (HTTP Proxy) | 4 | 4 | | 8333 (Bitcoin) | 2 | 2 | | 8888 (NewsEDGE) | 2 | 0 | | 50002 (Electrum Bitcoin SSL) | 6 | 4 | +------------------------------+------+------+ | Total | 155 | 302 | +------------------------------+------+------+ mr-fox ~ # python ~/stem/docs/_static/example/relay_connections.py --ctrlport 9051 --resolver netstat 0.3.4.0-alpha-dev uptime: 06:48:41 flags: Exit, Fast, Guard, Running, Stable, V2Dir, Valid +------------------------------+------+------+ | Type | IPv4 | IPv6 | +------------------------------+------+------+ | Inbound to our ORPort | 4883 | 6 | | Inbound to our DirPort | 35 | 0 | | Inbound to our ControlPort | 1 | 0 | | Outbound to a relay | 4174 | 0 | | Outbound exit traffic | 390 | 293 | | Outbound uncategorized | 267 | 0 | +------------------------------+------+------+ | Total | 9750 | 299 | +------------------------------+------+------+ +------------------------------+------+------+ | Exit Port | IPv4 | IPv6 | +------------------------------+------+------+ | 80 (HTTP) | 300 | 68 | | 110 (POP3) | 1 | 0 | | 143 (IMAP) | 4 | 0 | | 443 (HTTPS) | 0 | 214 | | 465 (SMTP) | 1 | 0 | | 1883 | 1 | 0 | | 3128 (SQUID) | 1 | 0 | | 5222 (Jabber) | 21 | 2 | | 5223 (Jabber) | 18 | 0 | | 6667 (IRC) | 4 | 0 | | 7777 | 2 | 0 | | 8080 (HTTP Proxy) | 14 | 3 | | 8333 (Bitcoin) | 8 | 2 | | 8888 (NewsEDGE) | 3 | 0 | | 50002 (Electrum Bitcoin SSL) | 12 | 4 | +------------------------------+------+------+ | Total | 390 | 293 | +------------------------------+------+------+ -- Toralf PGP C4EACDDE 0076E94E

2 4

hourly CPU spike at <hour>:02
by Toralf Förster 17 Mar '18

17 Mar '18

caused by both of the 2 Tor exits here at a Linux server. I do wonder what both processes do exactly 2 minutaes past each hour for about half a minute? -- Toralf PGP C4EACDDE 0076E94E

2 2

new Tor exit
by Arisbe 16 Mar '18

16 Mar '18

Hello all, I rolled out a new Tor exit [0] this morning West Coast U.S. time. It's special to me because I've negotiated the trust of a host company in Albania. I was the first Tor relay in that country and now I'm the first exit relay there. This trust took me a year to establish. I run a number of relays-both exit and non-exit. I run a dozen bridges for people that need the ISP connectivity. I host classes in Southwest Washington State to teach ordinary people how to be safe while they're on the internet. I teach high-school pupils how to set up and operate Tor relays. Here is my problem: The aforementioned relay has been on for nearly 24-hours and not a single user has frequented my doorsteps. I have had seven of the nine authorities parked in this node for most of the time but no inbound connections (except for those referenced and two hackers) and no outbound or exit connections. There is nothing technically wrong with the installation so what gives. I this an issue of administrative paperwork? While I am very supportive of Tor, I am not with unlimited patience. I have a job, wife and kids and money pit house to maintain. Thanks for giving me a bit of advice to make this guy blossom. If I don't understand, I apologize to all. Arisbe [0] 516D1B9E22484202322828D8CAC30325030017E2

4 7

How helpful is it to run your own DNS server?
by torix＠protonmail.com 16 Mar '18

16 Mar '18

Dear All, I have seen mentions on this list of people using pi-hole and unbound DNS servers in their setups, and I wondered if others had considered opinions as to the usefulness of doing this. Pi-hole's biggest feature seems to be their filter lists to block extra/evil DNS queries, while Unbound seems to feature caching and validating functions. I would think that a DNS cache that kept queries for a long time would certainly keep most of your queries out of an ISP's DNS logs. Or are there DNS providers that are relatively immune to their logs being requited by others? TIA, --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

