- tor-relays - lists.torproject.org

DDOS
by Markus Koch 15 Jun '16

15 Jun '16

4 of my 5 tor servers are under a incoming DDOS attack. Am I the only one or is anyone else feeling the "love"? Markus

8 11

Re: [tor-relays] Tor Weather has been discontinued
by Arisbe 13 Jun '16

13 Jun '16

When did t-shirts become more important than the work we are doing to keep people safe and anonymous on the internet?

4 4

Filter Tor Exit Node for blatant attacks on servers
by Dr Gerard Bulger 12 Jun '16

12 Jun '16

It is heresy to suggest that Exit relays do anything of a sort, that is attempt to reject obvious attackers on an IP? Tor is neutral. Once TOR exits attempts any filtering where would it stop? It is a slippery slope. I think not, as to extend to other areas would far too complex and have diminishing returns. DMCA complaints for example was waste of time, and not all counties have copyright laws. I know that everyone on the internet should secure their servers, and take their own measures to block attacks, but too often those corporate measures include an automated abuse complaint being sent out. No explaining to ISP on what it means helps, as many of their staff are just too dumb and have to play safe. It is more than embarrassing to run an exit node and get abuse complaints about persistent and repeated attacks on an IP. The intent is clearly criminal. VPS providers in the UK are increasing intolerant in receiving such complaints. The whole VPS can be closed down by the ISP/VPS provider not forcing a closure of the TOR exit. Fewer ISPs will allow you to install an exit node at all. I am only wondering about blocking the obvious attacks or mass attacks to block. Is anyone developing such tools? Is it even possible? Those of us who would wish to enact such software, if it could be made, would have a flag on Tor Atlas stating that there is such a filter in place. Gerry

6 9

Re: [tor-relays] Tor Weather has been discontinued
by Michael Armbruster 12 Jun '16

12 Jun '16

On 2016-06-12 at 13:21, Jannis Wiese wrote: > I’m waiting since 7 months now. I know the guys who are handling the T-shirt requests are busy and I am (was) prepared to wait, but it’s a bit frustrating (if I think about it), to be honest. > >> On 08.06.2016, at 19:34, Markus Koch <niftybunny(a)googlemail.com> wrote: >> >> I am waiting since January? >> >> Hope has died a long time ago ... >> >> >> >> 2016-06-08 19:23 GMT+02:00 Michael Armbruster <tor(a)armbrust.me>: >>> On 2016-06-08 at 19:17, Green Dream wrote: >>>> The T-shirt incentive for relay operators is gone, as far as I know. >>>> >>>> If you donate $100 or more here you can pick a T-shirt as the >>>> gift: https://www.torproject.org/donate/donate.html.en >>>> >>>> There are many alternative ways to monitor the health and uptime of your >>>> relay. I like https://www.statuscake.com/ for this and their free plan >>>> is sufficient. I'm not affiliated with them, I just like their product. >>>> >>>> >>>> >>>> >>>> >>>> _______________________________________________ >>>> tor-relays mailing list >>>> tor-relays(a)lists.torproject.org >>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >>>> >>> >>> As far as I know, the incentive should still be there. At least it is >>> according to the web page. [1] >>> >>> But if it's really gone, it definitely has to be changed on the webpage, >>> as I myself am thinking right now that I should get a shirt. By the way, >>> I'm also already waiting for an answer for more than 2 weeks. >>> Just some time ago I heard somebody has waited 2 months to get an answer. >>> Well, I'm patient :) >>> >>> Best, >>> Michael >>> >>> [1] https://www.torproject.org/getinvolved/tshirt.html.en >>> >>> >>> _______________________________________________ >>> tor-relays mailing list >>> tor-relays(a)lists.torproject.org >>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >>> >> _______________________________________________ >> tor-relays mailing list >> tor-relays(a)lists.torproject.org >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > Well, then it won't be several weeks for me to wait, but obviously it will be several months. I of course planned to let the exit node run, but it should definitely be handled in a better way. Even an automatic mail once in a month, stating "We will handle it, but we are busy right now" would give me a better feeling about it. Not even an answer in 2-3 weeks, or in your case 7 months feels a bit uncomfy.

6 7

Re: [tor-relays] Tor Weather has been discontinued
by Michael Armbruster 12 Jun '16

12 Jun '16

On 2016-06-13 at 01:08, Moritz Bartl wrote: > On 06/13/2016 12:17 AM, Green Dream wrote: >> As I already said 4 days ago in this thread, all indications are the >> t-shirt program is no longer active. > > Wrong. It's just being handled by one volunteer at the moment. If you > want shirts, go into a shop and buy a shirt. If you want to contribute > to Tor, and be appreciated and have that appreciation being shown to you > by the community by getting a shirt, wait and magic will happen. > >> If someone here really cares about the false promise of t-shirts, that >> person could submit a pull request to update the website accordingly. > > eg. https://trac.torproject.org/projects/tor/ticket/19354 > See? That's exactly what I wanted to hear. As you have a torservers.net e-mail address, you'll know what you are talking about. So thanks for the explanation. "One volunteer at the moment" is the explanation many people were searching for and I can happily wait for the appreciation of a Tor t-shirt. It's just not the same buying or printing one myself, it's the achievement to get one from the Tor project, so I will wait until they get to me. It was just the communication on why people have to wait so long :) Oh, and thanks for the trac link, it shows a pretty neat IRC log ^^

1 0

Tor is Interrupting (?) OpenSSL Version Mismatch
by SuperSluether 11 Jun '16

11 Jun '16

After rebooting my Raspberry Pi for a few updates, Tor is not working properly. From the logs, [warn] OpenSSL version from headers does not match the version we're running with. If you get weird crashes, that might be why. (Compiled with 100010bf: OpenSSL 1.0.1k 8 Jan 2015; running with 1000114f: OpenSSL 1.0.1t 3 May 2016). Everything else in the log looks normal, but right after bootstrap 85% (finishing handshake with first hop) it says this: [notice] Interrupt: we have stopped accepting new connections, and will shut down in 30 seconds. Interrupt again to exit now. What do I do now? I have all the latest updates installed on this system, including the latest (stable) version of Tor.

4 11

TORRC Exit not obeying httproxy
by Dr Gerard Bulger 11 Jun '16

11 Jun '16

My tor exit node has been using a https proxy for a long time with great success in that I have had no abuse complaints directed to me and my VPS provider. Until recently. Traffic has increased as I made the bandwidth wider, which might be an explanation. I am getting complaints directed to my actual IP. It looks as if tor is sending data DIRECT and not obeying the lines completely, all the time. TORRC OutboundBindAddress IP (second IP of server) HTTPSProxy service:port HTTPProxyAuthenticator name password When I took out the OutboundBindAddress I just got complaints directed to the first IP. I assumed the lines FORCED proxy use. This might not be the case in higher traffic? Gerry

2 2

(no subject)
by JOHNY CAMPOS 10 Jun '16

10 Jun '16

2 1

Sharing experience with Via Nano 1.6ghz with Padlock hw accel
by Fabio Pietrosanti (naif) - lists 06 Jun '16

06 Jun '16

Hello, i wanted to share the experience in running a Tor Relay (no-exit) on a small embedded computer costing 7eur/month at oneprovider with unlimited 1Gbps bandwidth (at least they say that): VIA Nano processor U2250 (1.6GHz Capable) 2GB Ram I had to install to get the hw acceleration library: Tor version 0.2.8.1-alpha (git-9093e3769746742f). In /etc/tor/torrc: HardwareAccel 1 AccelName padlock I see with iptraf 60.000kbit/s peak with 30% uses of main CPU. I'm wondering if that small boxes are hitting a limit of the hardware acceleration or limit of the provider or Tor network itself. There's a way to measure the uses of the hw acceleration given by the Via Padlock, if it's at 10% of it's capacity or 100% ? -- Fabio Pietrosanti (naif) HERMES - Center for Transparency and Digital Human Rights http://logioshermes.org - https://globaleaks.org - https://tor2web.org - https://ahmia.fi

5 8

OBFS-4 Bridge Relay with 0 clients seen in more than one month
by fr33d0m4all 04 Jun '16

04 Jun '16

Hi, I'm running a Tor relay which is working fine and a Tor Bridge Relay on port 995 (ORPort is 465) which is reachable from the outside that has been running for more than one month and has never been contacted by any client. I've tried to use it with Tor Browser from outside my own network and it works fine. Does it take so long for an OBFS4 bridge relay to become known and used by someone? Best regards, Freedom For All -- _____________________________________________________________ PGP Key: 0DA8 7293 D561 3AEE A3C0 7F63 101F 316A F30E ECB4 IRC Nick: fr33d0m4all (OFTC & Freenode) _____________________________________________________________

