- tor-relays - lists.torproject.org

Fwd: US-CERT Avalanche Notification INC000010
by Monkey Pet 24 Jan '17

24 Jan '17

I received the following email from my ISP, the IP belongs to the tor exit node. I am wondering if the DHS is sending it out to all tor exit nodes? We received a notice from Homeland Security that a device using your current IP address is infected the Avalanche Malware. The full details are below. Please run antivirus and network security software on all your devices immediately. Thank you, ISP A trusted third party notified the Department of Homeland Security United States National Cybersecurity & Communications Integration Center (NCCIC) that one or more machines on your network was infected with malware associated with the Avalanche botnet infrastructure during December 2016. Avalanche is a large global network hosting infrastructure used by cyber criminals to conduct phishing and malware distribution campaigns and money mule schemes. A system infected with Avalanche associated malware may be subject to malicious activity including the theft of user credentials and other sensitive data, such as banking and credit card information. Some of the malware has the capability to encrypt user files and demand a ransom be paid by the victim to regain access to those files. In addition, the malware may allow criminals unauthorized remote access to the infected computer. Infected systems could be used to conduct distributed denial-of-service (DDoS) attacks. For additional information, please see the following US-CERT Technical Alert (TA16-336A): https://www.us-cert.gov/ncas/alerts/TA16-336A

2 1

Network is unreachable?
by niftybunny 24 Jan '17

24 Jan '17

xxx@xxxx:~# wget https://www.torproject.org/dist/tor-0.2.9.9.tar.gz converted 'https://www.torproject.org/dist/tor-0.2.9.9.tar.gz' (ANSI_X3.4-1968) -> 'https://www.torproject.org/dist/tor-0.2.9.9.tar.gz' (UTF-8) --2017-01-23 22:12:32-- https://www.torproject.org/dist/tor-0.2.9.9.tar.gz Resolving www.torproject.org (www.torproject.org) 2620:0:6b0:b:1a1a:0:26e5:4810, 2001:858:2:2:aabb:0:563b:1e28, 2001:41b8:202:deb:213:21ff:fe20:1426, ... Connecting to www.torproject.org (www.torproject.org)|2620:0:6b0:b:1a1a:0:26e5:4810|:443... failed: Network is unreachable. Connecting to www.torproject.org (www.torproject.org)|2001:858:2:2:aabb:0:563b:1e28|:443... failed: Network is unreachable. Connecting to www.torproject.org (www.torproject.org)|2001:41b8:202:deb:213:21ff:fe20:1426|:443... failed: Network is unreachable. Connecting to www.torproject.org (www.torproject.org)|2a01:4f8:172:1b46:0:abba:5:1|:443... failed: Network is unreachable. Connecting to www.torproject.org (www.torproject.org)|82.195.75.101|:443... connected. HTTP request sent, awaiting response... 302 Found Location: https://dist.torproject.org/tor-0.2.9.9.tar.gz [following] converted 'https://dist.torproject.org/tor-0.2.9.9.tar.gz' (ANSI_X3.4-1968) -> 'https://dist.torproject.org/tor-0.2.9.9.tar.gz' (UTF-8) --2017-01-23 22:12:36-- https://dist.torproject.org/tor-0.2.9.9.tar.gz Resolving dist.torproject.org (dist.torproject.org) 2620:0:6b0:b:1a1a:0:26e5:4810, 2001:41b8:202:deb:213:21ff:fe20:1426, 2a01:4f8:172:1b46:0:abba:5:1, ... Connecting to dist.torproject.org (dist.torproject.org)|2620:0:6b0:b:1a1a:0:26e5:4810|:443... failed: Network is unreachable. Connecting to dist.torproject.org (dist.torproject.org)|2001:41b8:202:deb:213:21ff:fe20:1426|:443... failed: Network is unreachable. Connecting to dist.torproject.org (dist.torproject.org)|2a01:4f8:172:1b46:0:abba:5:1|:443... failed: Network is unreachable. Connecting to dist.torproject.org (dist.torproject.org)|2a01:4f8:211:6e8:0:823:2:1|:443... failed: Network is unreachable. Connecting to dist.torproject.org (dist.torproject.org)|38.229.72.16|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 5534005 (5.3M) [application/x-gzip] Saving to: 'tor-0.2.9.9.tar.gz' tor-0.2.9.9.tar.gz 100%[===================================================================================================================>] 5.28M 9.89MB/s in 0.5s 2017-01-23 22:12:41 (9.89 MB/s) - 'tor-0.2.9.9.tar.gz' saved [5534005/5534005] Is this normal behaviour? niftybunny abuse(a)to-surf-and-protect.net

