- tor-relays - lists.torproject.org

Re: [tor-relays] Please Confirm Changed Fallback Details
by teor 27 Dec '17

27 Dec '17

Thank you to everyone who has replied to the fallback threads. We're tracking the fallback changes here: https://trac.torproject.org/projects/tor/ticket/22321 Once we've reviewed some list format changes, we'll generate the new list. This will probably happen in the next two weeks. Please email us about new fallbacks at any time. T > On 28 Dec 2017, at 10:34, Casper <fantom(a)fedoraproject.org> wrote: > > Hi teor, > > Yes I had to change the ORport and DirPort for POP3 standard ports, > specially because Let's Encrypt works only with HTTPS ports. And this > time it won't change again, who is using POP3 these days... ^^ > > Merry christmas teor :) > > teor a écrit : >> Hi, >> >> Are you the operator of the following relays? >> >> mkultra - 16102E458460349EE45C0901DAA6C30094A9BBEA >> ParkBenchInd001 - F10BDE279AE71515DDCCCC61DC19AC8765F8A3CC >> Underworld - DC163DDEF4B6F0C6BC226F9F6656A5A30C5C5686 >> Casper03 - 7350AB9ED7568F22745198359373C04AC783C37C >> sputnik - AD19490C7DBB26D3A68EFC824F67E69B0A96E601 >> zwiubel - B0553175AADB0501E5A61FC61CEA3970BE130FF2 >> >> Your relay is on the fallback directory whitelist, and it looks like >> its details have changed. (Or, maybe I wrote them down wrong.) >> >> I tried to contact you a few days ago using the ContactInfo on your >> relay, but I haven't received a response. >> >> Will your relay be around for the next two years? >> Will its IP, ports, and fingerprint stay the same? >> >> Please reply to this email and let us know! >> (If you don't reply, we will assume the change is permanent.) >> >> Thanks >> >> Tim >> >> >> Here is the full list: >> >> Changed fingerprint: >> >> Has OR 163.172.138.22:443 / [2001:bc8:4400:2100::1:3]:443 changed fingerprint from 8664DC892540F3C789DB37008236C096C871734D to 16102E458460349EE45C0901DAA6C30094A9BBEA? >> 163.172.138.22:80 orport=443 id=16102E458460349EE45C0901DAA6C30094A9BBEA ipv6=[2001:bc8:4400:2100::1:3]:443 # mkultra >> >> Changed IPv4: >> >> Has F10BDE279AE71515DDCCCC61DC19AC8765F8A3CC changed IPv4 from 192.99.212.139 to 193.70.112.165? >> 193.70.112.165:80 orport=443 id=F10BDE279AE71515DDCCCC61DC19AC8765F8A3CC # ParkBenchInd001 >> >> Has DC163DDEF4B6F0C6BC226F9F6656A5A30C5C5686 changed IPv4 from 176.158.132.12 to 176.158.236.102? >> 176.158.236.102:9030 orport=9001 id=DC163DDEF4B6F0C6BC226F9F6656A5A30C5C5686 # Underworld >> >> Changed DirPort: >> >> Has 7350AB9ED7568F22745198359373C04AC783C37C changed DirPort from 176.31.191.26:80 to 176.31.191.26:110? >> 176.31.191.26:110 orport=995 id=7350AB9ED7568F22745198359373C04AC783C37C # Casper03 >> >> Gained IPv6 address: >> >> Has AD19490C7DBB26D3A68EFC824F67E69B0A96E601 gained an IPv6 address [2a01:4f8:221:1ac1:dead:beef:7005:9001]:9001? >> 188.40.128.246:9030 orport=9001 id=AD19490C7DBB26D3A68EFC824F67E69B0A96E601 ipv6=[2a01:4f8:221:1ac1:dead:beef:7005:9001]:9001 # sputnik >> >> Has B0553175AADB0501E5A61FC61CEA3970BE130FF2 gained an IPv6 address [2a01:4f8:190:30e1::2]:9001? >> 5.9.147.226:9030 orport=9001 id=B0553175AADB0501E5A61FC61CEA3970BE130FF2 ipv6=[2a01:4f8:190:30e1::2]:9001 # zwiubel >> >> T >> >> -- >> Tim Wilson-Brown (teor) >> >> teor2345 at gmail dot com >> PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B >> ricochet:ekmygaiu4rzgsk6n >> xmpp: teor at torproject dot org >> ------------------------------------------------------------------------ >> > > > > -- > GPG Key ID: 83288189 @ hkp://keys.fedoraproject.org > Empreinte: CC26 692F 5205 AC8F 7912 7783 D7A7 F4C5 8328 8189 > > x509 C.A.: https://dl.casperlefantom.net/pub/root.pem > Empreinte: 0975 864A 2036 0F94 A139 114A D32E 8EBE 30F2 2429 T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------

