- tor-relays - lists.torproject.org

DoS stats from exits running 0.3.3.2-alpha
by nusenu 17 Feb '18

17 Feb '18

I was wondering if these unfriendly tor clients are using tor's default path selection or something else. If they do tor exit relays would have much smaller values in their DoS stats, right? Would any tor exit operator (listed bellow) running 0.3.3.2-alpha be willing to share (obfuscated/not exact counters) of their DoS log entries? (only if you do not have any additional firewall rules filtering packets) | abuse(a)to-surf-and-protect.net | | replace k with c : kontakt @ zwiebeltoralf . de | | <rok AT sent dot com> | | florentin aatt rochet ddoott be; LTC: LhRqJZu6U87BJNSUbkACHzVQsK39hJ3sMB | | tor-relays(a)coldhak.ca | | abuse(a)to-surf-and-protect.de | | J. Random Hacker <anonymizer(a)ccc.de> | | Exit by Reporters without Borders via https://www.torservers.net/ | | Neel Chauhan <neel AT neelc DOT org> | BTC: 1KogNvxdcXydDUNrPgqgtgV3AWktKPqXpS | | Random Person <tor AT cusse.org> | | OctaneZ-TOR <OctaneZ+toroperator(a)gmail.com> | | https://www.torservers.net/donate.html <support .AT. torservers .DOT. net> | | shallot protonmail com | | Random Person <killertor.abuse at gmail point com> | | Brandon Kuschel <kusch023 AT NOSPAM umn dot edu> | | <admin AT openbsd DOT se> | -- https://mastodon.social/@nusenu twitter: @nusenu_

6 9

cosworth@fni.pl Tor Relays MyFamily Configuration
by nusenu 17 Feb '18

17 Feb '18

Hello cosworth(a)fni.pl, thanks for adding 3 more relays, please do not forget to set your MyFamily option in your torrc files. https://torproject.org/relay-guide#ImportantifyourunmorethanoneTorinstance Let us know if you need help with that setting. regards, nusenu https://metrics.torproject.org/rs.html#search/contact:cosworth@fni.pl ornetradar(a)riseup.net: > 2018-02-16 > > | Up | Ext | JoinTime | IP | AS | CC | ORp | Dirp | OS | Version | Nickname | eFamMembers | FP | > |------+-------+------------+---------------+-----------------------+------+-------+--------+-------+-----------+------------+---------------+------------------------------------------| > | 1 | 0 | 13:06:34 | 52.158.232.63 | Microsoft Corporation | us | 443 | 0 | Linux | 0.2.9.14 | Cosworth1 | 1 | 8F9FE423932770C5912DCB10B1A0A797F4CFA782 | > | 1 | 0 | 13:07:24 | 40.65.111.124 | Microsoft Corporation | us | 443 | 0 | Linux | 0.2.9.14 | Cosworth2 | 1 | 59C8A3663F4CB5399DC5D3E9C8455ECD0818519C | > | 1 | 0 | 13:07:57 | 52.151.41.244 | Microsoft Corporation | us | 443 | 0 | Linux | 0.2.9.14 | Cosworth3 | 1 | 6466190F47F0E6DDBA566A64518E4317BCD123DE | > > https://nusenu.github.io/OrNetRadar/2018/02/16/a1 -- https://mastodon.social/@nusenu twitter: @nusenu_

1 0

Relay stuck at Bootstrapped 0%
by Paul 17 Feb '18

17 Feb '18

I am running two relays on debian (one on Raspian 9 and one on Debian 9) and one of them for over three months now. Some time ago the older one started to loop at startup. I reinstalled tor and it worked for some time only to loop again. The last notices entry looks like this "Feb 16 19:36:14.000 [notice] Bootstrapped 0%: Starting" and the next is "Feb 16 19:42:08.000 [notice] Tor 0.2.9.14 (git-a211f886ad759cab) opening log file." then it tells about opening the listeners and parsing the GEOIP files, then my relay identity and the bootstrapped 0% entry again (left some informational entries out). The debug log looks like it is getting descriptors and stuff correctly. What could be the problem?

