- tor-relays - lists.torproject.org

How to find (and test) my obfs4 bridge?
by Tor-Node.net 28 Jul '16

28 Jul '16

Hi! I know the format for an obfs4 bridge is obfs4 IP:port fingerprint cert=XX iat-mode=0 I know my IP, port and fingerprint, but where can I find the "cert"-value? Kind regards Tor-node.net

2 1

switching between exit and guard
by Markus Koch 27 Jul '16

27 Jul '16

Hi there, now I am getting abuse mails nearly every day and digital ocean looks like getting pissed off. Is it technical possible to switch between exit and guard so I only run an exit for 14 days a months (less abuse mails per month if it is a exit only 14 days). Or is this a really bad idea? Markus PS: I am also getting my first bullet proof exit note tomorrow ... lets see how this works out ...

6 10

Established connections per port
by ken＠kenbaker.co.uk 24 Jul '16

24 Jul '16

Hi, I've been contacted by my VPS supplier. It seems that my exit nodes are generating a huge number of established connections (10K - 35K), most of which are unreplied. This is causing some grief. Is there a way, inside or outside of tor, for limiting the number of connections per port? Maybe a kernel or networking parameter? I'm afraid I'm not a networking expert. TIA: K.

2 1

Introduction
by Cr1m3Pi 21 Jul '16

21 Jul '16

Greetings all, I wanted to take a minute and introduce myself. I'm Cr1m3Pi and am a new relay operator. https://atlas.torproject.org/#details/8D3ABE5B3B4ADE5C1A40BF7D5277830BCDB5D… The relay is running on a RPi3 {hey, every little bit helps, right?} while I get my feet wet as an operator. Any advice regarding security and general maintenance is appreciated. Cr1m3Pi

14 15

Re: [tor-relays] Best bandwidth setup for exit node
by Tristan 15 Jul '16

15 Jul '16

"It's also worth noting that the Tor network only uses about 50% of the advertised bandwidth. But this is a good thing, because it helps reduce latency and congestion." Yes, but less than 1/3 of all Tor relays are exits ( https://metrics.torproject.org/relayflags.html) and exit bandwidth is much lower than total bandwidth: https://metrics.torproject.org/bwhist-flags.html

1 0

Best bandwidth setup for exit node
by Tor-Node.net 15 Jul '16

15 Jul '16

Hi! I have a VPS on a 6 TB (rx + tx) per month plan. What is most useful for the Tor network: a) Run it at full speed for about seven days per month (AccountingMax) or b) Throttle network speed by setting RelayBandwidthRate and always be online? Kind regards Tor-node.net

6 5

ARM Launch Permissions
by Alex Chang-Lam 13 Jul '16

13 Jul '16

I'm running a tor non-exit relay with ARM (or rather nyx), and yet though I launch arm with sudo -u $USER arm, I'm still unable to view connections. On start, connections are displayed, but disappear after a time. Likely an easy fix, but so far I'm stumped. [ARM_NOTICE] We were unable to use any of your system's resolvers to get tor's connections. This is fine, but means that the connections page will be empty. This is usually permissions related so if you would like to fix this then run arm with the same user as tor (ie, "sudo -u <tor user> arm"). Alex -----BEGIN PGP MESSAGE----- Version: GnuPG v2 owFVUn1MlHUcP0BuB0nKbiZvxTdg467gMGZem4oddNRN4CYZOJDwOZ7f3T30vNye F+8OF0FDgoRgmZMmKjBjjc2QlEMUGTEuxuTF6pYyU8FGUUMkRrXJW78H5sjt+ef5 /D6/7+fl+6sPCVCo/MZdEeEzU/aP/W7+YVHkVgatmuIZ4CWWpVgbECByPLAcm4hc lAg8ogk3OCnRDobsTNDgM54Q7QhT3C5tAhAsCW4kgmjnJJsdTEATEltkB4Jn1m8J EslBogRx771rzJbhBJDlBJGiaZBYwkIjrAhHKeSEIo5lUZFIcaygAzOLSQQvJvwf xgMQkJTgwK4QmQAWSZR/CYcDETwQVhEbwwkoBukgg/oA0W7sEBAhuMFKudb5AgdW TF53ITEOROpCgvNxusIs80FTmrEAchE4ERbasCcJCA9yA2cFNyfxILgFETHxAu5H 4OijiBdklk0uguMx/EySg3ZKAPxZKRatW2AQgbOIdkIuDj0T0EHYsLpcjgUBYhyi e2OAJEgEjSM5EM9QgrDGlxckIlJORa2ZAycn0STQOL3sCcfGGpSshlh5yxurwYge BIJBcjzcm7C2eg2FTcY8XdseGZKPU+R7MVpclYFGrmr/qE0KP5VCGegvPyBFcNDW p69qZm7LqnkobaxisLq0+I2kQTbHs/jow9Yx1xV31FZzRnnba9PNk3cCTi2Uvj9d cyjR0ackk8vqH1QTmb7vjuSc3rG7LunwvdpDyf9wLStKfXezYiEuUh/8WYB2NH8s n7ehw4+dF6q81jI15Ic9f/XG3byzs67zgapKW8kLgfN8eqEUM2EK/aVu9zn/iyVS Xnhmb+TE5QxLi+9C7K7ud8IeJP729WZVVUxK9IupZ4p7Dtj3rP45VXTqeD/Rzxr2 x325L+rTzw/0eryryy2dlzbfvzW8fN5ckE5P+lvm/k65dm6kdW/33ZWfZ6qUJyrq ypMrYnel1nx/XBmmGQzJHqnb3qTxflJakqqurpyeb8+drf3mRGHOX3Ml0Y+PGE1O bfnOIWN73su/7ij7YSKIGV76QlkZTnrj9Z0XPf8WzOp3XiIHmp9Lus9kaXVGPStE 9Fy3feWLblR7gvVTTHXnnbjpxv2vhJ4d2Pbm3qxjI6On1RUN2pvipn2512tXhn8a H7860NyfMGp4ovL8rugYUUQ4F+tvlBZ0zfSpXZFVrck9A28vtp5UtscKjcE1Tb4F /eiVvm1xK5kTNd6G29tPOuc1Y5fD6FcfGmZf73oYeM23FOGT2kjqCUx9G+Kqb5gs 6VCcCehKD298abwtb6n/WKe298ek4onQjrceWZZvjabpPhqC21tUA7ame/8B =B9un -----END PGP MESSAGE-----