3 2

Tor program
by Arisbe 16 Mar '18

16 Mar '18

Hello People, Does anyone have a graphic or verbal discussion about the Tor network that they would share? I want to give a talk at the public library about the uses, advantage and how-to's of Tor. I want to get my facts correct before I commit to this task. Thanks

5 5

"Received http status code 404 ("Consensus is too old")" keeps popping up in my logs
by nottryingtobelame＠protonmail.com 16 Mar '18

16 Mar '18

I'm just wondering if there is anything I can do to resolve this. The relay is running ntpd and consistently keeps the right time, and I'm not getting this from any other server (it's the same IP address every time). Is this of concern or should I just ignore it? Will it hinder the relay's performance when I'm getting this error? Apologies for all the questions; I'm new to the mailing list. Sent with ProtonMail Secure Email.

2 1

DoS statistics from EA4366BCDCA6167B8CFF70E41D8CD1EE9968E445
by robink 15 Mar '18

15 Mar '18

Running tor 0.3.3.3 Mar 15 19:00:44.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:00:48.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:01:17.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:03:01.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:03:52.000 [warn] eventdns: All nameservers have failed Mar 15 19:03:52.000 [notice] eventdns: Nameserver 8.8.4.4:53 is back upMar 15 19:04:01.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:01.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back upMar 15 19:04:08.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:09.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back upMar 15 19:04:10.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:10.000 [notice] eventdns: Nameserver 8.8.4.4:53 is back upMar 15 19:04:16.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:16.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back upMar 15 19:04:35.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:35.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back upMar 15 19:04:49.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:05:16.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:06:05.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:06:11.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:07:06.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:07:34.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:07:47.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:07:56.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:08:04.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:08:12.000 [warn] eventdns: All nameservers have failed Mar 15 19:08:12.000 [notice] eventdns: Nameserver 8.8.4.4:53 is back upMar 15 19:09:05.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:09:15.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:10:21.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:10:59.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:11:16.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:11:42.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:12:31.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:13:03.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:13:24.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:13:30.000 [notice] Heartbeat: Tor's uptime is 5 days 17:59 hours, with 2819 circuits open. I've sent 621.50 GB and received 636.02 GB.Mar 15 19:13:30.000 [notice] Circuit handshake stats since last time: 19393/19393 TAP, 119870/119870 NTor.Mar 15 19:13:30.000 [notice] Since startup, we have initiated 0 v1 connections, 0 v2 connections, 0 v3 connections, and 110064 v4 connections; and received 35 v1 connections, 187 v2 connections, 949 v3 connections, and 621316 v4 connections. Mar 15 19:13:30.000 [notice] DoS mitigation since startup: 0 circuits rejected, 0 marked addresses. 0 connections closed. 64 single hop clients refused.Mar 15 19:13:44.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:14:02.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:14:21.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:15:29.000 [warn] eventdns: All nameservers have failed Mar 15 19:15:30.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back upMar 15 19:15:37.000 [warn] eventdns: All nameservers have failed Mar 15 19:15:37.000 [notice] eventdns: Nameserver 8.8.4.4:53 is back up Best regards, Robin

4 4

middle relay connexions dropped in half
by torix＠protonmail.com 15 Mar '18

15 Mar '18

Dear All, On March 5 I changed to the newest version 3.2.10 on a middle relay I run. I went away for a few days, checked today, and found that my traffic is down, and my connexions, which were around 2,000 since December, are now about 1,000. Consensus weight is still the same (about 450) as it has been before. And my throughput is down from 35G/day, hitting that max most days to about 23-26G/day. Don't know if this is because it is a better Tor and is filtering out extra crap now or not, but just thought I'd mention it, as the Tor version is the only thing that changed.\ --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

5 8

ISP Nat
by Paul Templeton 14 Mar '18

14 Mar '18

Hi All, I have an ISP who has started NATting inbound traffic and has screwed DNS resolution. Is there a way to bind DNS requests to use a specific IP address (Have multiple) that is not affected with this NATting problem. Paul 609662E824251C283164243846C035C803940378

3 7

Best tor version
by Даннил Николаев 14 Mar '18

14 Mar '18

What is best to run on relay? Version 0.2 or 0.3?

