- tor-relays - lists.torproject.org

Help configuring a relay on OS X
by Surf Norway 01 Oct '16

01 Oct '16

A few years ago I tried setting up a relay as a way to contribute back to the community, I have fast symmetrical fiber and a Mac mini running as a light file server. I never was able to get it to work and gave up. I recently bumped up the RAM to max and put an SSD drive in, upgraded to 10.11 and thought I'd give another go at setting up a relay. I've installed Xcode and the command line tools, installed MacPorts and used that to install Tor. I configured the torrc file as best I could and expect that's probably the problem with my setup. When I start Tor (v0.2.8.8) it identifies the OS, reads the torrc file and grabs a chunk of memory for MaxMemInQueues. Then it opens OR listener but on an invalid IP (0.0.0.0), complains that it can't write to the log file (permission denied), and closes partially-constructed OR & directory options. Before I go and change the log file permissions, what user should I be running as when I start Tor as a relay? Ideally I want it to start with the system and run by default in the background and uncommented "RunAsDaemon 1" in the torrc file. The mini sits and serves files normally and isn't usually in use as a normal computer/console. When I run Tor myself it's from a different machine in order to use the Tor browser. All I want the mini to do is act as a relay, nothing more. Thanks for any help. Sorry for the newbie question, but guess what... Surf

2 1

help #3
by Markus Koch 30 Sep '16

30 Sep '16

me again ... I need the knowledge of the almighty tor operators. I set up three new and shiny tor exists and got a not so shiny error message: [WARN]Failing because we have 4063 connections already. Please read doc/TUNING for guidance It was already in this mailing list: http://archives.seul.org/tor/relays/Feb-2016/msg00060.html I "tuned" it with ulimit https://gitweb.torproject.org/tor.git/tree/doc/TUNING/ and nothing works and now I am running out of ideas and getting pissed. They exits are running a Debian 7 x64 minimal install with the newest tor version. Any ideas how to fix it? Markus

4 4

How to get rid of 'Family' entries?
by theonionbox＠gmx.com 30 Sep '16

30 Sep '16

2 1

Request for Tor abuse complaints
by Sadia Afroz 29 Sep '16

29 Sep '16

Dear exit operators, Can you please share the abuse complaints you received while running an exit? We are researchers from Univ. of California, Berkeley and Univ. of Massachusetts Amherst are interested in understanding what kind of abuse happens through Tor. Thanks to Moritz Bartl from Torservers.net <http://torservers.net/> we analyzed over 1GB of complaints received over 6 years. Here is our preliminary analysis of the complaints: http://www1.icsi.berkeley.edu/~sadia/tor_abuse_complaints.pdf <http://www1.icsi.berkeley.edu/~sadia/tor_abuse_complaints.pdf> We will appreciate if you can share the abuse complaints you received. It will be valuable for us to better understand the abuse of Tor and to find solutions to reduce abuse. Best, Sadia

9 17

Hide TOR exit on my external IP?
by Volker Mink 29 Sep '16

29 Sep '16

2 2

"Potentially dangerous relay groups"
by nusenu 28 Sep '16

28 Sep '16

pa011(a)web.de wrote: > there is that list of "potentially_dangerous_relaygroups" you published. > Could yo please emphasize a bit more on what brings a relay on that list, apart from incorrect given MyFamily which doesnt seem to be always the case. > I mean I see quite a few well respected names on that list ? to quote from https://github.com/ornetstats/stats (1) "dangerous" in the sense that a tor client might has a chance to use more than one of these relays in a single circuit (2) these relays are aggregated based on contact information (3) if their groupsize is bigger than their effective family size and they are operated in more than one /16 network block they are listed (4) this list might contain false-positives (contact information is not authenticated) Does that answer your question? I probably should also filter entries where two out of guard_prob, middle_prob and exit_prob are 0 since that means that (1) is never the case - iff onionoo is right about these probabilities.

