- tor-relays - lists.torproject.org

Re: [tor-relays] Who is permanently checking my bridge relay?
by teor 04 Dec '18

04 Dec '18

Hi, > On 4 Dec 2018, at 21:27, tschador(a)posteo.de wrote: > > Hi all! > > I wonder who is permanently connecting/checking(?) my Tor bridge relay. > The ip is 66.111.2.129 and the period of the connects are 21 min 21 sec, > e.g.: > > Dec 4 10:32:00 SRC=66.111.2.129 > Dec 4 10:53:21 SRC=66.111.2.129 > Dec 4 11:14:43 SRC=66.111.2.129 > Dec 4 11:36:04 SRC=66.111.2.129 > Dec 4 11:57:26 SRC=66.111.2.129 > Dec 4 12:18:52 SRC=66.111.2.129 > > https://metrics.torproject.org/rs.html#search/66.111.2.129 gives no match. > > Any more experiences with other bridges? A few years ago, I opened a ticket to randomise authority reachability testing: https://trac.torproject.org/projects/tor/ticket/13928 But we triaged it out with the comment: My rationale for redlining it during triage was that the best place to do unpredictable-order testing is probably in a successor to torflow. (sbws is a successor to torflow, and it does randomise the testing order.) Are there any good reasons to randomise the order of authority tests? One good reason is that it breaks patterns in the authority checks, so relays really do need to be up all the time to be listed as reachable. T

1 0

IP addresses on the list
by Charly Ghislain 04 Dec '18

04 Dec '18

We have seen ip addresses posted on this list recently. They were coming from the logs. I think it would be nice if the software powering this list could scramble all ips in message bodies. At least having to reformat them in order to avoid that filter would give the poster some time to realize if it is a good idea to post it in the first place. I am also questioning myself whether addresses should be printed in log files altogether. Maybe even with the unsafe flag on - at least for released versions. If one wants to know which ip is connecting to her bridge, she can use whatever network capture software already existing. Any opinion? Thanks, Charly

3 2

Re: [tor-relays] Who is permanently checking my bridge relay?
by Charly Ghislain 04 Dec '18

04 Dec '18

If it wasn't, would posting the ip address of a client connecting to a bridge in here compromise her anonymity and/or allow one to firewall/blacklist her traffic? Im assuming one could guess the ip address of the running bridge based on the poster email address. On Tue, Dec 4, 2018 at 2:57 PM <tschador(a)posteo.de> wrote: > On 2018-12-04 13:15, George wrote: > > > tschador(a)posteo.de: > > >> I wonder who is permanently connecting/checking(?) my Tor bridge relay. > > > > > > That's the bridge directory authority. > > Ok, thank you. > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >

4 5

Fwd: Throughput of each circuit
by marziyeh latifi 04 Dec '18

04 Dec '18

Hello,I have two questions about tor's relay: 1-How can I calculate the throughput of each circuit in a relay?I mean that how can I calculate the number of cells that are sent from circuit queue to the output buffer per second in each relay? 2-What is the difference between circuit and channel in relays? I'm looking forward to hearing from you! thanks! Marziyeh

3 2

Re: [tor-relays] Who is permanently checking my bridge relay?
by Logforme 04 Dec '18

04 Dec '18

On 2018-12-04 16:33:33, tschador(a)posteo.de wrote: >Furthermore it was clear for me that fix periods of 21 min 21 sec >couldn't be a normal client. Missing more information about bridge >directory authority … >From https://blog.torproject.org/new-bridge-authority: "The Bridge Authority is a simple but essential piece of the Tor Network. Unlike the other directory authorities, the Bridge Authority does not get a vote in Tor's consensus protocol. Instead, it serves to aggregate relay descriptors which Tor Bridges send to it, checking their cryptographic validity and testing that the Bridges' ORPorts within these descriptors are reachable" The last part is what causes the connections you see

1 0

Re: [tor-relays] Who is permanently checking my bridge relay?
by George 04 Dec '18

04 Dec '18

tschador(a)posteo.de: > Hi all! > > I wonder who is permanently connecting/checking(?) my Tor bridge relay. That's the bridge directory authority. g -- 34A6 0A1F F8EF B465 866F F0C5 5D92 1FD1 ECF6 1682

1 0

UbuntuCore relays
by nusenu 02 Dec '18

02 Dec '18

Roger Dingledine wrote: > Btw, all of these UbuntuCore relays are from snap packages run by Tor > enthusiasts Do you indeed mean "all"? Since there have also been other hypothesis about at least some of these "UbuntuCore" relays in the past (see bad-relays ML archive from 2017-11-13), it would be great if you could elaborate on how you came to that conclusion. thanks, nusenu -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

3 5

tor irc
by deadcow＠tuta.io 01 Dec '18

01 Dec '18

i needed som fast help i tried IRC .... started well and when iv got help a= nd pasted the whole torrc file ... bot kicked me out i cant log in ive got = this answer deadcow sets mode +i on deadcow -NickServ- This nickname is registered and protected.=C2=A0 If it is your n= ickname, you may -NickServ- authenticate yourself to services with the IDENTIFY command.=C2= =A0 You are -NickServ- getting this message because you are not on the access list for = the -NickServ- deadcow nickname. * #tor-relays :Cannot join channel (Need to be identified and verified to j= oin this channel, '/msg NickServ help' to learn how to register and verify.= ) how do i get back to the chat ? ive never used irc :( anyway tha question was about bridge. i've started but i have no logs and dont know what is wrong. VPN is off. end of torrc #Bridge config RunAsDaemon 1 ORPort 9001 BridgeRelay 1 ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy # For a fixed obfs4 port (i.e. 9002), uncomment the following line. #ServerTransportListenAddr obfs4 0.0.0.0:9002 # Local communication port between Tor and obfs4. Always set this to "auto"= . "Ext" means # "extended", not "external". Don't try to set a specific port number, nor = listen on 0.0.0.0. ExtORPort auto #Set your bridge nickname and contact info ContactInfo deadcow(a)tuta.io <mailto:deadcow@tuta.io> <mailto:deadcow@tuta.io <mailto:deadcow@tuta.io>> Nickname deadcow something is wrong but what :) thx for help --- Google, Facebook, The government and others are spying on your emails! DO YOU LIKE IT? If not, CHANGE! Securely sent with Tutanota. Claim your encrypted mailbox today! https://tutanota.com

