- tor-relays - lists.torproject.org

Introduction
by Cr1m3Pi 21 Jul '16

21 Jul '16

Greetings all, I wanted to take a minute and introduce myself. I'm Cr1m3Pi and am a new relay operator. https://atlas.torproject.org/#details/8D3ABE5B3B4ADE5C1A40BF7D5277830BCDB5D… The relay is running on a RPi3 {hey, every little bit helps, right?} while I get my feet wet as an operator. Any advice regarding security and general maintenance is appreciated. Cr1m3Pi

14 15

Re: [tor-relays] Best bandwidth setup for exit node
by Tristan 15 Jul '16

15 Jul '16

"It's also worth noting that the Tor network only uses about 50% of the advertised bandwidth. But this is a good thing, because it helps reduce latency and congestion." Yes, but less than 1/3 of all Tor relays are exits ( https://metrics.torproject.org/relayflags.html) and exit bandwidth is much lower than total bandwidth: https://metrics.torproject.org/bwhist-flags.html

1 0

Best bandwidth setup for exit node
by Tor-Node.net 15 Jul '16

15 Jul '16

Hi! I have a VPS on a 6 TB (rx + tx) per month plan. What is most useful for the Tor network: a) Run it at full speed for about seven days per month (AccountingMax) or b) Throttle network speed by setting RelayBandwidthRate and always be online? Kind regards Tor-node.net

6 5

ARM Launch Permissions
by Alex Chang-Lam 13 Jul '16

13 Jul '16

I'm running a tor non-exit relay with ARM (or rather nyx), and yet though I launch arm with sudo -u $USER arm, I'm still unable to view connections. On start, connections are displayed, but disappear after a time. Likely an easy fix, but so far I'm stumped. [ARM_NOTICE] We were unable to use any of your system's resolvers to get tor's connections. This is fine, but means that the connections page will be empty. This is usually permissions related so if you would like to fix this then run arm with the same user as tor (ie, "sudo -u <tor user> arm"). Alex -----BEGIN PGP MESSAGE----- Version: GnuPG v2 owFVUn1MlHUcP0BuB0nKbiZvxTdg467gMGZem4oddNRN4CYZOJDwOZ7f3T30vNye F+8OF0FDgoRgmZMmKjBjjc2QlEMUGTEuxuTF6pYyU8FGUUMkRrXJW78H5sjt+ef5 /D6/7+fl+6sPCVCo/MZdEeEzU/aP/W7+YVHkVgatmuIZ4CWWpVgbECByPLAcm4hc lAg8ogk3OCnRDobsTNDgM54Q7QhT3C5tAhAsCW4kgmjnJJsdTEATEltkB4Jn1m8J EslBogRx771rzJbhBJDlBJGiaZBYwkIjrAhHKeSEIo5lUZFIcaygAzOLSQQvJvwf xgMQkJTgwK4QmQAWSZR/CYcDETwQVhEbwwkoBukgg/oA0W7sEBAhuMFKudb5AgdW TF53ITEOROpCgvNxusIs80FTmrEAchE4ERbasCcJCA9yA2cFNyfxILgFETHxAu5H 4OijiBdklk0uguMx/EySg3ZKAPxZKRatW2AQgbOIdkIuDj0T0EHYsLpcjgUBYhyi e2OAJEgEjSM5EM9QgrDGlxckIlJORa2ZAycn0STQOL3sCcfGGpSshlh5yxurwYge BIJBcjzcm7C2eg2FTcY8XdseGZKPU+R7MVpclYFGrmr/qE0KP5VCGegvPyBFcNDW p69qZm7LqnkobaxisLq0+I2kQTbHs/jow9Yx1xV31FZzRnnba9PNk3cCTi2Uvj9d cyjR0ackk8vqH1QTmb7vjuSc3rG7LunwvdpDyf9wLStKfXezYiEuUh/8WYB2NH8s n7ehw4+dF6q81jI15Ic9f/XG3byzs67zgapKW8kLgfN8eqEUM2EK/aVu9zn/iyVS Xnhmb+TE5QxLi+9C7K7ud8IeJP729WZVVUxK9IupZ4p7Dtj3rP45VXTqeD/Rzxr2 x325L+rTzw/0eryryy2dlzbfvzW8fN5ckE5P+lvm/k65dm6kdW/33ZWfZ6qUJyrq ypMrYnel1nx/XBmmGQzJHqnb3qTxflJakqqurpyeb8+drf3mRGHOX3Ml0Y+PGE1O bfnOIWN73su/7ij7YSKIGV76QlkZTnrj9Z0XPf8WzOp3XiIHmp9Lus9kaXVGPStE 9Fy3feWLblR7gvVTTHXnnbjpxv2vhJ4d2Pbm3qxjI6On1RUN2pvipn2512tXhn8a H7860NyfMGp4ovL8rugYUUQ4F+tvlBZ0zfSpXZFVrck9A28vtp5UtscKjcE1Tb4F /eiVvm1xK5kTNd6G29tPOuc1Y5fD6FcfGmZf73oYeM23FOGT2kjqCUx9G+Kqb5gs 6VCcCehKD298abwtb6n/WKe298ek4onQjrceWZZvjabpPhqC21tUA7ame/8B =B9un -----END PGP MESSAGE-----

