- tor-relays - lists.torproject.org

ExoneraTor down
by Alexander Dietrich 22 Aug '16

22 Aug '16

Hi, I just tried to use ExoneraTor, but it seems to be down: https://exonerator.torproject.org/ Best regards, Alexander -- PGP Key: https://dietrich.cx/pgp | 0x52FA4EE1722D54EB

4 4

Re: [tor-relays] relay on a vps not exclusively used for tor?
by Tristan 21 Aug '16

21 Aug '16

Honestly I have no idea how provides would enforce that rule anyway for that very reason. My guess is that it's a technicality, since Tor _can_ but isn't specifically _designed_ to max CPU usage. On Aug 21, 2016 10:47 PM, "Green Dream" <greendream848(a)gmail.com> wrote: >> > Most AUPs ban the use of programs designed to use 100% CPU >> >> A well-utilized Tor node will max out CPU... > > Mine hasn't. It peaks at about 30%. It can't even hit the 150Mbps limit I > set. Let me rephrase it then: a well-utilized Tor node _can_ max out CPU. I have two guard/middle nodes with maxed out cores. CPU is actually their bottleneck. They have high consensus weight and get a lot of use though. My point was just that if a VPS provider has a policy against software that maxes out CPU, Tor could cause that condition. Whether or not a provider would actually enforce this against a Tor node is another question. I haven't heard of it happening but ¯\_(ツ)_/¯ _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

issues with a fresh new tor server
by Toralf Förster 21 Aug '16

21 Aug '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, I made the following steps to have /var/lib/tor encrypted under an ext4fs under a stable Gentoo Linux: at a local system: head -c 16 /dev/random | xxd -p > ~/tmp-salt.txt; echo 0x`cat ~/tmp-salt.txt` > ~/.cryptoSalt; rm ~/tmp-salt.txt picked up a password from: pwgen -s 16 open the remote directory: scp ~/.crypto{Pass,Salt} user@host:home; ssh user@host 'cat ~/.cryptoPass | sudo e4crypt add_key -S $(cat ~/.cryptoSalt) /var/lib/tor; rm ~/.crypto{Pass,Salt}' debug.log tells me: ... Aug 21 15:09:23.817 [notice] Opening Directory listener on [2a01:4f8:190:514a::2]:80 Aug 21 15:09:23.000 [warn] Your log may contain sensitive information - you're logging more than "notice". Don't log unless it serves an important reason. Overwrite the log afterwards. Aug 21 15:09:23.000 [debug] tor_disable_debugger_attach(): Attemping to disable debugger attachment to Tor for unprivileged users. Aug 21 15:09:23.000 [debug] tor_disable_debugger_attach(): Debugger attachment disabled for unprivileged users. Aug 21 15:09:23.000 [info] tor_lockfile_lock(): Locking "/var/lib/tor/data/lock" Aug 21 15:09:23.000 [warn] Couldn't open "/var/lib/tor/data/lock" for locking: Operation not permitted Aug 21 15:09:23.000 [err] set_options(): Bug: Acting on config options left us in a broken state. Dying. (on Tor 0.2.8.6 ) and indeed : # ls -alR /var/lib/tor/ /var/lib/tor/: total 12 drwxr-xr-x 3 tor tor 4096 Aug 21 15:09 . drwxr-xr-x 14 root root 4096 Aug 21 03:10 .. drwx------ 2 tor tor 4096 Aug 21 15:09 data - -rw-r--r-- 1 root root 0 Aug 19 14:47 .keep_net-misc_tor-0 /var/lib/tor/data: total 8 drwx------ 2 tor tor 4096 Aug 21 15:09 . drwxr-xr-x 3 tor tor 4096 Aug 21 15:09 .. Any hints ? - -- Toralf PGP: C4EACDDE 0076E94E, OTR: 420E74C8 30246EE7 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iF4EAREIAAYFAle5qVMACgkQxOrN3gB26U6DKwD+KqNyqPlp3QvnSbC375p0sqe8 u9EeBJHUVX2xQxSIg9QA/icPTjMdK5iKh0uAgreqKi5T0g+JmxyGYg/Tp9ePJANl =w8Jd -----END PGP SIGNATURE-----

3 6

Question about the stable flag.
by tmbates12 20 Aug '16

20 Aug '16

Due to some problems with my VPS provider lately my relay hasn't been up consistently the past two weeks since it was created. I was wondering if it would be better to start from scratch again to get the stable flag considering my relay's bad history.

