- tor-relays - lists.torproject.org

New tor relay, some questions
by Tobias Markus 17 Mar '14

17 Mar '14

Hi, I've been running a new tor relay for about a week now and I've got some questions. 1) I plan on running other services than tor on my server, including a (private) mail system. Other than the general possibility of tor having security holes and my server (and its IP address) being public and thus possibly target of attacks, are there security implications I should consider? 2) I would be interested to eventually run a directory/bandwith authority, so I read about them in [1] and [2], but the places seemed a bit odd (hidserv-perf branch in tor svn/torflow repo) so I thought I better ask here: Would I really just have to follow the steps in [1] to become a dirauth? Is there currently a need for auths, would contribution be welcomed? Thanks for your answers! Regards Tobias [1] https://svn.torproject.org/svn/tor/branches/hidserv-perf/doc/v3-authority-h… [2] https://gitweb.torproject.org/torflow.git/blob/HEAD:/NetworkScanners/BwAuth…

6 10

Re: [tor-relays] Setting up Tor Bridge
by Sebastian Urbach 17 Mar '14

17 Mar '14

Hi, First things first. 0.2.2 is quite old, you should consider 0.2.4 if possible. Next thing is that you have multiple SocksPort entries in your torrc. You just need one, remove the others. Is it just ServerTransportPlugin without any further specification ? On March 17, 2014 7:02:30 PM Eric Giannini <eric.giannini(a)yahoo.com> wrote: > Hi I would like to set up a Tor Bridge but I have run into a few problems. > Can anyone give me a few recommendations on what to do? Raising maximum > number of filedescriptors (ulimit -n) to 32768. > Starting tor daemon: tor... > ABORTED: Tor configuration invalid: > Mar 17 10:56:35.546 [notice] Tor v0.2.2.35 (git-73ff13ab3cc9570d). This is > experimental software. Do not rely on it for strong anonymity. (Running on > Linux i686) > Mar 17 10:56:35.548 [warn] Option 'SocksPort' used more than once; all but > the last value will be ignored. > Mar 17 10:56:35.548 [warn] Failed to parse/validate config: Unknown option > 'ServerTransportPlugin'. Failing. > Mar 17 10:56:35.548 [err] Reading config failed--see warnings above. > > > > > ________________________________ > От: Tobias Markus <tobias(a)markus-regensburg.de> > Кому: Sebastian Urbach <sebastian(a)urbach.org> Копия: > tor-relays(a)lists.torproject.org Отправлено: понедельник, 17 марта 2014 10:37 > Тема: Re: [tor-relays] New tor relay, some questions > > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi Sebastian, > > now that you say it -- yes, it seems we both choose the same quote :D > (Really, I didn't copy you. I've read it somewhere else a while ago > and adopted it because I liked it. But really, you didn't read > hundreds of quote books just to suddenly stumble on Franklin's quote, > did you?) > > But another thing: Do you still need participating relays for TTTT? > > Tobias > > Am 17.03.2014 16:24, schrieb Sebastian Urbach: > > Hi, > > Great that it finally worked out, welcome to thd > > brother/sisterhood. And btw. what are you doing with my mail > > signature ? That seems to be the more important issue to me ;-))) > > > Hi, > > just wanted to inform you that I could resolve the issue simply by > deleting the tor data folder (thus getting a new fingerprint). > > PS: I actually replied to Bryan, but forgot to CC tor-relays. Sadly > > I can't find the message anymore, otherwise I would have resent > > it. > > On 03/13/2014 11:08 PM, Tobias Markus wrote: > >> Hi, sorry for replying rather late! In response to 1): Thinking > >> about it, I think the main (possible) problem is that my MTA is > >> rejected by SMTP servers it connects to because of a Tor > >> blacklist. Is this probable? Has someone got experience running a > >> complete mail system and a (public) Tor relay on the same > >> host/IP? About 2): That is indeed very unfortunate, but at the > >> same time a reason to start contributing to Tor! (Sadly, I am > >> presently occupied by various other projects, but I think Tor is > >> definitely worth a 'visit'.) Now about something else. I recently > >> had to restart my server for unrelated reasons. (The relay had > >> the Guard and Stable flag at that time.) I sadly forgot to add > >> the Tor service to the default runlevel, so it was not started at > >> boot time. I went to bed thinking everything was OK and was only > >> able to start Tor about 12 hours later. Unfortunately, my relay > >> got no flags since then -- not even "Running"! The Tor consensus > >> website confirms this: Three Auths voted for all previous/normal > >> flags except Guard, the others only for Valid and V2Dir leading > >> to my relay getting no flags! I cannot really explain this to myself. > What is going on here? Tobias On Sun, Mar 02, 2014 at > >> 07:32:17PM +0100, Moritz Bartl wrote: > >>> On 03/02/2014 04:06 PM, Tobias Markus wrote: > >>>> I've been running a new tor relay for about a week now > >>> Great. Thank you! > >>> >>>> 1) I plan on running other services than tor on my server, > >>>> including a (private) mail system. Other than the general > >>>> possibility of tor having security holes and my server (and > >>>> its IP address) being public and thus possibly target of > >>>> attacks, are there security implications I should consider? > >>> Unfortunately, many sites block Tor relay IPs regardless of > >>> their exit policy. So, if you share one IP between the relay > >>> and other services, your might be impacted. This is especially > >>> true for exit relays. > >>> >>>> 2) I would be interested to eventually run a > >>>> directory/bandwith authority, so I read about them in [1] and > >>>> [2], but the places seemed a bit odd (hidserv-perf branch in > >>>> tor svn/torflow repo) so I thought I better ask here: Would I > >>>> really just have to follow the steps in [1] to become a > >>>> dirauth? Is there currently a need for auths, would contribution be > welcomed? > >>> The offer is well appreciated. In the current design, > >>> directory authorities and bandwidth authorities play a very > >>> special role. There are several ideas on how to improve the > >>> situation and then open participation to the broader community, > >>> but for the time being, authorities can only be run by people > >>> very close to the core dev team. > > - -- Tobias Markus > > "They who would give up essential Liberty, to purchase a little > temporary Safety, deserve neither Liberty nor Safety." > -- Benjamin Franklin (1706-1790) > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.20 (MingW32) > > iEYEARECAAYFAlMnMtoACgkQAO6N0EYmC9a66QCfSE+zXecw9aFJpOx7NNwnBnhZ > imoAn0rbxsbu+NeiiJnxz82TUFe3vlWg > =ZBIk > -----END PGP SIGNATURE----- > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

log: DNS servers not contactable (but only for a few seconds)
by Zenaan Harkness 17 Mar '14

17 Mar '14

Notwithstanding the short DNS outage as shown in the logs, I added a couple of extra Australian DNS servers to resolv.conf since previously I only had the primary and secondary DNS servers as assigned by the ISP. Just wondering if there's anything else I should do to increase robustness on this front. TIA Zenaan

2 1

tip: when running relay in domestic situation, have server be DHCP dependency
by Zenaan Harkness 16 Mar '14