1 0

Recent wave of abuse on Tor guards
by fcornu＠wardsback.org 27 Dec '17

27 Dec '17

Hi I'm the happy maintainer of wardsback : B143D439B72D239A419F8DCE07B8A8EB1B486FA7 As many of us have noticed, many guard nodes are beeing abused by extremely high numbers of connection attempts. Thanks to some of you guys, I manged to put some mitigation in place [0] and I assume many of us did as well. I now sit back with questions and concerns arising : 1) Why didn't we see this abuse wave coming ? We kept replying to reporters of the dreaded "Failing because we have XXX connections already. Please read doc/TUNING for guidance" about how they could amend their config to accept more connections. Although the 'global scale' of those events should have been detected, without most of use assuming it was due to nodes' bad config. 2) We can see on Metrics [1] that guards count is dropping rapidly for a couple weeks now. Presumably because many guard maintainers gave up on restarting their crushed node. (I never will. Even though my Metrics graph shows I've also been in trouble) 3) What could we do to better detect those 'attacks' and spread the word to fellow maintainers about how to mitigate / correct the situation ? I must admit I don't have a valuable clue about how things can technically be improved, but I humbly wanted to share a few thought here. Peace [0] : https://lists.torproject.org/pipermail/tor-relays/2017-December/013846.html [1] : https://metrics.torproject.org/relayflags.html?start=2017-09-21&end=2017-12… -- Frédéric CORNU

12 19

Please Confirm Changed Fallback Details
by teor 27 Dec '17

27 Dec '17

Hi, Are you the operator of the following relays? mkultra - 16102E458460349EE45C0901DAA6C30094A9BBEA ParkBenchInd001 - F10BDE279AE71515DDCCCC61DC19AC8765F8A3CC Underworld - DC163DDEF4B6F0C6BC226F9F6656A5A30C5C5686 Casper03 - 7350AB9ED7568F22745198359373C04AC783C37C sputnik - AD19490C7DBB26D3A68EFC824F67E69B0A96E601 zwiubel - B0553175AADB0501E5A61FC61CEA3970BE130FF2 Your relay is on the fallback directory whitelist, and it looks like its details have changed. (Or, maybe I wrote them down wrong.) I tried to contact you a few days ago using the ContactInfo on your relay, but I haven't received a response. Will your relay be around for the next two years? Will its IP, ports, and fingerprint stay the same? Please reply to this email and let us know! (If you don't reply, we will assume the change is permanent.) Thanks Tim Here is the full list: Changed fingerprint: Has OR 163.172.138.22:443 / [2001:bc8:4400:2100::1:3]:443 changed fingerprint from 8664DC892540F3C789DB37008236C096C871734D to 16102E458460349EE45C0901DAA6C30094A9BBEA? 163.172.138.22:80 orport=443 id=16102E458460349EE45C0901DAA6C30094A9BBEA ipv6=[2001:bc8:4400:2100::1:3]:443 # mkultra Changed IPv4: Has F10BDE279AE71515DDCCCC61DC19AC8765F8A3CC changed IPv4 from 192.99.212.139 to 193.70.112.165? 193.70.112.165:80 orport=443 id=F10BDE279AE71515DDCCCC61DC19AC8765F8A3CC # ParkBenchInd001 Has DC163DDEF4B6F0C6BC226F9F6656A5A30C5C5686 changed IPv4 from 176.158.132.12 to 176.158.236.102? 176.158.236.102:9030 orport=9001 id=DC163DDEF4B6F0C6BC226F9F6656A5A30C5C5686 # Underworld Changed DirPort: Has 7350AB9ED7568F22745198359373C04AC783C37C changed DirPort from 176.31.191.26:80 to 176.31.191.26:110? 176.31.191.26:110 orport=995 id=7350AB9ED7568F22745198359373C04AC783C37C # Casper03 Gained IPv6 address: Has AD19490C7DBB26D3A68EFC824F67E69B0A96E601 gained an IPv6 address [2a01:4f8:221:1ac1:dead:beef:7005:9001]:9001? 188.40.128.246:9030 orport=9001 id=AD19490C7DBB26D3A68EFC824F67E69B0A96E601 ipv6=[2a01:4f8:221:1ac1:dead:beef:7005:9001]:9001 # sputnik Has B0553175AADB0501E5A61FC61CEA3970BE130FF2 gained an IPv6 address [2a01:4f8:190:30e1::2]:9001? 5.9.147.226:9030 orport=9001 id=B0553175AADB0501E5A61FC61CEA3970BE130FF2 ipv6=[2a01:4f8:190:30e1::2]:9001 # zwiubel T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------

