- tor-relays - lists.torproject.org

notices.log: "[warn] Rejecting DNS request from disallowed IP"
by petrarca＠protonmail.ch 23 Nov '18

23 Nov '18

Hi, on a small server I did try to force local DNS requests to the local Tor via iptables/ferm (Nat, Output-Chain, protocol udp dport domain REDIRECT to-ports 5300). Torrc has the following included: 'DNSPort 127.0.0.1:5300'. Unfortunately, it doesn't work as expected, but I get a warning in Tor's notices.log stating "[warn] Rejecting DNS request from disallowed IP" for each DNS request and even after hours of searching around and trying different configs I could't find the root cause yet. Question: what does "disallowed IP" really mean, i.e. what IPs are allowed by Tor and which ones are not? Any ideas and hints on how to investigate further are highly welcome! :-) to

2 2

tor relay - impact on e-mail system reputation
by dlugasny＠protonmail.com 22 Nov '18

22 Nov '18

Hi, I haven an e-mail server which has a lot of not consumed resources (CPU/Traffic etc.). Base on my practice I know that my E-mail server will loose reputation if Tor relay will run on the same IP. Is there any other way to utilize resources of that machine without any reputation impact on the IP. Thanks in advance for any feedback. Cheers Dlugasny Sent with [ProtonMail](https://protonmail.com) Secure Email.

5 5

Blutmagie retired
by starlight.2018q2＠binnacle.cx 22 Nov '18

22 Nov '18

The operator of Blutmagie Torstatus, Olaf Selke has retired the service. For years Blutmagie has been a fantastic resource for the Tor community and I am writing to express my gratitude to Olaf for his wonderful contribution and the time and effort he expended maintaining it. Thank you Olaf!

9 17

tor relay on freebsd - how to upgrade it
by dlugasny＠protonmail.com 21 Nov '18

21 Nov '18

Hi, since few days nyx showing that my Tor relay is outdated. (Tor 0.3.4.8) This relay is running on Freebsd. I have not so big expirience with BSD systems... Does any one could help me to update my tor relay ? Thanks in advance for any support. Cheers Dlugasny Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2

Updating tor relay software to 0.3.4.9 through google backup and sync on Windows 10
by Keifer Bly 19 Nov '18

19 Nov '18

Hello list, So I am in a bit of a dilemma. I am currently away from the computer where my obfs4 bridge at https://metrics.torproject.org/rs.html#details/148BD64BED9F2C27637D986DE032… runs off of and will be so for the next two weeks. I had set up TeamViewer so I could remote administer my bridge while I could not physically access the machine. But then, like a complete dork, I forgot TeamViewer automatically changes the connection password every few days or so, I am waiting to hear back from them if they can reset it for me. I am trying to access it because my bridge is currently running tor 0.3.4.8 (via the tor expert bundle) and am trying to update it to tor 0.3.4.9, but now may not be able to do so because the TeamViewer password changed (smacks face for forgetting it does that). I am running my relay via the tor expert bundle, which is just checked and is still on tor 0.3.4.8 (I am guessing the tor expert bundle is updated on a somewhat different schedule). I use Google Backup and Sync to automatically backup my tor bridge keys, etc, and tor.exe is also backed up. Probably not, but I wonder if there would be a way to upload tor 0.3.4.9.exe in place of 0.3.4.8 and sync it to my computer? Probably not as this bridge is running on a Windows machine, but thoughts are appreciated. Thank you.