4 12

Re: [tor-relays] 'MyFamily' .... torworld.org
by Paul 20 Jan '17

20 Jan '17

Hey, why don’t you just explain to the relay mailing list what it is all about..? Why are you different to "abuse [AT] torworld.org " and where are you probably the same ? What is your idea (business model) behind , why are supporting Tor in such a heavy way ? What are your driving forces...? Its not a must, but it would be less suspicious for somebody with you size! Thanks and Regards - to whom ever - Paul Am 19.01.2017 um 05:22 schrieb e: > Thanks for the heads up Paul.

3 3

Middle relay still an useful contribution?
by Ortez 20 Jan '17

20 Jan '17

Hello tor relay operators, I'm thinking about creating another tor middle relay, but i'm not sure if this is still a good contribution to the tor network. When i'm looking at some of the relay stats out there, there are so many middle relays, which getting almost no traffic. If i purchase a server, i want to make sure the money i will spend every month will make a difference. I know, an exit node may be the better option and those will get a lot of traffic, but i'm not very happy with the consequences which i may face. It's also very difficult to find a provider, which is cool with an exit node. Whats your opinion?

7 7

Proton now takes Tor
by Gumby 19 Jan '17

19 Jan '17

Nice to finally see this... "The encrypted email provider announced Thursday it will allow its users to access the site through the Tor anonymity service. The aim is to allow its more than 2 million users access the provider by taking "active measures to defend against state-sponsored censorship," such as government-mandated blocks at the internet provider level. Users of the Tor Browser can now access the site at https://protonirockerxow.onion. "

1 0

SIGHUP causing obfs warning/disabling
by Geoff Down 19 Jan '17

19 Jan '17

Hi, I sent a SIGHUP to the tor process after altering the torrc and got this effect: Jan 19 00:47:42.000 [notice] Tor 0.2.9.8 opening log file. Jan 19 00:47:55.000 [warn] Server managed proxy encountered a method error. (obfs3 Could not set up listener (0.0.0.0:xxxxx) for 'obfs3' (Address already in use).) Jan 19 00:47:55.000 [warn] Managed proxy at '/usr/bin/obfsproxy' failed the configuration protocol and will be destroyed. It did it again when I restored the torrc and SIGHUPed again. Obfs3 is still running and listening afaict: tor 17356 0.0 0.2 49944 1736 ?? S 20Dec16 0:13.04 /opt/local/Library/Frameworks/Python.... Python 17356 tor 3u IPv4 0x02eb32a4 0t0 TCP *:xxxxx (LISTEN) Bug or !Bug ? GD -- http://www.fastmail.com - mmm... Fastmail...