2 2

Source build, then update it
by Petrusko 13 Jul '16

13 Jul '16

1 0

Exit node situation in Finland
by Nurmi, Juha 12 Jul '16

12 Jul '16

Greetings Tor Relay mailing list, I decided to write little bit about Finnish exit node situation. I am maintaining this exit node campaign in Finland: http://campaigns.ahmia.fi/finnish-tor-campaign/index_en.html In Finland: - Running an exit node is absolutely legal - ISP may cut your connection because it is listed as malware host - The National Cyber Security Center Finland (NCSC-FI) is able to "whitelist" your IP address so the ISP does not get those automated malware detections - Sebastian Mäki got police visit because his exit node - The National Bureau of Investigation is using exonerator.torproject.org so basically they are considering this information before they rush to your home - There has been warming up phase that maybe Finnish libraries start some Tor activity I am doing a lot of local advocacy work here :) Best, Juha

9 14

Re: [tor-relays] interesting tor platform string or tor bug?
by Tim Wilson-Brown - teor 11 Jul '16

11 Jul '16

> On 11 Jul 2016, at 16:27, 김성민 <dallas1004(a)gmail.com> wrote: > > Hi, I'm Ph.D. Student in KAIST, South Korea. > I'm implementing a modified Tor on top of Intel SGX CPU to improve the security issues of Tor as a research. > (Here is a related paper work [1, 2].) > For this, we port the Tor source code on the VS2012 to build an SGX project. > To make Tor running on top of SGX, we modified several lines of code of Tor and I think there is some mistake while printing a platform string. Tor shouldn't produce output like the output we're seeing, unless the platform name retrieved by tor has been localised. (Which seems unlikely, as the platform name is reported correctly some times, and incorrectly other times.) What do you get if you compile a simple program that only contains the function that retrieves the Windows platform name? It looks like you might be corrupting memory or mangling string processing. But it's very hard to help you unless we know what lines of code you changed, and how you changed them. > Currently, We successfully compiled a SGX-Tor binary and we ran it as a Tor relay for testing compatibility with existing Tor network. > We tested a Tor client with our SGX-Tor and it successfully works. > Is there any issues or rules to be considered for testing our SGX-Tor? It should pass all the unit tests run using "make check". It should pass the integration tests run using chutney and "make test-network-all". https://gitweb.torproject.org/chutney.git/ If you do find that it's a programming error in tor, feel free to submit a patch, or a unit test that would catch similar errors in the platform string. https://trac.torproject.org/projects/tor Tim > > Thanks, > Seongmin > > [1] http://ina.kaist.ac.kr/~dongsuh/paper/kim-hotnets2015.pdf > [2] http://ina.kaist.ac.kr/~dongsuh/paper/opensgx.pdf > > 2016-07-08 9:07 GMT+09:00 Tim Wilson-Brown - teor <teor2345(a)gmail.com>: > > > On 8 Jul 2016, at 09:48, Tim Wilson-Brown - teor <teor2345(a)gmail.com> wrote: > > > > > >> On 8 Jul 2016, at 09:41, nusenu <nusenu(a)openmailbox.org> wrote: > >> > >> Hi Seongmin, > >> > >> out of curiosity I was wondering whether your so called tor "platform" > >> string ("??B`?