1 0

Guard Flag without stable Flag
by tmbates12 19 Aug '16

19 Aug '16

My relatively new Tor relay has somehow managed to get a Guard flag without having the Stable flag, I'm not sure if this is supposed to happen though..? https://atlas.torproject.org/#details/ABF5C38A93F2D7E77A226871AB0ADB052279B…

5 6

Relay vs exit node
by majacobs 18 Aug '16

18 Aug '16

Is my understanding correct that is NOT possible to run an accesspoint that connects to tor running a relay instead of an exit-node? I am able to torify programs running on the system , but need the acces point to be torified for some clients that need to go through tor. I am aware that this is possible if I run an exit node but my isp is seeing malware traffic every week or do if I do so... the white rider (Het leuke van ... is

2 1

Fwd: Problems with isp's onestrike policy
by majacobs 18 Aug '16

18 Aug '16

>> >> Cut off three times because of worm spread alert. I ran an exit node for just a couple of weeks. First came in while i was away on holiday . Could not connect to my vpn but noticed that one of my consumer routers send a reboot message around the first day of my vacation and didn't think about it again , that is till I got home and really started to run the node . Node 0d0a was running fine and well when the net was cut of for a second time just a few days before the third and last time. I contacted support , sought advice I was told to better run a relay. >> No way! I thought! >> To cut a story short, I know run in bridged mode (obsfs4proxy) but I am looking for solutions as to how Tor can help not seeing exit-nodes coming and going because of worm spreading? >> >> >> >> the white rider >> (Het leuke van ... is

3 4

Re: [tor-relays] Tiny computers (RPi-like) for exit nodes?
by Pi3 18 Aug '16

18 Aug '16

Im running 5 Mbits mid node on Pi3. Cpu load is 25-30% on 1 core with full steady traffic - no aes-ni here. Things should improve greatly when this ticket will go live in 0.2.9.x https://trac.torproject.org/projects/tor/ticket/7572

2 1

Abuse reports for non-exits
by Johan Nilsson 18 Aug '16

18 Aug '16

Hi, a directory authority IP-address on the DFRI network was recently reported for hosting malware and abuse reports was sent out to several mail addresses. Not only to abuse(a)dfri.tld as one would hope. The reason seems to have been malware using Tor connecting to the IP while analyzed in a sandbox. With the introduction of fallback directories abuse reports may become an issue for non-exit nodes. Just a heads up. Regards, Johan https://www.dfri.se

1 0

Local DNS on Exit logs failed user queries
by teor 18 Aug '16

18 Aug '16

Hi, When I set up a Tor Exit, I set up a local resolver (BIND) as a cache. Today, I was monitoring the syslog, and I noticed that BIND logs DNS names when resolution fails. (I have since removed these entries from the logs.) One way to prevent this is to disable logging on BIND entirely: logging { category default { null; }; }; Another is to isolate the categories that log DNS names, and disable them individually: logging { // these categories log DNS names category dnssec { null; }; category edns-disabled { null; }; category lame-servers { null; }; category resolver { null; }; category security { null; }; // also ignore uncategorised log messages category unmatched { null; }; }; I've updated the Tor wiki page on BIND with this configuration: https://trac.torproject.org/projects/tor/wiki/doc/BIND Does anyone know how to work out all the BIND categories that log DNS names? (All of the documentation I found online was helping people log *every* DNS query.) Or is it safer just to log a few essential categories? (Can anyone recommend any?) Has anyone checked if the logs on other resolvers (like unbound) have the same issue? Tim Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org

4 4