- tor-relays - lists.torproject.org

NTP and tor
by grarpamp 04 Oct '18

04 Oct '18

Further NTP client variations... https://chrony.tuxfamily.org/ https://github.com/bsdphk/Ntimed https://leaf.dragonflybsd.org/cgi/web-man?command=dntpd&section=8 http://cr.yp.to/clockspeed.html

1 0

Plans to add IPv6 exit nodes to list of Tor exit nodes
by Gabbi Fisher 03 Oct '18

03 Oct '18

Hi there! I wanted to see if there are any plans to add Tor exit nodes with IPv6 addresses to https://check.torproject.org/exit-addresses. I've observed some while using Tor, but do not see them on this list. Thanks so much! Gabbi

2 1

Question Re: firewall rules for obfs4 bridge relay
by torrelay.europa＠keemail.me 03 Oct '18

03 Oct '18

Hello, I'm in the process of setting up a couple of obfs4 bridge relays on Ubuntu server 18.04. I'm endeavoring to apply strict firewall rules to ensure only the necessary ports are open. In accordance with the configuration (below) I've allowed port 9001: #Bridge config RunAsDaemon 1 ORPort 9001 BridgeRelay 1 ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy ExtORPort auto #Set your bridge nickname and contact info ContactInfo <your-contact-info> Nickname pick-a-nickname I've also allowed port 9051 to enable me to connect to the obfs4 server via onionbox. After starting the Tor service the Tor logs report, Opening Socks listener on 127.0.0.1:9050 Opening Control listener on 127.0.0.1:9051 Opening OR listener on 0.0.0.0:9001 Extended OR listener listening on port XXXXX. Registered server transport 'obfs4' at '[::]:33919' All of the ports listed (above) appear to be fixed ports that open each time I start/restart Tor. However, the "Extended OR listener listening on port XXXXX" changes on each start/restart. I can see the configuration (above) instructs ExtORPort auto. I've looked online where there is some advice suggesting the auto setting for ExtORPort is important for security reasons, however, if I'd like to have strict firewall rules the auto setting becomes problematic. Currently, I've allowed port 9001 & the Tor logs report, Now checking whether ORPort XXX.XXX.XXX.XX:9001 is reachable... Self-testing indicates your ORPort is reachable from the outside. I'd be grateful for some advice on which ports I should keep open, to ensure I can provide the very best service & good security practice both for the client & the server - thanks :) Best regards, Kenneth

2 3

Re: [tor-relays] bridge on the public server - IP reputation
by entensaison＠use.startmail.com 02 Oct '18

02 Oct '18

> HI, > > I have a VPS server with fast internet connection. > I would like to configure tor bridge on that machine. > > VPS server has configured some services already. If tor bridge > service > will run on that machine (IP), will it generate any impact for IP > reputation ? I mean blacklisting. > > Greetings > Fazii A bridge's IP is not on a public list. So generally running a bridge shouldn't affect your reputation at all. Average people who don't use tor will not know that you run a bridge on that IP and don't care unless you tell them. Average people who want to use that bridge will appreciate it. Other service providers will not know about that fact and probably don't care either unless you tell them, because it doesn't affect their services. Since a bridge is used as a first hop in a tor circuit and not as an exit only other tor relays will receive connections from it. If your ISP doesn't allow you to run a tor relay but doesn't put too much effort into monitoring your traffic they'll probably not notice that you are running a bridge. A sensor who tries to block access to the tor network may find out your IP and block access to your other services, too. If you provide a service that is being sensored in some countries then people from those countries probably won't be able to connect to your bridge either.

1 0

Hetzner bandwidth terms update
by Roman Mamedov 01 Oct '18

01 Oct '18

Hello, It appears that Hetzner has changed their bandwidth terms from "20 TB outgoing per month, then capped to 10 Mbit" to fully unmetered 1 Gbps connection on most servers: https://wiki.hetzner.de/index.php/Traffic/en Discussed at: https://www.lowendtalk.com/discussion/152498/hetzner-dedicated-servers-now-… Adjust your relay bandwidth limits accordingly. :) -- With respect, Roman

2 1

bridge on the public server - IP reputation
by fazii＠vfemail.net 01 Oct '18

01 Oct '18

HI, I have a VPS server with fast internet connection. I would like to configure tor bridge on that machine. VPS server has configured some services already. If tor bridge service will run on that machine (IP), will it generate any impact for IP reputation ? I mean blacklisting. Greetings Fazii ------------------------------------------------- ONLY AT VFEmail! - Use our Metadata Mitigator to keep your email out of the NSA's hands! $24.95 ONETIME Lifetime accounts with Privacy Features! 15GB disk! No bandwidth quotas! Commercial and Bulk Mail Options!

1 0

relay and bridge on the same IP
by fazii＠vfemail.net 01 Oct '18

01 Oct '18

Hi, is it possible to build tor non-exit relay and bridge on the same IP, the same tor instance ? I have running Freebsd non-exit relay instance and I can build more instances in different countries, the question is if its technical possible to have bridge and relay on the same machine ? Does it make sense from the securit point of view ? Fazii ------------------------------------------------- ONLY AT VFEmail! - Use our Metadata Mitigator to keep your email out of the NSA's hands! $24.95 ONETIME Lifetime accounts with Privacy Features! 15GB disk! No bandwidth quotas! Commercial and Bulk Mail Options!