4 3

Is Media Temple a good VPS provider for Tor Exit Nodes
by marykate＠airmail.cc 03 Jun '16

03 Jun '16

Hi, I need a VPS for running a Tor Exit node, and am eyeing Media Temple, but am unsure if MT is good for running Tor nodes. Is anybody using MT for running Tor exits? If so, what's your experience? Are they Tor friendly, or are they hostile to Tor nodes and actively oppose them? Are there better VPS providers? Best, Mary Kate

3 2

[warn] Received http status code 504 ("Gateway Time-out") from server '154.35.175.225:80' while fetching "/tor/ ...
by Robin Kjeld 03 Jun '16

03 Jun '16

Tor version 0.2.7.6 Tor relay logged this a few times: Jun 02 07:24:40.000 [warn] Received http status code 504 ("Gateway Time- out") from server '154.35.175.225:80' while fetching "/tor/server/d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z". I'll try again soon. Best regards Robin

2 1

Questions on traffic differences between two Exit relays in two different locations
by pa011 02 Jun '16

02 Jun '16

I would like to understand the working of two exit relays, one is about 7 days old -the other worked as a middle relay before and is an exit now for about two weeks. The second one has a higher potential connection up to 250 Mbit/s while the first is supposed to be limited on 100 Mbit/s. They both run (Linux 3.16.0-4...), Tor 0.2.7.6, both use half or less of their CPU and Memory. So why does the second node in a different city in Eastern Europe not attract more traffic compared to the first one and thereby uses its full capacity, even when the second one is longer in the market? Could please somebody explain or send me some links to read ? Does this depend on the location of the node and in which way? Node 1: day rx | tx | total | avg. rate ------------------------+-------------+-------------+--------------- 26.05.2016 594,06 MiB | 121,20 MiB | 715,27 MiB | 67,82 kbit/s 27.05.2016 30,22 GiB | 30,20 GiB | 60,42 GiB | 5,87 Mbit/s 28.05.2016 188,73 GiB | 191,03 GiB | 379,76 GiB | 36,87 Mbit/s 29.05.2016 216,98 GiB | 220,23 GiB | 437,21 GiB | 42,45 Mbit/s 30.05.2016 280,10 GiB | 285,21 GiB | 565,31 GiB | 54,89 Mbit/s 31.05.2016 334,17 GiB | 338,36 GiB | 672,53 GiB | 65,30 Mbit/s 01.06.2016 678,74 GiB | 691,32 GiB | 1,34 TiB | 133,02 Mbit/s 02.06.2016 714,88 GiB | 726,10 GiB | 1,41 TiB | Node2: day rx | tx | total | avg. rate ------------------------+-------------+-------------+--------------- 05/12/16 24.68 GiB | 25.66 GiB | 50.34 GiB | 4.89 Mbit/s 05/13/16 64.18 GiB | 66.27 GiB | 130.45 GiB | 12.67 Mbit/s 05/14/16 68.34 GiB | 70.30 GiB | 138.63 GiB | 13.46 Mbit/s 05/15/16 66.34 GiB | 68.00 GiB | 134.34 GiB | 13.04 Mbit/s 05/16/16 72.87 GiB | 74.51 GiB | 147.38 GiB | 14.31 Mbit/s 05/17/16 73.32 GiB | 74.74 GiB | 148.06 GiB | 14.38 Mbit/s 05/18/16 81.14 GiB | 82.17 GiB | 163.30 GiB | 15.86 Mbit/s 05/19/16 72.22 GiB | 74.33 GiB | 146.55 GiB | 14.23 Mbit/s 05/20/16 74.62 GiB | 76.93 GiB | 151.55 GiB | 14.71 Mbit/s 05/21/16 96.44 GiB | 98.68 GiB | 195.12 GiB | 18.94 Mbit/s 05/22/16 227.48 GiB | 225.03 GiB | 452.50 GiB | 43.93 Mbit/s 05/23/16 216.46 GiB | 214.71 GiB | 431.17 GiB | 41.86 Mbit/s 05/24/16 231.87 GiB | 227.53 GiB | 459.41 GiB | 44.60 Mbit/s 05/25/16 302.77 GiB | 298.03 GiB | 600.80 GiB | 58.33 Mbit/s 05/26/16 280.37 GiB | 273.64 GiB | 554.01 GiB | 53.79 Mbit/s 05/27/16 318.75 GiB | 312.23 GiB | 630.98 GiB | 61.26 Mbit/s 05/28/16 317.57 GiB | 311.64 GiB | 629.21 GiB | 61.09 Mbit/s 05/29/16 271.41 GiB | 267.75 GiB | 539.16 GiB | 52.35 Mbit/s 05/30/16 290.85 GiB | 284.82 GiB | 575.67 GiB | 55.89 Mbit/s 05/31/16 323.61 GiB | 313.39 GiB | 637.00 GiB | 61.85 Mbit/s 06/01/16 279.34 GiB | 276.31 GiB | 555.65 GiB | 53.95 Mbit/s 06/02/16 259.17 GiB | 256.20 GiB | 515.38 GiB |

3 2

Tor Weather has been discontinued
by Karsten Loesing 02 Jun '16

02 Jun '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear relay operators, as of April 4, 2016, Tor Weather has been discontinued. Tor Weather [0] provided an email notification service to any user who wanted to monitor the status of a Tor node. Upon subscribing, they could specify what types of alerts they would like to receive. The main purpose of Tor Weather was to notify node operators via email if their node was down for longer than a specified period, but other notification types were available, including one where operators would be informed when their node was around long enough to qualify for a t-shirt. The main reason for discontinuing Tor Weather is the fact that software requires maintenance, and Tor Weather is no exception. Tor Weather was promising t-shirts for relays that have not been around long enough or that provided too little bandwidth to be useful to the network, and it was almost impossible to deny a t-shirt after Tor Weather has promised it. Apart from that, Tor Weather was likely not offering t-shirts to people who have long earned it, thereby confusing them. An unreliable notification system is worse than not having a system at all. Relay operators shouldn't rely on Tor Weather to notify them when their relay fails. They should rather set up their own system instead. We have tried to find a new maintainer for Tor Weather for years, but without success. We started rewriting Tor Weather [1] using Onionoo [2] as data back-end in 2014, and even though that project didn't produce working code, somebody could pick up this efforts and finish the rewrite. The Roster developers said that they're planning to include an email notification function in Roster [3]. And we developed a simple Python script that provides information about a relay operator's eligibility for acquiring a t-shirt [4]. None of these alternatives is a full replacement of Weather, though. We encourage you, the community of Tor relay operators, to step up to start your own notification systems and to share designs and code. Tor Weather is still a good idea, it just needs somebody to implement it. Tor Weather is discontinued in two steps. For now, new subscriptions are disabled, new welcome messages are not sent out anymore, and existing subscriptions continue working until June 30, 2016. From July 1, 2016 on, Tor Weather will not be sending out any emails. Sorry for any inconvenience caused by this. All the best, Karsten [0] https://weather.torproject.org/ [1] https://trac.torproject.org/projects/tor/wiki/doc/weather-in-2014 [2] https://onionoo.torproject.org/ [3] http://www.tor-roster.org/ [4] https://gitweb.torproject.org/metrics-tasks.git/tree/task-9889/tshirt.py -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBAgAGBQJXAn7HAAoJEC3ESO/4X7XBmhEIAKxWEwex5pyp5RBHkE4+1IC2 WaKjcvIT0WiZJ8prZASNSxF7ART6r2trG50+Pd2GCdu0SOjIz3eeQNSkx251RaqF xF7dw2RVhExcYOar4FG5+KkXu6X3k0svMvNeMGzcRd51yaaVeW8OaAgV0NC+CHgE ZkA7bg26jCvG8EFrKCg4fuZ3JW3+O3mvcquea+aB4q6gbuQFjgoxzfH5+XkmpA5i gDZnsIRuBDYuUW8V1ior/7DG2wGlCjWZUotoTysfsFW2FSMUrTBZOlvhpHicMfER VpLxY8+b3ZGC6Olit50ISZql8l12yO3Hik32eKIcgK2fpx6vgKE+T83I8voIpOU= =LVj8 -----END PGP SIGNATURE-----