3 2

Relay node requirements
by sqrrm 13 Mar '18

13 Mar '18

The distributed bitcoin exchange Bisq is reliant on Tor as a communication layer and as such dependent on its stability. To support the network we're looking at incentivizing contributors to run their own Tor relay nodes. For this we need some recommendations on what setup is needed as a minimum to be actually useful for the network. I've run a relay node on a dedicated server which seems to be quite a bit of overkill, preferably it would run on as cheap a vps as possible. I've been checking on metrics.torproject.org on stats for my own node, is that the best way to monitor the nodes? If this doesn't seem worthwhile pursuing, please let me know why and I'll stop. Cheers sqrrm

3 2

Relay operators meetup @ CSOA Forte Prenestino, Rome, Italy
by Vasilis 13 Mar '18

13 Mar '18

Dear relay operators and *Tor people, A number of people will participate this Thursday Thursday 15/03/18, 18:30 @ CSOA Forte Prenestino in Rome, Italy [1]. Hope to see many of you there. [1] https://blog.torproject.org/events/relay-operators-meetup-csoa-forte-prenes… Cheers, ~Vasilis -- Fingerprint: 8FD5 CF5F 39FC 03EB B382 7470 5FBF 70B1 D126 0162 Pubkey: https://pgp.mit.edu/pks/lookup?op=get&search=0x5FBF70B1D1260162

1 0

Experimental DoS mitigation is in tor master
by Roger Dingledine 11 Mar '18

11 Mar '18

Hi folks, Thanks for your patience with the relay overload issues. We've merged https://bugs.torproject.org/24902 into tor git master. We'll be putting out an 0.3.3.2-alpha release in not too long for wider testing, and eventually backporting it all the way back to 0.2.9, but if you're the sort who enjoys running code from git, now is a great time to try it and let us know of problems and/or successes. Here's the changelog stanza: o Major features: - Give relays some defenses against the recent network overload. We start with three defenses (default parameters in parentheses). First: if a single client address makes too many connections (>100), hang up on further connections. Second: if a single client address makes circuits too quickly (more than 3 per second, with an allowed burst of 90) while also having too many connections open (3), refuse new create cells for the next while (1-2 hours). Third: if a client asks to establish a rendezvous point to you directly, ignore the request. These defenses can be manually controlled by new torrc options, but relays will also take guidance from consensus parameters, so there's no need to configure anything manually. Implements ticket 24902. To repeat that last part: there are a bunch of torrc options you can use to tweak stuff, but you can leave it all at the defaults and it will read its instructions out of the consensus parameters: https://consensus-health.torproject.org/#consensusparams Woo, --Roger

12 22

2 entries in tor relay search
by peter.zehetner＠liwest.at 11 Mar '18

11 Mar '18

OK, thank you. Then I let it as it is. Peter The "UbuntuCoreNNN" one is "tor-middle-relay" snap. You can remove it if you are managing your own tor. Incidentally, tor-middle-relay snap is being updated right now to v0.3.1.10. You need not do anything. Updates are automatic. On Sat, Mar 10, 2018 at 11:45 PM, <peter.zehetner(a)liwest.at mailto:peter.zehetner@liwest.at > wrote: > > I've installed tor and the relay via ubuntu-software. > > Did you install a Snap package of "tor-middle-relay"? > > > > On Mar 10, 2018 23:38, <peter.zehetner(a)liwest.at mailto:peter.zehetner@liwest.at > wrote: > > > > > > Hello! > > > > Can anybody explain this: > > > > Peter > > > > > > _______________________________________________ > > tor-relays mailing list > > tor-relays(a)lists.torproject.org mailto:tor-relays@lists.torproject.org > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > > > > > > > > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org mailto:tor-relays@lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org mailto:tor-relays@lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > -- Chad Miller http://chad.org gpg:a806deac30420066 _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org mailto:tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

