tor-relays

tor-relays@lists.torproject.org

38 participants
4819 discussions

Don't use Google's DNS server
by Philipp Winter 29 Jul '16

29 Jul '16

I created a new diagram that illustrates the popularity of DNS resolvers used by exit relays. The diagram shows nine autonomous systems that hosted the most popular resolvers at some point over the last months. These autonomous systems are owned by Google, INIT7, LeaseWeb, Visual Online, OVH, OpenDNS, NForce Entertainment, Cyberdyne, and Level3. The x axis shows time and the y axis shows the fraction of DNS requests that the respective AS can observe: <https://nymity.ch/dns-traffic-correlation/img/exit-resolvers-2015-05.png> The two most popular setups are Google's 8.8.8.8 and local resolvers, i.e., exit relays doing their own resolution. Occasionally, Google got to see more than 40% of all DNS requests exiting the Tor network. That is concerning, particularly given Google's role in the PRISM program. No other autonomous system is getting even close. Please refrain from using 8.8.8.8. Instead, set up your own resolver, or at least use the one provided by your ISP. Here's Peter's quick guide on how to set up your own resolvers [1]: On Thu, Jan 08, 2015 at 04:11:09PM +0100, Peter Palfrader wrote: > o apt-get install unbound > o remove all nameserver entries in /etc/resolv.conf and add one for the > local recursor. Either manually or use (untested): > sed -i -e 's/^nameserver /#&/; $a nameserver 127.0.0.1' /etc/resolv.conf > o prevent anything else from modifying that file ever again: > chattr +i /etc/resolv.conf Note that running your own resolver is not universally safer because the exposure of DNS requests to network adversaries is greater. It's a tricky trade-off that we are currently trying to understand better [2], but increased exposure to network-level adversaries seems less bad than having Google see almost half of all DNS requests. If you are wondering how I created the above diagram, have a look at the measurement method [3]. [1] <https://lists.torproject.org/pipermail/tor-relays/2015-January/006147.html> [2] <https://nymity.ch/dns-traffic-correlation/> [3] <https://lists.torproject.org/pipermail/metrics-team/2016-February/000078.ht…> Cheers, Philipp

10 15

Re: [tor-relays] cheap unmetered non-exit VPS offers
by Tor-Node.net 28 Jul '16

28 Jul '16

Markus Koch <niftybunny(a)googlemail.com> wrote: > exit allowed? I can vouch for www.stayon.no VPS with dedicated, unmetered 1 Gbps connection. 1 GB RAM / 1 CPU @ 2.6 GHz Price: 149 NOK/month (~ 16 EUR / 17 USD). Tor exit friendly. Their abuse departement will ask you to block destination IPs if it's something serious. Kind regards Tor-node.net

2 1

AWS abuse handling
by Snehan Kekre 28 Jul '16

28 Jul '16

Hi All, I have a *free* membership for a year on Amazon's AWS (*capped* at 15GB/month of traffic each way). I've been running an exit node with a reduced exit policy on an ec2 instance for months and have received my first abuse notice. I'm sure a few on this mailing list may have received the same or similar abuse notification from Amazon. Besides shutting down the exit, what measures did you take to deal with this? What would be the consequences of ignoring their email and continuing to run it? Note: I'm a student and am running on a really tight budget at the moment (reason for not hosting it on a paid vps) Any suggestion(s)/help is appreciated :) Best, Snehan ----------------------------------------------- The contents of the Abuse notice: Hello, We've received a report(s) that your EC2 instance(s) Instance Id: IP Address: has been has been operating as a TOR Exit node. Operating a TOR Exit node is forbidden in the AWS Acceptable Use Policy (hxxps://aws.amazon.com/aup/). We've included the original report below for your review. Please take action to stop the reported activity and reply directly to this email with details of the corrective actions you have taken. If you do not consider the activity described in these reports to be abusive, please reply to this email with details of your use case. If you're unaware of this activity, it's possible that your environment has been compromised by an external attacker, or a vulnerability is allowing your machine to be used in a way that it was not intended. We are unable to assist you with troubleshooting or technical inquiries. However, for guidance on securing your instance, we recommend reviewing the following resources: * Amazon EC2 Security Groups User Guide: hxxps://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.… (Linux) hxxps://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/using-network-securi… (Windows) * Tips for Securing EC2 Instances: hxxps://aws.amazon.com/articles/1233 (Linux) hxxps://aws.amazon.com/articles/1767 (Windows) * AWS Security Best Practices: hxxp://media.amazonwebservices.com/AWS_Security_Best_Practices.pdf If you require further assistance with this matter, you can take advantage of our developer forums: hxxps://forums.aws.amazon.com/index.jspa Or, if you are subscribed to a Premium Support package, you may reach out for one-on-one assistance here: hxxps://console.aws.amazon.com/support/home#/case/create?issueType=technical Please remember that you are responsible for ensuring that your instances and all applications are properly secured. If you require any further information to assist you in identifying or rectifying this issue, please let us know in a direct reply to this message. Regards, AWS Abuse " ---------------------------------------------------------------------------

9 21

How to find (and test) my obfs4 bridge?
by Tor-Node.net 28 Jul '16

28 Jul '16

Hi! I know the format for an obfs4 bridge is obfs4 IP:port fingerprint cert=XX iat-mode=0 I know my IP, port and fingerprint, but where can I find the "cert"-value? Kind regards Tor-node.net

2 1

switching between exit and guard
by Markus Koch 27 Jul '16

27 Jul '16

Hi there, now I am getting abuse mails nearly every day and digital ocean looks like getting pissed off. Is it technical possible to switch between exit and guard so I only run an exit for 14 days a months (less abuse mails per month if it is a exit only 14 days). Or is this a really bad idea? Markus PS: I am also getting my first bullet proof exit note tomorrow ... lets see how this works out ...

