- tor-relays - lists.torproject.org

Bridge log indicates missing geoipdb
by nottryingtobelame＠protonmail.com 26 May '20

26 May '20

Thank you for the reply. I have one on a Raspberry Pi 3B+ and one on a Raspberry Pi 4. I believe both are 64-bit ARM.

2 1

Weird Issue With nyx
by AceOfRelays32 26 May '20

26 May '20

Chowning the torrc file fixed it, and I tried adding myself to the Tor group but that doesn't exist for whatever reason. However chowning the torrc file and then rebooting caused Tor to give my relay a new fingerprint which is slightly annoying. New relay though so I'm not too bothered by it. Thanks! -AceOfRelays32-

1 0

Why is this Middle Relay almost unused ?
by petrarca＠protonmail.ch 26 May '20

26 May '20

I'm wondering why this relay is almost unused: Fingerprint 605EE4375EE4C38215C8949F5808863749FD4F4A ? It's running on a 1 Gbit link and there is plenty of unused bandwidth. The bandwidth is set to 42 Mbps (even prioritized on the internet link). There were no outages for months and the connection is stable and fast. There's also plenty of resources available on the actual router (tor instance). Relay monitoring shows usage average around 0.5 - 1 Mbps only (so around 1-2 percent of the available bandwidth). Consensus Weight is down to only 99. Any idea what could be the reason of the low usage, low Consensus Weight ?

1 0

Weird Issue With nyx
by AceOfRelays32 26 May '20

26 May '20

It would seem my relay is fully functional. Being it has only been up for less than 3 hours though I can't 100% confirm that. Anyways, when I launch nyx to check it's status, I get a permission error from /run/tor/control.authcookie. Chowning /run/tor/control.authcookie and then running nyx solves that issue, however it doesn't persist on reboots. Running nyx as root also fixes it. I wrote an alias to automate chowning and running nyx for the time being, but I'm wondering if there is a better fix.

2 1

Bridge log indicates missing geoipdb
by nottryingtobelame＠protonmail.com 26 May '20

26 May '20

Had the following log entries for my bridge: May 25 11:49:50.000 [warn] Failed to open GEOIP file /usr/share/tor/geoip. May 25 11:49:50.000 [warn] We've been configured to see which countries can access us as a bridge, and we need GEOIP information to tell which countries clients are in. Tried to run sudo apt install tor-geoipdb and got this: The following packages have unmet dependencies: tor-geoipdb : Depends: tor (>= 0.4.3.5-1~d10.buster+1) but 0.4.2.7-1~d10.buster+1 is to be installed E: Unable to correct problems, you have held broken packages. I saw on tor-announce that 0.4.3.5 is out, but it looks like the buster package isn't available yet. I made sure I have the tor repo's in /etc/apt/sources.list and I have the proper signatures as everything validates when I run apt update. Is there a way to resolve this?

2 1

Tor Relay Web Ports
by mnlph74 24 May '20

24 May '20

Hi, I'm running a non-exit relay for quite some time now and I would like to open ports 53, 80, 443 (web ports) to be more useful. How do you handle fraudulent complaints? What is the best approach to this situation? Thank you for your help. Sent with ProtonMail Secure Email.

3 8

Re: [tor-relays] Why does it take 4 days to get the HSDir flag back?
by Roger Dingledine 23 May '20

23 May '20

On Thu, May 21, 2020 at 08:03:03PM +0200, tschador(a)posteo.de wrote: > after an update of tor it always take about 4 days to get the HSDir flag > back while the other flags are set very qick. What is the reason for > this delay? It's because the directory authorities are configured to wait that long before assigning the flag. See the MinUptimeHidServDirectoryV2 option: https://gitweb.torproject.org/tor.git/tree/src/feature/dirauth/dirauth_opti… It used to be 25 hours, long ago, with the reasoning that if a relay hasn't been up for a day, then it's too likely to go away again soon, and this churn causes reliability problems in reaching onion services. We changed it to 96 hours in late 2014, when we saw a Sybil attack (many new relays suddenly appearing) and realized that while they wouldn't become Guards for a while, they would become HSDirs quite quickly, and maybe we want to give ourselves a few more days after new relays appear before they get to become HSDirs. And here are two tickets on doing even more to make it hard for jerks to sign up relays with the goal of cheaply getting the HSDir flag: https://bugs.torproject.org/16538 and https://bugs.torproject.org/19162 And of course the long term fix is to drop the deprecated v2 onion service design, since the v3 onion service design is much better at limiting what an HSDir relay can learn about onion services: https://www.youtube.com/watch?v=Di7qAVidy1Y Hope this helps, --Roger

2 1

Re: [tor-relays] How do I add relays to a "family" and what are the benefits?
by Keifer Bly 23 May '20

23 May '20

1 0

How do I add relays to a "family" and what are the benefits?
by Keifer Bly 22 May '20

22 May '20

3 3

Trouble with opening ports for a new bridge
by nottryingtobelame＠protonmail.com 21 May '20

21 May '20

Hello, I have two low-traffic websites hosted on Digital Ocean. Each one is its own Droplet. I setup a Tor bridge on one and it has been running successfully (20-80 clients / 6 hours or so average) so I know this is possible. Now I am trying to setup a bridge on the second Droplet. I have Tor and obfs4proxy installed. My torrc is as follows: Log notice file /var/log/tor/notices.log RunAsDaemon 1 Nickname whatever ExitRelay 0 ExitPolicy reject *:* BridgeRelay 1 BridgeDistribution moat ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy ORPort 6063 ExtORPort auto ContactInfo <nottryingtobelame AT protonmail DOT com> I am pasting the output of netstat -plunt to pastebin for the sake of clarity and space: https://pastebin.com/30UHP5FD And here is a screenshot of the firewall I created on Digital Ocean and applied explicitly to this Droplet: https://imgur.com/a/jm9ZIQ6 I have rebooted the Droplet, deleted and re-created the firewall, and I'm not getting anywhere. Any assistance is appreciated.

2 1