- tor-relays - lists.torproject.org

What's this Abuse
by Dr Gerard Bulger 20 May '16

20 May '16

My ISP got a weird Abuse notice with no details. Just said stop. Stop what? When we asked what the "abuse" was they sent a 1mb.gz snapshop of their log files. There were a few references to my IP, but I have no idea what was seen as abuse: Can anyone tell me what they are fussed about? I like to respond in a robust manner. My IP is 5.77.47.142 184.151.178.22 - - [16/May/2016:15:19:40 -0400] "GET /product_imgs/small/R-F35T5-832.jpg HTTP/1.1" 200 23822 "http://www.liteline.com/ALFT5-35-4100-3" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36" 184.151.178.22 - - [16/May/2016:15:19:40 -0400] "GET /product_imgs/small/R-FBT6124-WH-3.jpg HTTP/1.1" 200 23103 "http://www.liteline.com/ALFT5-35-4100-3" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/ HTTP/1.1" 200 1079 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/css/admin_styles.css HTTP/1.1" 200 1892 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/images/Liteline_logo_horizontal.png HTTP/1.1" 200 2610 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/images/px_bgrnd.png HTTP/1.1" 200 3738 "http://www.liteline.com/admin/css/admin_styles.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:42 -0400] "GET /favicon.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 209.29.237.34 - - [16/May/2016:15:19:42 -0400] "GET / HTTP/1.1" 200 7949 "-" "Mozilla/5.0 (iPad; CPU OS 9_2_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13D15 Safari/601.1" 209.29.237.34 - - [16/May/2016:15:19:42 -0400] "GET /styles2.css HTTP/1.1" 200 11384 "http://www.liteline.com/" "Mozilla/5.0 (iPad; CPU OS 9_2_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13D15 Safari/601.1" 209.29.237.34 - - [16/May/2016:15:19:43 -0400] "GET /prettyPhoto.css HTTP/1.1" 200 2769 "http://www.liteline.com/" "Mozilla/5.0 (iPad; CPU OS 9_2_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13D15 Safari/601.1" 209.29.237.34 - - [16/May/2016:15:19:43 -0400] "GET /js/functions.js HTTP/1.1" 200 9264 "http://www.liteline.com/" "Mozilla/5.0 (iPad; CPU OS 9_2_1 like Mac OS X) 6.1; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0" 5.77.47.142 - - [16/May/2016:15:19:56 -0400] "POST /admin/ HTTP/1.1" 302 1079 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:56 -0400] "GET /admin/admin.php HTTP/1.1" 200 1029 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 184.151.179.73 - - [16/May/2016:15:19:56 -0400] "GET /Lighting/Recessed/4-in/4-in-Trims/page/2 HTTP/1.1" 200 4961 "http://www.liteline.com/Lighting/Recessed/4-in/4-in-Trims/page/1" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" 184.151.179.73 - - [16/May/2016:15:19:56 -0400] "GET /styles2.css HTTP/1.1" 200 11384 "http://www.liteline.com/Lighting/Recessed/4-in/4-in-Trims/page/2" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" "http://www.liteline.com/Lighting/Recessed/4-in/4-in-Trims/page/2" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" 5.77.47.142 - - [16/May/2016:15:19:57 -0400] "GET /admin/css/admin_styles.css HTTP/1.1" 200 1892 "http://www.liteline.com/admin/admin.php" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:57 -0400] "GET /admin/images/rt_arrow.png HTTP/1.1" 200 554 "http://www.liteline.com/admin/css/admin_styles.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 216.123.172.226 - - [16/May/2016: 5.77.47.142 - - [16/May/2016:15:20:03 -0400] "GET /admin/admin.php?admin_add_product HTTP/1.1" 200 1271 "http://www.liteline.com/admin/admin.php" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:20:03 -0400] "GET /admin/css/admin_styles.css HTTP/1.1" 200 1892 "http://www.liteline.com/admin/admin.php?admin_add_product" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" HTTP/1.1" 200 9264 "http://www.liteline.com/ATF7630" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0" 5.77.47.142 - - [16/May/2016:15:20:18 -0400] "GET /admin/ HTTP/1.1" 302 1079 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:20:19 -0400] "GET /admin/admin.php HTTP/1.1" 200 1029 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:20:19 -0400] "GET /admin/css/admin_styles.css HTTP/1.1" 200 1892 "http://www.liteline.com/admin/admin.php" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 184.151.179.73 - - [16/May/2016:15:20:20 -0400] "GET. 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/images/Liteline_logo_horizontal.png HTTP/1.1" 200 2610 "http://www.liteline.com/admin/" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:41 -0400] "GET /admin/images/px_bgrnd.png HTTP/1.1" 200 3738 "http://www.liteline.com/admin/css/admin_styles.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 5.77.47.142 - - [16/May/2016:15:19:42 -0400] "GET /favicon.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0" 209.29.237.34 - - [16/May/2016:15:19:42 -0400]

7 13

VPS for Exits
by Tristan 20 May '16

20 May '16

Hostwinds is a pretty good US-based VPS. The price is good, and you get 10TB of bandwidth to start with. On May 20, 2016 6:03 PM, "I" <beatthebastards(a)inbox.com> wrote: Do you know of a VPS for an exit? Robert _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

