- tor-relays - lists.torproject.org

Questions about GUI monitor
by nks nks 17 Jun '15

17 Jun '15

Dear Sir/Madam: My system is Debian 32bit, Tor non-exit bridge. 1. For Debian, is there any pure Tor service monitoring and analyzing software for the local machine (not the entire Tor network), with/without a GUI ? 2. Does "Vidalia" really end developing? May I ask why? May I install the "Vidalia" which is still could be found in the Debian apt system? 3. https://www.torproject.org/projects/projects.html.en "orlib" the link is dead. 4. About "Tor2web", are there any clearer figures and docs which could explain the security differences between "Tor" and "Tow2web" ? Especially for the client. Thank you.

4 4

Exit relay is apparently being used to attack other servers
by trillium 16 Jun '15

16 Jun '15

Hello, I’m running an exit relay (fingerprint: 5793CB9E1F5BAD3D5DA6C4158E16067D80CD8A2E) on a Linode VPS right now, and so far they’ve been really fantastic with dealing with a couple of DMCA notices that were sent to them. However, in the last week, I received notice from them that my server is attacking multiple sites around the web. Their suggestion was to go through my logs and remove the offending user, which is obviously unhelpful advice as I don’t keep any logs on my relay’s users. I’d like to keep running the exit relay, but I’m not really sure how to best go about mitigating these sorts of threats and don’t want Linode to shut down the entire server. Any suggestions are very much welcomed. Thanks, trillium

6 6

Encryption in French servers
by Javi 15 Jun '15

15 Jun '15

I know in France it's illegal to encrypt data so if I run a tor relay in a French server I would have any problem? Thanks.

2 1

Re: [tor-relays] Exit relay is apparently being used to attack other servers
by spiros_spiros＠freemail.gr 13 Jun '15

13 Jun '15

Hi Trillium, It is always sad when Tor is used to hack/DoS/compromise servers. As operator of an Exit Node unfortunately you will see as well as the DMCA notice the hacking/abuse/spamming/botnet alerts from some service provider, also you will get notification that the node is added to this blacklist and that spammer list. My advice is to work very closely with your Exit Node datacentre and make them know that you respond quickly to abuse emails (even the annoying automatic ones) with polite message to tell them you have a Tor Exit and cannot provide details of traffic source or realistically block individual user or IP. If the datacentre is friendly you will hopefully not be shut down or account closed. If you get paranoid about one particular provider, or they harass you with email threats/notifications you could use iptables or ipfw to block individual host, or close the port to the Exit Node in your torrc. It would be better to explain situation if you are in contact with them and go from there. In my experience when I email complaining party to explain I run Tor relays I almost never get a response but sometimes they just block the Exit Node IP on their firewall which is fine. If really paranoid, consider moving to provider that does not require scan of government ID or passport, pay with BitCoin if possible, don't provide real house address and don't log in to server from your home IP. As others have written before me, Linode is not great for Tor friendliness. S On 13 Jun 2015, at 19:03, trillium <trillium(a)riseup.net> wrote: Hello, I’m running an exit relay (fingerprint: 5793CB9E1F5BAD3D5DA6C4158E16067D80CD8A2E) on a Linode VPS right now, and so far they’ve been really fantastic with dealing with a couple of DMCA notices that were sent to them. However, in the last week, I received notice from them that my server is attacking multiple sites around the web. Their suggestion was to go through my logs and remove the offending user, which is obviously unhelpful advice as I don’t keep any logs on my relay’s users. I’d like to keep running the exit relay, but I’m not really sure how to best go about mitigating these sorts of threats and don’t want Linode to shut down the entire server. Any suggestions are very much welcomed. Thanks, trillium _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Re: [tor-relays] Recommendation: Upgrade your OpenSSL! (Nick Mathewson)
by teor 12 Jun '15