7 11

ansible-relayor 0.1.0 released
by nusenu 02 Jun '16

02 Jun '16

Hi, ansible-relayor is an ansible [1] role for tor relay operators. Whether you setup/operate a single or many relays, ansible-relayor can help you automate all steps including secure offline key [2] generation, multi-instance setup and MyFamily management. https://github.com/nusenu/ansible-relayor Main benefits for a tor relay operator ====================================== * security: Ed25519 master keys are kept offline * easy key renewal with a single command * security: every tor instance is run with a distinct user * automatically makes use of IPv6 IPs (if available) * automatic MyFamily management * automatic multi-instance setup (configurable) * easily restore/move a relay Supported Platforms =================== * FreeBSD 10.x * OpenBSD 5.9 * Debian 8 * Ubuntu 16.04 * CentOS 7 * Fedora 23 Installation ============ relayor is available via ansible-galaxy: ansible-galaxy install nusenu.relayor https://galaxy.ansible.com/nusenu/relayor/ Documentation ============== https://github.com/nusenu/ansible-relayor/blob/master/README.md https://github.com/nusenu/ansible-relayor/wiki playbook examples: https://github.com/nusenu/ansible-relayor/wiki/relayor-playbook-examples migration steps for existing relays https://github.com/nusenu/ansible-relayor/wiki/Migration-Steps git tags are signed with: pub 4096R/4D705DE9 2016-02-11 Key fingerprint = A7B5 DB91 CE04 C9E0 BE66 446B 8CBE 52BD 4D70 5DE9 uid ansible-relayor signing key (https://github.com/nusenu/ansible-relayor) regards, nusenu [1] https://docs.ansible.com/ansible/intro_getting_started.html [2] https://trac.torproject.org/projects/tor/wiki/doc/TorRelaySecurity/Offli neKeys

1 0

The Tor's non-discretionary model - Milica D. Djekic
by Milica Đekić 01 Jun '16

01 Jun '16

Would Tor use a non-discretionary model of data transfer between the relays that would be a part of non-centralized network? Is there any real encryption in sense of information flow or only a conversion from discrete to non-discrete signal? Which circuitry algorithm would get used for so? Sorry, for asking all of these - I am just reading the history of anonymity. Thank you so much! On Wed, Jun 1, 2016 at 2:00 PM, <tor-relays-request(a)lists.torproject.org> wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Re: [Fwd: Re: I'm Running A Tor Exit But Never Initiated It] > (Roger Dingledine) > 2. Re: [Fwd: Re: I'm Running A Tor Exit But Never Initiated It] > (Greg Moss) > 3. Re: [Fwd: Re: I'm Running A Tor Exit But Never Initiated It] > (JovianMallard) > 4. Re: I'm Running A Tor Exit But Never Initiated It > (Peter Palfrader) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 31 May 2016 19:21:38 -0400 > From: Roger Dingledine <arma(a)mit.edu> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] [Fwd: Re: I'm Running A Tor Exit But Never > Initiated It] > Message-ID: <20160531232138.GB55745(a)moria.seul.org> > Content-Type: text/plain; charset=us-ascii > > On Tue, May 31, 2016 at 07:05:23PM -0400, Percy Blakeney wrote: > > In addition I DO NOT have the full Xfinity package. > > Hi folks, > > I'm going to put an end to this thread now. Please be aware that 1700+ > people are on the tor-relays list, so we really need to keep things > concise and on-topic. > > Thanks! > --Roger > > > > ------------------------------ > > Message: 2 > Date: Tue, 31 May 2016 16:25:32 -0700 > From: Greg Moss <gmoss82(a)gmail.com> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] [Fwd: Re: I'm Running A Tor Exit But Never > Initiated It] > Message-ID: > <CALA4K1TTE11B21p7Vb3+K=GBiomzJT5o_kk= > EwUOn0Mbwo_v9A(a)mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > Thanks Mr dingledine- was a good laugh but enough is enough > On May 31, 2016 4:21 PM, "Roger Dingledine" <arma(a)mit.edu> wrote: > > On Tue, May 31, 2016 at 07:05:23PM -0400, Percy Blakeney wrote: > > In addition I DO NOT have the full Xfinity package. > > Hi folks, > > I'm going to put an end to this thread now. Please be aware that 1700+ > people are on the tor-relays list, so we really need to keep things > concise and on-topic. > > Thanks! > --Roger > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >

1 0

I'm Running A Tor Exit But Never Initiated It
by Percy Blakeney 01 Jun '16

01 Jun '16

According to files and folders I have on two separate computers in my house, I am running a Tor exit but I absolutely have nothing to do with it. I am only able to physically view certain files ie; var/log/tor, etc/tor/torrc, while other files like var/lib/tor/lock the content is invisible. I am MORE than willing to talk to anyone who may be able to help.

7 10

Re: [tor-relays] [Fwd: Re: I'm Running A Tor Exit But Never Initiated It]
by Greg Moss 31 May '16

31 May '16

Thanks Mr dingledine- was a good laugh but enough is enough On May 31, 2016 4:21 PM, "Roger Dingledine" <arma(a)mit.edu> wrote: On Tue, May 31, 2016 at 07:05:23PM -0400, Percy Blakeney wrote: > In addition I DO NOT have the full Xfinity package. Hi folks, I'm going to put an end to this thread now. Please be aware that 1700+ people are on the tor-relays list, so we really need to keep things concise and on-topic. Thanks! --Roger _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

