- tor-relays - lists.torproject.org

Re: [tor-relays] VPS for Exits
by Neel Chauhan 22 May '16

22 May '16

> I contacted ITL (https://itldc.com/) as well two weeks ago. To me they > refused opening an exit: "We decide to do not allow new public tor > exit > nodes in our network. Existing public tor exit nodes we be kept." Well that's unfortunate. I guess I'll have to hold on to my VPS for a long time. No wonder why someone on this mailing list had trouble with ITL earlier this month. They no longer want exit nodes. -Neel Chauhan https://www.neelc.org/

1 0

Tip: Cheap fast dedicated servers for exit relays
by fatal 21 May '16

21 May '16

Ahoy! they are not in chiapas, they don't have a classy AS and (mostly) no esoteric operating systems. But they are cheap, fast and can be run as exit relays: the budget servers from Oneprovider (http://oneprovider.com/dedicated-servers/budget-servers) Oneprovider resells dedicated servers around the world and they handle all the 'sale' servers from online.net. Following the good/bad isp wiki page Online.net themself don't allow tor relays for quite some time. But oneprovider is "vpn friendly" (email from sales person) and I'm running a couple of exit relays with them for a couple of months. The abuse handling varies and depends on the provider they are reselling from. With the online.net servers I get one abuse mail every (!) monday for every server which states something about stopforumspam. I log in to the managment panel and reply that I'm running a tor server and can do nothing about this because stopforumspam doesn't provide more information and they close the ticket. That's it, never got any other abuse mails (running a reduced exit policy). The VIA Nano U2250 powered dedicated servers (Paris) cost 7€ a month (no setup fee, no ipmi, unlimited transfer) throughput max. is 82 Mbit/s in and out (throughput limit is the cpu, 1 core, no aes-ni, with iptables as in the arch wiki) with linux and max. 74 Mbit/s with freebsd (no pf, libressl, with openssl it's sightly faster¹). The Intel Atom C2350 powered dedicated servers (Paris and Amsterdam) cost 15€ a month (ipmi but no custom iso mount, only linux and windows are offered², unlimited transfer) and pushes ~180 Mbit/s in each direction with one tor instance (linux, stateles iptables and kernel tweaks for 100mbit+ relays from arch wiki and torservers.net, grsecurity kernel). The CPU (2 cores, aes-ni) isn't fully utilised so there is room for another tor instance (I'll move one of my relays there for testing when one of my VIA Nano contracts expire). Running more of these dedicated servers won't help making the tor network 'better' as in diversity (et al.) bus as in citius, altius, fortius. So if you would like to have a new, cheap, fast and easy to care mainstream (exit-)relay: go for it \o/ ¹ I'm no BSD expert and am wondering why stateless pf uses so 'much' more cpu power than statess iptables. Maybe someone can enlighten me :) ² Which I really feel sad about, I was hopeing for beeing the one with the fastest openbsd exit relay in the world - and that for 15 € a month ;)

3 3

What's this Abuse
by Dr Gerard Bulger 21 May '16

21 May '16

My ISP got a weird Abuse notice with no details. Just said stop. Stop what? When we asked what the "abuse" was they sent a 1mb.gz snapshop of their log files. There were a few references to my IP, but I have no idea what was seen as abuse: Can anyone tell me what they are fussed about? I like to respond in a robust manner. My IP is 5.77.47.142 184.151.178.22 - - [16/May/2016:15:19:40 -0400] "GET /product_imgs/small/R-F35T5-832.jpg HTTP/1.1" 200 23822 "http://www.liteline.com/ALFT5-35-4100-3" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36" 184.151.178.22 - - [16/May/2016:15:19:40 -0400] "GET /product_imgs/small/R-FBT6124-WH-3.jpg HTTP/1.1" 200 23103 "http://www.liteline.com/ALFT5-35-4100-3" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/ HTTP/1.1" 200 1079 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/css/admin_styles.css HTTP/1.1" 200 1892 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/images/Liteline_logo_horizontal.png HTTP/1.1" 200 2610 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/images/px_bgrnd.png HTTP/1.1" 200 3738 "http://www.liteline.com/admin/css/admin_styles.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:42 -0400] "GET /favicon.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 209.29.237.34 - - [16/May/2016:15:19:42 -0400] "GET / HTTP/1.1" 200 7949 "-" "Mozilla/5.0 (iPad; CPU OS 9_2_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13D15 Safari/601.1" 209.29.237.34 - - [16/May/2016:15:19:42 -0400] "GET /styles2.css HTTP/1.1" 200 11384 "http://www.liteline.com/" "Mozilla/5.0 (iPad; CPU OS 9_2_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13D15 Safari/601.1" 209.29.237.34 - - [16/May/2016:15:19:43 -0400] "GET /prettyPhoto.css HTTP/1.1" 200 2769 "http://www.liteline.com/" "Mozilla/5.0 (iPad; CPU OS 9_2_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13D15 Safari/601.1" 209.29.237.34 - - [16/May/2016:15:19:43 -0400] "GET /js/functions.js HTTP/1.1" 200 9264 "http://www.liteline.com/" "Mozilla/5.0 (iPad; CPU OS 9_2_1 like Mac OS X) 6.1; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0" 5.77.47.142 - - [16/May/2016:15:19:56 -0400] "POST /admin/ HTTP/1.1" 302 1079 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:56 -0400] "GET /admin/admin.php HTTP/1.1" 200 1029 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 184.151.179.73 - - [16/May/2016:15:19:56 -0400] "GET /Lighting/Recessed/4-in/4-in-Trims/page/2 HTTP/1.1" 200 4961 "http://www.liteline.com/Lighting/Recessed/4-in/4-in-Trims/page/1" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" 184.151.179.73 - - [16/May/2016:15:19:56 -0400] "GET /styles2.css HTTP/1.1" 200 11384 "http://www.liteline.com/Lighting/Recessed/4-in/4-in-Trims/page/2" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" "http://www.liteline.com/Lighting/Recessed/4-in/4-in-Trims/page/2" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" 5.77.47.142 - - [16/May/2016:15:19:57 -0400] "GET /admin/css/admin_styles.css HTTP/1.1" 200 1892 "http://www.liteline.com/admin/admin.php" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:57 -0400] "GET /admin/images/rt_arrow.png HTTP/1.1" 200 554 "http://www.liteline.com/admin/css/admin_styles.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 216.123.172.226 - - [16/May/2016: 5.77.47.142 - - [16/May/2016:15:20:03 -0400] "GET /admin/admin.php?admin_add_product HTTP/1.1" 200 1271 "http://www.liteline.com/admin/admin.php" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:20:03 -0400] "GET /admin/css/admin_styles.css HTTP/1.1" 200 1892 "http://www.liteline.com/admin/admin.php?admin_add_product" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" HTTP/1.1" 200 9264 "http://www.liteline.com/ATF7630" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0" 5.77.47.142 - - [16/May/2016:15:20:18 -0400] "GET /admin/ HTTP/1.1" 302 1079 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:20:19 -0400] "GET /admin/admin.php HTTP/1.1" 200 1029 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:20:19 -0400] "GET /admin/css/admin_styles.css HTTP/1.1" 200 1892 "http://www.liteline.com/admin/admin.php" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 184.151.179.73 - - [16/May/2016:15:20:20 -0400] "GET. 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/images/Liteline_logo_horizontal.png HTTP/1.1" 200 2610 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/images/px_bgrnd.png HTTP/1.1" 200 3738 "http://www.liteline.com/admin/css/admin_styles.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:42 -0400] "GET /favicon.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 209.29.237.34 - - [16/May/2016:15:19:42 -0400]