1 0

Relays operators meetup
by Nicolas Braud-Santoni 26 Dec '17

26 Dec '17

Hi ! (Sorry for the late announcement, I somehow forgot to fire off the email...) The Tor relays operators meetup, at 34C4, will be TOMORROW (day 1), from 18.30 to 20.10, in lecture room 11 (in CCL, 2nd floor) : https://events.ccc.de/congress/2017/wiki/index.php/Session:Tor_relays_opera… Best, nicoo

1 1

Decline in relays
by David Goulet 26 Dec '17

26 Dec '17

Hello everyone! Since July 2017, there has been a steady decline in relays from ~7k to now ~6.5k. This is a bit unusual that is we don't see often such a steady behavior of relays going offline (at least that I can remember...). It could certainly be something normal here. However, we shouldn't rule out a bug in tor as well. The steadyness of the decline makes me a bit more worried than usual. You can see the decline has started around July 2017: https://metrics.torproject.org/networksize.html?start=2017-06-01&end=2017-1… What happened around July in terms of tor release: 2017-06-08 09:35:17 -0400 802d30d9b7 (tag: tor-0.3.0.8) 2017-06-08 09:47:44 -0400 e14006a545 (tag: tor-0.2.5.14) 2017-06-08 09:47:58 -0400 aa89500225 (tag: tor-0.2.9.11) 2017-06-08 09:55:28 -0400 f833164576 (tag: tor-0.2.4.29) 2017-06-08 09:55:58 -0400 21a9e5371d (tag: tor-0.2.6.12) 2017-06-08 09:56:15 -0400 3db01d3b56 (tag: tor-0.2.7.8) 2017-06-08 09:58:36 -0400 64ac28ef5d (tag: tor-0.2.8.14) 2017-06-08 10:15:41 -0400 dc47d936d4 (tag: tor-0.3.1.3-alpha) ... 2017-06-29 16:56:13 -0400 fab91a290d (tag: tor-0.3.1.4-alpha) 2017-06-29 17:03:23 -0400 22b3bf094e (tag: tor-0.3.0.9) ... 2017-08-01 11:33:36 -0400 83389502ee (tag: tor-0.3.1.5-alpha) 2017-08-02 11:50:57 -0400 c33db290a9 (tag: tor-0.3.0.10) Note that on August 1st 2017, 0.2.4, 0.2.6 and 0.2.7 went end of life. That being said, I don't have an easy way to list which relays went offline during the decline (since July basically) to see if a common pattern emerges. So few things. First, if anyone on this list noticed that their relay went off the consensus while still having tor running, it is a good time to inform this thread :). Second, anyone could have an idea of what possibly is going on that is have one or more theories. Even better, if you have some tooling to try to list which relays went offline, that would be _awesome_. Third, knowing what was the state of packaging in Debian/Redhat/Ubuntu/... around July could be useful. What if a package in distro X is broken and the update have been killing the relays? Or something like that... Last, looking at the dirauth would be a good idea. Basically, when did the majority switched to 030 and then 031. Starting in July, what was the state of the dirauth version? Any help is very welcome! Again, this decline could be from natural cause but for now I just don't want to rule out an issue in tor or packaging. Cheers! David -- HiTVizeJUSe9JPvs6jBv/6i8YFvEYY/NZmNhD2UixVY=

