- tor-relays - lists.torproject.org

Tor authorities blocked by Cisco Senderbase
by Zwiebel 12 May '16

12 May '16

Hello, I operate three Tor relays on my university's network. All http traffic on that network goes through a transparent proxy which uses the Cisco Senderbase blacklist. I've recently noticed log messages that my relays can't connect to some Tor authorities. Seems like Cisco blacklists the following authorities for serving malware: dizum, tor26, maatuska, urras I've contacted them about this via [1] and explained that these hosts are most likely not malicious and got a replay via e-mail saying that they will remain blacklisted. - Zwiebel [1] http://www.senderbase.org/support/#problem=other

3 2

Mail.ru abuse
by Javantea 12 May '16

12 May '16

Hello, I run an exit node and everything has been going fine. I've recently gotten 3 automated abuse e-mails from mail.ru which say that my node has sent spam over HTTP (silly, I know). I expect that they will continue to e-mail me since they give me no way to block their servers. I wouldn't give it a second thought if my host wasn't forced to relay and occasionally read these e-mails, wasting their time. It is ripe with irony that automated spam reports would become spam itself. Mail.ru own so many blocks that I can't hope to block all of them without spending a lot of time producing a list. Has someone else produced such a list? Should I just continue ignoring these or has someone figured out a different solution? Since I've only received a dozen or so abuse e-mails from all sources, I have been treating them on a case-by-case basis blacklisting any that provide me with a cidr to block that they appear to own (8 blocks so far over 2-3 years). I balance my blocks with the fact that the more of the net we block out of convenience, the more likely someone using tor will be deanonymized -- if we all block mail.ru, a rogue exit node can pick up traffic to mail.ru much more easily than anywhere else. This is more true about SMTP, CIFS, BitTorrent, and other ports, but I haven't found a suitable solution for that problem. One of the e-mails is copied below. Regards, Javantea >From fblbounces(a)senderscore.net Thu May 12 10:43:32 2016 Return-Path: <fblbounces(a)senderscore.net> X-Original-To: report(a)abuse.he.net Delivered-To: report(a)abuse.he.net Received: from he.net (he.net [216.218.186.2]) by abuse.he.net (Postfix) with SMTP id B811D54012B for <report(a)abuse.he.net>; Thu, 12 May 2016 10:43:32 -0700 (PDT) Received: from mrb-fbl.returnpath.net ([66.45.29.179]) by he.net for <abuse(a)he.net>; Thu, 12 May 2016 10:43:46 -0700 Received: from poma02.lan.returnpath.net (poma02.lan.returnpath.net [10.2.0.110]) by mrb-fbl.returnpath.net (Postfix) with ESMTP id 2620561D5F for <abuse(a)he.net>; Thu, 12 May 2016 11:43:30 -0600 (MDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=senderscore.net; s=081107; t=1463075010; i=(a)senderscore.net; bh=q0FgMC02Auq80BHhhbqMTz43Lc55mfe175+So8F2/T4=; h=Date:Subject:To:From; b=yTsgoOykxJDv15EnLPDQYwuv9epiFm7PjelQ+3Gsam6kGCR3ar+3i1woxyWZkpE4b OoAyrWUvPo7VO9r8tFds8Da9nJU97hDm4QxO+mHCtOSxNBTE1P7PmwrUL4Lw23CxJg 5NzY7CfVgtywvj2M/Qn1SzWxasmHP62KIdIQFgIo= Received: by poma02.lan.returnpath.net (Postfix, from userid 106706) id 23CD5602D9; Thu, 12 May 2016 11:43:30 -0600 (MDT) Content-Type: multipart/report; boundary="_----------=_146307501015312125"; report-type="feedback-report" MIME-Version: 1.0 X-Mailer: MIME::Lite 3.029 (F2.84; T2.04; A2.12; B3.13; Q3.13) Date: Thu, 12 May 2016 11:43:30 -0600 Subject: Mail.ru Abuse Report To: abuse(a)he.net From: feedbackloop(a)mailru.senderscore.net Message-Id: <20160512174330.23CD5602D9(a)poma02.lan.returnpath.net> Content-Transfer-Encoding: 7bit This is a multi-part message in MIME format. --_----------=_146307501015312125 Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Type: text/plain This is a Mail.ru email abuse report for an email message received from IP 216.218.134.12 on Fri, 29 Apr 2016 11:59:18 +0000 --_----------=_146307501015312125 Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Type: message/feedback-report User-Agent: ReturnPathFBL/1.0 Abuse-Type: complaint Arrival-Date: Fri, 29 Apr 2016 11:59:18 +0000 Feedback-Type: abuse Version: 1 Source-IP: 216.218.134.12 Original-Rcpt-To: 5f6e6b0a23986cf15d2db9c7c97927b9(a)inbox.ru Original-Mail-From: oofaakuu45(a)mail.ru Reported-Domain: inbox.ru --_----------=_146307501015312125 Content-Disposition: inline Content-Type: message/rfc822 Content-Transfer-Encoding: 7bit Delivered-To: ***** Return-path: <oofaakuu45(a)mail.ru> Received: from [216.218.134.12] (ident=mail) by f158.i.mail.ru with local (envelope-from <oofaakuu45(a)mail.ru>) id 1aw74o-0000CW-7q; Fri, 29 Apr 2016 14:59:18 +0300 Received: from [216.218.134.12] by e.mail.ru with HTTP; Fri, 29 Apr 2016 14:59:18 +0300 From: =?UTF-8?B?0J7Qu9GM0LPQsCA=?= =?UTF-8?B?0J/Qu9GP0YHQvtCy0YHQutCw0Y8=?= <oofaakuu45(a)mail.ru> Subject: =?UTF-8?B?0JTQvtCx0YDRi9C5IA==?= =?UTF-8?B?0LTQtdC90Yw=?= MIME-Version: 1.0 X-Mailer: Mail.Ru Mailer 1.0 X-Originating-IP: [216.218.134.12] Date: Fri, 29 Apr 2016 14:59:18 +0300 Reply-To: =?UTF-8?B?0J7Qu9GM0LPQsCA=?= =?UTF-8?B?0J/Qu9GP0YHQvtCy0YHQutCw0Y8=?= <oofaakuu45(a)mail.ru> X-Priority: 3 (Normal) Message-ID: <1461931158.311272620(a)f158.i.mail.ru> X-Mras: OK X-Spam: undefined Content-Type: multipart/alternative; boundary="--ALT--d472ac373705efd312fbf64724626ab61461931158" To: 5f6e6b0a23986cf15d2db9c7c97927b9(a)inbox.ru ----ALT--d472ac373705efd312fbf64724626ab61461931158 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 IM6f0J3Qm9CQ0JnQnS3Qms6R0JfQmM6X0J4t0J/QoNCYzpPQm86R0KjOkc6V0KIt0J/QntCYzpPO oc6R0KLQrC3Ol86RLdCUzpXOl9CszpPQmArOl86f0JLQq9CcLdCYzpPOoc6f0JrQkM6cLdCRzp/Q nc6l0KEt0JTQni3QotCr0KHQr9Cn0Jgt0JTOn9Cb0JvQkM6h0J7OkgrQks6nzp/QlC3OoM6fLdCh 0KHQq9CbzprQlQo= ----ALT--d472ac373705efd312fbf64724626ab61461931158 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 CjxIVE1MPjxCT0RZPs6f0J3Qm9CQ0JnQnS3Qms6R0JfQmM6X0J4t0J/QoNCYzpPQm86R0KjOkc6V 0KIt0J/QntCYzpPOoc6R0KLQrC3Ol86RLdCUzpXOl9CszpPQmDxwPjwvcD7Ol86f0JLQq9CcLdCY zpPOoc6f0JrQkM6cLdCRzp/Qnc6l0KEt0JTQni3QotCr0KHQr9Cn0Jgt0JTOn9Cb0JvQkM6h0J7O kjxwPjwvcD7Qks6nzp/QlC3OoM6fLdCh0KHQq9CbzprQlTxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48 L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwv cD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9w PjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+ PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48 cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxw PjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxwPjwvcD48cD48L3A+PHA+ PC9wPjxwPjwvcD48cD48L3A+PHA+PC9wPjxpbnB1dCBzaXplPTMwIHZhbHVlPSJodHQKcDovL3Rp bgp5dXJsCi5jCm9tL2dycmhjdnIiPjwvQk9EWT48L0hUTUw+Cg== ----ALT--d472ac373705efd312fbf64724626ab61461931158-- --_----------=_146307501015312125--