3 6

exitnodes blocking services
by not important 19 Jan '17

19 Jan '17

Hey all, Got a question here, I'm running an exit node from a home network that uses play station network, Facebook and a few other service. So my issue/question is why are these service getting blocked on my end? I'm assuming that my ip is getting blocked but wouldn't that mean that people using my exit node would be blocked to those websites as well? what can i do to resolve this issue? maybe I'm missing some technical aspect? thanks! -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2 mQINBFh10ZkBEAC3QTfDVUmKlKl5JNvy7kHulRj7nXYeYEywyXo5zsYsvWeCRYit WqwOr8PgGVO+jmXSxkXxjnGvXF7Kr1qZRHy/1hJxwFztlsgzkYzJOQYqB5Wpgxgf tpkZmY/uOzg61ppvSF8OKteal+jZnPEwGtGr6MNEc4WZecE99NA3tQ9kiqr0wHJE UstgiFv1DV4ju/nqCoaplVCy2LVdTq/IPXXJPozUYYM4U5S6qNPWgg8NKUUAPkkZ kJrgd2PD0qayU5HxO9lIHlwt1f9dp0iwXafXF4DkivMmpipoKB7e6eS+LYYTHQVz rmn+Goco7m34TsBua0ltjY5KDz7Nlts5bOFOYgCLrnpJJggACPetCr1NFQVbkaLb qpZ8hRkuJl5fKR/55lhLMSC7Bh85b4UQioS83ChyyY3dgNuXzss41/gn7sp0VUuA oQg+YYia3vWmOaBSXlQmM8ukw9QcMiVje4qlUaZjsCcNKwRCEX6YvcY1X8Yzm6uv yycPvroTIiJE1YZOVRj2oGSqNftZWtTnebVEveIezF/tX7Tadf6xq6kaQdUZzbAv tX+O/jOTGfo/8XECXPrLiPXlwY3ZrloXMr1QSBJQxZoCkfuDsi9Lek3SvWmxrQuM 0q66bk4k7LrO7e0lNueLSmna4OZFih/FUFwAq+bH6SciF9eOxm6NOPrnXwARAQAB tC9mcmVkYSAoc3RyZW5ndGggaW4gbnVtYmVycykgPEZyZWRhQHNpZ2FpbnQub3Jn PokCNwQTAQgAIQUCWHXRmQIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRDi hi2oPd1kcz6hEACyDgzf+L0OpB9Znsx7EEt8N1/zGyzGQoL/MQVsxMiJl/J3f7zV p7EJ3u4PGlETZAHFc2mVWc9FZndPgJIHS491g8sglJqPLhe7c+GjbACCGeb8XtQr kMTkFl2xcM0fv6XQTkRoGlQrnVMlB35DbFgjk7You3X1eAH3ZYe1NzsSaek9qeol OqKSa/J2mNiwKtaSW/NY5cD2cScuu4pqVwNb6Ya1OamvrCobRvi9rnnwGT148rpe I9hDrK2q5n5sz3rzWi7IT0Yv3ao0JkjAZHGuHeLvJLzv3R29RleTITd728LEWbxk xVTvcgl4u7lrZuqmhcaB2xDYvHDLx2PKyDxRSW3R/oahTCMVm1gjYnIB+L1aHPMZ ulxpKK0rylp2sNGgG8Kr/aasDENNgoxo76+qvVixIJWXovJruvlCMHeyySE9Tn14 rOoQICuOaEiMkUqpnEWqyOEJQs2Ky8AeRiQLAj+Il3Ed0fG0qHxosuWm/EAztKWH 329XAaaILDMeqp5Y4niBRq3at7QKb3LABpDI8/wqn9n4y7koaLQGpwGQRkbJszgh JqGJ3Bwh4B4Absze4gzvCYyh3mt7dwgo6zvG1PJ8x1I/D+TtUkUdQBojXf5YteUY OTN9IPjXaBlm9hbO2D0fXWdaz9QJEh3nSSqWd9/FU9w+6ACZz8ZeJivRtrkCDQRY ddGZARAA3o4NQV87nvPVbPp8NzPqQoRt+TdDVzcq10fHHAs2vIlgNPqQmMLiw/a6 