- tor-relays - lists.torproject.org

Re: [tor-relays] how to monitor traffick through a bridge
by starlight.2015q1＠binnacle.cx 06 Jan '15

06 Jan '15

>Thank you very much for all the precious advice. >I am running tor on linux. I second the suggestion of applying 'iptables' to collecting traffic statistics. Lot of ways to go about it but here's something similar to the approach I'm using. By having separate entries for established and new connections on the input side, one can see both how much traffic is arriving and how many connection requests are arriving. Of if your node is attacked, the second new-connection catcher will show huge volumes of DOS traffic. Also note the separate counters for ssh and OR port traffic, so you can distinguish maintenance and utilization activity. Feel free to change all the port assignments as suits you, even the ssh one. The example uses defaults for illustration. Is recommended that the OR port be assigned randomly in order to make discovery via 'zmap' more difficult. 22 ssh 9001 OR 443 obfs3 80 fte 587 scramblesuit 993 obfs4 The 'iptables' file loses the .txt extension and CR characters (addded for easier MUA clicking) and generally goes in /etc/sysconfig/iptables. Also attaching an example statistics display command and output, and a batch job for collecting the information automatically every day.

1 0

how to monitor traffick through a bridge
by mattia 05 Jan '15

05 Jan '15

Hi, I would like to know how one can monitor traffic that goes through a bridge. I have set one up and would like to know whether it is being used or not, and how much. Thanks!

5 6

Fwd: [tor-talk] please advise on renting a gigabit capable dedicated server
by Libertas 05 Jan '15

05 Jan '15

In case there are people that don't subscribe to both. -------- Forwarded Message -------- Subject: [tor-talk] please advise on renting a gigabit capable dedicated server Date: Fri, 2 Jan 2015 19:31:05 -0600 From: Christopher Yeager <jager(a)farmhouseproject.org> Reply-To: tor-talk(a)lists.torproject.org To: tor-talk(a)lists.torproject.org Hi tor users, my coworkers and I are considering getting together to run a gigabit exit relay and are curious if you all have advice as to the best place to go shopping for a server with 1gbps dedicated bandwidth in a location that is helpful to the network. Someone on irc pointed me to this list, but I'm happy to ask on another if it would be more appropriate. Thanks in advance! -- tor-talk mailing list - tor-talk(a)lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

4 4

new VPS bridge bandwidth under-reported
by starlight.2015q1＠binnacle.cx 05 Jan '15

05 Jan '15

Hello, Just setup a new bridge running 0.2.6.1-alpha and it's working fine. The bridge is running in a Linux container VPS and appears to have an iptables traffic-shaped bandwidth limit of 400KB. Can browse and download files through it with decent performance using obfs4. However self-measurement of bandwidth, after starting at around 200Kbytes has steadily declined until now its showing 8KB and has lost the "fast" flag. At this point the bridge has yet to attract any traffic other then my testing usage--but it works just fine nevertheless. I suspect that latency for small transfers is fairly bad (in the sense of milliseconds, rather than seconds) and that this may be distorting bandwidth metrics. Also the number of bytes transferred is close to zero, which does not seem likely to help the situation. Should I be concerned about it? Anything anyone can recommend to correct it aside from looking another VPS provider? Does the advertised bandwidth have much effect on whether the bridge will be disseminated by the bridge database system? No "stable" flag yet, but not enough time has passed for this to happen. Thanks

3 4

Re: [tor-relays] Help - My relay consensus has been stripped back to 20
by bigbudtor＠Safe-mail.net 05 Jan '15

05 Jan '15

> > Message: 3 > Date: Sat, 03 Jan 2015 02:30:55 +0100 > From: Sebastian Urbach <sebastian(a)urbach.org> > To: <tor-relays(a)lists.torproject.org> > Subject: Re: [tor-relays] Help - My relay consensus has been stripped > back to 20 > Message-ID: > <14aad6973e8.27ae.e04ee758f2dadc1889b5b423dda555f9(a)urbach.org> > Content-Type: text/plain; charset="UTF-8"; format=flowed > > On January 3, 2015 2:03:33 AM bigbudtor(a)Safe-mail.net wrote: > > Hi, > > > As i recall there was a mail from Giovanny a few days ago and he reported > his relay being down. But he had log file entries like: > > [warn] http status 400 ("Authdir is rejecting routers in this range.") > response from dirserver '128.31.0.39:9131'. > > Any of those in your log ? > No I don't see anything resembling that, although I am seeing these events messages in the logs every couple of hours: Dec 30 07:52:28.000 [info] router_pick_dirserver_generic(): No dirservers are reachable. Trying them all again. Dec 30 09:55:29.000 [info] router_pick_dirserver_generic(): No dirservers are reachable. Trying them all again. Dec 30 11:52:24.000 [info] router_pick_dirserver_generic(): No dirservers are reachable. Trying them all again. Dec 30 13:53:23.000 [info] router_pick_dirserver_generic(): No dirservers are reachable. Trying them all again. Dec 30 15:52:20.000 [info] router_pick_dirserver_generic(): No dirservers are reachable. Trying them all again. Dec 30 16:06:34.000 [info] router_upload_dir_desc_to_dirservers(): Uploading relay descriptor to directory authorities Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an extrainfo too (length 3891) Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an extrainfo too (length 3891) Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an extrainfo too (length 3891) Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an extrainfo too (length 3891) Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an extrainfo too (length 3891) Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an extrainfo too (length 3891) Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an extrainfo too (length 3891) Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an extrainfo too (length 3891) Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an extrainfo too (length 3891) Dec 30 17:52:19.000 [info] router_pick_dirserver_generic(): No dirservers are reachable. Trying them all again. Dec 30 19:53:18.000 [info] router_pick_dirserver_generic(): No dirservers are reachable. Trying them all again. Dec 30 21:39:02.000 [info] router_pick_dirserver_generic(): No dirservers are reachable. Trying them all again. Dec 30 23:33:58.000 [info] router_pick_dirserver_generic(): No dirservers are reachable. Trying them all again. Dec 31 01:32:55.000 [info] router_pick_dirserver_generic(): No dirservers are reachable. Trying them all again. Dec 31 02:52:13.000 [info] router_pick_dirserver_generic(): No dirservers are reachable. Trying them all again. Dec 31 05:05:32.000 [info] router_pick_dirserver_generic(): No dirservers are reachable. Trying them all again. I don't appear to have any routing issues, resolution issues or similar but don't have logs old enough to see if this is an unusual log event or not, it may be completely unrelated. As it stands I am afraid that there doesn't seem to be any real alternative other than decommissioning this exit relay. It is costing money and doing nobody any good right now.