\u0001") or your tor relay [1] was generated by a modified > >> tor installation on Windows 8 or if we are looking at some bug in > >> vanilla tor? > > > > We plan on authorities rejecting descriptors with non-ASCII characters in 0.2.9, if we get it implemented before the code freeze. > > https://trac.torproject.org/projects/tor/ticket/18938 > > Hmm, I can't find an actual descriptor with these characters in it. The latest descriptor I can find for this relay has a normal platform line: > https://collector.torproject.org/recent/relay-descriptors/server-descriptor… > > Could this be a bug in Atlas? > > > > >> > >> thanks! > >> > >> > >> [1] > >> https://atlas.torproject.org/#details/21E84B294794821E2898E8ED18402E45E4FC3… > >> > >> descriptor containing that platform string: > >> https://collector.torproject.org/recent/relay-descriptors/server-descriptor… > >> > >> _______________________________________________ > >> tor-relays mailing list > >> tor-relays(a)lists.torproject.org > >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > > > Tim Wilson-Brown (teor) > > > > teor2345 at gmail dot com > > PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B > > ricochet:ekmygaiu4rzgsk6n > > > > > > > > > > Tim Wilson-Brown (teor) > > teor2345 at gmail dot com > PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B > ricochet:ekmygaiu4rzgsk6n > > > > > Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B OTR 8F39BCAC 9C9DDF9A DF5FAE48 1D7D99D4 3B406880 ricochet:ekmygaiu4rzgsk6n

1 0

BoingBoing Says Running Exits Is No Trouble re: LEA
by grarpamp 09 Jul '16

09 Jul '16

https://boingboing.net/2016/07/01/researchers-find-over-100-spyi.html "Many people fear that running an exit node will put them in police crosshairs if it gets used in the commission of a crime. For the record, Boing Boing runs a very high-capacity exit node, and though we've received multiple contacts from US law enforcement, we've just explained that this is a Tor node that runs with logging switched off, and thus we have no information that'll be relevant to any investigations, and the officers involved have thanked us and gone away without further trouble." -- BoingBoing

3 4

dns request capitalization, tor and unbound
by ajs124 09 Jul '16

09 Jul '16

Hey, I recently started running my first two exit relays. Since it was mentioned on the mailing list a while back and seem like a reasonable thing to do, I installed and configured unbound. Afterwards, I noticed that most if not all the DNS request are randomly capitalized. Does this impact unbound's caching ability? My cache hit/miss ratio is around 1/5. What is the reason for changing the capitalization? Best regards ajs124

7 6

in/out bandwidths and packet sizes
by Toralf Förster 09 Jul '16

09 Jul '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I'm just curious, why at my exit relay the bandwidth is constantly around 8 MByte/sec in both directions with a 2-3% higher value for the inbound bw whereas the amount of incoming packets is 25% and more higher more than the outgoing packet amount. And as always I do have the question in mind: Would that be helpful for an attacker ? - -- Toralf PGP: C4EACDDE 0076E94E, OTR: 420E74C8 30246EE7 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iF4EAREIAAYFAleAvUQACgkQxOrN3gB26U5ReQD+MXWkaph94+xUEw5+6oD63PtL WXMdSqg+vQvFxa68XhQBAIz9ys6ifbEGUXtOCFB4BUjfdPyaa1qvS+WKKZJur/Yx =6JG/ -----END PGP SIGNATURE-----

2 1