2 entries in tor relay search
by peter.zehetner＠liwest.at 11 Mar '18

11 Mar '18

I've installed tor and the relay via ubuntu-software. Did you install a Snap package of "tor-middle-relay"? On Mar 10, 2018 23:38, <peter.zehetner(a)liwest.at mailto:peter.zehetner@liwest.at > wrote: > > Hello! > > Can anybody explain this: > > Peter > > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org mailto:tor-relays@lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org mailto:tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

2 entries in tor relay search
by peter.zehetner＠liwest.at 11 Mar '18

11 Mar '18

Hello! Can anybody explain this: Peter

2 1

FreeBSD 11.1 ZFS Tor Image
by Conrad Rockenhaus 10 Mar '18

10 Mar '18

Hello All, If anyone is interested, I have a RAW image of a FreeBSD 11.1 ZFS image that is fully configured and ready to run Tor. Right now it's an eight GB image, but I'm reducing the size by removing all of the extra stuff on it from the upgrade from FreeBSD 11 to 11.1. If you're interested in the image let me know. This image has been fully tested on OVH's Openstack infrastructure, so if you're interested in running it on their infrastructure, let me know and I can walk you through it, or you're more than welcome to host is within my cloud at cost (it's a low monthly rate and unlimited bandwidth). Regards, Conrad Rockenhaus

15 38

Cloud question
by Arisbe 10 Mar '18

10 Mar '18

Gentlemen / Ladies, Simple question: Do Tor middle relays and bridges work on cloud systems? Thanks for the intelligence.

2 2

DoS mitigation taking hold!
by starlight.2017q4＠binnacle.cx 06 Mar '18

06 Mar '18

Back to normal! Check out the final two log entries. Thank you David Goulet and all the Tor devs!!! Feb 24 22:45 Tor 0.3.3.2-alpha (...) running on Linux with . . . . . . Mar 2 21:09 Circuit handshake stats since last time: 247305/247482 TAP, 4620773/4622133 NTor. Mar 3 03:09 Circuit handshake stats since last time: 969715/1129528 TAP, 5195458/5196319 NTor. Mar 3 09:09 Circuit handshake stats since last time: 1847030/2202846 TAP, 5027827/5029068 NTor. Mar 3 13:24 Tor 0.3.3.3-alpha (...) running on Linux with . . . Mar 3 19:24 Circuit handshake stats since last time: 93572/93573 TAP, 5009863/5010456 NTor. Mar 4 01:24 Circuit handshake stats since last time: 169018/262021 TAP, 4539061/4539069 NTor. Mar 4 07:24 Circuit handshake stats since last time: 169753/235140 TAP, 4436073/4436112 NTor. Mar 4 13:24 Circuit handshake stats since last time: 119517/119547 TAP, 4040264/4041342 NTor. Mar 4 19:24 Circuit handshake stats since last time: 1098774/1119662 TAP, 4087379/4088944 NTor. Mar 5 01:24 Circuit handshake stats since last time: 223758/267280 TAP, 3828115/3828568 NTor. Mar 5 07:24 Circuit handshake stats since last time: 99975/113118 TAP, 3537541/3537974 NTor. Mar 5 13:24 Circuit handshake stats since last time: 173710/175951 TAP, 3792871/3793745 NTor. Mar 5 19:24 Circuit handshake stats since last time: 657254/747645 TAP, 3678773/3679332 NTor. Mar 6 01:24 Circuit handshake stats since last time: 606685/704653 TAP, 3186116/3186477 NTor. Mar 6 07:24 Circuit handshake stats since last time: 582036/708742 TAP, 2043464/2043654 NTor. Mar 6 13:24 Circuit handshake stats since last time: 54266/54266 TAP, *** 586327/586328 NTor. *** Mar 6 19:24 Circuit handshake stats since last time: 122817/122817 TAP, *** 558229/558231 NTor. ***

