- tor-relays - lists.torproject.org

Re: [tor-relays] Dirport9030
by Nuno Rego 10 Mar '20

10 Mar '20

Problem solved. Cumprimentos; -- Securely sent with Tutanota. Get your own encrypted, ad-free mailbox: https://tutanota.com Mar 4, 2020, 21:37 by : > I have a problem.> > I am learning, and I have 4 active relays.> > I used the same configuration on the 4. Recently 2 of them lost the Guard, HSdir and V2Dir flags.> > On the page > https://metrics.torproject.org/rs.html#search/TugaOnion> I see that DirPort is 0 instead of 9030. I haven't changed anything, and in the relay configuration there is 9030. Any suggestions on how to solve the problem> > ? > > Cumprimentos; > > -- > Securely sent with Tutanota. Get your own encrypted, ad-free mailbox: > https://tutanota.com >

3 3

Re: [tor-relays] How to Limit Bridge Traffic
by entensaison＠use.startmail.com 06 Mar '20

06 Mar '20

Hi, On Thursday, March 5, 2020 at 8:24 PM, Imre Jonk <imre(a)imrejonk.nl> wrote: > Hi Eddie, > > On Wed, 2020-03-04 at 12:34 -0800, Eddie wrote: >> Does BandwidthRate apply to bridges. I can (hopefully) guess that >> RelayBandwidth doesn't. >> Does the AccountingMax apply. > I am almost certain that all three options apply to bridges as well. > Note that BandwidthRate applies to all TCP data (not the TCP headers > or > DNS traffic), while RelayBandwidth* applies to the _relayed traffic_ > only. > >> I noticed the following in the manual: >> >> If you have bandwidth cost issues, enabling hibernation is >> preferable >> to setting a low bandwidth, since it provides users with a >> collection >> of fast servers that are up some of the time, which is more useful >> than a set of slow servers that are always "available". >> >> Does that advice apply equally to bridges, assuming that the >> Accounting options do apply. Or would it more advantageous for a >> bridge to be constantly available, as switching bridges isn't as >> seamless as switching relays. > That's an interesting question. Bridges are required to provide at > least 1 Mbit/s bandwidth, but I can't find anything related to uptime > requirements (except for the two hours a day minimum). I'd say that > the > advice therefore also applies to bridges. The Tor client software can > be configured to use multiple bridges. I would say the recommendation to use AccountingMax does not apply for bridges. It's just a subjective impression but there are often people complaining that most bridges they get handed out don't work or stop working after a short time. Some of these people end up believing that they are unable to use Tor at all from their location, because their adversary successfully detected the bridge. (Which might be true in some cases.) In order to avoid confusion for people who depend on using bridges it seems to make more sense to limit the bandwith instead.

1 0

How to Limit Bridge Traffic
by Eddie 05 Mar '20

05 Mar '20

Hi, I'm quite happy to continue to run a couple of bridges on my VPC, but I need to understand how to manage the bandwidth so I'm not being charged for exceeding it's monthly allocation. Does BandwidthRate apply to bridges. I can (hopefully) guess that RelayBandwidth doesn't. Does the AccountingMax apply. I noticed the following in the manual: If you have bandwidth cost issues, enabling hibernation is preferable to setting a low bandwidth, since it provides users with a collection of fast servers that are up some of the time, which is more useful than a set of slow servers that are always "available". Does that advice apply equally to bridges, assuming that the Accounting options do apply. Or would it more advantageous for a bridge to be constantly available, as switching bridges isn't as seamless as switching relays. Cheers.

2 1

playing around with relay flags?
by Basajauntxo 05 Mar '20

05 Mar '20

My relay, 83A802311F37647C243CF06970BA111E0E543CCE has been changing flags from "fast, running. stable", to "none" without and apparent reasong to trigger such changes. It can take up to 2 Mb/s connections and traffic up tp 6GB daily. The thing runs on a metered connection. If for some reason these specs have become too low please specify. Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2

Should new exit relays be probed for public DNS resolvers
by Nathaniel Suchy 05 Mar '20

05 Mar '20

There has been discussion over the past several years that the Tor network should not use public DNS resolver as it has security implications on the Tor network (https://medium.com/@nusenu/who-controls-tors-dns-traffic-a74a7632e8ca) Should new Tor Exit Relays be probed and not included in the consensus until they're running their own DNS resolver and not relying on a public one?

