- tor-relays - lists.torproject.org

reminder: Tor 0.2.5.x LTS will reach its end-of-life in a few days on 2018-05-01
by nusenu 28 Apr '18

28 Apr '18

Hi, this is a reminder that in a few days the tor LTS branch 0.2.5.x will reach its end-of-life date [1]. Currently there are still over 440 relays (~3.2% of the network capacity) running that tor version [2]. Please upgrade to one of the currently supported tor versions: - 0.2.9.x - 0.3.1.x - 0.3.2.x If you are still on Debian oldstable (jessie) with tor 0.2.5.16 you have multiple options: - use the the torproject's debian repository (tor 0.3.2.10) https://www.torproject.org/docs/debian.html.en#ubuntu - use debian backports (tor 0.2.9.14) https://packages.debian.org/jessie-backports/tor - or upgrade to debian stable (stretch) (tor 0.2.9.14) [1] https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTor… [2] https://nusenu.github.io/OrNetStats/#tor-version-distribution-relays -- https://mastodon.social/@nusenu twitter: @nusenu_

1 0

What's the timeline for a Tor relay to start routing a large amount of traffic?
by Nathaniel Suchy (Lunorian) 28 Apr '18

28 Apr '18

I started to run a few Tor Exit Relays (My exit policy only allows ports 80 and 443 only to minimize the amount of abuse) a few days ago. Currently Tor Metrics shows the relays are only advertising 700Kb/s despite the fact the minimum port speed on the VPSes I host on is 100Mb/s. I've been told by friends of mine it's because it's a new relay - at what point does the relay start to route a large amount of traffic equivalent to the port speed. I'm hoping to contribute to the Tor Project in a variety of ways over the next few months and the summer and starting relays is a first step. Cheers, Nathaniel

3 3

FW: Relay unreachable by authorities (Was: Re:Questiononrelay allowed downtime)
by Keifer Bly 27 Apr '18

27 Apr '18

From: Keifer Bly Sent: Thursday, April 26, 2018 4:08 PM To: tor-relays(a)lists.torproject.org Subject: FW: [tor-relays] Relay unreachable by authorities (Was: Re:Questiononrelay allowed downtime) From: Keifer Bly Sent: Thursday, April 26, 2018 4:01 PM To: tor-relays(a)lists.torproject.org Subject: RE: [tor-relays] Relay unreachable by authorities (Was: Re:Questionon relay allowed downtime) That’s what’s strange. I have double checked the tor logs and the only warning that appears is the “tor cannot help you if you use it wrong” warning; that’s the only one that appears. I did some research, and according to https://serverfault.com/questions/145907/does-mac-os-x-throttle-the-rate-of…, Mac os does have a maximum amount of network connections it does allow at once. To find mine out, I tried running this in terminal Launchctl limit maxfiles The return was this: maxfiles 256 unlimited. I tried attaching a photo of the output but got a message back saying it was held because it was too big (the file was about 6mb). I wonder if this would mean mac os only allows 256 connections at once? How could I modify my torrc file to not go over the max allowed connections by mac os and still be a useable relay? Thank you. From: teor Sent: Thursday, April 26, 2018 3:38 PM To: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] Relay unreachable by authorities (Was: Re: Questionon relay allowed downtime) On 27 Apr 2018, at 08:23, Keifer Bly <keifer.bly(a)gmail.com> wrote: My apologies. The fingerprint is DB1AF6477BB276B6EA5E72132684096EEE779D30 Here are the contents of my torc file (the isp beeng run from is Charter Communications, the only isp that is available where I live. You might want to use a pastebin service for large files. Or cut out all the commented stuff before posting your torrc. I do not remember applying any descriptor limit and do not see one here. The file descriptor limit is imposed by the OS. The default can be low. Here is how you can find out: Please check the logs for warnings and notices. Sometimes tor logs a warning when it starts up (for example, low file descriptors), and then the issue happens later. What’s strange is my internet connection is working fine and I am able to visit websites, making it not seem like it is overloaded. Tor requires thousands of simultaneous connections. Tor requires constant uptime. Internet browsing requires a few connections. It works when the network is interrupted. Seems strange. Does Charter have any strange policies against running tor relays (has anyone ever had a documented here problem with running a relay on Charter before)? Thank you. You should ask your ISP. T

4 10

Goes the ORPort into "Consensus Weight" calculation ?
by Toralf Förster 27 Apr '18

27 Apr '18

For family:D11D11877769B9E617537B4B46BFB92B443DE33D - running at the same IP - I do wonder about the differences of the values 44300 versus 36800 (one is 1 1/2 year, the other is 1/2 year old). -- Toralf PGP C4EACDDE 0076E94E

2 1

Question on relay allowed downtime
by Keifer Bly 27 Apr '18

27 Apr '18

Hello, So recently I had an uptime of about 3-4 days but then I had to restart my computer to install an operating system update (the OS in question being Mac OS X High Sierra). I know I am not to worry about what flags I have as long as I am not a bad relay, but am curious, what is the allowed downtime the network allows to do things like install operating system updates, etc, without significantly impacting time between failures? Thank you.

