- tor-relays - lists.torproject.org

does it make sense to close unused ports at a tor relay with iptables ?
by Toralf Förster 28 Apr '16

28 Apr '16

6 8

Announcing a shutdown of a relay
by Josef 'veloc1ty' Stautner 28 Apr '16

28 Apr '16

Hi @all, can I announce the shutdown of my relay to the network so clients select a new guard? Thanks, ~Josef

4 6

MaxMemInQueues is set to 256 MB
by pa011 27 Apr '16

27 Apr '16

One of my small servers is running on Debian8 for weeks now. The memory is 256MB only. Arm is showing (Linux 3.16.0-4-a...) Tor 0.2.7.6 (recommended) cpu: 20.0% tor, 5.7% arm mem: 136 MB (56.5%) pid: 560 while some 20-40 Mbit/s are running through. The relay is connected to some 100Mbits/s. Could somebody please explain what is the maximum throughput I could possibly reach with "MaxMemInQueues is set to 256 MB" ? I guess it does not make sense to change the MaxMemInQueues while memory is only 256MB? If in case I cant use the whole 100Mbit/s - what would be the minimum requirement in memory I would need as the CPU is just working on a 20 percent level? Thank you . Paul

2 1

Suggestion for Tor exit friendly ISP
by Tor-Node.net 25 Apr '16

25 Apr '16

Hi! I have come across a Tor friendly VPS provider in Norway. They allow exits. At the moment they host no other Tor relay than mine. I've tried adding them to the Good/Bad ISP wiki, but get trapped be som anti-spam filter even when not logged in via Tor. Is this list an appropriate way to reccommend them? I'm not affiliated with this company but don't want to spam the list. Their permanent offer is a VPS with dedicated and unmetered 1Gbps connection per VPS, price per month is 149 NOK (~ 18 USD / ~ 16 EUR). My relay is at the moment CPU constrained, pushing about 10 MB/s. Kind regards TorNodeNET

3 2

IPv6 bridges (without IPv4 ORPort but IPv4 connectivity)
by erwin rolf 25 Apr '16

25 Apr '16

Hi, I'm running relays on servers which have a single IPv4 address and many IPv6 addresses. I guess this is a common setup in nowadays hosting environments since you get IPv6 addresses for free. I'm wondering whether these additional (currently unused) IPv6 addresses could be usefull to run bridges on them. Even though there are reports that say bridges are blocked on an IP:port basis (not IP only) I would prefere to not use the IPv4 address for the bridge at all since there runs a public relay on it already (something that is blocked already). I would like to run a config with an IPv6 ORPort only. To see whether this is currently supported I read: https://trac.torproject.org/projects/tor/wiki/org/roadmaps/Tor/IPv6 https://trac.torproject.org/projects/tor/wiki/doc/IPv6RelayHowto unfortunately the page reads: > Note that you'll have to have an IPv4 OR port configured as well, or your bridge will bootstrap but leave its clients hanging at 50% (see #4847) https://trac.torproject.org/projects/tor/ticket/4847 so my planned setup would not work I guess. A workaround would probably be to bind to IPv4 as well and ignore the fact that the IPv4 bridge wont be useable since it runs on the same IP as the public relay, but I'd rather wait for a fix of #4847. #4847 has the milestone set to unknown "0.2.???" If there are other options, please me know.

2 2

Reading check.torproject
by eliaz 23 Apr '16

23 Apr '16

In looking at the check.torproject.org page on the browser/machine that runs my bridge, I'm used to seeing the same IP address a.b.c.d on the check page ("Your IP address appears to be: a.b.c.d") as in the exit on the path drop-down. But today for several hours a.b.c.d showed on the drop-down but a different address w.x.y.z appeared on the page. Opening up atlas gave a "no results" error until I entered a.b.c.d manually; and w.x.y.z was no tor node; it turned out to belong to a VPN provider which was also poking my ports. Is this discrepancy normal? Should be worried about it? - eliaz

3 3

Re: [tor-relays] Using your own Relay as Entry Node
by stealth＠nym.mixmin.net 23 Apr '16