Nsx4oFXuaCdyvQ6QsWKTOH33Ui0q+SrCdr5vVUQT6OJgMt4dqWv39zSXZeDFuy9U bmsd1ym7MGcRgDrvMHYdiz7AP3C1zmaCrjB8yV4oARVwKOafD5VznJOtX17c08M8 x+EQzypwgGer0vT3OzeTbHqWd491IOfdD0ejbapTLkOMPblPriOwtkh+lcC9QXD+ cb7Y+/79KjEXFTXr97R66AXmlkeWSnqWqZbTWrwp5nn5OpkgnpXqSVynIafAwePg KZCsVSCwMeo4aguj8znyUCd60lbc/WPhXnjmYXBHYXsUf4OMCa8P/yBkiC6jyYA/ zHKeJZgR2Nlu945flszQjc115tVo1dWqdxmB3cq9TBVu+6Npzgz28TD/I6NUekyE Gv/ESwbI3b7vbW/dBDiL6r8aGYFTvW+EmfCajOjZHT93hiz83JIpHOrIhibnGiMA bja8Lk6s3WZ5LmA03T2PhKj3Mo0Rx8FXl/+7GU8H3mYHJwpHSSoBuvswDOH6SQVB Yb+ckBzloiQ+cccIWuDItskc0Jeq1MB+FPgCfscT5B5545euT8Sq0aNHs4D5gRey 1e0X8eCAXZsyuuXpnOL8+8ty3WjwMmR8mgtjL4wXxP3CXPnvYFkAEQEAAYkCHwQY AQgACQUCWHXRmQIbDAAKCRDihi2oPd1kc22EEACwfwplUbvVtflOh2MiOUWnXGHO xTff7RjITk0NpK/a4bPTKOWdWKenTePSy8UCYIUK2u8dH6RrAq7L/OpoysltvJi3 ktKpkjr5mpXtywd0HKOEWoHrIj+Z2ZDubDVe9/cPYBuZdzaqxQ+P+Dc3NNh53RCf iXxbftk1D86jjfKoBj1aGPEPUSQHpW1Iw/Kh5E+dKN02oALjUudyjfv2byJ+niqO qbkHgIuUsOTWaWKwgMqgTbjW4NeMj+7DJcskM8NUnBLjiT+WG1wW8Teom/PakD32 ZFt5bIO7xVE4NP9wiFxH/dlXuxQLyg0TON2xUrBtN+/LRGJVQvl6iglmf1KxAkv9 maSGBFXtZY5tyA2UBwFJZ2D6XjeaVdFfIfa5rcUY3PTwt8kECivr5AHN3qrz3wuS QkHb/HQm7SeMZs3h02VEfHhmGxv98TwRF1rSCXRBORLDnY7Bh5WTdaR9CoDTU0aw Bvo4vHH8EODU7bJwfCuaCprzIP/Vbl+PYxU5W180pd/XaQXk9XERcn86b9n9q4Ea 9+CqXIRGal/DLBZRjmq8xN33dHfMnbP+N2ik09Zz0zdZHVsCQRK3xFFIwK9OpFdx Xa/drJTa58B7rogm4DBXgI63hjDZN+FZTpxRpKWHstfStVYQk8Kfu2hir1e6FF2s /Ijrx6DPmuYb/0e0Kg===Fv5C -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2 mQINBFh10ZkBEAC3QTfDVUmKlKl5JNvy7kHulRj7nXYeYEywyXo5zsYsvWeCRYit WqwOr8PgGVO+jmXSxkXxjnGvXF7Kr1qZRHy/1hJxwFztlsgzkYzJOQYqB5Wpgxgf tpkZmY/uOzg61ppvSF8OKteal+jZnPEwGtGr6MNEc4WZecE99NA3tQ9kiqr0wHJE UstgiFv1DV4ju/nqCoaplVCy2LVdTq/IPXXJPozUYYM4U5S6qNPWgg8NKUUAPkkZ kJrgd2PD0qayU5HxO9lIHlwt1f9dp0iwXafXF4DkivMmpipoKB7e6eS+LYYTHQVz rmn+Goco7m34TsBua0ltjY5KDz7Nlts5bOFOYgCLrnpJJggACPetCr1NFQVbkaLb qpZ8hRkuJl5fKR/55lhLMSC7Bh85b4UQioS83ChyyY3dgNuXzss41/gn7sp0VUuA oQg+YYia3vWmOaBSXlQmM8ukw9QcMiVje4qlUaZjsCcNKwRCEX6YvcY1X8Yzm6uv yycPvroTIiJE1YZOVRj2oGSqNftZWtTnebVEveIezF/tX7Tadf6xq6kaQdUZzbAv tX+O/jOTGfo/8XECXPrLiPXlwY3ZrloXMr1QSBJQxZoCkfuDsi9Lek3SvWmxrQuM 0q66bk4k7LrO7e0lNueLSmna4OZFih/FUFwAq+bH6SciF9eOxm6NOPrnXwARAQAB tC9mcmVkYSAoc3RyZW5ndGggaW4gbnVtYmVycykgPEZyZWRhQHNpZ2FpbnQub3Jn PokCNwQTAQgAIQUCWHXRmQIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRDi hi2oPd1kcz6hEACyDgzf+L0OpB9Znsx7EEt8N1/zGyzGQoL/MQVsxMiJl/J3f7zV p7EJ3u4PGlETZAHFc2mVWc9FZndPgJIHS491g8sglJqPLhe7c+GjbACCGeb8XtQr kMTkFl2xcM0fv6XQTkRoGlQrnVMlB35DbFgjk7You3X1eAH3ZYe1NzsSaek9qeol OqKSa/J2mNiwKtaSW/NY5cD2cScuu4pqVwNb6Ya1OamvrCobRvi9rnnwGT148rpe I9hDrK2q5n5sz3rzWi7IT0Yv3ao0JkjAZHGuHeLvJLzv3R29RleTITd728LEWbxk xVTvcgl4u7lrZuqmhcaB2xDYvHDLx2PKyDxRSW3R/oahTCMVm1gjYnIB+L1aHPMZ ulxpKK0rylp2sNGgG8Kr/aasDENNgoxo76+qvVixIJWXovJruvlCMHeyySE9Tn14 rOoQICuOaEiMkUqpnEWqyOEJQs2Ky8AeRiQLAj+Il3Ed0fG0qHxosuWm/EAztKWH 329XAaaILDMeqp5Y4niBRq3at7QKb3LABpDI8/wqn9n4y7koaLQGpwGQRkbJszgh JqGJ3Bwh4B4Absze4gzvCYyh3mt7dwgo6zvG1PJ8x1I/D+TtUkUdQBojXf5YteUY OTN9IPjXaBlm9hbO2D0fXWdaz9QJEh3nSSqWd9/FU9w+6ACZz8ZeJivRtrkCDQRY ddGZARAA3o4NQV87nvPVbPp8NzPqQoRt+TdDVzcq10fHHAs2vIlgNPqQmMLiw/a6 Nsx4oFXuaCdyvQ6QsWKTOH33Ui0q+SrCdr5vVUQT6OJgMt4dqWv39zSXZeDFuy9U bmsd1ym7MGcRgDrvMHYdiz7AP3C1zmaCrjB8yV4oARVwKOafD5VznJOtX17c08M8 x+EQzypwgGer0vT3OzeTbHqWd491IOfdD0ejbapTLkOMPblPriOwtkh+lcC9QXD+ cb7Y+/79KjEXFTXr97R66AXmlkeWSnqWqZbTWrwp5nn5OpkgnpXqSVynIafAwePg KZCsVSCwMeo4aguj8znyUCd60lbc/WPhXnjmYXBHYXsUf4OMCa8P/yBkiC6jyYA/ zHKeJZgR2Nlu945flszQjc115tVo1dWqdxmB3cq9TBVu+6Npzgz28TD/I6NUekyE Gv/ESwbI3b7vbW/dBDiL6r8aGYFTvW+EmfCajOjZHT93hiz83JIpHOrIhibnGiMA bja8Lk6s3WZ5LmA03T2PhKj3Mo0Rx8FXl/+7GU8H3mYHJwpHSSoBuvswDOH6SQVB Yb+ckBzloiQ+cccIWuDItskc0Jeq1MB+FPgCfscT5B5545euT8Sq0aNHs4D5gRey 1e0X8eCAXZsyuuXpnOL8+8ty3WjwMmR8mgtjL4wXxP3CXPnvYFkAEQEAAYkCHwQY AQgACQUCWHXRmQIbDAAKCRDihi2oPd1kc22EEACwfwplUbvVtflOh2MiOUWnXGHO xTff7RjITk0NpK/a4bPTKOWdWKenTePSy8UCYIUK2u8dH6RrAq7L/OpoysltvJi3 ktKpkjr5mpXtywd0HKOEWoHrIj+Z2ZDubDVe9/cPYBuZdzaqxQ+P+Dc3NNh53RCf iXxbftk1D86jjfKoBj1aGPEPUSQHpW1Iw/Kh5E+dKN02oALjUudyjfv2byJ+niqO qbkHgIuUsOTWaWKwgMqgTbjW4NeMj+7DJcskM8NUnBLjiT+WG1wW8Teom/PakD32 ZFt5bIO7xVE4NP9wiFxH/dlXuxQLyg0TON2xUrBtN+/LRGJVQvl6iglmf1KxAkv9 maSGBFXtZY5tyA2UBwFJZ2D6XjeaVdFfIfa5rcUY3PTwt8kECivr5AHN3qrz3wuS QkHb/HQm7SeMZs3h02VEfHhmGxv98TwRF1rSCXRBORLDnY7Bh5WTdaR9CoDTU0aw Bvo4vHH8EODU7bJwfCuaCprzIP/Vbl+PYxU5W180pd/XaQXk9XERcn86b9n9q4Ea 9+CqXIRGal/DLBZRjmq8xN33dHfMnbP+N2ik09Zz0zdZHVsCQRK3xFFIwK9OpFdx Xa/drJTa58B7rogm4DBXgI63hjDZN+FZTpxRpKWHstfStVYQk8Kfu2hir1e6FF2s /Ijrx6DPmuYb/0e0Kg===Fv5C -----END PGP PUBLIC KEY BLOCK-----

