- tor-relays - lists.torproject.org

uptime "algorithm"
by Dr. Who 15 Dec '15

15 Dec '15

As far as understand it is the flag HSdir given to nodes with a fast enough connection and a long enough uptime. If I keep my tor relay version always up to the current stable version I sometimes do have to restart the process. So I get a drop in my uptime and loose the HSdir flag for several days. Other nodes who don't care about versions keep the flag, despite the fact they might use older/inefficient/insecure/buggy versions. Wouldn't it be better to monitor the reason for a drop in uptime? In case at the same time a restart occurs the version increases it might be given the HSdir flag again? someone understands what I mean?

6 5

Tor Relay Operators Meetup at 32c3: 28.12. 16:45
by Moritz Bartl 14 Dec '15

14 Dec '15

As usual: Let's all gather at 32c3 to discuss Tor relay operation! Monday, 28.12.2015 16:45-18:45 Hall 13 https://events.ccc.de/congress/2015/wiki/Session:Tor_Relay_Operators_Meetup See you there! -- Moritz Bartl https://www.torservers.net/

4 3

Relay isn't getting HSDir flags
by Lucas Werkmeister 13 Dec '15

13 Dec '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi all! For some reason, my relay[1] isn't getting the HSDir and V2Dir flags. This is the full config, sans comments (sed '/^#\|^$/d' /etc/tor/torrc): SocksPort 0 DataDirectory /var/lib/tor ORPort 9001 Address 78.46.139.153 Nickname BotIfMuvasfo AccountingMax 7900 GB AccountingStart month 15 00:00 ContactInfo Lucas Werkmeister "6B89 5B8B 11A4 75B1 EC93 1698 FC46 2872 72AE 323F" <mail(a)lucaswerkmeister.de> DirPort 9030 # what port to advertise for directory connections ExitPolicy reject *:* # no exits allowed I reloaded the config several times since I uncommented the DirPort line, and even restarted the relay earlier today just in case enabling DirPort wasn't supported without restart. No luck - both Globe[1] and Atlas[2] don't show the HSDir or V2Dir flags. A few months ago, I had the relay running on a different server. I had enabled the DirPort there for a while, but eventually was forced to disable it since the server couldn't handle the load. But back then, the relay got the flags without any problem. Since I moved to a new server (copying over the torrc and data directories), this doesn't seem to be working anymore. (I am now on Debian 8, tor version 0.2.5.12; the old server was on Debian 7, tor version 0.2.4.27.) Any ideas on what the problem here could be? Thanks a lot, Lucas [1]: https://globe.torproject.org/#/relay/C527AD7D47E9DEC163537A444F4F790433CD67… [2]: https://atlas.torproject.org/#details/C527AD7D47E9DEC163537A444F4F790433CD6… -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJWbfIFAAoJEPxGKHJyrjI/B3AP/18uMBavSAQeHyYDr5D89bBQ JlTmDwWdolNc7SwNeaUTB8w+KYEatyVXJh7uAF4jrjKIS9eplMMU+1rcLS6C2tO4 4hvu9cYGwXepkuh742ikPIXivj7X08BqP+c38GYyXIC/mxdUJ44AZwGa3z4guWEl 6Qb9FtdxJ2NBMdtHjvmyFTUN2qYK0k6qYzoHygCyrf/OyoHjynkMRPKwaoHEgZhG yBIcf8AlOnKUf5+cVwkUZeurZ0l0KPl0hawUNDELciOMkGchMDyb6ui6u7LbCDVL gRiBToU6RJIiPo6vKw7UbAZeNeodNeXalmLMTL7vuKzhJjYgDae1bTJEQvMWdz6i nNxssOLHhBkTwdJosj1Kaw4a+opcqA8bPJY0KeAaZUnvAGro/lOwb0Tc7oDkbg2b Xb5IuQfWpZzpOuGldfisdqXRL1rySsnCaGSsFT9ulrkXaz42UDQE8pyxy8ErqL4j byhGiQF0F04sWldQPy3AjfZEImtBROx9PetESMLLyD6UYWffEGr6JLtIoolPEA0x OjMOGuyq91gJEZ2xIdlN+kJaylmnu/8kGKD6vAJwBxX8wVHWIyD5KbQOyL2RjCT8 gtiSFdIj8mZmvKUR5svWrgxfGoVGc5a76CUyLF+7Jd+d3DPPOlGXX+dJ/WErjgjH JbmjWbI1OIBai6gKvlSE =BmwK -----END PGP SIGNATURE-----