2 7

Relay Search has moved!
by Iain Learmonth 17 Feb '18

17 Feb '18

Hi All, Relay Search has moved! It is no longer to be found at atlas.torproject.org (although a redirect is in place). The new home is at: https://metrics.torproject.org/rs.html If you prefer an onion service: http://rougmnvswfsmd4dq.onion/rs.html Thanks, Iain.

3 7

Api for atlas.torproject.org
by flipchan 17 Feb '18

17 Feb '18

Hey, Im trying to write an ip checker script for a mail server/firewall and i want to be able check if the ip is a tor relay, is their a api for looking up ips on atlas.torproject.org ? Or any other easier way to do it in like python :) -- Take Care Sincerly flipchan layerprox dev

6 6

tonull list
by TorGate 16 Feb '18

16 Feb '18

Hi to all, what is the best way to intergrade the tonull list in the torrc ? ExitPolicy https://tornull.org/tornull-bl.txt <https://tornull.org/tornull-bl.txt> is that working ? or via a include ? regards Steffen TorGate torgate(at)linux-hus.dk

2 2

DoS mitigation
by Fabian A. Santiago 16 Feb '18

16 Feb '18

Hello, I've been browsing the list archives looking for mentions of DOS mitigation. last night my exit relay went offline and when i logged into it, CPU was sitting at 100% and atlas reported mine as down and another service i have checking up time also did as well. so i rebooted my server and it was fine. i found this thread: 1) Drops off consensus for 1-2hours and returns w/o hsdir: DOS_CC_CIRCUIT_BURST_DEFAULT 90 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 100 FW: 20 connects per /32 ip, rate limited to 3 per sec. 2) Good (stable): DOS_CC_CIRCUIT_BURST_DEFAULT 50 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 50 FW: 20 connects per /32 ip, rate limited to 3 per sec. 3) Good (stable): DOS_CC_CIRCUIT_BURST_DEFAULT 20 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 20 FW: 20 connects per /32 ip, rate limited to 3 per sec. 4) Too conservative: DOS_CC_CIRCUIT_BURST_DEFAULT 10 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 10 FW: 20 connects per /32 ip, rate limited to 3 per sec. 5) Good (newly): DOS_CC_CIRCUIT_BURST_DEFAULT 50 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 50 FW: 100 connects per /32 ip, rate limited to 15 per sec. are these good mitigations? what else can or should be done? limiting memory use helpful? I'm running on ubuntu 16.04 and am using ufw for my firewall currently. are there any other suggestions given my platform? thanks for your help. -- Thanks, Fabian S. OpenPGP: 3C3FA072ACCB7AC5DB0F723455502B0EEB9070FC

2 1

torservers internet connection
by TorGate 15 Feb '18

15 Feb '18

Hi again to all, i planing more torserver but what is the best solution for a god connection. there are 2 tor servers with a Bandwidth limit: 14.6 MB/s, burst: 29.3 MB/s is this enogth ? The internet connection has 60MB. Is this a god ide to setup more servers on this 60MB connection ? regards Steffen TorGate torgate(at)linux-hus.dk

3 11

freebsd port 80 and 443
by TorGate 15 Feb '18

15 Feb '18

Hi to all, question: i have testet a config with ORPort 443 and dirport 80, hm but there are a permission issue with freebsd. On my testsystem is no http installed, Can i only install tor on freebsd with orport 9001 and dirport 9030 ? regards Steffen TorGate torgate(at)linux-hus.dk

7 12

torservers.net MyFamily Configuration
by nusenu 14 Feb '18

14 Feb '18

Hi Moritz, please have a look at your MyFamily configuration. https://nusenu.github.io/OrNetStats/endtoend-correlation-groups thanks, nusenu -- https://mastodon.social/@nusenu twitter: @nusenu_

2 1