1 0

Exit Relay
by Gary 06 Mar '18

06 Mar '18

Hello. I have configured my relay (jaffacakemonster2) to be non exit, however arm shows me the following (I edited out IPs' & some lines after copy/paste from connection screen for others security / brevity) Connections (1878 inbound, 2113 outbound, 19 exit, 1 control) IP --> <scrubbed>:443 (HTTPS) UNKNOWN UNKNOWN 3.5m (EXIT) IP --> <scrubbed>:443 (HTTPS) UNKNOWN UNKNOWN 3.5m (EXIT) IP --> <scrubbed>:443 (HTTPS) UNKNOWN UNKNOWN 3.5m (EXIT) IP --> <scrubbed>:443 (HTTPS) UNKNOWN UNKNOWN 3.4m (EXIT) IP --> <scrubbed>:4000 UNKNOWN UNKNOWN 3.5m (EXIT) IP --> <scrubbed>:9001 UNKNOWN UNKNOWN 3.5m (EXIT) IP --> <scrubbed>:9001 UNKNOWN UNKNOWN 3.5m (EXIT) IP --> <scrubbed>:9001 UNKNOWN UNKNOWN 3.5m (EXIT) IP --> <scrubbed>:9001 UNKNOWN UNKNOWN 3.4m (EXIT) IP --> <scrubbed>:9001 UNKNOWN UNKNOWN 1.0m (EXIT) IP --> <scrubbed>:26155 UNKNOWN UNKNOWN 3.5m (EXIT) Atlas reports the flags Fast, Running & Valid. Lines as copied & pasted from torrc: ## Uncomment this if you do *not* want your relay to allow any exit traffic. ## (Relays allow exit traffic by default.) ExitRelay 0 What is going on here? I am confused as to why there is exit connections but I am not / dont want an exit relay. Thanks.

4 12

Shutdown relay 366BC592BC0154C0CD1D35C0E77D8F2C7F0B843E, upcoming shutdown 328E54981C6DDD7D89B89E418724A4A7881E3192
by Stijn Jonker 06 Mar '18

06 Mar '18

Dear all, This is to announce that with immediate effect I have shutdown relay sjc02/366BC592BC0154C0CD1D35C0E77D8F2C7F0B843E and will do so in about a year and half with sjc01/328E54981C6DDD7D89B89E418724A4A7881E3192 as it's a fallback directory. Thanks for all the support on the mailing list, especially with a stupid typo and the joint efforts in fighting the relay (D)DoS. The reasons why, well it's mostly based on personal assumptions, views, values and believes in terms of community/volunteer/project matters whereby quite possibly my views differ from the vast majority as such I don't believe it's appropriate to state those on a relay list. Thanks, Stijn P.S. I'll unsubscribe after this email, in case you believe a follow-up is warranted then feel free to reach out outside of the list.

1 0

CPU saturation attack/abuse
by Dhalgren Tor 05 Mar '18

05 Mar '18

Upgraded exit to 0.3.3.3 and now seeing a curious CPU saturation attack. Whatever the cause, result is the main event-worker thread going from a normal load level of about 30%/core to 100%/core and staying there for about 30 seconds; then CPU consumption declines back to 30%. Gradual change on ascent and decent. Another characteristic is egress traffic slightly higher than ingress traffic, perhaps 3-4%, where normally egress and ingress flows match precisly. Checked browsing via the node and performance seems fine--no obvious degradation. Elevated NTor circuit creation rates as-of the last heartbeat, from roughly 300k to 700k per-report, but not extreme (at least in a relative sense since late December). Anyone else observed this? Have any idea how the attack works? Captured a debug-level log of a cycle from normal load to full-on-attack but won't have time to analyzed it for a couple of weeks.

