- tor-relays - lists.torproject.org

More than one instance with Debian Jessie
by Patrick ZAJDA 04 Jul '16

04 Jul '16

Hi, With Debian Jessie and systemd, we can have multiple instances of Tor. But I cannot find any documentation about how to do that. Can someone tel me where to find some documentation (and not an alternative to have multiple instances). please? Else, can someone explain me how to do that if there is not documentation? Thanks and best regards. -- Patrick ZAJDA

8 30

why are so many OR connections closed with IOERROR ?
by Toralf Förster 02 Jul '16

02 Jul '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I do run a Tor exit relay under a 64 bit hardened Gentoo as OS and do wonder about a Trac issue reported in [1]. About 2/3 of all closed onion connections returns IOERROR instead of DONE as seen using [2]. That's why I'm asking here if other made a similar experience under a different OS ? [1] https://trac.torproject.org/projects/tor/ticket/13603 [2] https://github.com/toralf/torutils/blob/master/err.py - -- Toralf PGP: C4EACDDE 0076E94E, OTR: 420E74C8 30246EE7 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iF4EAREIAAYFAld32PcACgkQxOrN3gB26U4B5AD+KiugVV97Fsxe0OdbcSXSl+SX yvdc8IolpZ8WwvInc/sA/1rKZDJ3X2BUCnANQClAKGb8uTPJ3243cVudACOc79kK =3/d+ -----END PGP SIGNATURE-----

1 0

Thoughts on a meta-package for bridges?
by Nima Fatemi 30 Jun '16

30 Jun '16

Hello relay operators, I just started a thread about the usability of running different bridges on tor-dev@ and would appreciate some feedback from bridge operators. Though for the sake of better communication, I decided to avoid cross posting and only send it to tor-dev@. This is more of a FYI post to let you know this thread exists: https://lists.torproject.org/pipermail/tor-dev/2016-June/011159.html Looking forward to hear your thoughts on tor-dev mailing list. Best, -- Nima 0X58C4B928A3E218F6 | @mrphs "I disapprove of what you say, but I will defend to the death your right to say it" --Evelyn Beatrice Hall

1 0

Re: [tor-relays] [tor-talk] Unrecommended old 0.2.4.x and 0.2.5.x versions
by nusenu 30 Jun '16

30 Jun '16

(replying on a (more) public list) Roger Dingledine wrote: > I just removed > "0.2.4.23,0.2.4.24,0.2.4.25,0.2.5.8-rc,0.2.5.9-rc,0.2.5.10" > from the set of Tor versions that moria1 recommends as acceptable. glad to see this move and looking forward to the day where 0.2.4.x relays (currently at 7.8% cw) will no longer be included in consensus and all these short lived "default" windows bots disappear with it http://article.gmane.org/gmane.network.onion-routing.ornetradar/1452 http://article.gmane.org/gmane.network.onion-routing.ornetradar/1449

1 0

Usability Improvements for Atlas (was Re: Globe is now retired)
by Iain R. Learmonth 30 Jun '16

30 Jun '16

Hi All, On 29/06/16 09:56, Karsten Loesing wrote: > tl;dr: Globe is now retired in favor of an improved Atlas. Atlas is improved, but I'd like to improve it further. I've been tackling #6787 looking to improve the homepage and make Atlas easier to use for someone that isn't already a Tor expert. The changes I'm proposing in my fix for #6787 [1] do make some noticeable UI changes and I just want to gather some opinions on whether or not Atlas users feel that this is taking it in the right direction. The "Top 10 Relays" page was added to Atlas in order to make sure that functionality was not lost when shutting down globe. (See #5430 [2]) In my proposed patch, I'm also adding an "Authorities" page and adding text to both of these pages to explain what you're seeing. These are linked from the homepage, and from the top navbar. I'm also moving the introduction and explanation of the Atlas features from the About page to the homepage and introducing a new Help page that explains the details that are found in the relay details pages. You can find a live example of this patch at: https://irl.github.io/atlas/#/ and a full list of changes are detailed in #6787. Please let me know if you can see any reason to not merge this, or if you have any suggestions for small changes before merging. Thanks, Iain. [1]: https://trac.torproject.org/projects/tor/ticket/5430 [2]: https://trac.torproject.org/projects/tor/ticket/6787