3 3

Webtropia threatening with penalty of 5.100€
by spriver 13 Dec '15

13 Dec '15

Hi, I am (or was) running a Tor Exit Node with about 200-250bmit/s on a VPS at Webtropia for several months with the common reduced exit policy (https://globe.torproject.org/#/relay/D218DF2C542CD1FB57FCF36DB6672A0DE6A8CB…) They never had a problem with the fact of running an exit, from time to time I got an abuse mail to which I responded with the "usual thing" (that I'm running an exit and the connections are not initiated by me. If some party wishes not to be contacted I would restrict acces [exit policy]). On Monday morning my server got shut down. I contacted them by asking, why the server was shut down, they responded that some spam was sent (abuse mailing from courbis.fr, axmo12.de claimed a brute force on SSH and the usual stuff from Webiron) and thus my server was blocked by them. They now claim that they are entitled to contractual penalty of 5.100,- € to be charged because I violate their Terms of Use. Their Terms do not forbid Tor itself, but spamming and other illegal things such as port scanning and DoS-attacks (https://www.webtropia.com/de/unternehmen/agb.html) They also told me that they cannot monitor if the traffic is really Tor traffic and that I should configure my server to prevent such abuse. How should I proceed there? Cheers!

3 3

authority signatures consensus-health
by tor-server-creator＠use.startmail.com 10 Dec '15

10 Dec '15

hi, wondering what happened to consensus lately? weight-drops, list says was missing authority signatures ? thanks

3 2

Crash and obfs error
by Geoff Down 10 Dec '15

10 Dec '15

Hello all, a couple of quick questions. Tor exited with this error: Dec 09 06:35:34.000 [err] descriptor at 0x62ee080 begins with unexpected string "". Is another process running in our data directory? Exiting. I've a vague feeling it's happened once before - anything to worry about? Also, on restarting Tor with Obfsproxy already running, I got Dec 09 14:14:43.000 [warn] Server managed proxy encountered a method error. (obfs3 Could not set up listener (0.0.0.0:xx) for 'obfs3' (Address already in use).) Dec 09 14:14:43.000 [warn] Managed proxy at '/usr/bin/obfsproxy' failed the configuration protocol and will be destroyed. does this mean that Tor is running without obfsproxy now, and I need to stop both and restart? It's quite annoying that Tor doesn't remember its auto-picked port, and I have to change the port-forwarding rule every time. Thanks, GD -- http://www.fastmail.com - IMAP accessible web-mail

3 3

Bridge Accounting Period Resets Stats
by akashic＠sigaint.org 10 Dec '15

10 Dec '15

I'm running some bridges on VPS where I set 10GB monthly limit. I never come close to the quota, but the bridges reset with a new port and new stats every accounting period. This is undesirable because it means people who wrote down my bridge and port will no longer be able to connect. And Atlas take 6 more days to mark the bridge as fast again. I like port diversity, but monthly switch seems excessive if 25% of every month is spent resetting stats. Can I set a longer accounting period, like 6 months? Failing that, what's the risk if I just get rid of the quota? Throttle rate of 200KB/s could add to 4TB/mo in worst case, which will get a VPS account killed. What's a more realistic worst case if I keep 200KB throttle with no monthly accounting?

2 1

VPS/Tor Final Thoughts
by Kurt Besig 09 Dec '15

09 Dec '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I thought it might be helpful to any other volunteer that may have been silently following this thread to quickly post the issues with my VPS Tor server that were resolved. 1. Setting up iptables allowed connections to my server. 2. Adding my server's [ip address] to the /etc/torrc resolved the problem of tor attempting to connect to the "node" my server is on rather than the actual ip my server is on. 3. Checking the user groups and permissions necessary to allow access to tor files. Other thoughts: As mentioned numerous times arm is a comfy frontend, but certainly not necessary after investigating system tools such as lsof and utilizing nload or munin. Also having ntp installed and running is helpful I think. Again thanks for all the help and have a very happy holiday season! -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQEcBAEBAgAGBQJWaDXxAAoJEJQqkaGlFNDPGh4H/0uDGiSIq9dYjDBNSIrVRoBQ sBGjLdFhvdFSJ4dsTRPspAKC+6zg4FnGSj1isBFBmJOLIN71oIo6qXkrXoQgyS+Q crnNYucyC6Vo8vQdK72QabuAJZGE2+VXfwTw/82NhldIQnKJzyfnjNKZYamR486y KQJGzPHls2abZPu0zyx/ay7pZRUZWzGvfc1yShQ6yTsiVqCJk456aPRd0/rbkLMQ dG/TOHHSOAJzMsZXk92rzk0JNBBYhwkOTiNyPQDd+S68IWyLXp5wC0hE4KTdRmf/ Osa8NIB3FQyYeg6XAjxZ1PhYSc8Lp91+K220znS/2lXStxjrdUFY4TU7119iYpA= =a7HY -----END PGP SIGNATURE-----

1 0

Mozilla11
by tor-server-creator＠use.startmail.com 08 Dec '15

08 Dec '15

seems like one instance didnt made it from 02510 to 0275: Mozilla11 - probably the other instances will handle the unused bandwidth but its a bit of a pity isnt it... if its running some hundret days we should poke now still its known by consensus otherwise its waste of electricity. thanks Mozilla <3

1 0

(no subject)
by 海洋 08 Dec '15

08 Dec '15

1 0