2 1

Conrad Rockenhaus
by torix＠protonmail.com 30 Nov '18

30 Nov '18

Dear All, Has anyone news of Conrad? His servers at greypony have been down a week, which is worrying. TIA, --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 1

Re: [tor-relays] Relay with VPN
by deadcow＠tuta.io 29 Nov '18

29 Nov '18

Hi thanks for the answers. I understand your answers. I can not agree or disagree because I have no idea about it so I believe you and I wont do Relay with VPN :) I am using VPN all the time and I wanted to try run relay.... what you say make sense, so for the time I try, i'll disconnect VPN. I just want to see that my internet is good enough to run it 10/1 but as i've read in the instructions maybe bridge would be better for me ... i have access to internet 120/10 so i could set up relay on that but i need a PC with linux and remote control so getting complicated ... first try out what i have, if cool, later try more and more :) I love the concept of tor, I'd like to promote it :) question: can be laptop ? i think why not, but maybe i'm wrong thanks for helps :) --- Google, Facebook, The government and others are spying on your emails! DO YOU LIKE IT? If not, CHANGE! Securely sent with Tutanota. Claim your encrypted mailbox today! https://tutanota.com Nov 28, 2018, 11:53 PM by tor-relays-request(a)lists.torproject.org: > Send tor-relays mailing list submissions to > > tor-relays(a)lists.torproject.org <mailto:tor-relays@lists.torproject.org> > > To subscribe or unsubscribe via the World Wide Web, visit > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays> > or, via email, send a message with subject or body 'help' to > > tor-relays-request(a)lists.torproject.org <mailto:tor-relays-request@lists.torproject.org> > > You can reach the person managing the list at > > tor-relays-owner(a)lists.torproject.org <mailto:tor-relays-owner@lists.torproject.org> > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Re: Relay with VPN (s7r) > 2. Compatibility issue with OpenSSL 1.1.1a (Nick Mathewson) > 3. Re: Relay with VPN (Roger Dingledine) > 4. Re: tor relay warning - what is mean ? (> dlugasny(a)protonmail.com <mailto:dlugasny@protonmail.com>> ) > 5. Re: Relay with VPN (teor) > 6. Re: tor relay warning - what is mean ? (teor) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 28 Nov 2018 14:23:38 +0200 > From: s7r <> s7r(a)sky-ip.org <mailto:s7r@sky-ip.org>> > > To: > tor-relays(a)lists.torproject.org <mailto:tor-relays@lists.torproject.org> > Subject: Re: [tor-relays] Relay with VPN > Message-ID: <> eba112e6-f60b-6278-2bf3-e86c34dc0dc4(a)sky-ip.org <mailto:eba112e6-f60b-6278-2bf3-e86c34dc0dc4@sky-ip.org>> > > Content-Type: text/plain; charset="utf-8" > > 11:18 PM, > deadcow(a)tuta.io <mailto:deadcow@tuta.io>> wrote: > >> Hi everyone, first time ever using mailing lists. Please let me know if something I'm doing wrong. >> >> I'd like to run a middle relay. >> I'm using Linux mint 19 >> >> The question. Can i set up relay through VPN? (nordvpn) >> Or if i want relay i have to stop using vpn? >> Thank you for help >> >> >> --- >> Google, Facebook, The government and others are spying on your emails! >> DO YOU LIKE IT? If not, CHANGE! >> Securely sent with Tutanota. Claim your encrypted mailbox today! >> https://tutanota.com <https://tutanota.com> >> > > Hello, > > Thanks for your interest in running a relay. > > You say you want to run a middle relay, why do you want to run it behind > a VPN in this case? Middle relays get no abuse complaints or anything as > they can not be used as exit points. Maybe you can explain to us why you > think you need to run your middle relay behind a VPN, do you have a > particular reason? Because for Tor running a relay behind a VPN is not a > + on security or privacy at all, instead it just complicates things. > > Secondly, if you have justified reason to still want to use a VPN on a > middle relay, here are some things you need to take into consideration > as well as disadvantages: > > - you will have higher latency; > - the bandwidth of your relay will be of the speed of the VPN itself, > and shared VPN usually are slow for high grade server connections that > run 24x7 with constant bandwidth usage; > - when the VPN tunnel will fail, due to an endpoint problem or internet > connectivity problem or route to destination problem, etc., the relay > will update its descriptor with the real IP address instead of the VPN > address, and when the VPN tunnel connects again change again and so on > until clients will be confused. One way around this is for your to > specify 'Address' in torrc and bind to explicit <address>:<port>. > > - you don't need just any VPN, you need a VPN with a public and static > IP address, so that you can actually open ports on that IP address > applications can bind and listen to certain ports. A normal shared VPN > that just changes the IP address for browsing is not sufficient, because > that does not assign a public static IP address directly. > > There are VPN services out there that offer public and static IP > addresses, but they are more expensive. > > - you should tell the VPN provider that you plan to use the maximum > available bandwidth 24x7, because all say it's unlimited because they > think "nobody will use that much", but when running Tor relays this is > not true. > >

2 1