- tor-relays - lists.torproject.org

Filter Tor Exit Node for blatant attacks on servers
by Dr Gerard Bulger 13 Jun '16

13 Jun '16

It is heresy to suggest that Exit relays do anything of a sort, that is attempt to reject obvious attackers on an IP? Tor is neutral. Once TOR exits attempts any filtering where would it stop? It is a slippery slope. I think not, as to extend to other areas would far too complex and have diminishing returns. DMCA complaints for example was waste of time, and not all counties have copyright laws. I know that everyone on the internet should secure their servers, and take their own measures to block attacks, but too often those corporate measures include an automated abuse complaint being sent out. No explaining to ISP on what it means helps, as many of their staff are just too dumb and have to play safe. It is more than embarrassing to run an exit node and get abuse complaints about persistent and repeated attacks on an IP. The intent is clearly criminal. VPS providers in the UK are increasing intolerant in receiving such complaints. The whole VPS can be closed down by the ISP/VPS provider not forcing a closure of the TOR exit. Fewer ISPs will allow you to install an exit node at all. I am only wondering about blocking the obvious attacks or mass attacks to block. Is anyone developing such tools? Is it even possible? Those of us who would wish to enact such software, if it could be made, would have a flag on Tor Atlas stating that there is such a filter in place. Gerry

6 9

Re: [tor-relays] Tor Weather has been discontinued
by Michael Armbruster 13 Jun '16

13 Jun '16

On 2016-06-12 at 13:21, Jannis Wiese wrote: > I’m waiting since 7 months now. I know the guys who are handling the T-shirt requests are busy and I am (was) prepared to wait, but it’s a bit frustrating (if I think about it), to be honest. > >> On 08.06.2016, at 19:34, Markus Koch <niftybunny(a)googlemail.com> wrote: >> >> I am waiting since January? >> >> Hope has died a long time ago ... >> >> >> >> 2016-06-08 19:23 GMT+02:00 Michael Armbruster <tor(a)armbrust.me>: >>> On 2016-06-08 at 19:17, Green Dream wrote: >>>> The T-shirt incentive for relay operators is gone, as far as I know. >>>> >>>> If you donate $100 or more here you can pick a T-shirt as the >>>> gift: https://www.torproject.org/donate/donate.html.en >>>> >>>> There are many alternative ways to monitor the health and uptime of your >>>> relay. I like https://www.statuscake.com/ for this and their free plan >>>> is sufficient. I'm not affiliated with them, I just like their product. >>>> >>>> >>>> >>>> >>>> >>>> _______________________________________________ >>>> tor-relays mailing list >>>> tor-relays(a)lists.torproject.org >>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >>>> >>> >>> As far as I know, the incentive should still be there. At least it is >>> according to the web page. [1] >>> >>> But if it's really gone, it definitely has to be changed on the webpage, >>> as I myself am thinking right now that I should get a shirt. By the way, >>> I'm also already waiting for an answer for more than 2 weeks. >>> Just some time ago I heard somebody has waited 2 months to get an answer. >>> Well, I'm patient :) >>> >>> Best, >>> Michael >>> >>> [1] https://www.torproject.org/getinvolved/tshirt.html.en >>> >>> >>> _______________________________________________ >>> tor-relays mailing list >>> tor-relays(a)lists.torproject.org >>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >>> >> _______________________________________________ >> tor-relays mailing list >> tor-relays(a)lists.torproject.org >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > Well, then it won't be several weeks for me to wait, but obviously it will be several months. I of course planned to let the exit node run, but it should definitely be handled in a better way. Even an automatic mail once in a month, stating "We will handle it, but we are busy right now" would give me a better feeling about it. Not even an answer in 2-3 weeks, or in your case 7 months feels a bit uncomfy.

6 7

Re: [tor-relays] Tor Weather has been discontinued
by Michael Armbruster 13 Jun '16

13 Jun '16

On 2016-06-13 at 01:08, Moritz Bartl wrote: > On 06/13/2016 12:17 AM, Green Dream wrote: >> As I already said 4 days ago in this thread, all indications are the >> t-shirt program is no longer active. > > Wrong. It's just being handled by one volunteer at the moment. If you > want shirts, go into a shop and buy a shirt. If you want to contribute > to Tor, and be appreciated and have that appreciation being shown to you > by the community by getting a shirt, wait and magic will happen. > >> If someone here really cares about the false promise of t-shirts, that >> person could submit a pull request to update the website accordingly. > > eg. https://trac.torproject.org/projects/tor/ticket/19354 > See? That's exactly what I wanted to hear. As you have a torservers.net e-mail address, you'll know what you are talking about. So thanks for the explanation. "One volunteer at the moment" is the explanation many people were searching for and I can happily wait for the appreciation of a Tor t-shirt. It's just not the same buying or printing one myself, it's the achievement to get one from the Tor project, so I will wait until they get to me. It was just the communication on why people have to wait so long :) Oh, and thanks for the trac link, it shows a pretty neat IRC log ^^