2 2

Source build, then update it
by Petrusko 13 Jul '16

13 Jul '16

1 0

Exit node situation in Finland
by Nurmi, Juha 12 Jul '16

12 Jul '16

Greetings Tor Relay mailing list, I decided to write little bit about Finnish exit node situation. I am maintaining this exit node campaign in Finland: http://campaigns.ahmia.fi/finnish-tor-campaign/index_en.html In Finland: - Running an exit node is absolutely legal - ISP may cut your connection because it is listed as malware host - The National Cyber Security Center Finland (NCSC-FI) is able to "whitelist" your IP address so the ISP does not get those automated malware detections - Sebastian Mäki got police visit because his exit node - The National Bureau of Investigation is using exonerator.torproject.org so basically they are considering this information before they rush to your home - There has been warming up phase that maybe Finnish libraries start some Tor activity I am doing a lot of local advocacy work here :) Best, Juha

9 14

Re: [tor-relays] interesting tor platform string or tor bug?
by Tim Wilson-Brown - teor 11 Jul '16

11 Jul '16

> On 11 Jul 2016, at 16:27, 김성민 <dallas1004(a)gmail.com> wrote: > > Hi, I'm Ph.D. Student in KAIST, South Korea. > I'm implementing a modified Tor on top of Intel SGX CPU to improve the security issues of Tor as a research. > (Here is a related paper work [1, 2].) > For this, we port the Tor source code on the VS2012 to build an SGX project. > To make Tor running on top of SGX, we modified several lines of code of Tor and I think there is some mistake while printing a platform string. Tor shouldn't produce output like the output we're seeing, unless the platform name retrieved by tor has been localised. (Which seems unlikely, as the platform name is reported correctly some times, and incorrectly other times.) What do you get if you compile a simple program that only contains the function that retrieves the Windows platform name? It looks like you might be corrupting memory or mangling string processing. But it's very hard to help you unless we know what lines of code you changed, and how you changed them. > Currently, We successfully compiled a SGX-Tor binary and we ran it as a Tor relay for testing compatibility with existing Tor network. > We tested a Tor client with our SGX-Tor and it successfully works. > Is there any issues or rules to be considered for testing our SGX-Tor? It should pass all the unit tests run using "make check". It should pass the integration tests run using chutney and "make test-network-all". https://gitweb.torproject.org/chutney.git/ If you do find that it's a programming error in tor, feel free to submit a patch, or a unit test that would catch similar errors in the platform string. https://trac.torproject.org/projects/tor Tim > > Thanks, > Seongmin > > [1] http://ina.kaist.ac.kr/~dongsuh/paper/kim-hotnets2015.pdf > [2] http://ina.kaist.ac.kr/~dongsuh/paper/opensgx.pdf > > 2016-07-08 9:07 GMT+09:00 Tim Wilson-Brown - teor <teor2345(a)gmail.com>: > > > On 8 Jul 2016, at 09:48, Tim Wilson-Brown - teor <teor2345(a)gmail.com> wrote: > > > > > >> On 8 Jul 2016, at 09:41, nusenu <nusenu(a)openmailbox.org> wrote: > >> > >> Hi Seongmin, > >> > >> out of curiosity I was wondering whether your so called tor "platform" > >> string ("??B`?\u0001") or your tor relay [1] was generated by a modified > >> tor installation on Windows 8 or if we are looking at some bug in > >> vanilla tor? > > > > We plan on authorities rejecting descriptors with non-ASCII characters in 0.2.9, if we get it implemented before the code freeze. > > https://trac.torproject.org/projects/tor/ticket/18938 > > Hmm, I can't find an actual descriptor with these characters in it. The latest descriptor I can find for this relay has a normal platform line: > https://collector.torproject.org/recent/relay-descriptors/server-descriptor… > > Could this be a bug in Atlas? > > > > >> > >> thanks! > >> > >> > >> [1] > >> https://atlas.torproject.org/#details/21E84B294794821E2898E8ED18402E45E4FC3… > >> > >> descriptor containing that platform string: > >> https://collector.torproject.org/recent/relay-descriptors/server-descriptor… > >> > >> _______________________________________________ > >> tor-relays mailing list > >> tor-relays(a)lists.torproject.org > >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > > > Tim Wilson-Brown (teor) > > > > teor2345 at gmail dot com > > PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B > > ricochet:ekmygaiu4rzgsk6n > > > > > > > > > > Tim Wilson-Brown (teor) > > teor2345 at gmail dot com > PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B > ricochet:ekmygaiu4rzgsk6n > > > > > Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B OTR 8F39BCAC 9C9DDF9A DF5FAE48 1D7D99D4 3B406880 ricochet:ekmygaiu4rzgsk6n

1 0