16 Mar '14

Otherwise, others in the household might turn off everything to save power, and have no idea that this effects their local Free Speech Server (TM) (C) (R). If stopping the server from connecting to the modem, or powering down the server, stops all internet access, local fauna quickly notice said loss of internet access and appeal with relative urgency to the local Free Speech Server Guru. Disconnection problems rapidly reduce in frequency. Sincere apologies in hindsight to all anonymous clients to gracemissionstor, which went down again this evening due to a depressingly monotonously similar reason to the last few times. But Good News: a report came, via txt message, rapidly followed by personal phone support personnel (said internet users), whom, and who would have thought it, said "urgent: our internet connection is down" Wonder of wonders, awareness can be raised. :) Oh happy days! I get multiple personal contacts in almost real time, from on-site specialists no less (and with direct personal knowledge of the problem at hand), when our wholesome Free Speech Server Services stop working! You'd find it hard to find such service even if paid for :) TECH Notes: Put ADSL modem into bridge mode. Run pppoe (or as appropriate) client on server. Configure NAT, dhcpd and dnsd on server. Test all these services work after a reboot. For bonus points, install upnpd server. Prophet (for the Guru).

1 0

IPV6 exit
by tor＠afo-tm.org 15 Mar '14

15 Mar '14

Hello, i run some exits they have IPV4 and IPV6 i did bind OR port to IPV4 and IPV6 which works good. I can connect to them using IPV6 but i can't exit to IPV6 destinations. I did set IPv6Exit 1 in torrc but it's not possible to exit to a ipV6 destination. Did i miss something? what else to do to be able to connect via tor to ipv6? Thanks for help

1 1

Are zealous connections to directory port common?
by Tora Tora Tora 14 Mar '14

14 Mar '14

I just recently allowed the directory ports of my relay to be listed and noticed that some IPs are a bit overzealous in connecting to the directory port. As in 108 connections within a minute zealous. Is this unusual?

5 10

Tor plugin for Nagios - Alpha release
by ramo＠goodvikings.com 11 Mar '14

11 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hiya List As I mentioned a few weeks ago, I am developing a tor plugin for nagios. Well, today, the first alpha release is out, available at https://github.com/goodvikings/tor_nagios/tree/v0.01 . Currently it supports 6 different checks: 1 - A page fetch through the socks proxy port 2 - Hibernation state 3 - Current bandwidth 4 - OR port reachability 5 - DIR port reachability 6 - Bytes remaining until hibernation If you're interested please give it a go, feedback is more than welcome. Additionally, if you want to see any additional checks implemented, give us a yell. Cheers Ramo -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) iQEcBAEBAgAGBQJTH7neAAoJEAXQWoW8lug/ws8H/RxVSKi3Ft8Lr/a3DKi+JMIC HNpOWrGbJEY3RWaJAx/H2L32KC5lE1mJbHm7BI3H1JTmdGkXmkFkyM4pou2/XQg6 DfJO+Zd7LGuJlIzqED3fyH7jB+SA4Syu+eOD710kYF4zQKBmsOy/qqW7R6Ymgq8Q 88JUUuYveAWIDgqir8WwBe8SqJsIWriVd5bObzzB5GZXiZarfMG6dw/kmJicZgyG QUOrddU/9ndrO7B3PCM8JmlB9xHMMuH97up9jS0/kIQFDUiejN/NM62AyDApd+Ef 5jqG8+E6wYWli3mlsc0d3ge4Wix0HPLhllHMxsxrTK3A3quveyVT7pZiO7t1Yas= =awZI -----END PGP SIGNATURE-----

1 0

Ask Me Anything on Reddit about Tor
by Jesse Victors 11 Mar '14

11 Mar '14

I recently held an Ask Me Anything on Reddit about Tor. For those that don't know, Reddit is famous for its AMAs, wherein someone unique or otherwise interesting will introduce themselves and then the community gets a chance to ask questions and learn. Traditionally it's been used as an excellent way of asking the questions that you never get an opportunity to ask. We've seen everyone from Chris Hadfield to Barack Obama give AMAs. Since I run some relays and a couple of exits I figured I'd give it a shot, and there was quite the turnout! I got responses from all over the world, and I strongly feel that it was a very educational moment for everyone. The main thread was voted on by about a thousand people, but many Redditors don't log on so I'd say that many thousands of people read it. The thread is still ongoing and I'll continue to answer questions as they arrive, but I figured that I'd share it with everyone since it's winding down. Pretty cool news moment for Tor, and should help clear up some misconceptions and correct public perceptions. https://pay.reddit.com/r/IAmA/comments/20243q/iaman_operator_of_eight_tor_r… Thanks guys. Jesse V.

2 1

Re: [tor-relays] Is Kaspersky right to be concerned?
by grarpamp 10 Mar '14

10 Mar '14

> [oh the bad..., re: ] > http://cryptome.org/2013/09/tor-analysis-hidden-services.pdf Do you seriously think that reporters, aid workers, freedom fighters, investigators, whistleblowers, and simple chatfriends, etc are going to publish their onions for all to see, with all their data and logs and so on as some kind of stage show for you? The answere to that is no. They have better good and private things to do that do not concern you until it hits the AP wire. So of course all you're goin to see on the public onions are a bunch of channers, criminals, crazy loons and a growing scattering of real projects and clearnet multihomes. Unlike clearnet, any statistic over the onions you can see is simply not going to be representative of the whole of onionspace, quite a bit of which you cannot see. You need to both understand and come to terms with that. Lest you too could not use anonymous systems when you needed them because some other thoughtless crybaby banned them and your ability to communicate freely and securely out from under you. ps: please drop relays and take this tired subject to tor-talk.

1 0

botnets run on Tor
by I 10 Mar '14

10 Mar '14

8 9

Gigabit is powerful
by Felix 07 Mar '14

07 Mar '14

High speeders Strong relays are a powerful contribution. As long as they are robust to resist misuse by attackers. Last night I received around 250.000 circuits per 5 minutes over one hour on a 100Mbit relay. In case the relay would forward this it could harm someone who is not prepared. And I would be a part of the sender chain. Felix ==========---------- - - - - - - - - - - ----------========== -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2.0.22 (MingW32) mQENBFL/5VoBCAC8l2gGmuy2hZf866dDkwzOvMkyJlfnFZU6T5LWe4uPIx0a8R1U cmj/Vut2yUCaJgvFpdOVA3mmXC58zoDeiW7Um6q6otD6BR2hXdgyBTAgqkQ0BsYx epb4UXBz/u3TJmv655fBnXeDgCB8L5BIkcsmX6EoBNUs6a3TPMhX3UXOtEKLXJeZ 2QtoDxwXqHNSmW7jLq+qkpriVDqxDTFv+muZRE+Zn/6PZpEASvpSdVdT/1giEMUL QQFIP6cBPY2GYIaNCO1dYRj9ebM7ewWjCiOiOw6/eylxan8vfFntgaPU3J7W2wJp RiRtUIjT+TDycVyNk7gy4wV2Rj8+58+Krk1tABEBAAG0IEZlbGl4IDx6d2llYmVs QHF1YW50ZW50dW5uZWwuZGU+iQE5BBMBAgAjBQJS/+VaAhsPBwsJCAcDAgEGFQgC CQoLBBYCAwECHgECF4AACgkQC2jb92rYqyMGxQf/d9oJf0qpgXZaUmcqujQ3DVsc uvYOnK2MJCpDIvvZYdQTcnG2jz8/na1ZyfAGeKhYZ18ypONwSQYthC17L5GHQ2H3 Pg/H0GARtx4aJR5TtIKnhPR8yYdlikCuTBb5QSFJUUtEz91SqDW7EXNbMC4RRSEd BWWirADCJWitoR3JCC13r+CF6TCFDluClAht/t56f7prBzARVYWmlbgYD2yx4Uzs FOl0vvhW2o9dpVaLZ6mSHAyNzefCFcNumRUxqa+V6nY94dd8BV8xH0lOd1xaMtZW HuxIU9Sbh13OlJyBAvVffVBL+4sEOpc8XB6Yl/pmyjEjUSvC7lP3T+Ix9Mnk/A== =kfXw -----END PGP PUBLIC KEY BLOCK-----