12 Jun '15

> Date: Thu, 11 Jun 2015 14:30:35 -0400 > From: Nick Mathewson <nickm(a)torproject.org> > > Hi, relay operators! > > There have been a series of new openssl releases today: 0.9.8zg, > 1.0.0s, 1.0.1n, and 1.0.2b. > > They fix a set of security issues described in this announcement: > https://www.openssl.org/news/secadv_20150611.txt > > Since some of these issues could allow a remote denial-of-service > attack, I would suggest that everybody should upgrade as OpenSSL > packages become available for your operating systems. If you build > OpenSSL from source, now's a good time to rebuild. You probably don't > need to run in circles freaking out, or anything -- just upgrade when > you can. > > Also, if you can possibly avoid it, it would be a good idea to stop > using the OpenSSL 0.9.8 series entirely. It's old and crufty and is > missing many security improvements in later versions. OpenSSL 0.9.8 > will not be supported in Tor 0.2.7.2-alpha or later. Please also note that OpenSSL versions 0.9.8 and 1.0.0 are becoming unsupported at the end of 2015: "As per our previous announcements and our Release Strategy (https://www.openssl.org/about/releasestrat.html) support for OpenSSL versions 1.0.0 and 0.9.8 will cease on 31st December 2015. No security updates for these releases will be provided after that date. Users of these releases are advised to upgrade." See the second-last section in https://www.openssl.org/news/secadv_20150611.txt teor teor2345 at gmail dot com pgp 0xABFED1AC https://gist.github.com/teor2345/d033b8ce0a99adbc89c5 teor at blah dot im OTR D5BE4EC2 255D7585 F3874930 DB130265 7C9EBBC7

1 0

Recommendation: Upgrade your OpenSSL!
by Nick Mathewson 11 Jun '15

11 Jun '15

Hi, relay operators! There have been a series of new openssl releases today: 0.9.8zg, 1.0.0s, 1.0.1n, and 1.0.2b. They fix a set of security issues described in this announcement: https://www.openssl.org/news/secadv_20150611.txt Since some of these issues could allow a remote denial-of-service attack, I would suggest that everybody should upgrade as OpenSSL packages become available for your operating systems. If you build OpenSSL from source, now's a good time to rebuild. You probably don't need to run in circles freaking out, or anything -- just upgrade when you can. Also, if you can possibly avoid it, it would be a good idea to stop using the OpenSSL 0.9.8 series entirely. It's old and crufty and is missing many security improvements in later versions. OpenSSL 0.9.8 will not be supported in Tor 0.2.7.2-alpha or later. best wishes, and many thanks! -- Nick Mathewson

1 0

Re: [tor-relays] BWAUTH weightings too volatile. . ."twitchy"
by starlight.2015q2＠binnacle.cx 11 Jun '15

11 Jun '15

>Mon Jun 8 05:25:55 UTC 2015 >> UBSAN seems expensive and doesn't seem >> it would run other than test, but >> I didn't work on it long and am not >> 100% certain. Was trying ASAN extra >> stack checking at the time, which may >> have been the culprit. > >As I said in my previous email, if you're >running releases before 0.2.6.6 (2015), >Tor won't run under UBSAN due to issues >that have been fixed in subsequent >releases. Had a need to run ASAN+UBSAN and it works perfectly fine for me with version 0.2.4.27. Required a minor patch to convert a single common variable 'incoming_queue' to extern. Performance hit was not as bad as I thought from the earlier try, but bad enough that I limited the instrumented modules to only what's necessary.