[Fwd: Re: I'm Running A Tor Exit But Never Initiated It]
by Christian 31 May '16

31 May '16

-------- Weitergeleitete Nachricht -------- > Von: Christian Adam <hirnwurst(a)t-online.de> > An: tor-relays(a)lists.torproject.org > Betreff: Re: [tor-relays] I'm Running A Tor Exit But Never Initiated > It > Datum: Mon, 30 May 2016 22:14:51 +0200 > > Dear Percy, > > I read all of your messages very carefully and, please, believe me, I > don't mean to be rude, but just want to provide you a little bit of > relief. > > First of all, I have to share that I AM in fact a schizophrenic for 16 > years now, but fully therapied to the extent I do a job as a system > administrator and get certified for being a data security officer this > week. > This won't reveal any competence on my side, but gives a clue about my > functional level which is, after all, related to sanity. > > Why do I tell this? > Because you don't seem to know much about computers AND because 60% of > the population experience states during their lifetime resembling mine > while diagnosed, but nobody minds and it goes away and was just > triggered by external circumstances and internal attributions. > > I tell this, because my delusional system did not involve at all any > technical devices, but was completely interpersonal and cultural, which > is a little seldom in western countries. > > So, I learned that even if improbable, it helps keeping a harmless, > maybe also annoying, possibility in mind. > > Read Foster-Wallace, This Is Water? > > So, let's have a clue at the facts. > You moved to a new region. > So, you were not yet closely related to your new environment and the old > one you left might have been more and more distant, which makes people > sometimes do morally questionable things. > > You don't know anything about computers, so, someone must have installed > your linuxes. > > I also do that for people. My 73-year-old mom uses linux. And a former > friends mother. > I do remote administration via Teamviewer as I prefer users being > graphically informed I am on their box after their consent. > > Maybe the girl or guy who installed your linuxes has enabled SSH remote > access combined with a DynDNS name resolving to remotely administrate > (and spy) you (out). > > Maybe things got socially weird, not technically. > Maybe the computer shutdown at the library was just coincidence, as this > also happened to me at a university terminal which might have been > poorly maintained. > > In my educational company, the public PCs are the most poorly maintained > and I know that because I am in charge of that and not every library is > financially well off. > > The config you posted reveals two things: > 1. NOT an exit. > 2. You don't know that. > Let me explain. The hash symbol # comments out lines, i.e. these lines > don't contain config, but human readable remarks. > Of course, in a default config file, you can include commented out > options because the easily can be activated by removing the #. > Lines beginning with # are just nothing. > > The second thing is, that your "hard drive is partitioned". > Every hard drive is partitioned. > Operating systems don't use the raw physical devices, but the partitions > made up on them containing the file systems. > > On the most basic Windows installs, there's at least one partition which > you might know as device C:. > Personally, when I install linux, I separate system and user data which > results in two partitions at minimum, one containing /, the root > directory ("file system" in your file browser), and /home containing the > users' personal folders. > > Next thing is that /var/lib/tor contains among others sensitive > statistical data concerning the relays users and are therefore is only > accessible as root via a sudo command. > If you type "sudo -i" and "cd /var/lib/tor", you should be able to > access it as sudo provides you with administrator privileges which are > called root privileges on linux. > You cannot do "sudo cd /var/lib/tor". > > If this folder was normally accessible, someone could just use a > vulnerability in your firefox and learn from where your users originate > and if he knows your record of connections, he would know what the > people from region X do with your connection: accessing a relay or a > bridge, which sets users not only in other jurisdictions at risk of > uncontrolled data collection by whoever it is. > > I asked my mom whether she wants to run a bridge. > She didn't and so I did not install one. > I asked my CEO if he wants to run a bridge. > He didn't and so I did not install one. > I just got the job because I told everything an employer is not allowed > to ask here in Germany, because I told them that they first have to > decide whether to trust me as I will have highest privileges on the > entire network including their private PCs. > > What is true that remote administration is great for saving time and > miles to do people a quick favour. > But it can be used irresponsibly. > > Maybe the one providing you your installs decided you won't even notice > and you get that relay, period. > Not nice. Not responsible. Morally highly questionable. > But after all, quite probable, as every device has a partitioned hard > drive and real adversaries have a keen eye on you not noticing never > ever you have been compromised, except ransomware tricking you into > sending money via Western Union or Bitcoins. > > Criminals want to do criminal business, except ransomware tricking you > into sending money via Western Union or Bitcoins, and agencies want to > prosecute, but scaring you is not an aim of either if you're not an > agent yourself. > > In my house are 8 appartements. > Two of us are schizos. > We integrate well (public health system) and our neighbours like us, > but, of course, we use linux and of course, we have paranoid passwords > and of course... you understand, I guess. > > I have never ever been hacked. > But in my company, I can access every computer without prompting for > consent as everybody finds that comfortable cause they know about that. > I'm in the network at 3 a.m. and I can turn on half of the workstations > while laying in my bed. > > I know how that feels. > My diagnosis reads "paranoid-hallucinatoric schizophrenia" and I know > how it feels to have a perspective not even one of 7 billion people > share. > > Sensitivity is paranoia's beautiful sister. > I strongly suggest someone just wants to mock you. > > Given my experience with newbie users, paranoia and system > administration, what you wrote seemed quite normal and you didn't > provide (as far as I remember) any unusual technical details. > > Maybe what just happened was a lack of informed consent resulting in a > tasteless prank. > > I don't want to do injustice to you, but since Edward Snowden, we're all > used to question every system crash and honestly, our times seem to be > hysterical and violence-saturated. > > The rule is simple. When a user thinks he's infected, he's almost always > not. > If he's infected, he wouldn't notice. > > Hugs, I hope you find peace again soon. > > Please don't feel offended, I only told my story based on the facts you > gave. > > And kind regards, > > christian > > > Am Montag, den 30.05.2016, 13:25 +0200 schrieb Christian Pietsch: > > Hi GDR! > > > > On Mon, May 30, 2016 at 12:54:41PM +0200, GDR! wrote: > > > On Sun, 29 May 2016 15:23:24 +0000 "krutt(a)anche.no" <krutt(a)anche.no> wrote: > > > > > > > I can't image a single reason why Tor should be configured to run a > > > > relay without the system admins knowledge. > > > > > > Debian did this - I'm not sure if it does that any more. > > > > This bug is not present in current and recent versions of Debian. > > > > > `apt-get install tor` used to run an exit relay unless you uncomment > > > "ExitPolicy reject *:*" in torrc. I had the same problem a few years > > > ago, suddenly captchas started appearing everywhere after installing > > > tor. > > > > Do you mean this bug in Tor 0.1.0 which was fixed in 2005? > > > > -------------- begin quote from the Debian changelog -------------- > > > > tor (0.1.0.11-1) unstable; urgency=high > > > > * New upstream version (closes: #316753): > > - Fixes a serious bug: servers now honor their exit policies - > > In 0.1.0.x only clients enforced them so far. 0.0.9.x is > > not affected. > > * Build depend on libevent-dev >= 1.1. > > * Urgency high because 0.0.9.10-1 did not make it into testing after > > like 3 weeks because of an impending ftp-master move. So I might > > just as well upload this one. > > > > -- Peter Palfrader <weasel(a)debian.org> Mon, 4 Jul 2005 17:53:48 +0200 > > > > -------------- end quote from the Debian changelog -------------- > > > > > > Cheers, > > Christian > > > > _______________________________________________ > > tor-relays mailing list > > tor-relays(a)lists.torproject.org > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > >

9 22

Re: [tor-relays] Question on warnings
by Tristan 30 May '16

30 May '16

Not sure where I found this, but I remember reading that Tor changed how it stored bandwidth information. Arm wasn't updated yet, so it throws an error. On May 30, 2016 4:32 PM, "Green Dream" <greendream848(a)gmail.com> wrote: Hi. Thanks for running a relay. These notice messages are from the monitoring tool Arm, and should not affect the Tor process. If you don't care about Arm and Tor seems to be working okay otherwise, you could safely ignore these messages. In case you want to look into them further, I'll share some thoughts below. It looks like you're running on a Unix or Linux system, I'll assume Debian or Ubuntu for the moment. > 20:42:57 [ARM_NOTICE] Unable to prepopulate bandwidth information > (unable to read the state file) This is normal in my experience. Arm is trying to read your node's bandwidth history to populate the graphs with data collected before you started Arm. I don't know why it fails, but you could squelch it by adding the following config line to ~/.arm/armrc: features.graph.bw.prepopulate false > 20:42:56 [ARM_WARN] Unable to read tor's log file: > /var/log/tor/log [1duplicate hidden] It looks like Arm doesn't have permission to read /var/log/tor/log. I normally start Arm with something like this, so it has the same permissions as the Tor daemon: sudo -u debian-tor arm > 20:42:56 [ARM_NOTICE] Tor is preventing system utilities like netstat > and lsof from working. This means that arm can't provide you with > connection information. You can change this by adding > 'DisableDebuggerAttachment 0' to your torrc and restarting tor. For > more information see... https://trac.torproject.org/3313 You need to add the following to /etc/tor/torrc if you want to utilize all the features of Arm: DisableDebuggerAttachment 0 It's disabled by default for security (with a value of '1'), so think carefully before doing this. It "reduces security by enabling debugger attachment to the Tor process. This can be used by an adversary to extract keys." (Quoting from https://trac.torproject.org/projects/tor/ticket/13880) If you do enable the deubgger attachment for Arm, make sure your control port is locked down (not reachable from the Internet or from other hosts you don't control, etc.) _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

Question on warnings
by Santiago Roland 30 May '16

30 May '16

Hi, i have installed a non-exit relay in my home server and for many days i have had this warnings: 20:42:57 [ARM_NOTICE] Unable to prepopulate bandwidth information (unable to read the state file) 20:42:56 [ARM_WARN] Unable to read tor's log file: /var/log/tor/log [1 duplicate hidden] 20:42:56 [ARM_NOTICE] Tor is preventing system utilities like netstat and lsof from working. This means that arm can't provide you with connection information. You can change this by adding 'DisableDebuggerAttachment 0' to your torrc and restarting tor. For more information see... https://trac.torproject.org/3313 20:42:52 [ARM_NOTICE] No armrc loaded, using defaults. You can customize arm by placing a configuration file at '/home/santiago/.arm/armrc' (see the armrc.sample for its options). I just wanted to know if there are safe warnings or should i modify something in my config Best regards, -- Santiago Roland.- --------------------------------- Jabber: santiago(a)undernet.uy GNU Social: http://bit.ly/gnusr openPGP ID: 5ADF0F53 openPGP key: http://bit.ly/pgpun CX1DR - Grid Locator: GF25bf ---------------------------------