4 3

Problems with firewall rules
by ludo0565＠dbmail.com 09 May '16

09 May '16

Hello everyone, I am new to this forum - so just very quickly, this about me : I have been a GNU-Linux-Debian user since 2005. I now use Debian 7/wheezy with TBB in its latest version. The reason that makes me get in touch with you is that I am pretty desperate and I hope somebody can help me. (As my problem is most probably connected to my telephone and internet service provider in France, it might be that somebody from France reading these lines could be more likely to help me). Until last November I was using a DartyBox. With that, everything worked all right. As I have been a user of TBB for quite some time, I wished to set up a relay on my computer, and, as Nicolas (previously from help-fr) advised me, I installed the tor package from Debian, had it configured, and my tor relay obviously worked. Then my previous telephone and internet service provider DartyBox wanted to get rid of its clients, and I subscribed to become a customer of BouyguesBox. Unfortunately whereas I haven't changed anything to the configuration of my computer, my tor relay doesn't work any more! As other programs seem no longer to function (e.g. ekiga, jitsi-meet through chromium), I suspect that there is a problem with the settings of the firewall on the BouyguesBox that will not allow the relay to get in touch with the outside world...? When "the firewall contains no rule", "as a standard settings the box blocks all unwanted traffic", says the BouguesBox. However that's also what the DartyBox said in the past, but that one did let through enough traffic in order for me to be able to take part in a Jitsi.meet conference ! So I don't really understand what is missing or lacking with the present BouyguesBox. Does anyone among those of you based in France think that they could make any suggestions as to how I could solve this problem? Especially which configuration of the firewall I should try and how to design, i.e. right, the rules governing the firewall. Thank you very much in advance for your support. ludo0565

