- tor-relays - lists.torproject.org

Fwd: Enable relay as trusted directory & entry guard
by Tim Wilson-Brown - teor 26 May '16

26 May '16

> Begin forwarded message: > > From: Austin Holiday <aholiday(a)yahoo.com> > Subject: Enable relay as trusted directory & entry guard > Date: 25 May 2016 at 23:24:42 GMT-3 > > Hi, > > I have the extra capacity/bandwidth would like to upgrade my relay to an entry node and directory server: > https://atlas.torproject.org/#details/1523C502A9754B6B42CCA5EB402A833CFF0E4… > > Is there anything I need to do? Hi, This question is best answered on the tor-relays list, I've cc'd the reply there. Your relay may be recommended as a "Guard" (entry node) by the directory authorities if it has enough stability and bandwidth over time. For more information, please read: https://blog.torproject.org/blog/lifecycle-of-a-new-relay Your relay is already a directory mirror, because you have configured a DirPort. Tim Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP 968F094B ricochet:ekmygaiu4rzgsk6n

1 0

Re: [tor-relays] VPS for Exits
by Neel Chauhan 25 May '16

25 May '16

> An exit node could be expensive ... Well, I'm still sticking with CoolHousing/Virtual Server Lite because I hardly ever get abuse complaints. For ITL, I may leave after my term expires. But a few other companies I found were: https://hostmaze.com/ https://www.lcsnet.eu/index.php https://serverastra.com/ https://blazingfast.io/ Thanks, Neel Chauhan https://www.neelc.org/

4 3

TOR router install without access to root
by Markus Koch 25 May '16

25 May '16

possible or do I have to ask my hosting company for the install on a shared server? Markus

9 17

Re: [tor-relays] VPS for Exits
by Neel Chauhan 23 May '16

23 May '16

>Do you know of a VPS for an exit? I have two exits on VPS servers. One is on ITL (https://itldc.com/) and the other one is on CoolHousing using their Virtual Server Lite brand (http://virtualniserverlite.cz/en/) My experience with both hosts has been very good. For the latter, you WILL need a Reduced Exit Policy, and have to remove IRC ports. I also previously had a VPS with Verelox (https://verelox.com/) when they had unlimited bandwidth, and they allow Tor exit nodes as well. I don't know about other providers, but a good place to ask for a Tor friendly VPS is vpsBoard (https://vpsboard.com/) -Neel Chauhan https://www.neelc.org/

4 3

New month, new TOR exit servers, need ELI5 pls
by Markus Koch 22 May '16

22 May '16

As I told you guys ITLDC.com kicked 3 of my exit servers last month. Just got 3 new ones, hosted by DigitalOcean, Hostwinds and soon virtualniserverlite. If things go wrong (and with my luck they will) how many and which ports do I have to forward to be useful as a exit node? eg: I get lots of abuse of port 22, can I close it and the TOR network will for itself find out that sending me ssh traffic is a bad idea? markus

4 7

Re: [tor-relays] New month, new TOR exit servers, need ELI5 pls
by Tristan 22 May '16

22 May '16

You can close port 22 by adding it to your exit policy. The syntax would be something like ExitPolicy reject *:22 You should put this towards the top of the exit policy rules so it isn't overridden by other rules. On May 22, 2016 8:34 AM, "Markus Koch" <niftybunny(a)googlemail.com> wrote: As I told you guys ITLDC.com kicked 3 of my exit servers last month. Just got 3 new ones, hosted by DigitalOcean, Hostwinds and soon virtualniserverlite. If things go wrong (and with my luck they will) how many and which ports do I have to forward to be useful as a exit node? eg: I get lots of abuse of port 22, can I close it and the TOR network will for itself find out that sending me ssh traffic is a bad idea? markus _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Port scanning via exit node
by ken＠kenbaker.co.uk 21 May '16