Handling possible abuse requests
by pa011 19 May '16

19 May '16

I am running some pretty good developing relays which I would like to change into exit-nodes over time. As I have no experience how to handle possible abuses I would need some help please? Is there anybody out there who can give me some advice, or even help me doing (answering) these? How many of those abuses are to expect? How to avoid on changing what parameters? Any hints highly appreciated. PA

6 8

Re: [tor-relays] Handling possible abuse requests
by Tristan 19 May '16

19 May '16

I only ever received 1 abuse complaint over a 2-month period. I apologize for the inconvenience and explained that I would block the abused IP range. The abuse report was generated by Webiron, and they had a guide for Tor operators. I imagine other problems can be similarly solved. As others have said, a reduced exit policy will decrease your chances of getting complaints.

1 0

tor buddy is not checking
by himam.himam＠yandex.com 18 May '16

18 May '16

./tor-buddy.sh Tor-Buddy by AfterBurn @ NetSecNow http://learnnetsec.blogspot.com/ To stop script press CTRL+C Checking if Tor is installed... Tor is Installed! Starting Tor :-) /etc/init.d/tor: line 140: ulimit: open files: cannot modify limit: Operation not permitted * Checking if tor configuration is valid

2 1

What are the v1, v2, v3, v4 connections?
by William Denton 18 May '16

18 May '16

"Since startup, we have initiated 0 v1 connections, 1 v2 connections, 0 v3 connections, and 12345 v4 connections." What are these different types of connections? I can't find them in the docs, so I assume I'm not looking in the right place. (And what does it mean that the 1 v2 connection sneaked in?) Bill -- William Denton Toronto, Canada <https://www.miskatonic.org/>

2 1

Confirmed, Mexico largest ISP blocking TOR dir authority nodes
by Ricardo Malagon Jerez 16 May '16

16 May '16

Months of support calls to Telmex and now they are telling me that they are blocking the dir authority nodes because SPAM. Lame excuse, because they don't touch exit nodes. Just making hard to setup a TOR relay in Mexico. We have 6 relays in a country of 100 million inhabitants.

1 0

Tor Stats
by Dr Gerard Bulger 15 May '16

15 May '16

Tor Atlas and https://torstatus.blutmagie.de does not report any activity in graphs for my Tor exit. This data has been missing for some days now. Says online. Not stable yet as I keep it rebooting my new server once a day for 30 mins as checking if there are any errors. Which leads to another question. Is /etc/tor/torrc read on the fly? That is editing torrc will change the server on writing the file, or does it need tor restart with each edit. I had assumed the latter. I am not sure where or how this data collected for the pretty graphs. My server seems busy with many gigs in and out on tor ports and its own IP address according to various iptraffic tools I run on the server, but no data on those graphs at Atlas and elsewhere. Tor 0.2.7.6 on Ubuntu Linux on a VPS. Is this just me and something wrong with torrc ? or a more general problem? Gerry

5 5

Problems with firewall rules - SOLVED
by ludo0565＠dbmail.com 15 May '16

15 May '16

Hello everyone, And great thanks to Moritz Bartl as well as to Petrusko for their replies to help request (05/08/2016 11:06 PM). I needed some time first to implement, then to correct, but after getting there, and waiting for some positive test results (atlas and globe), I can now say : my problem is solved! My relay is working! Cheers! ludo0565

2 1

Re: [tor-relays] Tor Stats
by Dr Gerard Bulger 15 May '16

15 May '16

Really no relay has 3 day 1 week graphs? My exit node had them, then on the 10th read write fell to zero and plotted along the bottom. My server seemed OK and monthly graph seems OK, so perhaps the atlas error was graphing it in the first place. Just now graphs are back on https://torstatus.blutmagie.de So no longer worried ThanksSent from Samsung tablet -------- Original message -------- From: Josef Stautner <hello(a)veloc1ty.de> Date: 15/05/2016 12:23 (GMT+00:00) To: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] Tor Stats Am 15.05.2016 um 13:14 schrieb Dr Gerard Bulger: > Tor Atlas and https://torstatus.blutmagie.de does not report any activity > in graphs for my Tor exit. This data has been missing for some days now. > Says online. Not stable yet as I keep it rebooting my new server once a day > for 30 mins as checking if there are any errors. Which leads to another > question. Is /etc/tor/torrc read on the fly? That is editing torrc will > change the server on writing the file, or does it need tor restart with each > edit. I had assumed the latter. > > I am not sure where or how this data collected for the pretty graphs. My > server seems busy with many gigs in and out on tor ports and its own IP > address according to various iptraffic tools I run on the server, but no > data on those graphs at Atlas and elsewhere. > > Tor 0.2.7.6 on Ubuntu Linux on a VPS. > > Is this just me and something wrong with torrc ? or a more general > problem? > > Gerry > > > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > Hi Gerry, the "3 day" and "1 week" graph on Atlas are disabled. No relays has them. Did you mean that? ~Josef _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0