- tor-relays - lists.torproject.org

Protecting the bridge port from active probes
by Marek Szuba 30 Mar '19

30 Mar '19

Hello, I run a private obfuscated Tor bridge for myself and some friends. All in all it has worked fine so far but having recently run some security scans on the bridge host, I now wonder how resistant to active probing my bridge is. Apologies if this has already been asked, I have yet to find a searchable archive of this list. Anyway, here is my logic. In order to operate properly, my bridge must have its ORPort reachable from the Internet. I have chosen a port to be used for this purpose at random but these days, scanning all 64k TCP ports on a host takes mere minutes. The X.509 server certificate offered on the ORPort is rather suspicious, if only because of the randomly generated name; I suspect there might be other peculiarities as well. Therefore, I strongly suspect that it wouldn't take more than a few minutes for any attacker employing active probing to detect my bridge and block access to it. Does this make sense? And in any case, is there anything else I could do to protect my bridge against active probing? The best I could come up with is to make the bridge host periodically change the ORPort, I reckon wouldn't really help because if I had to restart tor on the bridge every few minutes the it wouldn't be of much use connectivity-wise. Having the border firewall block or slow down suspected port scans might perhaps make it possible to change the ORPort less frequently but alas, I have no control over the border firewall beyond being able to ask to open or close specific ports on my host. Thank you in advance for your time. -- MS

4 5

Tor website overhaul -- who deserves punishment?
by Ralph Seichter 30 Mar '19

30 Mar '19

Not sure if this is the right place to vent, but here goes: Whoever changed the Tor website's design seems to a) have a serious vision impairment and b) done his utmost to hide access to the Tor source code. I think the site feels dumbed down to cater only to those with the shortest attention spans (and bad eyesight) now. Also, as a relay and exit operator, I care most about the source code and documentation, not some management summary. Was there no QA process involved before rolling out the new website? Annoyed, Ralph

15 22

New TOR
by TERRY McKINNEY 30 Mar '19

30 Mar '19

Say what you like.Tor was great.Now it isn’t.I don’t know code.I do know function. terryGmckinney 201-8725 Oak st Vancouver,BC.Canada V6P4B4 (604)2639203

2 1

Relay without OpenSSL
by Alexander Nasonov 30 Mar '19

30 Mar '19

I recently tried updating one of my relays to Tor 0.4.0.1 compiled with NSS (and without OpenSSL) but it failed to start, see the logs below. I wonder if this configuration is supported at all and whether I should try running a brand new relay instead of updating? Alex [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [notice] Bootstrapped 15% (handshake_done): Handshake with a relay done [notice] Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits [notice] Bootstrapped 90% (ap_handshake_done): Handshake fininshed with a relay to build circuits [notice] Bootstrapped 95% (circuit_create): Establishing a Tor circuit [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [notice] Bootstrapped 100% (done): Done [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) -- Alex

3 5

Relay operators meetup Valencia (28.03.2019)
by Vasilis 27 Mar '19

27 Mar '19

Dear Tor friends and relay operators, Tomorrow (28.03.2019) a relay operators meetup will take place at HackerspaceVLC. When: Thursday, March 28th, 2019 Time: 18:30 Where: Hackerspace Valencia Calle Francisco Martínez, 19, Bajo CP 46020, Valencia (Benimaclet), España Map coordinates: https://www.openstreetmap.org/?mlat=39.48828&mlon=-0.35839#map=19/39.48828/… Event link: https://blog.torproject.org/events/tor-meetup-valencia Hope to see many of you there! Cheers, ~Vasilis

1 0

(no subject)
by Ahmed Ahmed 22 Mar '19

22 Mar '19

2 1

(no subject)
by Ahmed Ahmed 22 Mar '19

22 Mar '19

Aboskenaa(a)gmail.com

1 0

bride&relay one host
by lists＠for-privacy.net 22 Mar '19

22 Mar '19

Hello, Can you run a bride and a middle-relay together on a host? I mean for the safety of users. IPv6 is usually a /64 network and the various IPv4 are usually also from a subnet. -- Ciao Marco!

4 4

IRC meetup time poll
by Colin Childs 22 Mar '19

22 Mar '19

Hi everyone, We are looking at changing the current IRC relay operator meetup time, as well as adding additional times throughout the month. I have created a poll at https://xoyondo.com/dp/oyUpcPqhnnJ6TWz <https://xoyondo.com/dp/oyUpcPqhnnJ6TWz> to collect time preferences for the next meetup (all times are GMT+0). Please add your time preferences by March 15th (1 week from today) to help us better select times that work for you! Thanks, I hope you all have a great weekend!

1 2

New Relay: ShawnWebb01
by Shawn Webb 22 Mar '19

22 Mar '19

Hey all, A few days ago, I put up a new relay on a PC Engines device running HardenedBSD 13-CURRENt/amd64: https://metrics.torproject.org/rs.html#details/57869F7458002476F6AC78F7A61C… I should update ContactInfo soon to reflect the ContactInfo format nusenu would like relays to use. IPv4 address of the relay comes from Verizon FiOS and IPv6 comes from Hurricane Electric's TunnelBroker. Please let me know if you have any questions, comments, or concerns. Thanks, -- Shawn Webb Cofounder and Security Engineer HardenedBSD Tor-ified Signal: +1 443-546-8752 Tor+XMPP+OTR: lattera(a)is.a.hacker.sx GPG Key ID: 0x6A84658F52456EEE GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE

1 0