2 1

I'm Running A Tor Exit Node And NEVER Initiated It
by Percy Blakeney 30 May '16

30 May '16

Like I stated a few minutes ago, I am and have been running Tor from my location yet I have nothing to do with it. I have been sitting on this for a while. Before anyone comes down on me for it, you have to understand what I've been going through with my network. Tor is only the tip of the iceberg. This is as of today: usr/share/tor/tor-service-defaults-torrc DataDirectory /var/lib/tor PIDFile /var/run/tor/tor.pid RunasDaemon 1 user debian-tor control socket /var/run/tor/control control socket group writable 1 cookie authentication 1 cookie auth file group readable 1 cookie auth file /var/run/tor/control-authcookie log notice file /var/log/tor/log etc/tor/torrc contact info 0xFFFFFFFF Random Person <nobody AT example dot com> #Dirport 80 No Listen #Dirport 127.0.0.1:9091 No Advertise #Dirport front page /etc/tor/tor-exit-notice.html #Exit Policy Accept *:6660-6667, reject *:* #allow irc ports but no more #accept *:119 # accept nntp as well as default exit policy var/lib/tor lock-Mon 16 May 2016 09:48:32 PM EDT (File content is not visible to me) cached-certs-Mon 16 May 2016 09:48:32 PM EDT (File content is not visible to me) cached-microdescs-Mon 16 May 2016 10:18:34 PM EDT (File content is not visible to me) cached-microdescs.new-Mon 16 May 2016 10:18:34 PM EDT (File content is not visible to me) state-Wed 25 May 2016 04:36:02 AM EDT (This one IS visible) cached-microdesc-consensus-Sun 29 May 2016 09:17:15 AM EDT (File content is not visible to me) tor.pid-32156 /var/lib/tor/state #Tor state file last generated on 2016-05-25 04:36:02 local time #Other times below are in UTC #You *do not* need to edit this file. EntryGuard Jans 50586E25BE067FD1F739998550EDDCB1A14CA5B2 DirCache EntryGuardAddedBy 50586E25BE067FD1F739998550EDDCB1A14CA5B2 0.2.4.27 2016-04-28 16:16:20 THERE'S WAY more to the above file but I'm not sure what I should and shouldn't share on here. As a matter of fact, I'm not sure what half of this stuff means so I've spent the last few months trying to educate myself on as much of this as possible. Like I said, I am MORE than willing to talk to anyone out there who may be able to help.

9 15

Re: [tor-relays] I'm Running A Tor Exit But Never Initiated It
by david.carlson.417＠gmail.com 29 May '16

29 May '16

Two thoughts: I did not see mentioned whether your Wi-fi is secured.If your running a guest machine in a vm you will not know about the host.Have you tried booting into a rescue DVD? David C Sent from my LG G Pad 7.0 LTE, an AT&T 4G LTE tablet ------ Original message------From: ng0Date: Sun, May 29, 2016 12:36 PMTo: tor-relays@lists.torproject.org;Subject:Re: [tor-relays] I'm Running A Tor Exit But Never Initiated It On 2016-05-29(04:32:12+0000), krutt(a)anche.no wrote:> Hey there,>> This situation sounds really weird. Could you try running> sudo cat /var/lib/tor/fingerprint> on one of your Tor-machines? Then we can determine whether you are> really running an exit relay.>> As Arjen stated before, you can probably remove the Tor package with> sudo apt-get install torCorrection: apt-get remove tor> Best regards,> KRutt>> Percy Blakeney:> > There is NO ONE else in this house that uses my computers other than my 13> > year old daughter who plays Minecraft on hers. I have one Dell desktop> > that runs Linux Mint Rosa, however, sometimes when I turn it on a black> > screen appears with a message stating "VirtualBox restarting." Neither my> > child nor myself installed VirtualBox on the desktop. I also have an Acer> > laptop that runs Linux Mint Mate and a Lenovo that runs Windows 10. When I> > try to install the Tor browser on my Acer it tells me I already have it and> > it's running, however when I try to open it I'm told I don't have it. Yet> > my folders and files tell me otherwise. I have so much to get out that> > once again I'll apologize for my ADD responses.> >> > On Sun, May 29, 2016 at 11:23 AM, krutt(a)anche.no wrote:> >> >> Hey percy,> >>> >> I can't image a single reason why Tor should be configured to run a> >> relay without the system admins knowledge. Are there any other useres> >> with root access at those machines?> >> You could issue "(sudo) ls -al" on that folder to find out when the Tor> >> configs were created. Are there any other settings set in your torrc?> >>> >> I'm not quite sure but this could be a "good" crypto locker too.> >>> >> Best regards,> >> KRutt> >>> >> Percy Blakeney:> >>> According to files and folders I have on two separate computers in my> >>> house, I am running a Tor exit but I absolutely have nothing to do with> >>> it. I am only able to physically view certain files ie; var/log/tor,> >>> etc/tor/torrc, while other files like var /lib/tor/lock the content is> >>> invisible. I am MORE than willing to talk to anyone who may be able to> >>> help.--♥Ⓐ ng0 | http://www.n0.is/u/n4096R/13212A27975AF07677A29F7002A296150C201823_________… mailing listtor-relays@lists.torproject.orghttps://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

Fwd: Enable relay as trusted directory & entry guard
by Tim Wilson-Brown - teor 26 May '16

26 May '16

> Begin forwarded message: > > From: Austin Holiday <aholiday(a)yahoo.com> > Subject: Enable relay as trusted directory & entry guard > Date: 25 May 2016 at 23:24:42 GMT-3 > > Hi, > > I have the extra capacity/bandwidth would like to upgrade my relay to an entry node and directory server: > https://atlas.torproject.org/#details/1523C502A9754B6B42CCA5EB402A833CFF0E4… > > Is there anything I need to do? Hi, This question is best answered on the tor-relays list, I've cc'd the reply there. Your relay may be recommended as a "Guard" (entry node) by the directory authorities if it has enough stability and bandwidth over time. For more information, please read: https://blog.torproject.org/blog/lifecycle-of-a-new-relay Your relay is already a directory mirror, because you have configured a DirPort. Tim Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP 968F094B ricochet:ekmygaiu4rzgsk6n

1 0

Re: [tor-relays] VPS for Exits
by Neel Chauhan 25 May '16

25 May '16

> An exit node could be expensive ... Well, I'm still sticking with CoolHousing/Virtual Server Lite because I hardly ever get abuse complaints. For ITL, I may leave after my term expires. But a few other companies I found were: https://hostmaze.com/ https://www.lcsnet.eu/index.php https://serverastra.com/ https://blazingfast.io/ Thanks, Neel Chauhan https://www.neelc.org/

4 3

TOR router install without access to root
by Markus Koch 25 May '16

25 May '16

possible or do I have to ask my hosting company for the install on a shared server? Markus

9 17

Re: [tor-relays] VPS for Exits
by Neel Chauhan 23 May '16

23 May '16

>Do you know of a VPS for an exit? I have two exits on VPS servers. One is on ITL (https://itldc.com/) and the other one is on CoolHousing using their Virtual Server Lite brand (http://virtualniserverlite.cz/en/) My experience with both hosts has been very good. For the latter, you WILL need a Reduced Exit Policy, and have to remove IRC ports. I also previously had a VPS with Verelox (https://verelox.com/) when they had unlimited bandwidth, and they allow Tor exit nodes as well. I don't know about other providers, but a good place to ask for a Tor friendly VPS is vpsBoard (https://vpsboard.com/) -Neel Chauhan https://www.neelc.org/

4 3

New month, new TOR exit servers, need ELI5 pls
by Markus Koch 22 May '16

22 May '16

As I told you guys ITLDC.com kicked 3 of my exit servers last month. Just got 3 new ones, hosted by DigitalOcean, Hostwinds and soon virtualniserverlite. If things go wrong (and with my luck they will) how many and which ports do I have to forward to be useful as a exit node? eg: I get lots of abuse of port 22, can I close it and the TOR network will for itself find out that sending me ssh traffic is a bad idea? markus

4 7

Re: [tor-relays] New month, new TOR exit servers, need ELI5 pls
by Tristan 22 May '16

22 May '16

You can close port 22 by adding it to your exit policy. The syntax would be something like ExitPolicy reject *:22 You should put this towards the top of the exit policy rules so it isn't overridden by other rules. On May 22, 2016 8:34 AM, "Markus Koch" <niftybunny(a)googlemail.com> wrote: As I told you guys ITLDC.com kicked 3 of my exit servers last month. Just got 3 new ones, hosted by DigitalOcean, Hostwinds and soon virtualniserverlite. If things go wrong (and with my luck they will) how many and which ports do I have to forward to be useful as a exit node? eg: I get lots of abuse of port 22, can I close it and the TOR network will for itself find out that sending me ssh traffic is a bad idea? markus _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Port scanning via exit node
by ken＠kenbaker.co.uk 21 May '16

21 May '16

Hi Folks: I got an abuse complaint from my VPS host, because someone was using my exit node for port scanning. Here is the first bit of his (redacted) log. Attack detail : 4K scans dateTime srcIp:srcPort dstIp:dstPort protocol flags bytes reason 2016.05.14 17:13:47 CEST xxx.xxx.xxx.xxx:35008 xxx.xxx.xxx.xxx:22 TCP SYN 60 SCAN:SYN 2016.05.14 17:13:47 CEST xxx.xxx.xxx.xxx:46532 xxx.xxx.xxx.xxx:22 TCP SYN 60 SCAN:SYN 2016.05.14 17:13:47 CEST xxx.xxx.xxx.xxx:41718 xxx.xxx.xxx.xxx:22 TCP SYN 60 SCAN:SYN Hosting dude says he'd appreciate it if I could prevent this, but I'm not sure how. I'm afraid I don't have any logs - the VPS got reimaged. Suggestions how to prevent or mitigate this are welcome. Cheers, K.