7 13

VPS for Exits
by Tristan 21 May '16

21 May '16

Hostwinds is a pretty good US-based VPS. The price is good, and you get 10TB of bandwidth to start with. On May 20, 2016 6:03 PM, "I" <beatthebastards(a)inbox.com> wrote: Do you know of a VPS for an exit? Robert _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

Handling possible abuse requests
by pa011 20 May '16

20 May '16

I am running some pretty good developing relays which I would like to change into exit-nodes over time. As I have no experience how to handle possible abuses I would need some help please? Is there anybody out there who can give me some advice, or even help me doing (answering) these? How many of those abuses are to expect? How to avoid on changing what parameters? Any hints highly appreciated. PA

6 8

Re: [tor-relays] Handling possible abuse requests
by Tristan 19 May '16

19 May '16

I only ever received 1 abuse complaint over a 2-month period. I apologize for the inconvenience and explained that I would block the abused IP range. The abuse report was generated by Webiron, and they had a guide for Tor operators. I imagine other problems can be similarly solved. As others have said, a reduced exit policy will decrease your chances of getting complaints.

1 0

tor buddy is not checking
by himam.himam＠yandex.com 19 May '16

19 May '16

./tor-buddy.sh Tor-Buddy by AfterBurn @ NetSecNow http://learnnetsec.blogspot.com/ To stop script press CTRL+C Checking if Tor is installed... Tor is Installed! Starting Tor :-) /etc/init.d/tor: line 140: ulimit: open files: cannot modify limit: Operation not permitted * Checking if tor configuration is valid

2 1

What are the v1, v2, v3, v4 connections?
by William Denton 18 May '16

18 May '16

"Since startup, we have initiated 0 v1 connections, 1 v2 connections, 0 v3 connections, and 12345 v4 connections." What are these different types of connections? I can't find them in the docs, so I assume I'm not looking in the right place. (And what does it mean that the 1 v2 connection sneaked in?) Bill -- William Denton Toronto, Canada <https://www.miskatonic.org/>

2 1

Confirmed, Mexico largest ISP blocking TOR dir authority nodes
by Ricardo Malagon Jerez 16 May '16

16 May '16

Months of support calls to Telmex and now they are telling me that they are blocking the dir authority nodes because SPAM. Lame excuse, because they don't touch exit nodes. Just making hard to setup a TOR relay in Mexico. We have 6 relays in a country of 100 million inhabitants.

1 0

Tor Stats
by Dr Gerard Bulger 16 May '16

16 May '16

Tor Atlas and https://torstatus.blutmagie.de does not report any activity in graphs for my Tor exit. This data has been missing for some days now. Says online. Not stable yet as I keep it rebooting my new server once a day for 30 mins as checking if there are any errors. Which leads to another question. Is /etc/tor/torrc read on the fly? That is editing torrc will change the server on writing the file, or does it need tor restart with each edit. I had assumed the latter. I am not sure where or how this data collected for the pretty graphs. My server seems busy with many gigs in and out on tor ports and its own IP address according to various iptraffic tools I run on the server, but no data on those graphs at Atlas and elsewhere. Tor 0.2.7.6 on Ubuntu Linux on a VPS. Is this just me and something wrong with torrc ? or a more general problem? Gerry

5 5