1 0

cyb3r1n73L Relays MyFamily Configuration
by nusenu 18 Nov '18

18 Nov '18

Hi cyb3r1n73L, thanks for adding so many new tor exit relays to the network. Please do not forget to set your "MyFamily" configuration parameter on all your relays, so Tor clients are not at risk of using your relays in multiple positions in a single circuit. You can find the instructions in the Tor relay guide: https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#Importantifyour… > 2018-11-17 > > | Up | Ext | JoinTime | IP | AS | CC | ORp | Dirp | OS | Version | Nickname | eFamMembers | FP | > |------+-------+------------+--------------+--------------------+------+-------+--------+-------+-----------+------------+---------------+------------------------------------------| > | 1 | 1 | 17:17:39 | 158.255.3.14 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | hollow | 1 | 008164D073537EEE099B83935A87A80FABCE365D | > | 1 | 1 | 17:36:32 | 158.255.3.22 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | plague | 1 | 04148208898E2CB692E66545AC3999F2E46EFC9F | > | 1 | 1 | 20:00:36 | 158.255.3.37 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | crow | 1 | 1AAE2E257FBD5669C3788BC9152CFCC3F08A2005 | > | 1 | 1 | 20:00:45 | 158.255.3.27 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | phoenix | 1 | 069CBCAC9BA17A7DB338EADB77B583DB3B9EB575 | > | 1 | 1 | 20:00:45 | 158.255.3.35 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | charade | 1 | B7130260E4FCBE73EB3A0707925C5C64693777C5 | > | 0 | 1 | 20:00:46 | 158.255.3.39 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | aspect | 1 | 97EEA4F9B39405D7B33C154CB5E346FFBAE520AA | > | 1 | 1 | 20:00:46 | 158.255.3.36 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | oddity | 1 | B79B76BECA45EDC29E36CCBF8DD614F9214B69FC | > | 1 | 1 | 20:00:47 | 158.255.3.38 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | acid | 1 | D95ADED4FF29B2C256FD3AA67C1E2A662F751D89 | > | 1 | 1 | 21:37:25 | 158.255.3.39 | Mir Telematiki Ltd | ru | 9001 | 80 | Linux | 0.3.4.9 | aspect | 1 | C8DA052842E29A8153A2F769BC387865C2F75F4C | > 2018-11-14 > > | Up | Ext | JoinTime | IP | AS | CC | ORp | Dirp | OS | Version | Nickname | eFamMembers | FP | > |------+-------+------------+-----------------+------+------+-------+--------+-------+-----------+------------+---------------+------------------------------------------| > | 1 | 1 | 19:08:13 | 185.234.217.231 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | indie | 1 | B82A940CDAD62501EB8B1BB74FAE2D11B72D9F18 | > | 1 | 1 | 19:20:08 | 185.234.217.232 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | coyote | 1 | 171BD73EB0C2B0AA37769716B6CAE903B7A364E1 | > | 1 | 1 | 19:26:20 | 185.234.217.233 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | cryo | 1 | 1A5AB832F2091EB5AFAD1FFB1895FBA4D7EFB6BC | > | 1 | 1 | 19:31:16 | 185.234.217.234 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | rags | 1 | E1430BEB656EA0702636CCF5722DADFE30C5B581 | > | 1 | 1 | 19:36:11 | 185.234.217.235 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | gigi | 1 | 34CB1480BD47F7258E86496900B2AC169E19EEA5 | > | 1 | 1 | 19:43:12 | 185.234.217.241 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | slash | 1 | 927ABD6372C0A333E2FD74248267CF29DE6C0CC2 | > | 1 | 1 | 19:47:10 | 185.234.217.242 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | rebel | 1 | F9211E9641A980BD24D3C3D6AEC289A303B50A44 | > | 1 | 1 | 19:50:57 | 185.234.217.243 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | reaper | 1 | 27157FFFF473AF58B66B43EA1DEF8B38DC480C10 | > | 1 | 1 | 19:55:32 | 185.234.217.244 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | buster | 1 | 42B4FE0E2DED79C3C76E0847C2BC5280763A9184 | > | 1 | 1 | 22:31:42 | 185.234.217.245 | None | ie | 9001 | 80 | Linux | 0.3.4.9 | jazzy | 1 | 35832538B8EF7577628DC65AA489B0DFD7ECEA16 | -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