1 0

Incorrect IP Address change reported
by Pascal Terjan 10 Jun '15

10 Jun '15

I got my IP address reported as changed to some Deutsche Telekom IP twice in a few minutes by 154.35.175.225 yesterday This IP is "Faravahar" according to https://trac.torproject.org/projects/tor/ticket/14487 Jun 09 12:21:50.000 [notice] Our IP Address has changed from 149.18.2.82 to 91.5.121.93; rebuilding descriptor (source: 154.35.175.225). Jun 09 12:21:51.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor. Jun 09 12:21:54.000 [notice] Performing bandwidth self-test...done. Jun 09 12:22:51.000 [notice] Our IP Address has changed from 91.5.121.93 to 149.18.2.82; rebuilding descriptor (source: 86.59.21.38). Jun 09 12:22:51.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor. Jun 09 12:22:51.000 [notice] Self-testing indicates your DirPort is reachable from the outside. Excellent. Jun 09 12:23:52.000 [notice] Our IP Address has changed from 149.18.2.82 to 91.5.121.93; rebuilding descriptor (source: 154.35.175.225). Jun 09 12:23:52.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor. Jun 09 12:24:10.000 [notice] Our IP Address has changed from 91.5.121.93 to 149.18.2.82; rebuilding descriptor (source: 154.35.175.225). Jun 09 12:24:10.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor. Jun 09 12:25:00.000 [notice] Self-testing indicates your DirPort is reachable from the outside. Excellent.

2 1

Cheap exit-friedly VPS provider
by Alexey Nayden 10 Jun '15

10 Jun '15

Hello everybody, A couple of months ago I decided to run a Tor exit relay. I contacted several VPS and dedicated providers and ended up using PulseServers, because they offered unmetered fast channel for ~$13/month and were Tor-friendly. Only after installing and configuring the relay I realized their IPs are from OVH AS and they are OVH resellers. I understand OVH AS'es already dominate the network and should be avoided if possible, so I have 2 questions: 1. Is there a comparable alternative? 100 Mbit/s unmetered (or 20+ TB of traffic) for less than $20/month. I imagine cheap OpenVZ virts can't handle even 100 Mbit/s anyway, so I'm not looking for top performance, but I want something that can do at least 50 Mbit/s 24/7. 2. If one decided to use OVH AS, are VPS that OVH sells directly good enough? They have virts as cheap as 2.99/month with at least 10Tb at 100Mbit/s (http://www.ovh.com/us/vps/vps-classic.xml) Thanks! -- Alexey Naiden

7 7

Re: [tor-relays] Cheap exit-friedly VPS provider
by spiros_spiros＠freemail.gr 09 Jun '15

09 Jun '15

I have an exit on Wedos since April and so far things have been well. I receive the usual abuse/hacking/nastiness complaint and respond politely within 72 hour. The only issue is on Atlas the exit doesn't yet have exit flag, but I am assuming this is down to bwauth issue etc etc. Will happily recommend. S On 9 Jun 2015, at 17:28, Andrej Manduch <amanduch(a)gmail.com> wrote: Hi Alexey-san, I'm running tor exit relay on VPS from amerinoc and they didn't seems to have problem with that. I mentioned that when I asked them to change abuse e-mail for ip-address and they were ok with that. However I would definitly recommend you to take look at this list: https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs I also heard that https://hosting.wedos.com/en/ are very tor friendly and they're really cheap (about 100 bucks/year). On 06/09/2015 11:43 AM, Stephen R Guglielmo wrote: On Mon, 8 Jun 2015 22:35:28 -0700 Alexey Nayden <alexey.nayden(a)gmail.com> wrote: Hello everybody, A couple of months ago I decided to run a Tor exit relay. I contacted several VPS and dedicated providers and ended up using PulseServers, because they offered unmetered fast channel for ~$13/month and were Tor-friendly. Only after installing and configuring the relay I realized their IPs are from OVH AS and they are OVH resellers. I understand OVH AS'es already dominate the network and should be avoided if possible, so I have 2 questions: 1. Is there a comparable alternative? 100 Mbit/s unmetered (or 20+ TB of traffic) for less than $20/month. I imagine cheap OpenVZ virts can't handle even 100 Mbit/s anyway, so I'm not looking for top performance, but I want something that can do at least 50 Mbit/s 24/7. 2. If one decided to use OVH AS, are VPS that OVH sells directly good enough? They have virts as cheap as 2.99/month with at least 10Tb at 100Mbit/s (http://www.ovh.com/us/vps/vps-classic.xml) I can't say for exits, but I use the OVH Classic VPS ($2.99/mo) to run one of my relays. It's not an exit node. I let them know about it and paid a year in advance. No problems whatsoever with them thus far. _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0