21 May '16

Hi Folks: I got an abuse complaint from my VPS host, because someone was using my exit node for port scanning. Here is the first bit of his (redacted) log. Attack detail : 4K scans dateTime srcIp:srcPort dstIp:dstPort protocol flags bytes reason 2016.05.14 17:13:47 CEST xxx.xxx.xxx.xxx:35008 xxx.xxx.xxx.xxx:22 TCP SYN 60 SCAN:SYN 2016.05.14 17:13:47 CEST xxx.xxx.xxx.xxx:46532 xxx.xxx.xxx.xxx:22 TCP SYN 60 SCAN:SYN 2016.05.14 17:13:47 CEST xxx.xxx.xxx.xxx:41718 xxx.xxx.xxx.xxx:22 TCP SYN 60 SCAN:SYN Hosting dude says he'd appreciate it if I could prevent this, but I'm not sure how. I'm afraid I don't have any logs - the VPS got reimaged. Suggestions how to prevent or mitigate this are welcome. Cheers, K.

3 3

tips-running-exit-node-minimal-harassment
by pa011 21 May '16

21 May '16

This page https://blog.torproject.org/blog/tips-running-exit-node-minimal-harassment cant be found at the moment - anybody holding a copy of it please? There is something similar 6 years old: https://www.facebook.com/notes/tor-project/tips-for-running-an-exit-node-wi… Is this still state of the art? Thanks Paul

2 1

Re: [tor-relays] VPS for Exits
by Neel Chauhan 21 May '16

21 May '16

> I contacted ITL (https://itldc.com/) as well two weeks ago. To me they > refused opening an exit: "We decide to do not allow new public tor > exit > nodes in our network. Existing public tor exit nodes we be kept." Well that's unfortunate. I guess I'll have to hold on to my VPS for a long time. No wonder why someone on this mailing list had trouble with ITL earlier this month. They no longer want exit nodes. -Neel Chauhan https://www.neelc.org/

1 0

Tip: Cheap fast dedicated servers for exit relays
by fatal 21 May '16

21 May '16

Ahoy! they are not in chiapas, they don't have a classy AS and (mostly) no esoteric operating systems. But they are cheap, fast and can be run as exit relays: the budget servers from Oneprovider (http://oneprovider.com/dedicated-servers/budget-servers) Oneprovider resells dedicated servers around the world and they handle all the 'sale' servers from online.net. Following the good/bad isp wiki page Online.net themself don't allow tor relays for quite some time. But oneprovider is "vpn friendly" (email from sales person) and I'm running a couple of exit relays with them for a couple of months. The abuse handling varies and depends on the provider they are reselling from. With the online.net servers I get one abuse mail every (!) monday for every server which states something about stopforumspam. I log in to the managment panel and reply that I'm running a tor server and can do nothing about this because stopforumspam doesn't provide more information and they close the ticket. That's it, never got any other abuse mails (running a reduced exit policy). The VIA Nano U2250 powered dedicated servers (Paris) cost 7€ a month (no setup fee, no ipmi, unlimited transfer) throughput max. is 82 Mbit/s in and out (throughput limit is the cpu, 1 core, no aes-ni, with iptables as in the arch wiki) with linux and max. 74 Mbit/s with freebsd (no pf, libressl, with openssl it's sightly faster¹). The Intel Atom C2350 powered dedicated servers (Paris and Amsterdam) cost 15€ a month (ipmi but no custom iso mount, only linux and windows are offered², unlimited transfer) and pushes ~180 Mbit/s in each direction with one tor instance (linux, stateles iptables and kernel tweaks for 100mbit+ relays from arch wiki and torservers.net, grsecurity kernel). The CPU (2 cores, aes-ni) isn't fully utilised so there is room for another tor instance (I'll move one of my relays there for testing when one of my VIA Nano contracts expire). Running more of these dedicated servers won't help making the tor network 'better' as in diversity (et al.) bus as in citius, altius, fortius. So if you would like to have a new, cheap, fast and easy to care mainstream (exit-)relay: go for it \o/ ¹ I'm no BSD expert and am wondering why stateless pf uses so 'much' more cpu power than statess iptables. Maybe someone can enlighten me :) ² Which I really feel sad about, I was hopeing for beeing the one with the fastest openbsd exit relay in the world - and that for 15 € a month ;)

3 3