3 4

New releases today: please consider upgrading.
by Nick Mathewson 05 Mar '18

05 Mar '18

Hi! There are new security releases today. The official announcement just went to tor-announce, but I want to make sure that people on this list see it too. In brief: * Directory authorities should upgrade. * Relays running 0.3.2.1-alpha through 0.3.2.9 should upgrade. * Relays running 0.3.3.1-alpha should upgrade. * All other relays may wish to upgrade in order to improve their resistance to denial-of-service attacks. If you build Tor from source, the source code is available at https://dist.torproject.org/ . Packages should be available over the coming days. For the complete announcement, including changelogs, see https://lists.torproject.org/pipermail/tor-announce/2018-March/000152.html best wishes, -- Nick

2 1

Firewalls
by TorGate 05 Mar '18

05 Mar '18

Hi to all, I have a simple question, what is the best firewall solution ? With sourcecode and must be opensource. What do you mean ? regards Steffen TorGate torgate(at)linux-hus.dk OpenGPG 7FD5 65EF A4EF EEF3 7A13 4372 8409 49D6 01A2 0890

3 3

bridge behavior question
by Arisbe 04 Mar '18

04 Mar '18

Hello all, I have run a number of Tor nodes for five years but I started adding a few bridges last year. I have one bridge recently installed on a lease VPS that has not reported a single inbound connection in over 40 days (except for Bifroest hanging out). I see up to 4 outbound connections and usually see between 4 and 14 circuits. The IP tables are correct and torrc is copied from successful bridges except for IP address. The Tor version is 0.2.9.14 and the OS is debian 9.0 (stretch). I'm running obfs4proxy. I set ORPort 9001 and ORPort [IPv6]:9001. Tor | Metrics reports Advertised Bandwidth = 8.0 KiB/s for this bridge. Tor | Metrics reports Advertised Bandwidth for another working bridge I have with the same hosting company at 598.7 KiB/s. I suspect this variation is due to lack of connections by the unused bridge. I loaded a speed checker and it reported 72-Mb/s. Can anyone give me some steerage to help me get this bridge productive?

2 1

less than 3 bw auths available: self-measurement (with 10k cap in effect)
by nusenu 04 Mar '18

04 Mar '18

Hi, if your relays behave strangely in terms of bandwidth seen, than this might be due to the fact that there are less than 3 bw auth votes available. If you run a fast relay it is capped to 10k cw. This affects currently the 857 fastest relays. regards, nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

6 8

One pubblic IP, two or more relay on different ports
by MLTorNode 04 Mar '18

04 Mar '18

3 3

[WARN] Your computer is too slow to handle this many circuit creation requests
by Vasilis 04 Mar '18

04 Mar '18

Hi, I see a number of warning log messages on a dedicated server: [WARN] Your computer is too slow to handle this many circuit creation requests! Please consider using the MaxAdvertisedBandwidth config option or choosing a more restricted exit policy. [27615 similar message(s) suppressed in last 60 seconds] The relay is running on a dedicated hardware with the following specifications: CPU: Intel(R) Xeon(TM) CPU 3.00GHz RAM: 6G Kernel: Linux 3.16.0-5-amd64 Tor version: 0.3.2.9 flags: Fast, Guard, HSDir, Running, Stable, V2Dir, Valid exit policy: reject *:* Setting the NumCPUs option to the actual number of CPUs (2) didn't help. Is this hardware really too old/slow to run a relay on one ethernet Gigabit link? Cheers, ~Vasilis -- Fingerprint: 8FD5 CF5F 39FC 03EB B382 7470 5FBF 70B1 D126 0162 Pubkey: https://pgp.mit.edu/pks/lookup?op=get&search=0x5FBF70B1D1260162