2 1

ScrambleSuit maintenance question
by Delton Barnes 07 Mar '14

07 Mar '14

Inexperienced Debian administrator here with a question about how to maintain the new obfsproxy/Tor for ScrambleSuit. I installed as follows: 1. Updated /etc/apt/sources.list (new lines prefixed with *): deb http://server.name.redacted/debian wheezy main contrib non-free *deb http://server.name.redacted/debian unstable main contrib non-free deb http://server.name.redacted/debian-security wheezy/updates main contrib non-free deb http://deb.torproject.org/torproject.org wheezy main *deb http://deb.torproject.org/torproject.org tor-nightly-master-wheezy main 2. Created apt.conf to prevent all packages from being pulled from unstable by default: echo 'APT::Default-Release "stable";' > /etc/apt/apt.conf 3. Edited torrc with following: ServerTransportPlugin obfs3,scramblesuit exec /usr/bin/obfsproxy managed 4. Installed the new packages: apt-get update apt-get -t unstable install obfsproxy apt-get upgrade <-- Installed Tor nightly. 5. service restart tor My question: Is there a way to configure things so obfsproxy and Tor will later automatically be upgraded to a *stable* release that includes ScrambleSuit? And how to know when I need to upgrade obfsproxy and Tor? Thanks, Delton

2 2

problem with tor-arm
by manu 06 Mar '14

06 Mar '14

Hello! I use tor-arm to manage my relay, at startup the following messages appear: [ARM_NOTICE] Unable to prepopulate bandwidth information (insufficient uptime) [ARM_NOTICE] Unable to save configuration descriptions (permission denied: '/home/username/.arm') Problem is the same for every user who runs arm (root, debian-tor) Already tried 777 this folder, and make "debian-tor" the owner - without success. Purge & reinstall does not change anything. I am running Ubuntu Server 12.04 x64. Whats wrong? best regards manu

2 1

(untrusted) Raspberry Pi binary .deb packages for Tor 0.2.4.18-rc
by Gordon Morehouse 06 Mar '14

06 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 I've built Tor 0.2.4.18-rc for the Raspberry Pi and released unofficial packages[1]. They are signed with my GPG key, but as always, if you don't trust binary packages from some dude on the internet, please see the instructions to compile them for yourself[1]. 1. https://github.com/gordon-morehouse/cipollini/tree/master/raspbian_packages… 2. https://www.torproject.org/docs/debian.html.en#source Best, - -Gordon M. -----BEGIN PGP SIGNATURE----- iQEcBAEBCgAGBQJSj5ghAAoJED/jpRoe7/ujpugIAL8U1aGVZQ4FSqCgRac0g4oW pqEGYT/aHI7GYX1J0ruS5kSjB7VGBqqskvb3LmWkSjMbJwX7MqTLbfUBj/wX8db8 sHTH/cdFNin3qazjrMnS0fe6bJ/AlimPcQSQfeEPQ3w5Wqk2Lb/qxVEY0cGxwYDn p6P4KItegJkWcT7pKHCcIkLcjUHjalS4N9xUOg0oFh1cXzA4YRrMbrmHuNuNYtOG OV09+56jlOJm6ApsYHNiDO/3lYB8xPnaMs8EbOVWUjBsh0kraTusXvNs9IquZEXd Pk83VhavdsiAmksz5u6q7+gVIXsBkwxTBlpybj5aWNOwze2D4DNe/eBKVzLTu2w= =7g1s -----END PGP SIGNATURE-----

2 1

Tor hidden services – a safe haven for cybercriminals
by an.to_n-73＠riseup.net 05 Mar '14

05 Mar '14

Hey folks! Something to read from Kaspersky Labs: https://www.securelist.com/en/blog/8187/Tor_hidden_services_a_safe_haven_fo… Interesting is, that Eugene Kaspersky hisself states in an interview: "We cooperate not only with the FSB, but also with the Americans and Brazilians, and with a variety of European agencies on security issues or cybercriminals. We sit a group of experts who break the code better than anyone in the world - perhaps only after the FBI. They understand, disassembles, analyze codes and understand what it is the best in the world. People come to us, "Guys, what is it?" - And we respond. We are not able to engage in all sorts of detective work, it's not our job, but we give them the information on which they continue to catch criminals. Or, conversely, we can see some information that may seem interesting to them, and we give them. Sometimes, in Germany looking for stolen laptops, we gave IPs" You can use Google translate to read the whole Russian interview in your language: http://lenta.ru/articles/2013/10/01/kaspersky Facing the overwhelming bulk surveillance I encourage everyone to start more relays/bridges! ==> Are there public statistics about the fraction of illegal content in/from Tor? Is it significantly more than in the "normal"net? We need some counter-arguments. Our "adversaries" will continue putting us in the criminal/terrorist/child-abuse category. But distributed P2P anonymizers like Tor, I2P, GNUnet, Bitmessage etc. are the only technology that helps against mass surveillance. Best regards Anton -- an.to_n-73 at riseup dot net PGP: 0B4C DF2C CB22 5DF4 25EA F212 49D1 ABF2 A2A9 7D7D Bitmessage: BM-2cTY8fuXGGXmh3fVgfQMaRCqTpgqp479ux (no metadata)

1 0

Advise on fully using a gigabit connection
by Jesse Victors 05 Mar '14

05 Mar '14

Hey everyone. I manage an exit at a university, and I recently moved it to a gigabit connection. I did some tests and the machine does appear to be capable of fully using the available bandwidth. Besides getting two Tor instances to run side-by-side on the same IP, is there anything else I can do to further contribute the connection besides waiting and maintaining uptime? I set my average and burst bandwidth limits to the maximum upload speed I have been able to achieve in my tests, is that an ideal setting? Please advise. Thanks.