8 10

Good Bad ISP - update required
by Petrusko 18 Jan '17

18 Jan '17

Hey, Sorry to disturb about that... I'm trying to find a way to update/add informations on this page : https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs I have mailed a vps provider about running Tor relays on their DC, and there's no problem about running it. About exit node, it can be (like others) more dangerous if they have a lot of abuse mails (for sure it can be solved, but I'm not an expert with that :p) So it's possible to update informations on this page... If there's a mail address to inform ? Or here on this mailing list ?... Thx :) -- Petrusko C0BF 2184 4A77 4A18 90E9 F72C B3CA E665 EBE2 3AE5

1 0

Some problems with new Exit Node
by Alan 18 Jan '17

18 Jan '17

So I bit the bullet and started running an Exit Node (Andromeda), still early days with a few problems, namely:- # It hasn't been given a Stable flag yet. # Some problem with dns resulting in [WARN] eventdns: All nameservers have failed - i've switched the dns to 8.8.8.8, only seen that error once since # The Consensus Weight was gaining nicely and reached over 7,000 but now has dive bombed to just 20, with that the speed dropped from ~50mbps to ~5mbps https://atlas.torproject.org/#details/FDB4FC238F13E7FEC99D025DB8B89A636EFC1… Is this all normal or something i've overlooked? Alan

4 4

Uptime missing from Arm
by Alan 17 Jan '17

17 Jan '17

I have 3 relays running but on Arm only one shows the uptime. Also the Averages it keeps are way off. Alan.

11 27