1 0

upgrade theonionbox
by TorGate 16 Nov '18

16 Nov '18

Hi to all, i have truble with a upgrade of onionbox. :~ % sudo pip install --upgrade theonionbox Password: Collecting theonionbox Using cached https://files.pythonhosted.org/packages/f6/90/bab164846bc3f59c2b05f9c15bcf6… Requirement already satisfied, skipping upgrade: psutil>=5.4.0 in /usr/local/lib/python2.7/site-packages (from theonionbox) (5.4.3) Requirement already satisfied, skipping upgrade: requests>2.18 in /usr/local/lib/python2.7/site-packages (from theonionbox) (2.18.4) Requirement already satisfied, skipping upgrade: PySocks>=1.6.7 in /usr/local/lib/python2.7/site-packages (from theonionbox) (1.6.8) Requirement already satisfied, skipping upgrade: bottle>=0.12.13 in /usr/local/lib/python2.7/site-packages (from theonionbox) (0.12.13) Requirement already satisfied, skipping upgrade: stem<=1.6,>=1.5.4 in /usr/local/lib/python2.7/site-packages (from theonionbox) (1.6.0) Requirement already satisfied, skipping upgrade: tzlocal>=1.5 in /usr/local/lib/python2.7/site-packages (from theonionbox) (1.5.1) Requirement already satisfied, skipping upgrade: urllib3>=1.22 in /usr/local/lib/python2.7/site-packages (from theonionbox) (1.22) Requirement already satisfied, skipping upgrade: apscheduler<3.*,>=2.1.2 in /usr/local/lib/python2.7/site-packages (from theonionbox) (2.1.2) Requirement already satisfied, skipping upgrade: futures>=3.2 in /usr/local/lib/python2.7/site-packages (from theonionbox) (3.2.0) Requirement already satisfied, skipping upgrade: chardet<3.1.0,>=3.0.2 in /usr/local/lib/python2.7/site-packages (from requests>2.18->theonionbox) (3.0.4) Requirement already satisfied, skipping upgrade: certifi>=2017.4.17 in /usr/local/lib/python2.7/site-packages (from requests>2.18->theonionbox) (2017.11.5) Collecting idna<2.7,>=2.5 (from requests>2.18->theonionbox) Downloading https://files.pythonhosted.org/packages/27/cc/6dd9a3869f15c2edfab863b992838… (56kB) 100% |################################| 61kB 1.4MB/s Requirement already satisfied, skipping upgrade: pytz in /usr/local/lib/python2.7/site-packages (from tzlocal>=1.5->theonionbox) (2017.3) Installing collected packages: theonionbox, idna Found existing installation: theonionbox 4.1 Uninstalling theonionbox-4.1: Successfully uninstalled theonionbox-4.1 Error unknown encoding: string-escape while executing command /usr/local/bin/python2.7 -u -c "import setuptools, tokenize;__file__='/tmp/pip-install-6jsgKW/theonionbox/setup.py';f=getattr(tokenize, 'open', open)(__file__);code=f.read().replace('\r\n', '\n');f.close();exec(compile(code, __file__, 'exec'))" install --record /tmp/pip-record-saoyTd/install-record.txt --single-version-externally-managed --compile Running setup.py install for theonionbox ... error Rolling back uninstall of theonionbox Exception: Traceback (most recent call last): File "/usr/local/lib/python2.7/site-packages/pip/_internal/cli/base_command.py", line 143, in main status = self.run(options, args) File "/usr/local/lib/python2.7/site-packages/pip/_internal/commands/install.py", line 366, in run use_user_site=options.use_user_site, File "/usr/local/lib/python2.7/site-packages/pip/_internal/req/__init__.py", line 49, in install_given_reqs **kwargs File "/usr/local/lib/python2.7/site-packages/pip/_internal/req/req_install.py", line 791, in install spinner=spinner, File "/usr/local/lib/python2.7/site-packages/pip/_internal/utils/misc.py", line 659, in call_subprocess stdout=stdout, cwd=cwd, env=env, File "/usr/local/lib/python2.7/subprocess.py", line 394, in __init__ errread, errwrite) File "/usr/local/lib/python2.7/subprocess.py", line 1046, in _execute_child child_exception = pickle.loads(data) File "/usr/local/lib/python2.7/pickle.py", line 1388, in loads return Unpickler(file).load() File "/usr/local/lib/python2.7/pickle.py", line 864, in load dispatch[key](self) File "/usr/local/lib/python2.7/pickle.py", line 977, in load_string self.append(rep.decode("string-escape")) LookupError: unknown encoding: string-escape