9 13

bridges
by Mr Xxx 26 Dec '17

26 Dec '17

2 1

Relay Search bandwidth graph update issue
by Ralph Seichter 26 Dec '17

26 Dec '17

Relay Search shows odd detail information for three of my nodes. The history graphs for bytes read/written per second shows no data beyond 2017-12-13 (one node) or 2017-12-17 (two nodes), respectively. The probability and consensus weight graphs appear correct. Other nodes of mine are shown with up-to-date information for all graph types. Is anybody else experiencing this as well? -Ralph

3 6

34c3
by Felix 26 Dec '17

26 Dec '17

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi everybody Is there an assembly or room for a concourse of Tor people? Some coordinates like room number and utc would be apprechiated. Hope to see you folks there :) - -- Cheers, Felix -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJaQgVjAAoJEF1W24InZUQdSRgP/2g7ly+UhLA78YZqgGntOXbw jJZ4NPQSUHBggb+FHNUZeADajCVqfaLlSUpgkfl83OyciQuCWnirC8F0sO5pttp0 zJI9agcbaDza2d3uEQEg9ZqVR6doPlAHpnNlCtRmI+sOmvCIL6jna/XHVyIjxrb/ WcvJyK29GPLPzm/eGecs1dv+WtObTpOHtcI/UxXVUJBFQsrzrw6/kKfxvJmGVY/I GHg6IJQkKulVXxhfK+xoX0VLX+W3FD5lnsKfqAgD9ngTL/CB6jv+tbgtWvm4sIUh OaLcCYK4xOicyWj/FMyIHhAwo0Ges8uue++rFmJ5KXv1wn/+eUp6XvLdccpNKzVe KR/TuEdf+HFxLdbIMas9tsNjUpo3kqQSjqXSr67qbth7Bya8RQUp19RLZyIjc5Yy Ou5lmHt5tKd9iq9Jj8xwQbpu0ZvgUzX54Y53xXDVPpcd1NEE5LsaCi9cuhX65xBg MyFV7GuIWYL2BjpvQkLb10dSfKfpqW63F3cjR6aFSSieaBmEug62lNVk43N8W7Hi OxpNhex7gKb9oGxM5CEbYib2Cp3fUsDY7Fbp0ggIK2YglpTPm5QHqcLanlcJiinB OIdndAYTl+nHEr9hm4EDI9KmkFUqgzAKpBpm8h2Ku0pMSWEB+VRQY2eaGTBpDd15 vjZ+WwKjplS6mQZ/oLiq =L7/F -----END PGP SIGNATURE-----

2 1

Can it be done? - IPv6 only Relay
by Stijn Jonker 25 Dec '17

25 Dec '17

Hi tor geniuses, Having some bandwidth to spare, and "some" IPv6 addresses but no IPv4. I decided to setup an IPv6 only relay, and for diversity on OpenBSD, but I'm having trouble getting online. Is there any feasible way to do this as IPv6 only relay? [root@tornode2 tor]# grep -v -e ^$ -e ^# /etc/tor/torrc SOCKSPort 0 # Default: Bind to localhost:9050 for local connections. Log notice syslog RunAsDaemon 1 DataDirectory /var/tor ORPort 443 Address tornode2.sjc.nl OutboundBindAddress [2001:x:x::x] Nickname <<SNIP>> DirPort 80 DirPortFrontPage /etc/tor/tor-exit-notice.html MyFamily <<REMOVED>> User _tor ExitPolicy reject *:* # no exits allowed ExitPolicy reject6 *:* # no exits allowed AuthDirHasIPv6Connectivity 1 ClientUseIPv6 1 ClientPreferIPv6ORPort 1 ClientPreferIPv6DirPort 1 Thx, Stijn

4 8

Fwd: Re: Become a Fallback Directory Mirror
by Arisbe 23 Dec '17

23 Dec '17

1 0