3 3

tips-running-exit-node-minimal-harassment
by pa011 21 May '16

21 May '16

This page https://blog.torproject.org/blog/tips-running-exit-node-minimal-harassment cant be found at the moment - anybody holding a copy of it please? There is something similar 6 years old: https://www.facebook.com/notes/tor-project/tips-for-running-an-exit-node-wi… Is this still state of the art? Thanks Paul

2 1

Re: [tor-relays] VPS for Exits
by Neel Chauhan 21 May '16

21 May '16

> I contacted ITL (https://itldc.com/) as well two weeks ago. To me they > refused opening an exit: "We decide to do not allow new public tor > exit > nodes in our network. Existing public tor exit nodes we be kept." Well that's unfortunate. I guess I'll have to hold on to my VPS for a long time. No wonder why someone on this mailing list had trouble with ITL earlier this month. They no longer want exit nodes. -Neel Chauhan https://www.neelc.org/

1 0

Tip: Cheap fast dedicated servers for exit relays
by fatal 21 May '16

21 May '16

Ahoy! they are not in chiapas, they don't have a classy AS and (mostly) no esoteric operating systems. But they are cheap, fast and can be run as exit relays: the budget servers from Oneprovider (http://oneprovider.com/dedicated-servers/budget-servers) Oneprovider resells dedicated servers around the world and they handle all the 'sale' servers from online.net. Following the good/bad isp wiki page Online.net themself don't allow tor relays for quite some time. But oneprovider is "vpn friendly" (email from sales person) and I'm running a couple of exit relays with them for a couple of months. The abuse handling varies and depends on the provider they are reselling from. With the online.net servers I get one abuse mail every (!) monday for every server which states something about stopforumspam. I log in to the managment panel and reply that I'm running a tor server and can do nothing about this because stopforumspam doesn't provide more information and they close the ticket. That's it, never got any other abuse mails (running a reduced exit policy). The VIA Nano U2250 powered dedicated servers (Paris) cost 7€ a month (no setup fee, no ipmi, unlimited transfer) throughput max. is 82 Mbit/s in and out (throughput limit is the cpu, 1 core, no aes-ni, with iptables as in the arch wiki) with linux and max. 74 Mbit/s with freebsd (no pf, libressl, with openssl it's sightly faster¹). The Intel Atom C2350 powered dedicated servers (Paris and Amsterdam) cost 15€ a month (ipmi but no custom iso mount, only linux and windows are offered², unlimited transfer) and pushes ~180 Mbit/s in each direction with one tor instance (linux, stateles iptables and kernel tweaks for 100mbit+ relays from arch wiki and torservers.net, grsecurity kernel). The CPU (2 cores, aes-ni) isn't fully utilised so there is room for another tor instance (I'll move one of my relays there for testing when one of my VIA Nano contracts expire). Running more of these dedicated servers won't help making the tor network 'better' as in diversity (et al.) bus as in citius, altius, fortius. So if you would like to have a new, cheap, fast and easy to care mainstream (exit-)relay: go for it \o/ ¹ I'm no BSD expert and am wondering why stateless pf uses so 'much' more cpu power than statess iptables. Maybe someone can enlighten me :) ² Which I really feel sad about, I was hopeing for beeing the one with the fastest openbsd exit relay in the world - and that for 15 € a month ;)

3 3

What's this Abuse
by Dr Gerard Bulger 20 May '16

20 May '16

My ISP got a weird Abuse notice with no details. Just said stop. Stop what? When we asked what the "abuse" was they sent a 1mb.gz snapshop of their log files. There were a few references to my IP, but I have no idea what was seen as abuse: Can anyone tell me what they are fussed about? I like to respond in a robust manner. My IP is 5.77.47.142 184.151.178.22 - - [16/May/2016:15:19:40 -0400] "GET /product_imgs/small/R-F35T5-832.jpg HTTP/1.1" 200 23822 "http://www.liteline.com/ALFT5-35-4100-3" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36" 184.151.178.22 - - [16/May/2016:15:19:40 -0400] "GET /product_imgs/small/R-FBT6124-WH-3.jpg HTTP/1.1" 200 23103 "http://www.liteline.com/ALFT5-35-4100-3" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/ HTTP/1.1" 200 1079 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/css/admin_styles.css HTTP/1.1" 200 1892 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/images/Liteline_logo_horizontal.png HTTP/1.1" 200 2610 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/images/px_bgrnd.png HTTP/1.1" 200 3738 "http://www.liteline.com/admin/css/admin_styles.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:42 -0400] "GET /favicon.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 209.29.237.34 - - [16/May/2016:15:19:42 -0400] "GET / HTTP/1.1" 200 7949 "-" "Mozilla/5.0 (iPad; CPU OS 9_2_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13D15 Safari/601.1" 209.29.237.34 - - [16/May/2016:15:19:42 -0400] "GET /styles2.css HTTP/1.1" 200 11384 "http://www.liteline.com/" "Mozilla/5.0 (iPad; CPU OS 9_2_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13D15 Safari/601.1" 209.29.237.34 - - [16/May/2016:15:19:43 -0400] "GET /prettyPhoto.css HTTP/1.1" 200 2769 "http://www.liteline.com/" "Mozilla/5.0 (iPad; CPU OS 9_2_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13D15 Safari/601.1" 209.29.237.34 - - [16/May/2016:15:19:43 -0400] "GET /js/functions.js HTTP/1.1" 200 9264 "http://www.liteline.com/" "Mozilla/5.0 (iPad; CPU OS 9_2_1 like Mac OS X) 6.1; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0" 5.77.47.142 - - [16/May/2016:15:19:56 -0400] "POST /admin/ HTTP/1.1" 302 1079 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:56 -0400] "GET /admin/admin.php HTTP/1.1" 200 1029 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 184.151.179.73 - - [16/May/2016:15:19:56 -0400] "GET /Lighting/Recessed/4-in/4-in-Trims/page/2 HTTP/1.1" 200 4961 "http://www.liteline.com/Lighting/Recessed/4-in/4-in-Trims/page/1" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" 184.151.179.73 - - [16/May/2016:15:19:56 -0400] "GET /styles2.css HTTP/1.1" 200 11384 "http://www.liteline.com/Lighting/Recessed/4-in/4-in-Trims/page/2" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" "http://www.liteline.com/Lighting/Recessed/4-in/4-in-Trims/page/2" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" 5.77.47.142 - - [16/May/2016:15:19:57 -0400] "GET /admin/css/admin_styles.css HTTP/1.1" 200 1892 "http://www.liteline.com/admin/admin.php" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:57 -0400] "GET /admin/images/rt_arrow.png HTTP/1.1" 200 554 "http://www.liteline.com/admin/css/admin_styles.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 216.123.172.226 - - [16/May/2016: 5.77.47.142 - - [16/May/2016:15:20:03 -0400] "GET /admin/admin.php?admin_add_product HTTP/1.1" 200 1271 "http://www.liteline.com/admin/admin.php" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:20:03 -0400] "GET /admin/css/admin_styles.css HTTP/1.1" 200 1892 "http://www.liteline.com/admin/admin.php?admin_add_product" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" HTTP/1.1" 200 9264 "http://www.liteline.com/ATF7630" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0" 5.77.47.142 - - [16/May/2016:15:20:18 -0400] "GET /admin/ HTTP/1.1" 302 1079 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:20:19 -0400] "GET /admin/admin.php HTTP/1.1" 200 1029 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:20:19 -0400] "GET /admin/css/admin_styles.css HTTP/1.1" 200 1892 "http://www.liteline.com/admin/admin.php" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 184.151.179.73 - - [16/May/2016:15:20:20 -0400] "GET. 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/images/Liteline_logo_horizontal.png HTTP/1.1" 200 2610 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/images/px_bgrnd.png HTTP/1.1" 200 3738 "http://www.liteline.com/admin/css/admin_styles.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:42 -0400] "GET /favicon.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 209.29.237.34 - - [16/May/2016:15:19:42 -0400]

7 13

VPS for Exits
by Tristan 20 May '16

20 May '16

Hostwinds is a pretty good US-based VPS. The price is good, and you get 10TB of bandwidth to start with. On May 20, 2016 6:03 PM, "I" <beatthebastards(a)inbox.com> wrote: Do you know of a VPS for an exit? Robert _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

Handling possible abuse requests
by pa011 19 May '16

19 May '16

I am running some pretty good developing relays which I would like to change into exit-nodes over time. As I have no experience how to handle possible abuses I would need some help please? Is there anybody out there who can give me some advice, or even help me doing (answering) these? How many of those abuses are to expect? How to avoid on changing what parameters? Any hints highly appreciated. PA

6 8

Re: [tor-relays] Handling possible abuse requests
by Tristan 19 May '16

19 May '16

I only ever received 1 abuse complaint over a 2-month period. I apologize for the inconvenience and explained that I would block the abused IP range. The abuse report was generated by Webiron, and they had a guide for Tor operators. I imagine other problems can be similarly solved. As others have said, a reduced exit policy will decrease your chances of getting complaints.

