- tor-relays - lists.torproject.org

Again: abuse email for non-exit relay (masergy)
by lists＠for-privacy.net 04 May '20

04 May '20

Hi, got multiple abuse in the last 2 weeks. 2 relays with 2 IP run on the server. Someone is always hammering my OR port on one IP. (37.157.255.118:9002) https://metrics.torproject.org/rs.html#details/BD2A34ADE4E603A272FAAD23AEF3… https://metrics.torproject.org/rs.html#details/8EE44717FA55705C12086F3ECD1F… What can I do? Found that in the archive: https://lists.torproject.org/pipermail/tor-relays/2017-September/013030.html the 5th complaint: ############################################################################################################## To Whom it May Concern, You have a system on your network that is actively scanning and/or attacking external sites on the Internet. This can come from many sources and because it is often difficult to detect this activity, we are sending this E-mail in an attempt to help you solve the problem. We have detected your system with an IP of, 37.157.255.118, scanning a client we monitor. This was not a short attack but a prolonged scan and/or probe that was designed to find and intrude into the target network. This may be someone on your network who is actively trying to hack others. This person may be a legitimate user on your network or it may be that this system has been compromised and is being used by someone to hack others. It is also likely that the system is running automated tools that have been installed to perform these actions without any human intervention. Below is the information about the attack. Keep in mind that the source IP of our client has been sanitized for anonymity. Date: 04/30/2020 Time: 11:05:37 Time Zone: America/Chicago Source(s): 37.157.255.118 Type of Attack/Scan: Generic Hosts: 10.10.10.182 Log: 37.157.255.118:9002 > 10.10.10.182:24562 Possible Cause: Thank you for your attention to this matter, Masergy email: esp(a)masergy.com -- ╰_╯ Ciao Marco! Debian GNU/Linux It's free software and it gives you freedom!

6 8

(Без темы)
by Станислав 04 May '20

04 May '20

2 2

Recommended router for 200+ Mb/s relay
by Secure Node 03 May '20

03 May '20

Hi, I'm hosting 150+ Mb/s relay for a while now: https://metrics.torproject.org/rs.html#details/333C874B532B3EA7E1A40980B765… I'm looking for new router for good price which can handle more connections and traffic ;-) Can you recommend any specific models? Should I avoid some products lines or companies? It's possible to get something usable in range ~£100 for used one?

6 6

(no subject)
by Станислав 02 May '20

02 May '20

2 4

Debian-tor Vs User
by Kathi Hilton 26 Apr '20

26 Apr '20

Switch from root to user = su usrname >Password. The problems start when I try and su to debian-tor. First I get a query for a password which it doesn't have. So I make a pass for debian-tor and enter it when I su to debian-tor. I enter whoami and the response is: user and not debian-tor. With or without a password it doesn't work. Secondly, if I su debia-tor > passwrd - sudo -u debian-tor nyx it produces a page and a half of pure gibberish. Sudo -i to root and enter nyx, it operates perfectly; and yes I understand I shouldn't run nyx as root. How do I become debian-tor so I can operate my bridge correctly? Adriann -- It can't be, so therefore it isn't - stanton Friedman

8 7

(no subject)
by Станислав 26 Apr '20

26 Apr '20

1 0

Why does my relay often appears offline in Metrics and should I be worry?
by Clément Février 19 Apr '20

19 Apr '20

Hello, I often check my relay trough Metrics, but it often appears as offline after some time, from couple of hours to few days. I think it has this behavior since December 20. However, my relay seems to run normally. I have the usual number of connections when I check in Nyx. I don't see anything in the log. But, in Nyx, I don't see the flags that I see when it appears as online in Metrics. What I do is to restart the service, but I'm not sure if it's what I'm suppose to do. Is there an explanation or can you help me to investigate this issue? FYI, the tor, version 0.4.2.7, is running on a Ubuntu server 18.04 within a LXD container. My relay fingerprint is 33D88F331408141F2A2CC563239E54E48F7A211B https://metrics.torproject.org/rs.html#details/33D88F331408141F2A2CC563239E… Thanks, Clèm

4 5

(Без темы)
by Станислав 18 Apr '20

18 Apr '20

2 1

Got my first abuse
by lists＠for-privacy.net 18 Apr '20

18 Apr '20

Hi, my Family¹ has had an exit for 2 weeks and today the first abuse mail has arrived. First of all, thanks for the templates: https://www.torservers.net/wiki/abuse/templates https://trac.torproject.org/projects/tor/wiki/doc/TorAbuseTemplates I linked these two from the Tor-project: - Common Boilerplate (Tor Intro) - SSH Bruteforce Attempts and wrote the following myself: -------------------------------------- Another good option that we use ourselves is: fail2ban And report to blacklists, which can then be loaded into the router firewalls: https://www.abuseipdb.com/user/33280 Hope this helps! -------------------------------------- I actually wanted to add that the SSH login attempts can be limited. (3-6) Because the logs from the abuse mail showed 100 attempts pro IP. ;-) _Are such notes useful or do such instructions cause even more problems?_ ¹https://metrics.torproject.org/rs.html#search/TorOrDie4privacyNET -- ╰_╯ Ciao Marco! Debian GNU/Linux It's free software and it gives you freedom!

12 20

Help with torrc for Bridge
by ylms 18 Apr '20

18 Apr '20

Hello all I just set up a bridge and want to make sure I didn't forget anything. //the torrc I use Nickname FancyNick ContactInfo see https://example.com/torcontact/ ControlPort 9051 ORPort 443 SocksPort 0 BridgeRelay 1 ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy ServerTransportListenAddr obfs4 0.0.0.0:80 ExtORPort auto CookieAuthentication 1 ExitPolicy reject *:* ExitPolicy reject6 *:* ClientUseIPv6 1 #%include /etc/tor/torrc_family //End of torrc For the family, is this setting needed for a Bridge? Should it be set? Thanks for any advice yl

2 4