2 2

Re: [tor-relays] Jerk spammers on tor-relays (was Re: Fwd: Tor GuardRelay)
by Keifer Bly 01 Oct '18

01 Oct '18

So, for me, it appears that the jerk spammers have advanced, Instead of sending spam to the tor-relays(a)lists.torproject.org email address, they are now directly sending spam to specific addresses subscribed to the list. I got one today from colemanrosettad(a)gmail.com, and have been receiving some over the last few days that were sent directly to this email address. I did not think they were related, but the other email addresses the one I received today was also sent to the addresses below, which I believe are addresses that are subscribed to the list. I have reported it to Google via their abuse report email address which is registrar-abuse(a)google.com, so I will see what they say (and forward it to the list if requested). The other addresses were: johndalton289(a)gmail.com, and teor2345(a)gmail.com. I tried attaching a photo of the "to" field but it was rejected due to size limitations. Just thought I'd give a heads up. On Thu, Sep 20, 2018 at 9:10 PM Keifer Bly <keifer.bly(a)gmail.com> wrote: > So, for me, it appears that the jerk spammers have advanced, Instead of > sending spam to the tor-relays(a)lists.torproject.org email address, they > are now directly sending spam to specific addresses subscribed to the list. > I got one today from colemanrosettad(a)gmail.com, and have been > receiving some over the last few days that were sent directly to this email > address. I did not think they were related, but the other email addresses > the one I received today was also sent to the addresses in the attached > photo, which I believe are addresses that are subscribed to the list. I > have reported it to Google via their abuse report email address which is > registrar-abuse(a)google.com, so I will see what they say (and forward it > to the list if requested). > > Just thought I'd give a heads up. > > > > On Fri, Jul 13, 2018 at 7:47 PM Keifer Bly <keifer.bly(a)gmail.com> wrote: > >> I looked it up. You can forward the spams that the Gmail address are >> sending to registrar-abuse(a)google.com, which reports spam emails and >> inappropriate content being sent by Gmail users to Google. Try that. >> >> >> >> *From: *Mirimir <mirimir(a)riseup.net> >> *Sent: *Friday, July 13, 2018 7:41 PM >> *To: *tor-relays(a)lists.torproject.org >> *Subject: *Re: [tor-relays] Jerk spammers on tor-relays (was Re: Fwd: >> Tor GuardRelay) >> >> >> >> On 07/13/2018 03:07 PM, Keifer Bly wrote: >> >> > Dang. I stopped getting them for a while due to the SPAM filter I >> >> > configured in Gmail, however they are now coming through again. These >> >> > spammers are trying to be smart by sending these spam messages from >> >> > different domains; they are now coming from >> >> > scarlettsofia710182(a)it.argmx.com >> >> > >> >> > Anyone else getting these? >> >> > >> >> > Thanks. >> >> >> >> I haven't received those after posts since June 27. And nothing from >> >> *.argmx.com. But I am getting sex spam from a few Gmail addresses, with >> >> blank subject lines. New, and perhaps related. >> >> >> >> > On Sat, Jun 9, 2018 at 10:38 PM Roger Dingledine <arma(a)mit.edu> wrote: >> >> >> >> <SNIP> >> >> >> >> >> Maybe there is a mailman module that lets you send a different >> watermarked >> >> >> mail to each subscriber, or to send mails out with different timing >> >> >> patterns to do a binary search over the list, in order to discover >> which >> >> >> addresses are triggering the spam? But I don't know of an easy way to >> >> >> do it. >> >> >> >> That would be a bad precedent, I think ;) >> >> >> >> >> Also, I hear from at least one person that some tor-dev subscribers are >> >> >> getting spams too. :( >> >> >> >> Searching for the spam addresses, I found reports from other mail lists. >> >> So it's not just Tor lists. >> >> >> >> <SNIP> >> >> _______________________________________________ >> >> tor-relays mailing list >> >> tor-relays(a)lists.torproject.org >> >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >> >> >> >

8 28

"darknode*" relays at Digital Ocean risk getting rejected from the network
by nusenu 29 Sep '18

29 Sep '18

1 2

"Safe" ports for exit node that won't attract LEA?
by Isaac Grover, Aileron I.T. 27 Sep '18

27 Sep '18

Good morning fellow exit node operators, I have set up an exit node in my home on a separate IP address away from all other traffic. I'm well aware of the risks from dated articles posted many years ago, so if you're going to send warnings and scary stories, please do so off list. I won't be running it with all ports open; rather I'm interested in ports that still provide benefit to the Tor network but don't attract the attention of law enforcement. Currently I am exiting port 8333 (Bitcoin) and nothing else, but am open to other non - risky ports. Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" Office: 715-377-0440, Fax:715-690-1029, Web: www.aileronit.com

3 2