3 2

68 new exits (50 running)
by nusenu 08 May '16

08 May '16

https://gist.githubusercontent.com/nusenu/0c8ec0852a07b41edfd74b1cfbe83ded/… I expect them to be run by a single entity. People with exit scanners might want to keep an eye on them.

9 13

Cannot Access Tor
by Ravi Nimsons 08 May '16

08 May '16

Hi I have tried everything possible following information on all the forums available and am frustrated as I cannot access Tor. Whenever I try to initiate Tor, I can see the processes running firefox.exe for Tor Browser and tor.exe but I do not get the initial pop-up dialog to connect to Tor. I have Norton Internet Security and have even deleted and reinstalled the “trusted” programs for the firewall to allow access to. Please help. Thank you

2 1

Search warrant and house search because of an exit in DE
by spriver 05 May '16

05 May '16

Hi, earlier today (this morning) German police officials (I live in Germany) came to my flat and searched my rooms. The official accuse was because of me being suspected to fraud (about 400€ of eBooks were purchased and not payed via my exit relay on 2015-11-02 (data is available that my relay was up at the time on exonerator and collector)). USB sticks and my notebook were taken as evidence. I was being asked (I don't have to do that) to unlock my notebook in front of officials and do a file search that the files are not present and to tell them (and bring evidence) that the corresponding IP address was a Tor relay at the time at the phone later today. Of course I do not have those eBooks on my notebook and the data showing that my relay was up is available. What should I do now? Cheers!

12 19

OpenSSL Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)
by Dhalgren Tor 04 May '16

04 May '16

https://www.openssl.org/news/secadv/20160503.txt In general I understand that padding oracle attacks are principally a hazard for browser communications. Am assuming that updating OpenSSL for this fix is not an urgent priority for a Tor Relay. If anyone knows different please comment.

2 1

Port knocking for SSH on a Tor node
by Cristian Consonni 03 May '16

03 May '16

Hi, I am putting together a blog post with tips and tools for administrating a node and then I have discovered the technique of "port knocking". I decided to experiment with it and I have created a guide that puts it together with the default configuration for iptables by torservers/moba[1a][1b]. I have searched on this list and the topic of port knocking has been discussed very rarely (last discussions in late 2014). This is the guide I have writen: https://balist.es/blog/2016/05/03/configure-port-knocking-for-a-tor-node/ I would like to receive some feedback and I hope this can be useful for other operators. Cristian [1a]: https://www.torservers.net/wiki/setup/server [1b]: https://raw.githubusercontent.com/torservers/server-config-templates/master…

3 4

Re: [tor-relays] Port knocking for SSH on a Tor node
by Diarmaid McManus 03 May '16

03 May '16

I agree there have not been any updates, but if you look at the issues list it doesn't seem there are any breaking bugs that would require a patch. Regular port knocking is certainly an improvement over nothing, but it's vulnerable to an attacker in some conditions as mentioned in the readme. So long as you're aware of the (minimal!) pitfalls I'm happy! :) On 3 May 2016 3:47 PM, "Cristian Consonni" <kikkocristian(a)gmail.com> wrote: 2016-05-03 16:25 GMT+02:00 Diarmaid McManus <diarmaidmcmanus(a)gmail.com>: > I would no longer recommend port knocking using a static port sequence. > Instead, I'd recommend knockknock by moxie, > https://github.com/moxie0/knockknock/blob/master/README I have discovered knockknock project just little before finishing the post and I really liked the reasoning behind the project, I will try it. However I was almost done with writing the post and I though it could be useful nonetheless because you do not need any additional software to set it up. One thing concerns me is that it seems that knockknock is unmaintained at the moment (no commits since 3.5 years). Cristian _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Re: [tor-relays] https://itldc.com/
by Neel Chauhan 02 May '16

02 May '16

>Perhaps you could answer that with clear steps to put a restricted port list which blocks the known offenders and web page explaining that it is only a proxy and complaints should be directed at you? >One VPS business accepted those from me and offered to help as well. >Others did as you found and cut ten VPS off just after I paid while the policy on their site allowed exits. Second this. I host a Tor exit node on ITL and still have my Tor exit node after a year with them, just because I am willing to block IP addresses I get complaints from. I also have another VPS with CoolHousing (through their Virtual Server Lite brand) and I do the same (block IP addresses I get complaints from). -Neel Chauhan https://www.neelc.org/

4 3