3 3

TTTT - Reached 100 runs
by Sebastian Urbach 05 Mar '14

05 Mar '14

Dear list members, We are celebrating the century of submitted results, so to say. The "Trying Trusted Tor Traceroutes" project finally reached 100 completed runs from different ip's (not to mention the multiple runs). No one expected that just a few weeks ago when we were basically nowhere. Thank you very much for your support, you officially rock ! The data analysing is going on and hopefully we can draw conclusions from the collected data. The last time at the Chaos Communication Congress was not satisfying for all of us, but we are optimistic this time that there is sufficient data to do it. We will inform this list as soon as we have news. Thanks again from Anupam and myself (He's travelling at the moment) The project: http://web.engr.illinois.edu/~das17/tor-traceroute_v1.html The results: http://datarepo.cs.illinois.edu/relay_scoreboard.html -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat and statesman

1 0

Re: [tor-relays] tor-relays Digest, Vol 38, Issue 6
by herojideani＠live.com 05 Mar '14

05 Mar '14

PLS how does relay work and how can I set up my system to work with relay ----- Reply message ----- From: tor-relays-request(a)lists.torproject.org To: <tor-relays(a)lists.torproject.org> Subject: tor-relays Digest, Vol 38, Issue 6 Date: Tue, Mar 4, 2014 1:00 pm Send tor-relays mailing list submissions to tor-relays(a)lists.torproject.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays or, via email, send a message with subject or body 'help' to tor-relays-request(a)lists.torproject.org You can reach the person managing the list at tor-relays-owner(a)lists.torproject.org When replying, please edit your Subject line so it is more specific than "Re: Contents of tor-relays digest..." Today's Topics: 1. Re: Single IP multiple OR Ports (Moritz Bartl) 2. Re: Exit Relay on VPS by WEDOS (dope457) ---------------------------------------------------------------------- Message: 1 Date: Tue, 04 Mar 2014 09:10:10 +0100 From: Moritz Bartl <moritz(a)torservers.net> To: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] Single IP multiple OR Ports Message-ID: <53158A62.1010306(a)torservers.net> Content-Type: text/plain; charset=ISO-8859-1 Hi, On 03/04/2014 08:19 AM, toxi roxi wrote: > With an upgrade to ubuntu 13.10 x64 there seem to be no more support for > aesni module - so it doesnt seem to be usable any more. With older > ubuntu releases it works. https://www.torservers.net/wiki/setup/server#aes-ni_crypto_acceleration Does this help already? > I've recognized that some configurations are running easily with an > higher throughput - but could not figure out whats the reason for it. > My VPS'es are almost running in an KVM environment - but the 2 fastest > ones running on OpenVZ hypervisor. I tried KVM and OpenVZ some years ago for high bandwidth relays, and couldn't get it to make decent throughput at all. I now run all our fast relays "on bare metal". > But anyway im interested on reactivating that function as it seems to > really speedup relay's speed. Unless you max out /all/ your CPU cores, you can and should simply spin up more Tor processes in parallel, one per CPU core, and limit their bandwidth so they never hit 100% CPU usage. -- Moritz Bartl https://www.torservers.net/ ------------------------------ Message: 2 Date: Tue, 4 Mar 2014 00:43:54 -0800 From: "dope457" <dope457(a)riseup.net> To: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] Exit Relay on VPS by WEDOS Message-ID: <0da23911717602772537f88415043d39.squirrel(a)fruiteater.riseup.net> Content-Type: text/plain;charset=utf-8 Thanks for the reply. Well, the bad thing is the ISP is already listed there as good one with no problem with exits. I also asked them about Tor before I even started and they acted cool... Best, dope457 > Hi, > > Thanks for going through the trouble of running an exit relay! > > On 03/04/2014 08:49 AM, dope457 wrote: >> Today, few weeks from last incident, they just pulled out ethernet cable >> from my VPS and I am not sure what to do. > > Looks like this ISP is not suitable for Tor exit relays. Please add it > to the https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs > page, and find a better one. I'm afraid there's not much else you can > do. Make sure to inform the ISP beforehand about the risks, be fast and > polite in answering abuse complaints, and as long as the ISP doesn't > know you well enough make sure the ISP of all places understands how you > handled the complaint and why. For example, for the POP3 case, you could > have offered to block POP3 altogether. > > In case you haven't seen it already, this is a must-read for exit > operators: > https://trac.torproject.org/projects/tor/wiki/doc/TorExitGuidelines > > -- > Moritz Bartl > https://www.torservers.net/ > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > ------------------------------ Subject: Digest Footer _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays ------------------------------ End of tor-relays Digest, Vol 38, Issue 6 *****************************************

3 2

Single IP multiple OR Ports
by Felix 04 Mar '14

04 Mar '14

Hi to all - I have a question: In case there is a strong relay ie 1Gbit/s, enough cores and RAM so the HW is not limiting. Let's further assume only one IP. Could a single Tor daemon on Debian be a bottle neck? If yes, could be more performance to start two (or more) daemons and bind the first OR Port to :443 and the second to :8080. Both at the same 'eth' interface? Both OR Ports are based on the same IP so they would be the same family member. Thanks for your answer. My response might have some delay. Sorry for that. Regards, Felix ==========---------- - - - - - - - - - - ----------========== -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2.0.22 (MingW32) mQENBFL/5VoBCAC8l2gGmuy2hZf866dDkwzOvMkyJlfnFZU6T5LWe4uPIx0a8R1U cmj/Vut2yUCaJgvFpdOVA3mmXC58zoDeiW7Um6q6otD6BR2hXdgyBTAgqkQ0BsYx epb4UXBz/u3TJmv655fBnXeDgCB8L5BIkcsmX6EoBNUs6a3TPMhX3UXOtEKLXJeZ 2QtoDxwXqHNSmW7jLq+qkpriVDqxDTFv+muZRE+Zn/6PZpEASvpSdVdT/1giEMUL QQFIP6cBPY2GYIaNCO1dYRj9ebM7ewWjCiOiOw6/eylxan8vfFntgaPU3J7W2wJp RiRtUIjT+TDycVyNk7gy4wV2Rj8+58+Krk1tABEBAAG0IEZlbGl4IDx6d2llYmVs QHF1YW50ZW50dW5uZWwuZGU+iQE5BBMBAgAjBQJS/+VaAhsPBwsJCAcDAgEGFQgC CQoLBBYCAwECHgECF4AACgkQC2jb92rYqyMGxQf/d9oJf0qpgXZaUmcqujQ3DVsc uvYOnK2MJCpDIvvZYdQTcnG2jz8/na1ZyfAGeKhYZ18ypONwSQYthC17L5GHQ2H3 Pg/H0GARtx4aJR5TtIKnhPR8yYdlikCuTBb5QSFJUUtEz91SqDW7EXNbMC4RRSEd BWWirADCJWitoR3JCC13r+CF6TCFDluClAht/t56f7prBzARVYWmlbgYD2yx4Uzs FOl0vvhW2o9dpVaLZ6mSHAyNzefCFcNumRUxqa+V6nY94dd8BV8xH0lOd1xaMtZW HuxIU9Sbh13OlJyBAvVffVBL+4sEOpc8XB6Yl/pmyjEjUSvC7lP3T+Ix9Mnk/A== =kfXw -----END PGP PUBLIC KEY BLOCK-----