3 5

Running relays in universities? Exit nodes, perhaps? Please share your experience!
by Gunnar Wolf 26 Apr '18

26 Apr '18

TL;DR - Have you got official permission to operate Tor exit nodes within an university campus/network? Relay nodes, even? Please share me how this permission was achieved! (or even if it was denied, please tell me!) Hi, I know this list is mostly technical in nature, so sorry for presenting a very different kind of topic here; I will send a very similar message to the tor-teachers list, but I believe the population of this list to be interesting.. I am trying to get my university's (Universidad Nacional Autónoma de México) OK to run an exit node from our campus' network. I currently operate one relay, am willing to set up some extra relays, and have at least one colleague in a different research institute with a relay of his own, but I believe we should aim for exit nodes. Now, I don't want to set it up in a rogue fashion, as I'm sure that the university's NOC or CERT would not take long to get complaints and require me to shut it down. I have already made an official request for the permission to run an exit node and (as expected) it was turned down. Quoting (translation mine) the reasons for rejection, 1. This assignation is not factible because the Tor network is not compatible with the Acceptable Usage Policies of RedUNAM, being this infrastructure oriented to the service of institutional goals. 2. While the Tor network can have reseearch purposes, due to its nature and the hiding of IPv4 addresses and anonymous connectivity, it is susceptible to be used by third parties from outside the University with purposes conflicting with those specified in item 1, without any possibility of control or regulation from the University's part or from your project. 3. Even more so: The Tor network, due to its definition and structure, can potentially incorporate third people with malicious or even delictive intentions, which would affect not only the computers or networks in your Institute or all of the University, but also networks outside the institution's control So, I want to gather experiences from operators in different universities or research institutions. Which way did you have to argue? How hard was to get this OK? Did you ask a permission for a specific project, or as part of your networking infrastructure in general? Did you ask this before setting up the exit node, or as a "fait accompli" gathering not-too-ill results for a given time period? Any help and pointers are welcome!

8 8

control who can connect me
by dave` dave 26 Apr '18

26 Apr '18

im using VMware Ubuntu 16.04 using SSH. im running Exit-Relay and i want to control who can connect to my Exit-Relay, is there a way to do that- though the Exit-Relay settings, or the SSH settings? and there will be an even better way: if i can say who is the specific ip that can connect to me. Thank You!

5 5

Can i use the same ip for Tor bridge and Exit-Relay to work together?
by dave` dave 26 Apr '18

26 Apr '18

Im working on project in Tor and im running Exit-Relay and Tor-Bridge together(on the same ip). for that im using VMware Ubuntu 16.04 with SSH. im using "arm" option tor run the Tor through terminal this is my "torrc" file through SSH: SocksPort 0 ORPort 443 BridgeRelay 1 Exitpolicy reject *:* PublishServerDescriptor 0 Nickname Test ExitRelay 1 ControlSocket 0 ContactInfo human(a)gmail.com now, im testing the Exit-Relay through "Windows" and sets in "torrc": Exitnodes ip(my servers ip) and is works. and now im testing my Tor-Bridge through Tor-Browser: my ip:port| my fingerprint and it works but when im running them both on my computer- changing the "torrc" file(in windows) and set in Tor-Browser to use my Bridge its not working. i need them to work together for this project. edit: after few hours the Tor-Brigade are still working buy when im trying to use the Exit-Relay its seams like every thing is ok but i can't get into to the Tor net.(in my browser i see my Exit-Relay ip but cant get into the internet)

2 3

Consensus Weight Definiton
by Keifer Bly 23 Apr '18

23 Apr '18

Hello, I am wondering, could you please explain exactly what “Consensus Weight” is? I had had a good uptime, about five days, then my darn computer that I run my relay off of froze for about 40 minutes this morning and I had no choice but to reboot the tor software, setting my current uptime back to 0 days. However, it has a consensus weight of 523, is this a good rating? Does this have an effect on things such as what flags a relay has (mine currently being Fast, V2Dir, Running, and Valid)? The relay in question can be found here: https://metrics.torproject.org/rs.html#details/DB1AF6477BB276B6EA5E72132684… I know the stable flag (which I have had on and off since starting my relay, don’t currently have it but relay seems to receive traffic nonetheless) depends on uptime history, not exact current uptime, but am curious, is there an easy to check my current uptime history? Also, I thought I’d share an applescript I wrote to automatically update the tor relay software and homebrew one minute after midnight every day. Here is the source code (written using AppleScript editor) do shell script "$ which brew /usr/local/bin/brew update" do shell script "$ which brew /usr/local/bin/brew upgrade tor" end When it runs, it comes up with this error, saying tor is already up to date. sh: $: command not found Error: tor 0.3.2.10 already installed (1) As this is the only error that appears, I’d take it that the script works It can be scheduled to run automatically at midnight every night via this method I found here: https://apple.stackexchange.com/questions/24862/how-can-i-configure-my-comp… I am curious to know what you all think of this tactic if you will, please let me know as you can give it to others if you wish. Thank you.

4 12

Advertised bandwidth
by Ian Zimmerman 23 Apr '18

23 Apr '18

In /etc/tor/torrc, I have: ahiker!507 ~# fgrep -i bandwidth /etc/tor/torrc | grep -v '^#' RelayBandwidthRate 64 MBytes RelayBandwidthBurst 512 MBytes But metrics.torproject.org says: Details for: ahiker Configuration Nickname ahiker OR Addresses IPv4 Advertised Bandwidth 55.99 KiB/s Why? -- Please don't Cc: me privately on mailing lists and Usenet, if you also post the followup to the list or newsgroup. To reply privately _only_ on Usenet and on broken lists which rewrite From, fetch the TXT record for no-use.mooo.com.

2 1