2 1

Re: [tor-relays] Bridge Relay Internet Speed Much Slower Than Actual Internet Speed
by entensaison＠use.startmail.com 16 Nov '18

16 Nov '18

Hi Keifer, > Hello List, my bridge relay at > https://metrics.torproject.org/rs.html#details/148BD64BED9F2C27637D986DE032… > > Is reporting the relay speed is between 50 kb/s and 60 kb/s, when the > speed of the internet connection it is running off of is actually > much faster than this, generally about 50mbps (the relay is running > on a home internet connection, where the isp is Charter > Communications / Spectrum). As a result, I have the “fast” flag > on/off randomly. > > I do not want my bridge to suck up a huge amount of my internet > speed, but why would the tor software report relay speed that is so > much slower than the speed of the internet connection it runs off of? > > Any thoughts are appreciated, thank you The advertised bandwidth is not the bandwidth of your connection but the bandwidth observed. Your relay probably hasn't been used as a relay so far. When it's being used the advertised bandwidth will rise. Are bridges chosen based on their advertised bandwidth?

5 6

Explaining Tor to worried parent
by DrNotThatEvil 14 Nov '18

14 Nov '18

Hi everybody, My exit got suspended for a little a few hours today, even tho I contacted my isp before to explain the situation (it was related to a spam blacklist suspend policy). I got the matter resolved quickly but due to the annoyance I mentioned it to a parent. The conversation quickly devolved into worry and fear advising me to stop running it, to be honest now that I think about it from her perspective I can't blame her for thinking like this. However the responses and explanations from my end never hit the mark, I know why I'm doing it I know their might be risks but that I'm doing something that I believe in. Have you guys/gals ever faced situations similar to this? How did you handle it? Secondly she also raised the following question: 'if you don't do it somebody else will, so why do you put yourself at risk? Thirdly she detected from the conversation that a Exit Relay might not be free from legal issues and I can't say that this is not the case, but I do think her view of these issues is utmost grim bringing up my future and employment opportunities. How would do you view/explain the severity of these legal issues? Kind Regards, Willmar

5 9

Bittorrent Legal Noise, Advocacy [re: Explaining Tor to worried parent]
by grarpamp 14 Nov '18

14 Nov '18

> Yeah, one of the complete bullshit things. I get around 200 emails per day > like this one: > > Protocol: BITTORRENT This should tend to diminish when you begin creating and showing people how to use filesharing and distributed storage protocols operating entirely within the various encrypted anonymous overlay and storage networks that exist out there. Talking "Privacy" and "Freedom" is hardly enough to get any percentage of various communities migrating inside and safely using these networks, nor to get much change in the world, you have to show them how to use real world apps over those nets. The *years* of anti speech and dis enablement from Tor about agnostic Bittorrent in particular has no doubt hindered some onionification et al of same. So you get that many more bullshit emails and leave lots of unprotected non private and un free peoples still out hanging using clearnet. > I run into this all the time whilst proselytizing for Tor, as for > example at a local non-profit makerspace recently. "Kiddie porn! FBI > raids!" was the hue and cry, whereupon people's brains shut down. But > this is very much a public relations issue Jacob Appelbaum has some great presentations and arguments made very much in the public free speech space mentioning and addressing some of what you speak of. You should look them up on youtube. Move to tor-talk to discuss more. Obligatory PJDU... https://www.youtube.com/watch?v=jW3PFC86UNI > I mentioned [Tor] to a parent. > > The conversation quickly devolved into worry and fear advising me to > stop running it, > to be honest now that I think about it from her perspective I can't > blame her for thinking like this. > However the responses and explanations from my end never hit the mark, I > know why I'm doing it > I know their might be risks but that I'm doing something that I believe in. > > Have you guys/gals ever faced situations similar to this? How did you > handle it? > > Secondly she also raised the following question: > 'if you don't do it somebody else will, so why do you put yourself at risk? > > Thirdly she detected from the conversation that a [node] might not > be free from legal issues and > I can't say that this is not the case, but I do think her view of these > issues is utmost grim bringing up > my future and employment opportunities. > How would do you view/explain the severity of these legal issues?

1 0