23 Apr '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I too would like to know, if using one's own relay as an Entry Node WITHOUT any of the Proxy shenanigans is good practice to maintain one's anonymity. I want to hard code my relay in torrc as the only entry node. Should this be done? -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (MingW32) iQIcBAEBAgAGBQJXGsFTAAoJEH1gNwhiMDZuxzUP/i9t56ZLG246vyV8Bb3Lz/9o bh/03OHrfKG+ZrgBKRu+K3pDxR6iPdKF5unvrRkmO8AOa056rUKNH0uBu/Ssawtx Bet0SDJT3YlPOYLhJAjO1Vy3nHgLxBwVGVs9z0pyS1yvcgufrmTQoLnpiTEtXLjg KvR2DqmBbgDvBJB6EX6GLSdI8agNsV92XD/nPkV6Z1lOZO6B2dzkSnaH7PyqEeQo vhhW4s9z28r//mbk59FvTB/LKbsvRIMh2PA1I3rdUonaDbBT/d1NCl2ICjvPKg2x CUGuF2Sjv6Rcw64BugvPBEUAKkb73woX0iQ52Ce1aowe3mx2xdnG4SAg5o4xwEr2 ORUG+4kGW+ds4kOaCDfkrjkSuqRw25zXhLLOTiaaHhKtTxFcbEoEcUfFL2z3ERDr sFkmFF1ce0fGzn7FBt6k+GR6c6XwmEu3orf/smW+JD669gNWeGyTWcN4vmml4Vge E9EwKRYT2Qk4VG5S6kg84eqJKSWIoqTR4ffISxpc5XwHqeWigBBhLMn8OP+4BqZP TjyW1Q/6/0O2mOISuhtyuvlbxvVRWO/Lwp2MWhAAaTSnMTyYHVJeO+JXl/h3zORs 4qCWAe9QkO9VheCMaIFw3kTVNWO09UZEvGgY5qtsNhwygABYZ0q5SpL1i49ros0v 8p0//o07gYqlItaLwDP6 =nshE -----END PGP SIGNATURE-----

2 1

Entry Node Problem
by stealth＠nym.mixmin.net 23 Apr '16

23 Apr '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I just added my relay fingerprint to my torrc file and my Tor Browser will not load. I must have the syntax wrong. My entry is below: EntryNodes (Myfingerprintgoeshere) Is this the correct syntax? If I want to add several entry nodes, do I just separate them with a comma? -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (MingW32) iQIcBAEBAgAGBQJXGxTTAAoJEH1gNwhiMDZuJioQAIicOI9IG2cAb8ILMr0ZpdS9 7eEsvN9mJj2ojrsVTQfmYK7559/bu3Q/wfXdh5bcnahZ6xvda7U2yuBo2XQFXwmh o8cpLyR5DJ0FOlisgSa3A/Hr5lXCFQ8/65jf51pYAuADvqhyt8HoVJT8M5nK3C+3 U7ge9lKXLRGvcfcgdSBL52PuZoALw3HLCkEqG/YA3ZZ9BDB7GEo43QLz6B/kSNtK asld5bde0hqL5+n6fcx9mqEdJahOKhaOpMR2haqeKbza7ojXkpnsgk029Ifltg5E n7U+deTbN6fSOKAAPUmkEEqJL9lJsG+jvpmTrVC0fba8v2AAd5F0mnHkQdGO/sOL WfRsThV6ROs/1UQQ7ohut5S8oFbFXutpH8BCeW+pBWxl61N3jZEGgpCEbO7Vug81 0pXNv7hiVeZWjpq0GQY1fi7VoO+THq8jL84jwY8rd6h4CXhNzH4im8qwrEtLtY7J b/J0tB7903xcwbr3YikMDJJWnIdTFI511XsopDa+kfxE66cxN+wjBdmJ9LYB0NuK avWKp0RWpeLukzHT0uZueKub1lEBEu/o4305GJooNo0XuiAixcPGcFvWs/QFe+MO SgBsMlde8zWRB3JxAtS+pR9xU9cm8Eo4h9wq8WwMRqTfIqCGViNIIcl8G5gd8lpx +Z5qTFzeWOz4BJ5tb8ai =vDfu -----END PGP SIGNATURE-----

2 1

Re: [tor-relays] Unmetered brandwith hosting
by dan 23 Apr '16

23 Apr '16

> Any more recommendations were I can buy cheap VPS servers were I can run an exit relay https://www.itldc.com they allow exits and offer cheap unmetered VPSes

2 1

Potwin, Kansas
by Kenneth Freeman 21 Apr '16

21 Apr '16

So this is why 114 Tor exit nodes are apparently operating from Potwin, Kansas! Figured it was a digital artifact. The article doesn't mention Tor itself, but the nominal fount really jumps out on TorFlow. http://fusion.net/story/287592/internet-mapping-glitch-kansas-farm/ https://torflow.uncharted.software/

2 1