2 4

Port not rechable
by peter.zehetner＠liwest.at 04 Mar '18

04 Mar '18

OK, but what is this: Mar 03 21:36:31.000 [warn] Failed to start child process "tor-fw-helper" in state 9: No such file or directory Mar 03 21:51:46.000 [warn] Failed to start child process "tor-fw-helper" in state 9: No such file or directory Mar 03 21:56:51.000 [warn] Failed to start child process "tor-fw-helper" in state 9: No such file or directory Tor is now online for about 36 hours, the log says 6 hours because the computer was restarted. This is the latest log: Mar 03 23:45:12.000 [notice] Bootstrapped 0%: Starting Mar 03 23:45:24.000 [notice] Bootstrapped 80%: Connecting to the Tor network Mar 03 23:45:24.000 [notice] Signaled readiness to systemd Mar 03 23:45:24.000 [notice] Opening Socks listener on /var/run/tor/socks Mar 03 23:45:24.000 [notice] Opening Control listener on /var/run/tor/control Mar 03 23:45:25.000 [notice] Guessed our IP address as 81.10.248.112 (source: 154.35.175.225). Mar 03 23:45:25.000 [notice] Bootstrapped 85%: Finishing handshake with first hop Mar 03 23:45:26.000 [notice] Bootstrapped 90%: Establishing a Tor circuit Mar 03 23:45:27.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working. Mar 03 23:45:27.000 [notice] Bootstrapped 100%: Done Mar 03 23:45:27.000 [notice] Now checking whether ORPort 81.10.248.112:443 and DirPort 81.10.248.112:80 are reachable... (this may take up to 20 minutes -- look for log messages indicating success) Mar 03 23:45:33.000 [notice] New control connection opened. Mar 03 23:46:49.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Mar 03 23:46:52.000 [notice] Performing bandwidth self-test...done. Mar 03 23:47:03.000 [notice] Self-testing indicates your DirPort is reachable from the outside. Excellent. Publishing server descriptor. Mar 04 05:45:24.000 [notice] Heartbeat: Tor's uptime is 5:59 hours, with 0 circuits open. I've sent 8.65 MB and received 15.91 MB. Mar 04 05:45:24.000 [notice] Average packaged cell fullness: 12.249%. TLS write overhead: 13% Mar 04 05:45:24.000 [notice] Circuit handshake stats since last time: 2/2 TAP, 1107/1107 NTor. Mar 04 05:45:24.000 [notice] Since startup, we have initiated 0 v1 connections, 0 v2 connections, 0 v3 connections, and 454 v4 connections; and received 0 v1 connections, 0 v2 connections, 0 v3 connections, and 635 v4 connections. Mar 04 07:35:06.000 [notice] Received reload signal (hup). Reloading config and resetting internal state. Mar 04 07:35:06.000 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc". How long does it last until the relay will be in use? What do the "flags" in tor-arm mean? Sometimes it says "Running, V2Dir, Valid" Yours -Peter Am 03.03.2018 um 10:31 schrieb teor: > >> On 3 Mar 2018, at 18:32, peter.zehetner(a)liwest.at wrote: >> >> Mar 03 00:05:38.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. >> Mar 03 00:05:45.000 [notice] Performing bandwidth self-test...done. >> Mar 03 00:09:29.000 [notice] Self-testing indicates your DirPort is reachable from the outside. Excellent. Publishing server descriptor. > > It is ok. > >> … >> Mar 03 00:52:47.000 [warn] Controller gave us config lines that didn't validate: RelayBandwidthBurst must be at least equal to RelayBandwidthRate. > > You should check these options have the values you want. > > T > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

tor26 dir auth differences
by nusenu 03 Mar '18

03 Mar '18

consensus-health (https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-consensus-health) wrote: > WARNING: The following authorities are missing from the consensus: tor26, dizum > NOTICE: tor26 had 6216 Guard flags in its vote but the consensus had 1855 > NOTICE: tor26 had 0 Exit flags in its vote but the consensus had 777 > NOTICE: tor26 had 7086 Stable flags in its vote but the consensus had 4541 interesting -- https://mastodon.social/@nusenu twitter: @nusenu_