4 6

(no subject)
by Samual Carman 04 Mar '14

04 Mar '14

howdy i am interested in helping updating and patching the tor code van one of the developers contact me off list or some of you i am interested ih helping updating all parts of tor and any project of tor -- the wyer

1 0

Exit Relay on VPS by WEDOS
by dope457 04 Mar '14

04 Mar '14

Hello, I have been running Exit Relay for the last three months on VPS by czech company WEDOS. Even though I reduced exit policy ( https://atlas.torproject.org/#details/F12AFDB3FEC184E76944579579F762F1142C7… ) there were two "attacks" from this relay accompanied by abuse reports. 1) Jan 15 02:46:21 65.20.0.47 pop3: Failed password from 31.31.78.141 2) Dear Administrator, The CSIRT.CZ Intrusion Detection System has recorded connection attempt(s)from your hosts to our honeypots. This may indicate a security risk for your network and for the whole Internet. Would you please investigate this and/or inform all parties responsible that the following system(s)may be compromised? Both times I quickly replied with explanation it is Tor relay and offering further steps to do in case it is not going to stop. Today, few weeks from last incident, they just pulled out ethernet cable from my VPS and I am not sure what to do. I would like to contribute to the Tor network with this Exit and not just as a middle relay. Thanks for any suggestions, dope457

2 2

Problem encountered with Bandwith Authority algorithm (was : "bandwidth authority algorithm is cracked")
by julien.robin28＠free.fr 03 Mar '14

03 Mar '14

Hi everybody, 15 days, 16 hours and 15 minutes (without any restart) have passed since my 2 involved in this problem are restarted (started at the same time). And there is something very clear and interesting to see. They both have restarted from nearly zero (~100kB/s) in the first days, and a problem is still completly present on 1 of the 2 identity : -> The first one (the older one also) is stuck at less than 1MB/sec (5,510 in consensus weight) - ArachnideFR94 -> The second one is growing, growing and growing, now around 9MB/sec (and more than 75,000 in the consensus weight) - ArachnideFR94v2 It can be very clearly seen by observing graph on Tor Atlas. (But there is no more bandwith earthquake like I had on december.) On this machine, the first daemon is launched by /etc/init.d, while the second one is manually lauched via another non-admin user. No differences, same nice value, completely the same torrc file apart from nickname, DirPort, ORPort and MyFamily. Pretty large max bandwith for both of them : RelayBandwidthRate 25600 KB RelayBandwidthBurst 122070 KB ShutdownWaitLength 90 -- Into the log file : The only one difference was this (I just corrected it) - it was on the server that is working perfectly fine (ArachnideFR94v2) : Jan 30 06:07:03.000 [warn] Failing because we have 4063 connections already. Please raise your ulimit -n. [6978 similar message(s) suppressed in last 21600 seconds] Jan 30 12:07:17.000 [warn] Failing because we have 4063 connections already. Please raise your ulimit -n. [20004 similar message(s) suppressed in last 21600 seconds] -> Oops :s I know very well this problem and I just forgot to prevent it this time - Sorry for that - Corrected by editing /etc/security/limits.conf and adding some lines about the user used by my second tor daemon - I just restarted this one by SIGINT, wait and new launch (logged with a much better ulimit !) today at 12:35 UTC. Absolutely nothing else abnormal into the log of the 2 daemons. And the problem of ulimit was on the one that runs perfectly well! -- Any idea of why the first one is completely stuck at such a low value ? The next steps would be to set the 2 tor daemons on the /etc/init.d using the Multiple Tor Processes example at www.torservers.net on this machine, and to watch if ArachnideFR94v2 launched by /etc/init.d is still working as well as today. If no solution appears, may be trying to re-install the entire system, and watch what happens would be interesting. If still no solutions, it will be complicated to understand ! Best regards, and thank you in advance for your ideas Julien ROBIN

1 1

Re: [tor-relays] TTTT
by Sebastian Urbach 02 Mar '14

02 Mar '14

Hi, I'm sorry but there is no Windows executable available or planned due to the insignificant number of Windows relays. Is it necessary to run it by scripts or is it possible to create a exe or dmg file -----Original Message----- From: tor-relays [mailto:tor-relays-bounces@lists.torproject.org] On Behalf Of Sebastian Urbach Sent: Sunday, March 2, 2014 2:10 PM To: tor-relays(a)lists.torproject.org Subject: [tor-relays] TTTT Dear list members, The next big data review regarding the "Trying Trusted Tor Traceroutes" project was initiated this week. It will probably take a while (weeks) before we have solid conclusions. We are very close to 100 complete runs from different IP's, in fact 99 right now. I hope that we will reach this goal very soon :-) We are not sure yet if we gathered enough data, but time will tell. We want to thank you for your support and if you want to make sure that we have more data in case the amount we collected turns out to be insufficient, then join us or keep running multiple rounds. Project: http://web.engr.illinois.edu/~das17/tor-traceroute_v1.html Results: http://datarepo.cs.illinois.edu/relay_scoreboard.html I make sure that this list is getting the results from the data review before anyone else. -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat and statesman _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Tor plugin for Nagios
by ramo＠goodvikings.com 02 Mar '14

02 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Heya List I've recently started on developing a nagios plugin for tor, since a cursory google search didn't come up with anything I would describe as 'comprehensive.' Generally speaking, it works by connecting to the control port and running various commands to check the health of the server. You would either drop it on the Tor box and run it with NRPE, or on the monitoring server and open your control port to that IP. So far I've implemented / plan to implement the following checks: * Fetch a page through the socks port * Check if the server is hibernating * Check the current bandwidth (up and down combined) * Check the accounting values (how close to hibernation) * OR / Dir port reachable It's in a very early stage at the moment, but I'm posting here now to ask: Are there any other checks relay operators would want to see implemented? You can check out the code so far at https://github.com/goodvikings/tor_nagios/ Cheers Ramo -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) iQEcBAEBAgAGBQJTEsR5AAoJEAXQWoW8lug/m7AH/iEJ6X1kKcOCkUkhgVHyT6aX Nusu9yADtaRzyNrRUtWIgHw80SQSItr8Sgtt9pGIDZssetUYyxKCPN7YFztBJGL5 Fym/Iv+lF6jCyyWRm4SH84yA3k/rW+gPiiNg0mw5di6V2Bx311GM2YavOnZWs0Yh rdX2ljdqbJuIQIOxhaMVrX3jYFRCYv6LvSZwxh9CA8KVgvosiiQTU76ubekoZoCt XUXLepqgD+sUxeRh7QWrM8BxTkY1Yp0XxXaeU87aO40sBB18dozgXuBsTO43ssvK s82iYorusIPdpjuVIr6FnmPrbwuDEaWVJ6ktcVz9Z9WRMP5AbJISU7LuRSxRNBU= =m/S7 -----END PGP SIGNATURE-----