1 0

tor buddy is not checking
by himam.himam＠yandex.com 18 May '16

18 May '16

./tor-buddy.sh Tor-Buddy by AfterBurn @ NetSecNow http://learnnetsec.blogspot.com/ To stop script press CTRL+C Checking if Tor is installed... Tor is Installed! Starting Tor :-) /etc/init.d/tor: line 140: ulimit: open files: cannot modify limit: Operation not permitted * Checking if tor configuration is valid

2 1

What are the v1, v2, v3, v4 connections?
by William Denton 17 May '16

17 May '16

"Since startup, we have initiated 0 v1 connections, 1 v2 connections, 0 v3 connections, and 12345 v4 connections." What are these different types of connections? I can't find them in the docs, so I assume I'm not looking in the right place. (And what does it mean that the 1 v2 connection sneaked in?) Bill -- William Denton Toronto, Canada <https://www.miskatonic.org/>

2 1

Confirmed, Mexico largest ISP blocking TOR dir authority nodes
by Ricardo Malagon Jerez 15 May '16

15 May '16

Months of support calls to Telmex and now they are telling me that they are blocking the dir authority nodes because SPAM. Lame excuse, because they don't touch exit nodes. Just making hard to setup a TOR relay in Mexico. We have 6 relays in a country of 100 million inhabitants.

1 0

Tor Stats
by Dr Gerard Bulger 15 May '16

15 May '16

Tor Atlas and https://torstatus.blutmagie.de does not report any activity in graphs for my Tor exit. This data has been missing for some days now. Says online. Not stable yet as I keep it rebooting my new server once a day for 30 mins as checking if there are any errors. Which leads to another question. Is /etc/tor/torrc read on the fly? That is editing torrc will change the server on writing the file, or does it need tor restart with each edit. I had assumed the latter. I am not sure where or how this data collected for the pretty graphs. My server seems busy with many gigs in and out on tor ports and its own IP address according to various iptraffic tools I run on the server, but no data on those graphs at Atlas and elsewhere. Tor 0.2.7.6 on Ubuntu Linux on a VPS. Is this just me and something wrong with torrc ? or a more general problem? Gerry

5 5

Problems with firewall rules - SOLVED
by ludo0565＠dbmail.com 15 May '16

15 May '16

Hello everyone, And great thanks to Moritz Bartl as well as to Petrusko for their replies to help request (05/08/2016 11:06 PM). I needed some time first to implement, then to correct, but after getting there, and waiting for some positive test results (atlas and globe), I can now say : my problem is solved! My relay is working! Cheers! ludo0565

2 1

Re: [tor-relays] Tor Stats
by Dr Gerard Bulger 15 May '16

15 May '16

Really no relay has 3 day 1 week graphs? My exit node had them, then on the 10th read write fell to zero and plotted along the bottom. My server seemed OK and monthly graph seems OK, so perhaps the atlas error was graphing it in the first place. Just now graphs are back on https://torstatus.blutmagie.de So no longer worried ThanksSent from Samsung tablet -------- Original message -------- From: Josef Stautner <hello(a)veloc1ty.de> Date: 15/05/2016 12:23 (GMT+00:00) To: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] Tor Stats Am 15.05.2016 um 13:14 schrieb Dr Gerard Bulger: > Tor Atlas and https://torstatus.blutmagie.de does not report any activity > in graphs for my Tor exit. This data has been missing for some days now. > Says online. Not stable yet as I keep it rebooting my new server once a day > for 30 mins as checking if there are any errors. Which leads to another > question. Is /etc/tor/torrc read on the fly? That is editing torrc will > change the server on writing the file, or does it need tor restart with each > edit. I had assumed the latter. > > I am not sure where or how this data collected for the pretty graphs. My > server seems busy with many gigs in and out on tor ports and its own IP > address according to various iptraffic tools I run on the server, but no > data on those graphs at Atlas and elsewhere. > > Tor 0.2.7.6 on Ubuntu Linux on a VPS. > > Is this just me and something wrong with torrc ? or a more general > problem? > > Gerry > > > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > Hi Gerry, the "3 day" and "1 week" graph on Atlas are disabled. No relays has them. Did you mean that? ~Josef _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Tor authorities blocked by Cisco Senderbase
by Zwiebel 12 May '16

12 May '16

Hello, I operate three Tor relays on my university's network. All http traffic on that network goes through a transparent proxy which uses the Cisco Senderbase blacklist. I've recently noticed log messages that my relays can't connect to some Tor authorities. Seems like Cisco blacklists the following authorities for serving malware: dizum, tor26, maatuska, urras I've contacted them about this via [1] and explained that these hosts are most likely not malicious and got a replay via e-mail saying that they will remain blacklisted. - Zwiebel [1] http://www.senderbase.org/support/#problem=other