1 0

memory requirements
by notatorserver 03 Mar '18

03 Mar '18

Hi, I have just setup a tor-relay and I am wondering if the resource requirements are still current: "A non-exit relay faster than 40MBit/s should have at least 1 GB of RAM."[1] My relay is sitting at ~2.77G currently. I set the option: MaxMemInQueues 6GB Just wondering if this is any cause for concern? I realize the utilization is less than the limit but I just don't remember relays I have run in the past using this much memory. Thanks [1] https://trac.torproject.org/projects/tor/wiki/TorRelayGuide Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2

Port not rechable
by peter.zehetner＠liwest.at 03 Mar '18

03 Mar '18

I've opend the ports in my router. Could anybody be so kind to check my log and tell me wether it's ok or not? Mar 03 00:05:38.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Mar 03 00:05:45.000 [notice] Performing bandwidth self-test...done. Mar 03 00:09:29.000 [notice] Self-testing indicates your DirPort is reachable from the outside. Excellent. Publishing server descriptor. Mar 03 00:52:15.000 [notice] Tor 0.2.9.14 opening log file. Mar 03 00:52:47.000 [warn] Controller gave us config lines that didn't validate: RelayBandwidthBurst must be at least equal to RelayBandwidthRate. Mar 03 01:03:52.000 [notice] Tor 0.2.9.14 opening log file. Mar 03 01:04:03.000 [notice] Tor 0.2.9.14 opening log file. Mar 03 01:04:29.000 [notice] Tor 0.2.9.14 opening log file. Mar 03 04:33:03.000 [notice] Received reload signal (hup). Reloading config and resetting internal state. Mar 03 04:33:03.000 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc". Mar 03 04:33:03.000 [notice] Read configuration file "/etc/tor/torrc". Mar 03 04:33:03.000 [notice] Tor 0.2.9.14 opening log file. Mar 03 06:04:27.000 [notice] Heartbeat: Tor's uptime is 5:59 hours, with 2 circuits open. I've sent 70.69 MB and received 76.91 MB. Mar 03 06:04:27.000 [notice] Circuit handshake stats since last time: 0/0 TAP, 4/4 NTor. Mar 03 06:04:27.000 [notice] Since startup, we have initiated 0 v1 connections, 0 v2 connections, 0 v3 connections, and 64 v4 connections; and received 0 v1 connections, 0 v2 connections, 10 v3 connections, and 193 v4 connections. Mar 03 07:35:04.000 [notice] Received reload signal (hup). Reloading config and resetting internal state. Mar 03 07:35:04.000 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc". Mar 03 07:35:04.000 [notice] Read configuration file "/etc/tor/torrc". and: Mar 03 07:35:04.000 [notice] Tor 0.2.9.14 opening new log file. Mar 03 08:12:11.000 [warn] Failed to start child process "tor-fw-helper" in state 9: No such file or directory -Peter Am 02.03.2018 um 22:18 schrieb Matthew Finkel: > Hi! > > On Fri, Mar 02, 2018 at 09:34:02PM +0100, peter.zehetner(a)liwest.at wrote: >> OK, now I've set PortForwarding in Tor-Arm from "False" to "True", then restarted Tor: > > Hrm, I'm not sure this will do what you want. In fact, this may do > absolutely nothing. Do you have administative access into your network > router? Maybe there is a website interface you used. This is where you > should configure port forwarding. Unfortunately this is complicated and > not easy plug-n-play. > >> >> ...has not managed to confirm that its DirPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check... >> >> I'm going to run a non-exit-relay and I'm going to do this at home. >> >> Peter >> > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1