12 23

log message: [WARN] Failing because we have X connections already.
by David S 27 Sep '16

27 Sep '16

greetings! i setup a new tor exit server and am seeing this in the log messages: 18:25:01 [WARN] Failing because we have 1352 connections already. Please read doc/TUNING for guidance. [11430 similar message(s) suppressed in last 21600 seconds] any ideas why? this is happening on a shared VPS, running ubuntu 16.04 and tor v0.2.8.8. i'm starting to think it's some limitation by the VPS provider. uname -a shows a old kernel (possibly centos 6): Linux km14133-25 2.6.32-042stab113.21 #1 SMP Wed Mar 23 11:05:25 MSK 2016 x86_64 x86_64 x86_64 GNU/Linux i've made sure tor has enough "max open files" available via limits.conf: # cat /proc/$(pgrep tor)/limits|grep "open files" Max open files 65536 65536 files i'm starting to scratch my head. maybe i should do some intense debugging on this box.. cheers, david

3 3

Strange difference between rx and tx traffic
by pa011 27 Sep '16

27 Sep '16

On one of my recently started Exits I do see a rather huge and increasing difference between in and out traffic that I don see on any other Exit so far. The rise doesn’t seem to be linear.. Any explanation for that - or can it just be on the back of a not fixed repetitive warning? Sep 27 06:42:46.000 [warn] eventdns: All nameservers have failed Sep 27 06:42:46.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back up Thanks Paul eth0 / daily day rx | tx | total | avg. rate ------------------------+-------------+-------------+--------------- 11.09.2016 539,96 MiB | 88,50 MiB | 628,47 MiB | 59,59 kbit/s 12.09.2016 1,47 GiB | 1,06 GiB | 2,53 GiB | 245,60 kbit/s 13.09.2016 10,03 GiB | 9,86 GiB | 19,89 GiB | 1,93 Mbit/s 14.09.2016 17,35 GiB | 16,69 GiB | 34,04 GiB | 3,30 Mbit/s 15.09.2016 53,11 GiB | 51,59 GiB | 104,70 GiB | 10,17 Mbit/s 16.09.2016 99,08 GiB | 96,87 GiB | 195,96 GiB | 19,03 Mbit/s 17.09.2016 144,45 GiB | 140,66 GiB | 285,12 GiB | 27,68 Mbit/s 18.09.2016 190,05 GiB | 184,50 GiB | 374,55 GiB | 36,36 Mbit/s 19.09.2016 231,95 GiB | 223,90 GiB | 455,86 GiB | 44,26 Mbit/s 20.09.2016 291,30 GiB | 282,25 GiB | 573,55 GiB | 55,69 Mbit/s 21.09.2016 343,19 GiB | 332,33 GiB | 675,52 GiB | 65,59 Mbit/s 22.09.2016 347,57 GiB | 329,66 GiB | 677,22 GiB | 65,75 Mbit/s 23.09.2016 388,91 GiB | 373,21 GiB | 762,13 GiB | 74,00 Mbit/s 24.09.2016 381,35 GiB | 361,64 GiB | 742,99 GiB | 72,14 Mbit/s 25.09.2016 391,60 GiB | 364,34 GiB | 755,94 GiB | 73,39 Mbit/s 26.09.2016 374,59 GiB | 337,81 GiB | 712,40 GiB | 69,17 Mbit/s 27.09.2016 144,06 GiB | 131,67 GiB | 275,73 GiB | 70,89 Mbit/s ------------------------+-------------+-------------+--------------- estimated 382,03 GiB | 349,18 GiB | 731,21 GiB |

4 5

Re: [tor-relays] [OrNetRadar] niftybunny Digital Ocean 2016-09-22
by nusenu 27 Sep '16

27 Sep '16

Hi Markus, according to your contactinfo observed on the tor network, you run 21 relays, please consider fixing your MyFamily setting, especially because you run non-exit and exits. thanks, nusenu https://raw.githubusercontent.com/ornetstats/stats/master/o/potentially_dan… ornetradar(a)riseup.net wrote: > 2016-09-22 > ----------------------------------------------------------------------------------------------------------------------- > Up|Ext|JoinTime| IP | CC | ORp | Dirp |Version | ContactInfo | Nickname | eFamlen > ----------------------------------------------------------------------------------------------------------------------- > 1 | 0 |14:51:30| 188.166.63.113 | nl | 443 | 80 |0.2.8.7 | niftybunny(a)googlemail.com | cairospinymouse | 1 > 1 | 0 |15:07:01| 95.85.45.159 | nl | 443 | 80 |0.2.8.7 | niftybunny(a)googlemail.com | mullahspinymouse | 1 > 1 | 0 |15:24:30| 138.197.129.153 | ca | 443 | 80 |0.2.8.7 | niftybunny(a)googlemail.com | capespinymouse | 1

2 1

New openssl releases
by Nick Mathewson 26 Sep '16

26 Sep '16

Just a reminder: if you're operating a relay, you should make sure that your operating system is giving you updates for openssl, and you are applying them. There was an update today about bugs in Thursday's OpenSSL releases. For the security advisory, see here: https://www.openssl.org/news/secadv/20160926.txt best wishes, -- Nick

1 0