3 2

Mail.ru abuse
by Javantea 12 May '16

12 May '16

Hello, I run an exit node and everything has been going fine. I've recently gotten 3 automated abuse e-mails from mail.ru which say that my node has sent spam over HTTP (silly, I know). I expect that they will continue to e-mail me since they give me no way to block their servers. I wouldn't give it a second thought if my host wasn't forced to relay and occasionally read these e-mails, wasting their time. It is ripe with irony that automated spam reports would become spam itself. Mail.ru own so many blocks that I can't hope to block all of them without spending a lot of time producing a list. Has someone else produced such a list? Should I just continue ignoring these or has someone figured out a different solution? Since I've only received a dozen or so abuse e-mails from all sources, I have been treating them on a case-by-case basis blacklisting any that provide me with a cidr to block that they appear to own (8 blocks so far over 2-3 years). I balance my blocks with the fact that the more of the net we block out of convenience, the more likely someone using tor will be deanonymized -- if we all block mail.ru, a rogue exit node can pick up traffic to mail.ru much more easily than anywhere else. This is more true about SMTP, CIFS, BitTorrent, and other ports, but I haven't found a suitable solution for that problem. One of the e-mails is copied below. Regards, Javantea >From fblbounces(a)senderscore.net Thu May 12 10:43:32 2016 Return-Path: <fblbounces(a)senderscore.net> X-Original-To: report(a)abuse.he.net Delivered-To: report(a)abuse.he.net Received: from he.net (he.net [216.218.186.2]) by abuse.he.net (Postfix) with SMTP id B811D54012B for <report(a)abuse.he.net>; Thu, 12 May 2016 10:43:32 -0700 (PDT) Received: from mrb-fbl.returnpath.net ([66.45.29.179]) by he.net for <abuse(a)he.net>; Thu, 12 May 2016 10:43:46 -0700 Received: from poma02.lan.returnpath.net (poma02.lan.returnpath.net [10.2.0.110]) by mrb-fbl.returnpath.net (Postfix) with ESMTP id 2620561D5F for <abuse(a)he.net>; Thu, 12 May 2016 11:43:30 -0600 (MDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=senderscore.net; s=081107; t=1463075010; i=(a)senderscore.net; bh=q0FgMC02Auq80BHhhbqMTz43Lc55mfe175+So8F2/T4=; h=Date:Subject:To:From; b=yTsgoOykxJDv15EnLPDQYwuv9epiFm7PjelQ+3Gsam6kGCR3ar+3i1woxyWZkpE4b OoAyrWUvPo7VO9r8tFds8Da9nJU97hDm4QxO+mHCtOSxNBTE1P7PmwrUL4Lw23CxJg 5NzY7CfVgtywvj2M/Qn1SzWxasmHP62KIdIQFgIo= Received: by poma02.lan.returnpath.net (Postfix, from userid 106706) id 23CD5602D9; Thu, 12 May 2016 11:43:30 -0600 (MDT) Content-Type: multipart/report; boundary="_----------=_146307501015312125"; report-type="feedback-report" MIME-Version: 1.0 X-Mailer: MIME::Lite 3.029 (F2.84; T2.04; A2.12; B3.13; Q3.13) Date: Thu, 12 May 2016 11:43:30 -0600 Subject: Mail.ru Abuse Report To: abuse(a)he.net From: feedbackloop(a)mailru.senderscore.net Message-Id: <20160512174330.23CD5602D9(a)poma02.lan.returnpath.net> Content-Transfer-Encoding: 7bit This is a multi-part message in MIME format. --_----------=_146307501015312125 Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Type: text/plain This is a Mail.ru email abuse report for an email message received from IP 216.218.134.12 on Fri, 29 Apr 2016 11:59:18 +0000 --_----------=_146307501015312125 Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Type: message/feedback-report User-Agent: ReturnPathFBL/1.0 Abuse-Type: complaint Arrival-Date: Fri, 29 Apr 2016 11:59:18 +0000 Feedback-Type: abuse Version: 1 Source-IP: 216.218.134.12 Original-Rcpt-To: 5f6e6b0a23986cf15d2db9c7c97927b9(a)inbox.ru Original-Mail-From: oofaakuu45(a)mail.ru Reported-Domain: inbox.ru --_----------=_146307501015312125 Content-Disposition: inline Content-Type: message/rfc822 Content-Transfer-Encoding: 7bit Delivered-To: ***** Return-path: <oofaakuu45(a)mail.ru> Received: from [216.218.134.12] (ident=mail) by f158.i.mail.ru with local (envelope-from <oofaakuu45(a)mail.ru>) id 1aw74o-0000CW-7q; Fri, 29 Apr 2016 14:59:18 +0300 Received: from [216.218.134.12] by e.mail.ru with HTTP; Fri, 29 Apr 2016 14:59:18 +0300 From: =?UTF-8?B?0J7Qu9GM0LPQsCA=?= =?UTF-8?B?0J/Qu9GP0YHQvtCy0YHQutCw0Y8=?= <oofaakuu45(a)mail.ru> Subject: =?UTF-8?B?0JTQvtCx0YDRi9C5IA==?= =?UTF-8?B?0LTQtdC90Yw=?= MIME-Version: 1.0 X-Mailer: Mail.Ru Mailer 1.0 X-Originating-IP: [216.218.134.12] Date: Fri, 29 Apr 2016 14:59:18 +0300 Reply-To: =?UTF-8?B?0J7Qu9GM0LPQsCA=?= =?UTF-8?B?0J/Qu9GP0YHQvtCy0YHQutCw0Y8=?= <oofaakuu45(a)mail.ru> X-Priority: 3 (Normal) Message-ID: <1461931158.311272620(a)f158.i.mail.ru> X-Mras: OK X-Spam: undefined Content-Type: multipart/alternative; boundary="--ALT--d472ac373705efd312fbf64724626ab61461931158" To: 5f6e6b0a23986cf15d2db9c7c97927b9(a)inbox.ru ----ALT--d472ac373705efd312fbf64724626ab61461931158 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 IM6f0J3Qm9CQ0JnQnS3Qms6R0JfQmM6X0J4t0J/QoNCYzpPQm86R0KjOkc6V0KIt0J/QntCYzpPO oc6R0KLQrC3Ol86RLdCUzpXOl9CszpPQmArOl86f0JLQq9CcLdCYzpPOoc6f0JrQkM6cLdCRzp/Q nc6l0KEt0JTQni3QotCr0KHQr9Cn0Jgt0JTOn9Cb0JvQkM6h0J7OkgrQks6nzp/QlC3OoM6fLdCh 0KHQq9CbzprQlQo= ----ALT--d472ac373705efd312fbf64724626ab61461931158 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 CjxIVE1MPjxCT0RZPs6f0J3Qm9CQ0JnQnS3Qms6R0JfQmM6X0J4t0J/QoNCYzpPQm86R0KjOkc6V 0KIt0J/QntCYzpPOoc6R0KLQrC3Ol86RLdCUzpXOl9CszpPQmDxwPjwvcD7Ol86f0JLQq9CcLdCY zpPOoc6f0JrQkM6cLdCRzp/Qnc6l0KEt0JTQni3QotCr0KHQr9Cn0Jgt0JTOn9Cb0JvQkM6h0J7O kjxwPjwvcD7Qks6nzp/QlC3OoM6fLdCh0KHQq9CbzprQlTxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxpbnB1dCBzaXplPTMwIHZhbHVlPSJodHQKcDovL3Rp bgp5dXJsCi5jCm9tL2dycmhjdnIiPjwvQk9EWT48L0hUTUw+Cg== ----ALT--d472ac373705efd312fbf64724626ab61461931158-- --_----------=_146307501015312125--

4 3

Problems with firewall rules
by ludo0565＠dbmail.com 09 May '16

09 May '16

Hello everyone, I am new to this forum - so just very quickly, this about me : I have been a GNU-Linux-Debian user since 2005. I now use Debian 7/wheezy with TBB in its latest version. The reason that makes me get in touch with you is that I am pretty desperate and I hope somebody can help me. (As my problem is most probably connected to my telephone and internet service provider in France, it might be that somebody from France reading these lines could be more likely to help me). Until last November I was using a DartyBox. With that, everything worked all right. As I have been a user of TBB for quite some time, I wished to set up a relay on my computer, and, as Nicolas (previously from help-fr) advised me, I installed the tor package from Debian, had it configured, and my tor relay obviously worked. Then my previous telephone and internet service provider DartyBox wanted to get rid of its clients, and I subscribed to become a customer of BouyguesBox. Unfortunately whereas I haven't changed anything to the configuration of my computer, my tor relay doesn't work any more! As other programs seem no longer to function (e.g. ekiga, jitsi-meet through chromium), I suspect that there is a problem with the settings of the firewall on the BouyguesBox that will not allow the relay to get in touch with the outside world...? When "the firewall contains no rule", "as a standard settings the box blocks all unwanted traffic", says the BouguesBox. However that's also what the DartyBox said in the past, but that one did let through enough traffic in order for me to be able to take part in a Jitsi.meet conference ! So I don't really understand what is missing or lacking with the present BouyguesBox. Does anyone among those of you based in France think that they could make any suggestions as to how I could solve this problem? Especially which configuration of the firewall I should try and how to design, i.e. right, the rules governing the firewall. Thank you very much in advance for your support. ludo0565

3 2

68 new exits (50 running)
by nusenu 08 May '16

08 May '16

https://gist.githubusercontent.com/nusenu/0c8ec0852a07b41edfd74b1cfbe83ded/… I expect them to be run by a single entity. People with exit scanners might want to keep an eye on them.

9 13

Cannot Access Tor
by Ravi Nimsons 08 May '16

08 May '16

Hi I have tried everything possible following information on all the forums available and am frustrated as I cannot access Tor. Whenever I try to initiate Tor, I can see the processes running firefox.exe for Tor Browser and tor.exe but I do not get the initial pop-up dialog to connect to Tor. I have Norton Internet Security and have even deleted and reinstalled the “trusted” programs for the firewall to allow access to. Please help. Thank you

2 1

Search warrant and house search because of an exit in DE
by spriver 05 May '16

05 May '16

Hi, earlier today (this morning) German police officials (I live in Germany) came to my flat and searched my rooms. The official accuse was because of me being suspected to fraud (about 400€ of eBooks were purchased and not payed via my exit relay on 2015-11-02 (data is available that my relay was up at the time on exonerator and collector)). USB sticks and my notebook were taken as evidence. I was being asked (I don't have to do that) to unlock my notebook in front of officials and do a file search that the files are not present and to tell them (and bring evidence) that the corresponding IP address was a Tor relay at the time at the phone later today. Of course I do not have those eBooks on my notebook and the data showing that my relay was up is available. What should I do now? Cheers!

12 19

OpenSSL Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)
by Dhalgren Tor 04 May '16

04 May '16

https://www.openssl.org/news/secadv/20160503.txt In general I understand that padding oracle attacks are principally a hazard for browser communications. Am assuming that updating OpenSSL for this fix is not an urgent priority for a Tor Relay. If anyone knows different please comment.

2 1