4 6

Dirport9030
by Nuno Rego 04 Mar '20

04 Mar '20

I have a problem. I am learning, and I have 4 active relays. I used the same configuration on the 4. Recently 2 of them lost the Guard, HSdir and V2Dir flags. On the page https://metrics.torproject.org/rs.html#search/TugaOnion I see that DirPort is 0 instead of 9030. I haven't changed anything, and in the relay configuration there is 9030. Any suggestions on how to solve the problem ? Cumprimentos; -- Securely sent with Tutanota. Get your own encrypted, ad-free mailbox: https://tutanota.com

1 0

Stable flag not appearing on my bridge.
by Keifer Bly 01 Mar '20

01 Mar '20

Hi all, So my bridge at https://metrics.torproject.org/rs.html#details/386E99371B8CD938248940B754F1… Is not getting the stable flag despite being running for several weeks with only minor interruption in between. Is the stable flag no longer used for bridges? Thank you. -- --Keifer

2 1

So here is my working script of automatically starting windows tor relays bridges when windows starts, and trying to write script to auto update.
by Keifer Bly 28 Feb '20

28 Feb '20

Hi all, So here is my script for automatically starting a Windows (Expert bundle based) relay or bridge when windows starts. Open a new notepad document. Then add the following to it: Cd c:/pathwheretorexpertbundleisindtalled tor.exe -f torrc.txt (assuming your torrc is a text file). Then save this file as batch file in the “startup” folder which should be at C:\ProgramData\Microsoft\*Windows*\Start Menu\Programs\*Startup* *What this does is it creates a script for windows to automatically run at startup that tells the os to point to the directory tor expert bundle is installed in and launch tor.exe and read the configuration file. This is tested and working for me. But I am still trying to write a script to automatically download and install the newest tor version when released as well as obfs4, proving difficult as the url changes with each version. Any thoughts are appreciated, thx very much.* -- --Keifer

1 0

Why MyFamily?
by [REDACTED] 27 Feb '20

27 Feb '20

Last week i got an email with a warning that some of my relays are missing the correct MyFamily setup and that i am a risk to do end-to-end correlation attacks together with a list of all relays i operate plus one relay which uses the same name than i use but is not operated by me. I already knew that not all of my relays have a correct MyFamily setup because as long as i am not sure if they will stay i usually dont include them in MyFamily because it is a pain to edit every torrc if they anyway will disappear again soon. I did it that way with all relays before and when i am sure that the hoster is okay with me and that i am okay with the hoster i always included them in MyFamily. In the received email nothing was written that someone might expect an answer from me so i deleted that email and to not trigger that warning again i deleted the contact info from these specific relays for now. A few days later i got a message that some of my relays will soon get rejected because i did not responded to the previous email. I explained why i do not have a correct MyFamily setup and i explained that one of these relays is not operated by me even if it has the same name than one of my relays. The answer of the bad-relays mailing list was that its important for them to know that one of the relays tried to look like me and that i can use a third-party tool for setting up the MyFamily and that further discussion about the MyFamily is more suitable for the relays mailinglist. What i learned from that: - The bad-relays team expect an answer to their emails even if they do not tell you that in the first email and rather send you a second email that they will soon reject your relays if you dont answer them. - I could do an end-to-end correlation attack (I knew that already and would not use the same name and contact info on my relays if i would like to do that) - It is possible for them to pin relays to specific operators without relying on the contact info or MyFamily entrys (I assume they guess that by looking at the relays names because otherwise they hadn't put a relay which is not operated by me into my warning message) - If setting up the MyFamily option is too painful for you then you can use a third party tool which is not part of the torproject - Relays names are free to choose and double entrys are okay but if someone operates an relay with a name you choosed before then you can report that operator to the bad-relays list because that operator might be malicious (Thankfully my relays are not called "Unnamed") So for what reason do i set the MyFamily option beside making a Hidden Service Guard discovery attack more easy?

6 7

DNSEL (exit relays list) service changes
by Iain Learmonth 27 Feb '20

27 Feb '20

Hi, In order to simplify the operation of the Tor DNS exit list service, which is used to identify if a connection is from a Tor exit relay, I am planning to remove the features that filter by exit policy. We recommend that if you are running an exit relay then you should dedicate an IP address to that and not be using it for other activities. As such, I do not think this is going to affect exit relay operators as exit relays are unlikely to be talking to services that their exit policy does not allow talking to anyway. Still I am asking here to make sure that this change isn't going to have any serious negative effects. Has any operator deliberately excluded anything from their exit policy in order to have TorDNSEL report to service operators that the connection is not from an exit relay? Thanks, Iain.

1 0