- tor-relays - lists.torproject.org

A way to reduce spam and brute attacks...
by rush23＠gmx.net 10 Nov '20

10 Nov '20

Hello guys, is there any way to stop or if not reduce the spam, brute force attacks that are leaving my exit? Well port blocking or destination IP blocking is one way but without any relevant information except this hard, right? => https://cleantalk.org/blacklists/51.15.80.14 Stopped my exit for about 2-3 weeks awaiting lower number of complaints but nothing changed. In the end I have to migrate from exit to relay unfortunately. Regards Torproxy

2 1

Re: [tor-relays] Cheap Servers? There MUST be a catch
by BRBfGWMz 09 Nov '20

09 Nov '20

They allow you to do that with the free credits? On Mon, Nov 9, 2020 at 07:37 PM, niftybunny <abuse-contact@to-surf-and- protect.net> wrote: > I cant find any prices on the website. What do you get for under a dollar?On 8. Nov 2020, at 23:21, Dr Gerard Bulger &lt;gerard(a)bulger.co.uk&gt; wrote:Worried about dominance of OVH for relays and exits? How about Google! Setting up a fast server is SO cheap on their https://cloud.google.com/ platform, it is tempting to set up relays, if not exits there. Looking at their T&amp;Cs they do not seem to mention TOR or banning running a proxy, but a generic list of don’t do bad things. I have two ubuntu servers doing running other programmes on there now, and so far cost me $0.78 with fixed IP4 addresses. I have not worked out how to attach IPv6 yet. Of course set DNS of the machines not to be Google’s So tell me why this is such a bad idea… Gerry _______________________________________________tor-relays mailing listtor- relays@lists.torproject.orghttps://lists.torproject.org/cgi- bin/mailman/listinfo/tor-relays \-- Sent using MsgSafe.io's Free Plan Private, encrypted, online communication For everyone. https://www.msgsafe.io

1 0

Possible compression bomb, abandoning stream message received
by Keifer Bly 07 Nov '20

07 Nov '20

3 3

Abuse received for middle node (part of the curent problem)
by Olaf Grimm 07 Nov '20

07 Nov '20

I have just received two abuse messages from ISP Scaleway Elements for two of my middle nodes. Until now I thought this was not possible. No problem for me. Only here for your information. Olaf

5 4

Can't update tor relay on Debian, and notice about tor log file
by Keifer Bly 03 Nov '20

03 Nov '20

2 2

Questions About The Traffic Of My Tor Relay
by h.c2233 03 Nov '20

03 Nov '20

I am wandering why my middle relay download much more trafic than upload. It downloads 8 times more than upload, which is quite unreasonable. What's more, the net work speed is always lower than 1KB/s, while my bandwidth is 1GB/s. I just can't find out what's going wrong.

2 1

Log warning : possible (zlib) compression bomb on middle relays
by Guinness 03 Nov '20

03 Nov '20

Hi all, We are at least 3 users running middle relays from 0.4.4.5 and after having some logs like those : ``` Nov 02 05:30:55.000 [warn] Possible compression bomb; abandoning stream. Nov 02 05:30:55.000 [warn] Possible zlib bomb; abandoning stream. Nov 02 05:30:56.000 [warn] Possible compression bomb; abandoning stream. Nov 02 05:31:00.000 [warn] Possible compression bomb; abandoning stream. Nov 02 05:31:00.000 [warn] Possible compression bomb; abandoning stream. Nov 02 05:31:00.000 [warn] Possible compression bomb; abandoning stream. Nov 02 05:31:55.000 [warn] Possible compression bomb; abandoning stream. Nov 02 05:31:56.000 [warn] Possible compression bomb; abandoning stream. ``` I'm wondering if this is an attack or a new feature (haven't checked yet) but I'd like to know how many users are impacted. The interesting informations are : * Number of warnings * What kind of relay it is (middle, exit, entry) After your answers, I'll complete the issue I have opened on the bug tracker. Cheers, -- Guinness

12 11

253 new exits - up and down
by Corl3ss 02 Nov '20

02 Nov '20

Hi, today 253 new exit nodes joined the network : https://onionoo.torproject.org/summary?search=apokaliz It was active for 12 hours and then down. It is enough odd to report it here. If you have any information about it, it will be a pleasure to read it. Corl3ss

3 2

Re: [tor-relays] Log warning : possible (zlib) compression bomb on middle relays
by trooned 02 Nov '20

02 Nov '20

I see the same warnings on my bridge (uptime since last restart about 3 days) as well. Nov 02 04:52:10.000 [warn] Possible compression bomb; abandoning stream. Nov 02 04:52:10.000 [warn] Possible compression bomb; abandoning stream. Nov 02 04:52:10.000 [warn] Possible zlib bomb; abandoning stream. Nov 02 04:53:10.000 [warn] Possible zlib bomb; abandoning stream. Nov 02 04:53:10.000 [warn] Possible zlib bomb; abandoning stream. Nov 02 04:54:10.000 [warn] Possible compression bomb; abandoning stream. Nov 02 04:54:10.000 [warn] Possible compression bomb; abandoning stream. Nov 02 04:55:10.000 [warn] Possible compression bomb; abandoning stream. Regards, TrooNed

1 0

Relays for 5G smartphones
by David Poulsen 01 Nov '20

01 Nov '20

Dear Sirs, I've been experiencing a lot of "weird" traffic to/from the Danish State's welfare and app for corona-virus testing answers! I am using 4G Orbot, RiseUp VPN and Tor Browser, Tor Browser (Alpha), but also with Proton VPN and ordinary browsers like Firefox & Chromium browsers are very unstable. I have gathered a lot of screendumps and logs, and I am sure somebody hat taken over their site, and Duckduckgo redirects all the traffic to these sites where NemID, has to confirm wh you are, when trying to get answers for the corona-test! These sites are: sundhed dot dk coronaprover dot dk There are no problems accessing these sites, with the correct setup of security settings for me! FYI the sundhed dot dk is owned by the Danish Welfare & Heakth system with an app called MinSundhed, which also have weird traffic redirections! Regards David Sent with ProtonMail Secure Email.

1 0