2 2

is comcast throttling relays?
by Steve Rich 01 Mar '14

01 Mar '14

Hey, I am running the following relay, and never see traffic going more than 250k. Is Comcast throttling non-exit tor proxies? https://atlas.torproject.org/#details/7E6183143778259F025576A5803E3334AB95C…

5 7

Effects of Rebooting?
by Tor Relay 28 Feb '14

28 Feb '14

I am a n00b relay (OnionTorte) operator, and, as such, know lamentably little of what I'm doing. (Yes, I'm one of *those* relay operators.) When I went to bed last night I had an HSDir flag, but it has since disappeared. And since this A.M. my consensus was halved. A bit of promiscuous pokings-about in relay metrics leads me to think that this happened in the wake of my having had to reboot my machine to unwedge it. Speed Test shows that even on the worst of BadHair Days my u/l speed doesn't sink below 15Mb/s (1900KB/s), and almost always cruises at >25Mb/s, so I don't think that it's so much a bandwidth issue as one of perceived reliability. :( I read https://blog.torproject.org/blog/lifecycle-of-a-new-relay but wasn't able to take away as much as I would have liked. If somebody can explain to me, using small words and interpretive dance as befits a callow contributor, what happened I should certainly appreciate it. Thanks, P -- Dirt kicked to the curb goes into the gutter. Professionals kicked to the curb go into retail.

2 1

tor-browser still fails on FreeBSD 9.2-STABLE
by Scott Bennett 28 Feb '14

28 Feb '14

I just downloaded tor-browser-linux32-3.5.2.1_en-US.tar.xz and tried it. It fails on FreeBSD 9.2-STABLE exactly the same way the previous version did: [hellas] 128 % ./start-tor-browser Launching Tor Browser Bundle for Linux in /home/hellas/bennett/src/tor/tor-browser_en-US XPCOMGlueLoad error for file /usr/home/hellas/bennett/src/tor/tor-browser_en-US/Browser/libxul.so: libasound.so.2: cannot open shared object file: No such file or directory Couldn't load XPCOM. Tor Browser exited abnormally. Exit code: 255 [hellas] 129 % So I guess it did *not* get statically linked. I checked the ports tree, but didn't find any port named libasound or just asound, so I don't know where to get the library that the browser wants and is lacking. Is there much likelihood of having a secure browser for FreeBSD anytime soon? Using firefox 27 turns out to be several orders of magnitude more identifiable than firefox 3.51, which was already bad enough in that respect, so I'd really like to have something that's much safer. Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at sdf.org *or* bennett at freeshell.org * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************

2 1

procedure for TBB to use localhost relay
by Zenaan Harkness 28 Feb '14

28 Feb '14

I am running a tor relay - gracemissionstor - and have begun providing the relay name to friends who would like to use TBB. What I have not been able to google yet properly, is what startup/connection procedure is "best" for those using TBB, _and_ are on the local network - many people come and go here and there, and connect to the Internet from the LAN/internal network. Should those connecting in this way, simply select the default connection options, and add "gracemissionstor" into the final "I need to use a bridge relay" screen, or is there a preferred way to connect - I am running the TOR SOCKS proxy for example. I would like to be able to explain to people how to use TBB and connect to the local TOR relay when they are connected to the LAN - either via SOCKS or otherwise - but of course, it does not make sense to have TBB connect through TOR relay SOCKS (on the local network TOR relay), just to thereafter be tunnelled through the TOR network, just to thereafter establish _another_ connection back to the "gracemissionstor" relay, thereby having all Internet access travelling multiple times through the TOR network unnecessarily. Does this make sense? There ideally ought be a TORButton config option, or similar, to "connect using local TOR relay SOCKS port" and an easy way to let the TBB know (perhaps on each startup default to safety option) that (eg on next boot) we are no longer on a trusted local network. E.g. when TBB starts up (at least first time, and there SHOULD be option to have TBB ask _every_ time), and the user chooses "use SOCKS proxy to connect to Internet", then when TBB connects to the SOCKS proxy, the TOR relay which is that SOCKS proxy ought notify the TBB that it is in fact connected to the desired (if the TOR relay name matches of course) TOR relay. Of course, it would _also_ make sense for TBB to SSL encrypt its connection to the local tor relay SOCKS port. This might all be wishful thinking and pie in the sky, but please forgive my enquiry if so - I don't yet have a full understanding of these things. TIA Zenaan

1 1

tor is not connecting
by Rupesh Kumar 27 Feb '14

27 Feb '14

in my collage tor browser is blocked in proxy server what can i do how can i connect the tor browser help me

4 4

Named status
by John Ricketts 27 Feb '14

27 Feb '14

All, At what point does the router acquire "Named" status? My exit node is called "QuintexSJT" and has been up for 20 days. I suspect it requires some sort of human intervention? John

4 5

new relay acting strange
by Athena Lester 27 Feb '14

27 Feb '14

Hello, This is the first tor relay I have set up, it has been running for going on 4 days. I was waiting for the 3 day lag period I have read about but still no activity, besides the 30 MBs or so per day. It is running on my vps located in the Netherlands. The thing that is strange is when I search for "windywillow" on the atlas it finds two relays, same ip's, same ports. the thing is they both say that the server has been down for the last 3 days when it has been running and recieving a trickle of activity with no adverse log entries. I noticed a day ago that I lost the "Valid" flag. nothing has changed as far as know since it was valid so I'm at a loss. Here are the links to the two atlas pages. Any help would be appreciated. https://atlas.torproject.org/#details/F51A8E6C811D3C8F2436BE0029E95E67CB0DF… https://atlas.torproject.org/#details/90B97451822C0881C0652A7DA7430A73BCAF3… ---

3 2

How long from enabling ExitPolicy's to getting the Exit flag?
by David Serrano 26 Feb '14

26 Feb '14

Hi, I finally decided to accept some ports in my ExitPolicy and I'm curious about how much time does it take to get the Exit flag. I'm in no rush to know this of course, but I haven't found anything in a couple of searches and I thought it might be useful to someone else, hence me asking. -- David Serrano GnuPG id: 280A01F9

2 2

Compile Tor Debian package with UPNP support
by Patrick ZAJDA 25 Feb '14

25 Feb '14

Hi all, I want to compile Tor on my Raspberry Pi. I added --enable-upnp \ in debian/rules, but it returned an error about documentation. config.status: error: cannot find input file: `doc/torify.1.in' make[2]: *** [doc/torify.1] Error 1 libminiupnpc-dev is installed, and libminiupnpc package too. MiniUPNP is found when checking for depencies. How can I compile Tor Debian package with UPNP support enabled? Does someone know why this error is displayed? Thanks, -- Patrick ZAJDA Skype : gansta93

1 0

(no subject)
by Zenaan Harkness 25 Feb '14

25 Feb '14

I saw a hint of some interesting output by arm: flags: Exit, HSDir, Running, V2Dir, ValidleDebuggerAttachment 0' to your torrc and restarting tor. For more information see... This bit "leDebuggerAttachment 0' to your torrc and restarting tor. For more information see..." disappeared pretty quick. Any ideas what that would be? TIA Zenaan