5 14

Bridge torrc custom + socks
by Petrusko 29 Jun '16

29 Jun '16

Hey, Starting to set up some Bridges behind some routers, if possible at several locations. Since last time, I've found some useful informations, but I'm not 100% sure if torrc config is ok. So the goal is : - bridge - obsfproxy to help censored people - SOCKS available for LAN computers, to redirect traffic to Tor Here the torrc file I've tuned : ####START#### SocksPort 192.168.1.10:9050 #LAN IP SocksPolicy accept 192.168.1.0/24 #Socks available for LAN computers SocksPolicy accept 127.0.0.1 #Socks available for localhost too SocksPolicy reject * Log notice file /var/log/tor/notices.log ORPort 10000 Address x.x.x.x #WAN IP Nickname Test01 #name of the bridge node ContactInfo me(a)mail.com DirPort 10001 ExitPolicy reject *:* BridgeRelay 1 PublishServerDescriptor bridge AuthoritativeDirectory 1 BridgeAuthoritativeDir 1 ServerTransportPlugin obfs3 exec /usr/bin/obfsproxy managed ServerTransportListenAddr obfs3 0.0.0.0:10002 ExtORPort auto ####END#### In the router/box, I'll open/forward those 3 TCP ports from the WAN to the LAN server IP : ORPort : 10000 DirPort : 10001 Obfs : 10002 Test with a LAN client Firefox connecting with Socks is ok, IP seen is a Tor exit... Torcheck says the current browser is using Tor. But how to know if censored people can use this bridge ? (I'll test it from an open wifi hotspot in future...) Is this one is available in the list at bridges.torproject.org ? I see some log lines about stats files... where will it possible to check this bridge utilization ? If someone wants to correct this torrc file, please don't hesitate ! Is there something to add, to remove ?! Another eye is always cool to be sure ! Many thx for your lights :) -- Petrusko PubKey EBE23AE5 C0BF 2184 4A77 4A18 90E9 F72C B3CA E665 EBE2 3AE5

2 3

If you get weird crashes, that might be why
by pa011 26 Jun '16

26 Jun '16

On start-up my Exit (Linux 3.16.0-4-amd64) Tor 0.2.7.6 creates this log message: [warn] OpenSSL version from headers does not match the version we're running with. If you get weird crashes, that might be why. (Compiled with 100010bf: Op$bf: OpenSSL 1.0.1k 8 Jan 2015; running with 1000114f: OpenSSL 1.0.1t 3 May 2016). Unfortunately it really crashes ones a day. This seems to be an ongoing problem for years now? Could anyone please give some help - or is there none? Thanks Paul

4 4

Re: [tor-relays] Tor Weather has been discontinued
by l3thal.injecti0n＠gmail.com 24 Jun '16

24 Jun '16

If tor weather isn't running, and tshirt emails aren't being sent out, is someone doing this manually then? How can I help get the show on the road? Not gonna lie, I was really looking forward to the tshirt email as my relay definitely should have earned one about 2 weeks ago. haha. Actually I just donated $100... maybe now I can get a tshirt? https://atlas.torproject.org/#details/1F45542A24A61BF9408F1C05E0DCE4E29F2CB…

8 15

Multiple fingerprints for same IP:Port combo
by simon 22 Jun '16

22 Jun '16

Hi, Is it possible to have multiple Tor-nodes (with different keypair and fingerprint) at the same IP-Port combination? Or does that not work with the Directory implementation? The idea would be to have nodes under an anycast IP, because the anycast network has a lot of unused capacity. Another possibilty is to replicate the same node and re-use the same keypair in multiple physical locations for the same anycast IP, but I'm not sure this is a good idea. Simon

2 1

Opt-In Trial: Fallback Directory Mirrors
by Nick Mathewson 22 Jun '16

22 Jun '16

TL;DR: Stable non-exit relays can help tor clients use the Tor network. Please opt-in! We want to run a trial of fallback directory mirrors (fallbacks) in Tor. Tor clients contact fallbacks to download the consensus during initial bootstrap, before they contact the directory authorities. Fallbacks allow Tor to bootstrap in networks that block the Tor directory authorities. This allows people to use Tor without manually configuring bridges or pluggable transports. For more information about fallbacks, see: https://trac.torproject.org/projects/tor/wiki/doc/FallbackDirectoryMirrors For this trial, we want to find around 100 stable non-exit relays, as exits currently experience high load. We want relays that expect to be stable for the next 2 years, with: good uptime, the same IP address(es) and port, the same relay identity key, good bandwidth and network connectivity. In December 2015, we created a list of ~400 candidate fallbacks. https://trac.torproject.org/projects/tor/attachment/ticket/15775/fallback_d… If your relay is on this list, and you expect it to be on the same IP address(es) and port for at least 2 years, please consider opting-in for this trial. (Relays that aren't on the list are welcome to opt-in. They will be considered in future releases, or if the selection criteria change.) For the initial fallback release, we will only add your relay if you opt in. Please reply on the tor-relays mailing list, if you are able. (Opt-ins, opt-outs, and fallbacks chosen for inclusion in tor, will be managed using lists in the publicly available tor git repository.) all best wishes, & thanks for running Tor!

19 29