6 10

Established connections per port
by ken＠kenbaker.co.uk 24 Jul '16

24 Jul '16

Hi, I've been contacted by my VPS supplier. It seems that my exit nodes are generating a huge number of established connections (10K - 35K), most of which are unreplied. This is causing some grief. Is there a way, inside or outside of tor, for limiting the number of connections per port? Maybe a kernel or networking parameter? I'm afraid I'm not a networking expert. TIA: K.

2 1

Introduction
by Cr1m3Pi 21 Jul '16

21 Jul '16

Greetings all, I wanted to take a minute and introduce myself. I'm Cr1m3Pi and am a new relay operator. https://atlas.torproject.org/#details/8D3ABE5B3B4ADE5C1A40BF7D5277830BCDB5D… The relay is running on a RPi3 {hey, every little bit helps, right?} while I get my feet wet as an operator. Any advice regarding security and general maintenance is appreciated. Cr1m3Pi

14 15

Re: [tor-relays] Best bandwidth setup for exit node
by Tristan 15 Jul '16

15 Jul '16

"It's also worth noting that the Tor network only uses about 50% of the advertised bandwidth. But this is a good thing, because it helps reduce latency and congestion." Yes, but less than 1/3 of all Tor relays are exits ( https://metrics.torproject.org/relayflags.html) and exit bandwidth is much lower than total bandwidth: https://metrics.torproject.org/bwhist-flags.html

1 0

Best bandwidth setup for exit node
by Tor-Node.net 15 Jul '16

15 Jul '16

Hi! I have a VPS on a 6 TB (rx + tx) per month plan. What is most useful for the Tor network: a) Run it at full speed for about seven days per month (AccountingMax) or b) Throttle network speed by setting RelayBandwidthRate and always be online? Kind regards Tor-node.net

6 5

ARM Launch Permissions
by Alex Chang-Lam 13 Jul '16

13 Jul '16

I'm running a tor non-exit relay with ARM (or rather nyx), and yet though I launch arm with sudo -u $USER arm, I'm still unable to view connections. On start, connections are displayed, but disappear after a time. Likely an easy fix, but so far I'm stumped. [ARM_NOTICE] We were unable to use any of your system's resolvers to get tor's connections. This is fine, but means that the connections page will be empty. This is usually permissions related so if you would like to fix this then run arm with the same user as tor (ie, "sudo -u <tor user> arm"). Alex -----BEGIN PGP MESSAGE----- Version: GnuPG v2 owFVUn1MlHUcP0BuB0nKbiZvxTdg467gMGZem4oddNRN4CYZOJDwOZ7f3T30vNye F+8OF0FDgoRgmZMmKjBjjc2QlEMUGTEuxuTF6pYyU8FGUUMkRrXJW78H5sjt+ef5 /D6/7+fl+6sPCVCo/MZdEeEzU/aP/W7+YVHkVgatmuIZ4CWWpVgbECByPLAcm4hc lAg8ogk3OCnRDobsTNDgM54Q7QhT3C5tAhAsCW4kgmjnJJsdTEATEltkB4Jn1m8J EslBogRx771rzJbhBJDlBJGiaZBYwkIjrAhHKeSEIo5lUZFIcaygAzOLSQQvJvwf xgMQkJTgwK4QmQAWSZR/CYcDETwQVhEbwwkoBukgg/oA0W7sEBAhuMFKudb5AgdW TF53ITEOROpCgvNxusIs80FTmrEAchE4ERbasCcJCA9yA2cFNyfxILgFETHxAu5H 4OijiBdklk0uguMx/EySg3ZKAPxZKRatW2AQgbOIdkIuDj0T0EHYsLpcjgUBYhyi e2OAJEgEjSM5EM9QgrDGlxckIlJORa2ZAycn0STQOL3sCcfGGpSshlh5yxurwYge BIJBcjzcm7C2eg2FTcY8XdseGZKPU+R7MVpclYFGrmr/qE0KP5VCGegvPyBFcNDW p69qZm7LqnkobaxisLq0+I2kQTbHs/jow9Yx1xV31FZzRnnba9PNk3cCTi2Uvj9d cyjR0ackk8vqH1QTmb7vjuSc3rG7LunwvdpDyf9wLStKfXezYiEuUh/8WYB2NH8s n7ehw4+dF6q81jI15Ic9f/XG3byzs67zgapKW8kLgfN8eqEUM2EK/aVu9zn/iyVS Xnhmb+TE5QxLi+9C7K7ud8IeJP729WZVVUxK9IupZ4p7Dtj3rP45VXTqeD/Rzxr2 x325L+rTzw/0eryryy2dlzbfvzW8fN5ckE5P+lvm/k65dm6kdW/33ZWfZ6qUJyrq ypMrYnel1nx/XBmmGQzJHqnb3qTxflJakqqurpyeb8+drf3mRGHOX3Ml0Y+PGE1O bfnOIWN73su/7ij7YSKIGV76QlkZTnrj9Z0XPf8WzOp3XiIHmp9Lus9kaXVGPStE 9Fy3feWLblR7gvVTTHXnnbjpxv2vhJ4d2Pbm3qxjI6On1RUN2pvipn2512tXhn8a H7860NyfMGp4ovL8rugYUUQ4F+tvlBZ0zfSpXZFVrck9A28vtp5UtscKjcE1Tb4F /eiVvm1xK5kTNd6G29tPOuc1Y5fD6FcfGmZf73oYeM23FOGT2kjqCUx9G+Kqb5gs 6VCcCehKD298abwtb6n/WKe298ek4onQjrceWZZvjabpPhqC21tUA7ame/8B =B9un -----END PGP MESSAGE-----

2 2

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

tor-relays