3 6

[WARN] crypto error while checking RSA signature: padding check failed
by Zenaan Harkness 24 Feb '14

24 Feb '14

Occasionally (such as just now) I have seen these two errors in arm: │ 13:21:25 [WARN] crypto error while checking RSA signature: padding check failed (in rsa routines:- │ RSA_EAY_PUBLIC_DECRYPT) │ 13:21:25 [WARN] crypto error while checking RSA signature: block type is not 01 (in rsa routines:- │ RSA_padding_check_PKCS1_type_1) Are they anything to worry about? Zenaan

2 1

ExtORPort notice
by Delton Barnes 24 Feb '14

24 Feb '14

Upon upgrading obfsproxy to 0.2.6 and Tor to 0.2.5.1-alpha-dev (git-f63b394d90583b77+96972c4) for scramblesuit, I got this in the Tor log: Feb 15 04:40:03.000 [notice] We are a bridge with a pluggable transport proxy but the Extended ORPort is disabled. The Extended ORPort helps Tor communicate with the pluggable transport proxy. Please enable it using the ExtORPort torrc option. How should this be set? What does it do? I saw some web pages suggesting "ExtORPort 6699" for statistics-gathering purposes. Thanks, Delton

3 2

TTTT, multiple runs
by Sebastian Urbach 23 Feb '14

23 Feb '14

Dear list members, The "multiple runs" question is now added to the FAQ at the "Trying Trusted Tor Traceroutes" project site. Right now we are at 95 ip's with at least 1 completed run. Hopefully we can add another 5 to that number and reach the "100 milestone" before the next data review in 03/2014. Multiple run's from the same ip are very welcome as well. Thank you for your support ! Want to help ? Project site: http://web.engr.illinois.edu/~das17/tor-traceroute_v1.html Want to see the results ?: http://datarepo.cs.illinois.edu/relay_scoreboard.html -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat and statesman

4 3

Obfsproxy help
by I 23 Feb '14

23 Feb '14

3 3

Repeated "failed to get unique circID." in the log
by Patrick ZAJDA 22 Feb '14

22 Feb '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, I updated my tor relay to Tor 0.2.5.2-alpha (git-7d29e36edb6d0cf0) yesterday, using Tor repository for Ubuntu. I checked the log, and see the following message repeated again and again: "Feb 20 09:52:38.000 [warn] No unused circ IDs. Failing. Feb 20 09:52:38.000 [warn] failed to get unique circID." In fact, this message is repeated so often that I can not even find the last different message in the log... :) I looked for some informations about this message but I didn't find my answer... I read something about used threads, (NumCpu in torrc) and another about bandwidth, so nothing precise. What does this message means? Thanks, - -- Patrick ZAJDA Skype : gansta93 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJTBcTdAAoJEKPVT2DeSPb4ZfkIAKSK5aWvRyBh3uNhWwRegARG QkjoXSgkSBCxQcIFfLPTjBYk+dVNJVTsFvQGstTIQt10/Xu62eMu5DD1yNcAroa7 aFIKHaJkQNwel7j92dyIbZgJ2Vsoe1xIQK2Az3YJGc5S6os116H8dpsmr+jxoH+z Aeh7wneCpiHjXkeD37neXUlbCt4O9WG+Otf5d3gVmJ3eGvixmfY+2KH9WpKs9laA ijt2fu8vwPCseN0spEC9abOo+mLDF0mloxU9w872bhKfig4IpyFt+DqF6VZApUHv Sx6kpN34zFsTzbdzSJovfz6yk6BGekQiMN3v4t30q8c1cfk14EQaFPSdvfIlv3g= =NxPQ -----END PGP SIGNATURE-----

2 1

Tor relay failure
by starwars1070＠gmail.com 22 Feb '14

22 Feb '14

Hello I am experiencing errors I recently upgrade my computer system and os to windows 8.1 pro an now I am having trouble with the tor relay I was running I have configured the firewall and my router to forward traffics to the tor relay port I have centry link for my ISP I am able to establish an or connection to the directly servers but I keep on getting a server error saying your server port can not be connected and now the past three days I have been getting both my or and server port unable to connect to the tor and my relay will not relay traffic

1 0

Make your obfsbridge faster by installing python-gmpy
by George Kadianakis 22 Feb '14

22 Feb '14

Greetings, here is a tip if you are running an obfs3/scramblresuit bridge: If your bridge is feeling too slow or flooded by too many connections, you can help it by installing the python-gmpy package. If you do that, obfsproxy will use python-gmpy opportunistically to perform some crypto operations (modular exponentiations) much much faster. FWIW, in future packages of obfsproxy, the python-gmpy will be installed as a recommended package.

1 0

schedule tor relay uptime/ bandwidth
by Zenaan Harkness 22 Feb '14

22 Feb '14

I know tor relay bandwidth usage per period can be configured, but is it possible to schedule a tor relay to sleep during business hours, and only operate after hours? TIA Zenaan

2 2

Relay unresponsive
by Zenaan Harkness 22 Feb '14

22 Feb '14

Somewhat regularly, I get "relay unresponsive" with a heartbeat delta of about 12seconds. Could this mean my upload pipe is still saturated and I need to throttle back slightly? recent arm log: 13:12:56 [ARM_NOTICE] Relay resumed [6 duplicates hidden] 13:12:31 [ARM_NOTICE] Relay unresponsive (last heartbeat: Sat Feb 22 13:12:20 2014) 12:11:34 [ARM_NOTICE] Relay unresponsive (last heartbeat: Sat Feb 22 12:11:20 2014) 11:10:33 [ARM_NOTICE] Relay unresponsive (last heartbeat: Sat Feb 22 11:10:20 2014) 09:30:24 [NOTICE] Heartbeat: Tor's uptime is 2:18 hours, with 146 circuits open. I've sent 14.23 GB and received 9.69 GB. 09:09:20 [ARM_NOTICE] Relay unresponsive (last heartbeat: Sat Feb 22 09:09:07 2014) 09:08:30 [ARM_NOTICE] Relay unresponsive (last heartbeat: Sat Feb 22 09:08:19 2014) 07:16:39 [NOTICE] Self-testing indicates your DirPort is reachable from the outside. Excellent. 07:12:43 [NOTICE] Performing bandwidth self-test...done. 07:11:31 [NOTICE] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor. 07:11:26 [NOTICE] Your IP address seems to have changed to 203.158.36.137. Updating. 07:09:25 [ARM_NOTICE] Relay unresponsive (last heartbeat: Sat Feb 22 07:09:12 2014) 07:08:04 [ARM_NOTICE] Relay unresponsive (last heartbeat: Sat Feb 22 07:07:51 2014) 03:30:24 [NOTICE] Heartbeat: Tor's uptime is 5:52 hours, with 189 circuits open. I've sent 12.95 GB and received 12.78 GB.