1 0

Tor is Interrupting (?) OpenSSL Version Mismatch
by SuperSluether 11 Jun '16

11 Jun '16

After rebooting my Raspberry Pi for a few updates, Tor is not working properly. From the logs, [warn] OpenSSL version from headers does not match the version we're running with. If you get weird crashes, that might be why. (Compiled with 100010bf: OpenSSL 1.0.1k 8 Jan 2015; running with 1000114f: OpenSSL 1.0.1t 3 May 2016). Everything else in the log looks normal, but right after bootstrap 85% (finishing handshake with first hop) it says this: [notice] Interrupt: we have stopped accepting new connections, and will shut down in 30 seconds. Interrupt again to exit now. What do I do now? I have all the latest updates installed on this system, including the latest (stable) version of Tor.

4 11

TORRC Exit not obeying httproxy
by Dr Gerard Bulger 11 Jun '16

11 Jun '16

My tor exit node has been using a https proxy for a long time with great success in that I have had no abuse complaints directed to me and my VPS provider. Until recently. Traffic has increased as I made the bandwidth wider, which might be an explanation. I am getting complaints directed to my actual IP. It looks as if tor is sending data DIRECT and not obeying the lines completely, all the time. TORRC OutboundBindAddress IP (second IP of server) HTTPSProxy service:port HTTPProxyAuthenticator name password When I took out the OutboundBindAddress I just got complaints directed to the first IP. I assumed the lines FORCED proxy use. This might not be the case in higher traffic? Gerry

2 2

(no subject)
by JOHNY CAMPOS 10 Jun '16

10 Jun '16

2 1

Sharing experience with Via Nano 1.6ghz with Padlock hw accel
by Fabio Pietrosanti (naif) - lists 06 Jun '16

06 Jun '16

Hello, i wanted to share the experience in running a Tor Relay (no-exit) on a small embedded computer costing 7eur/month at oneprovider with unlimited 1Gbps bandwidth (at least they say that): VIA Nano processor U2250 (1.6GHz Capable) 2GB Ram I had to install to get the hw acceleration library: Tor version 0.2.8.1-alpha (git-9093e3769746742f). In /etc/tor/torrc: HardwareAccel 1 AccelName padlock I see with iptraf 60.000kbit/s peak with 30% uses of main CPU. I'm wondering if that small boxes are hitting a limit of the hardware acceleration or limit of the provider or Tor network itself. There's a way to measure the uses of the hw acceleration given by the Via Padlock, if it's at 10% of it's capacity or 100% ? -- Fabio Pietrosanti (naif) HERMES - Center for Transparency and Digital Human Rights http://logioshermes.org - https://globaleaks.org - https://tor2web.org - https://ahmia.fi

5 8

OBFS-4 Bridge Relay with 0 clients seen in more than one month
by fr33d0m4all 04 Jun '16

04 Jun '16

Hi, I'm running a Tor relay which is working fine and a Tor Bridge Relay on port 995 (ORPort is 465) which is reachable from the outside that has been running for more than one month and has never been contacted by any client. I've tried to use it with Tor Browser from outside my own network and it works fine. Does it take so long for an OBFS4 bridge relay to become known and used by someone? Best regards, Freedom For All -- _____________________________________________________________ PGP Key: 0DA8 7293 D561 3AEE A3C0 7F63 101F 316A F30E ECB4 IRC Nick: fr33d0m4all (OFTC & Freenode) _____________________________________________________________

4 3

Is Media Temple a good VPS provider for Tor Exit Nodes
by marykate＠airmail.cc 03 Jun '16

03 Jun '16

Hi, I need a VPS for running a Tor Exit node, and am eyeing Media Temple, but am unsure if MT is good for running Tor nodes. Is anybody using MT for running Tor exits? If so, what's your experience? Are they Tor friendly, or are they hostile to Tor nodes and actively oppose them? Are there better VPS providers? Best, Mary Kate

3 2

[warn] Received http status code 504 ("Gateway Time-out") from server '154.35.175.225:80' while fetching "/tor/ ...
by Robin Kjeld 03 Jun '16

03 Jun '16

Tor version 0.2.7.6 Tor relay logged this a few times: Jun 02 07:24:40.000 [warn] Received http status code 504 ("Gateway Time- out") from server '154.35.175.225:80' while fetching "/tor/server/d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z". I'll try again soon. Best regards Robin

2 1