1 0

[WARN] Your system clock just jumped 100 seconds forward; assuming established circuits no longer work.
by Zenaan Harkness 21 Feb '14

21 Feb '14

My tor logs (running on Debian) are showing this warning: [WARN] Your system clock just jumped 100 seconds forward; assuming established circuits no longer work. I tried running openntpd as well as ntp packages (debian), and both display the same problem - once or twice a day I get this jump in time of in the order of a couple of minutes. Any idea why? TIA Zenaan

7 18

Multi-instance Tor init script
by Alexander Dietrich 20 Feb '14

20 Feb '14

Hello, the recent thread on this topic prompted me to make a multi-instance init script: https://gist.github.com/7adietri/9122199 It's basically the current official init script and torservers.net's "instances" mechanism frankensteined together. Maybe other people will find it useful too. Config files should be layed out as described on torservers.net: https://www.torservers.net/wiki/setup/server#multiple_tor_processes Best regards, Alexander -- PGP Key: 0xC55A356B | https://dietrich.cx/pgp

1 0

^null$ httpd requests
by phrag 20 Feb '14

20 Feb '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, So I've been receiving a few of these httpd requests on my SSL web server. The webserver runs on the root domain of a subdomain hosting a tor relay. From a whois, i see rgnx is owned by Jacob Appelbaum. The webserver in question is running a good ssl setup according to https://www.ssllabs.com/ssltest/. Any information as to what this could be? ###### ## httpd log ## rgnx.net - - [20/Feb/2014:17:29:46 +0100] "\x16\x03\x01" 301 217 "-" "-" ## logwatch ## Attempts to use known hacks by 1 hosts were logged 62 time(s) from: rgnx.net: 62 Time(s) ^null$ 62 Time(s) A total of 1 sites probed the server rgnx.net A total of 1 possible successful probes were detected (the following URLs contain strings that match one or more of a listing of strings that indicate a possible exploit): null HTTP Response 301 ###### -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlMGPOgACgkQceRvMfxmL+0jMwCgr3zMBm7GngflSXiHB2WzJG/d 7ucAoJDOhmcOeIGUwNZzuaHwTcG/QntN =yDA4 -----END PGP SIGNATURE-----

1 0

Re: [tor-relays] TTTT, multiple runs
by Sebastian Urbach 19 Feb '14

19 Feb '14

Hi Sanjeev, Basically yes. Here are the details: http://web.engr.illinois.edu/~das17/tor-traceroute_v1.html#q-canrunelsewhere Feel free to ask if anything is unclear. -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat and statesman On Wed, Feb 19, 2014 at 6:53 PM, Sebastian Urbach <sebastian(a)urbach.org>wrote: > Right now we are at 95 ip's with at least 1 completed run. Hopefully we > can add another 5 to that number and reach the "100 milestone" before the > next data review in 03/2014. Multiple run's from the same ip are very > welcome as well. > Sebastian, Does this have to be run on a Tor Relay? I thought so, for my first run, but re-reading it now I am not sure. If running this on a non-relay would help, I can add a few more servers tonight. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane

1 0

Enable statistics for hardcoded obfsbridges
by George Kadianakis 18 Feb '14

18 Feb '14

Hello people, I'm sending you an email because your bridges are hardcoded in the pluggable transport bundles. We recently added PT-specific metrics in metrics.torproject.org Specificaally, you can see a graph of PT users here: https://metrics.torproject.org/users.html?graph=userstats-bridge-transport If you select the obfs2 transport, you can see that it displays only 300 users, which is not entirely true. We suspect that the reason for the low number of users is because not many bridges are reporting PT statistics to the bridge authorities. This might be for two reasons: a) Your bridge might be configured to be private, that is to not publish its descriptor. This might happen if you have 'PublishServerDescriptor' set to 0 in your torrc. If you have a bridge hardcoded in the bundles, not publishing your descriptor doesn't really provide any security (your bridge is exposed anyway), so you might as well start publishing your descriptor, since this will allow us to gather statistics about the number of users you see. b) Your Tor might not be bleeding edge: Tor only started reporting PT statistics to the auths in tor-0.2.5.1. To upgrade to this version of Tor you can use either the git master or the automated Debian package builds (see https://lists.torproject.org/pipermail/tor-relays/2014-February/003899.html for how to use them). c) You don't have Extended ORPort enabled. With recent versions of Tor, you can enable it by adding 'ExtORPort auto' to your torrc. It would be great if you could fix the above so that your Tor can start submitting statistics! If you have any questions, feel free to ask me!

1 0

Working init script for TOR 2.5.1
by tor＠afo-tm.org 17 Feb '14

17 Feb '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello, i search a working init script for multiple tor instances. I tried it from https://www.torservers.net/misc/config/initd-tor but that is broken. Does somebody have a working one? Thanks for help -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJTASW0AAoJEKawimmefC2InIkP/0guExgToj+B/hk9cQouPNdn J9ml+qdZxeEJH2G8V5NFhre4L1y4lubr9DhvVN0eMQ/vU+Dd/f0KqpO/05DD2pMG z2MJxq5qfvL4M/BApGbsC/+xIZBVRWHNHywO/hlR89sXn1Yd30kbnXYlAIQNCobA 6xsT4zhZ+crhKzUgC6jouIdzq1Wf9nfiChxf4w9UgCbO+t6JTkRBjyX7w0bHcTAP e3hMZBUEiJAuWeB3vubQPiQwvhrqw87yvSj6uNhKAq5u8nWtRo1mStD69jia+bdB yZIKxRgc8Y/+T/Ls8zWDiRvBUdvFd0buVQKiWjn8dX4UNoZNuFGIGtv5U+PfKP+3 osBmf3v20VmkW/7RcC/TAO0/9kqDupkdF4/W9OhzcIKQMv64OwJiEIFjE6mtTM8D sHhRbk++3YsVhSCy504KUvohewltEMpHpGD+/1vDwfebryeelBZTkn6xr51Kk6IM LijzNdcZFwmEtP5NbuioF07NyN5qKMyGUYdUhiDc51BT5ynkis4950lHMgJkpKrO 5ssv1Kw+f3B+53s67LbbaaPwErk1AdxxFnIBZ8RcDMLJIk3BsT/WwujPlF/Ftog1 cc6jLCHcxalMPzBT9b4NbNz9EbpOhqpQE/oUeasBtfPr9606bN2EHSTey4WVcuPp kLPxVVMrvY1B4W4fxI/Q =dy9S -----END PGP SIGNATURE-----

3 4

Tor Relay Downloading much more data than uploading
by borgersnick＠gmail.com 17 Feb '14

17 Feb '14

The log entry is: Heartbeat: Tor's uptime is 23 days 0:00 hours, with 0 circuits open. I've sent 6.83 MB and received 177.12 MB. I don’t think I made any changes to the torrc, intend to provide a relay. I am using trickle to limit bandwidth consumption instead of the built-in method because I didn’t want to learn about the bursting concept. ExecStart = /usr/bin/trickle -d 500 -u 500 -t .5 /usr/bin/tor --runasdaemon 0 --defaults-torrc /usr/share/tor/defaults-torrc -f /etc/tor/torrc --quiet Running on Fedora. Firewall allows external port 80 and 443 access to the server.

1 0