2 2

Jump in brute force complaints
by Kura 05 Jan '15

05 Jan '15

I've noticed a rather large jump in abuse emails from admits about brute force attempts coming from my exit nodes. I've had a handful of these in past, as you'd expect but now they are arriving multiple times a day, some automated emails, some not. Has anyone else noticed a jump in abuse complaints? Curious as to whether it's a spike in the network being used for abuse, more admits reading logs or just my luck. -- Kura t: @kuramanga [https://twitter.com/kuramanga] w: https://kura.io/ [https://kura.io/] g: @kura [http://git.io/kura]

7 7

Re: [tor-relays] tor-relays Digest, Vol 48, Issue 12
by bigbudtor＠Safe-mail.net 04 Jan '15

04 Jan '15

-------- Original Message -------- On January 4, 2015 11:14:17 PM bigbudtor at Safe-mail.net wrote: > Hi, > > No dirservers reachable sounds like a pretty good reason why your not > getting anything anymore. Did you try to reach any of them manually ? That > sounds to me like there is either something wrong with the connectivity or > it is massive blocking. I can resolve the hostnames and then connect to the dir port on each of the directory authority servers manually using netcat. The relay is clearly still up and holding connections (down to around 80 inbound now, a few outbound and a small number of exit connections).

1 0

Re: [tor-relays] Help - My relay consensus has been stripped back to 20
by Sebastian Urbach 04 Jan '15

04 Jan '15

On January 4, 2015 11:14:17 PM bigbudtor(a)Safe-mail.net wrote: Hi, > > > > Message: 3 > > Date: Sat, 03 Jan 2015 02:30:55 +0100 > > From: Sebastian Urbach <sebastian(a)urbach.org> > > To: <tor-relays(a)lists.torproject.org> > > Subject: Re: [tor-relays] Help - My relay consensus has been stripped > > backto 20 > > Message-ID: > > <14aad6973e8.27ae.e04ee758f2dadc1889b5b423dda555f9(a)urbach.org> > > Content-Type: text/plain; charset="UTF-8"; format=flowed > > > > On January 3, 2015 2:03:33 AM bigbudtor(a)Safe-mail.net wrote: > > > > Hi, > > > > > > As i recall there was a mail from Giovanny a few days ago and he reported > > his relay being down. But he had log file entries like: > > > > [warn] http status 400 ("Authdir is rejecting routers in this range.") > > response from dirserver '128.31.0.39:9131'. > > > > Any of those in your log ? > > > > No I don't see anything resembling that, although I am seeing these events > messages in the logs every couple of hours: > > Dec 30 07:52:28.000 [info] router_pick_dirserver_generic(): No dirservers > are reachable. Trying them all again. > Dec 30 09:55:29.000 [info] router_pick_dirserver_generic(): No dirservers > are reachable. Trying them all again. > Dec 30 11:52:24.000 [info] router_pick_dirserver_generic(): No dirservers > are reachable. Trying them all again. > Dec 30 13:53:23.000 [info] router_pick_dirserver_generic(): No dirservers > are reachable. Trying them all again. > Dec 30 15:52:20.000 [info] router_pick_dirserver_generic(): No dirservers > are reachable. Trying them all again. > Dec 30 16:06:34.000 [info] router_upload_dir_desc_to_dirservers(): > Uploading relay descriptor to directory authorities > Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an > extrainfo too (length 3891) > Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an > extrainfo too (length 3891) > Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an > extrainfo too (length 3891) > Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an > extrainfo too (length 3891) > Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an > extrainfo too (length 3891) > Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an > extrainfo too (length 3891) > Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an > extrainfo too (length 3891) > Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an > extrainfo too (length 3891) > Dec 30 16:06:34.000 [info] directory_post_to_dirservers(): Uploading an > extrainfo too (length 3891) > Dec 30 17:52:19.000 [info] router_pick_dirserver_generic(): No dirservers > are reachable. Trying them all again. > Dec 30 19:53:18.000 [info] router_pick_dirserver_generic(): No dirservers > are reachable. Trying them all again. > Dec 30 21:39:02.000 [info] router_pick_dirserver_generic(): No dirservers > are reachable. Trying them all again. > Dec 30 23:33:58.000 [info] router_pick_dirserver_generic(): No dirservers > are reachable. Trying them all again. > Dec 31 01:32:55.000 [info] router_pick_dirserver_generic(): No dirservers > are reachable. Trying them all again. > Dec 31 02:52:13.000 [info] router_pick_dirserver_generic(): No dirservers > are reachable. Trying them all again. > Dec 31 05:05:32.000 [info] router_pick_dirserver_generic(): No dirservers > are reachable. Trying them all again. > > I don't appear to have any routing issues, resolution issues or similar but > don't have logs old enough to see if this is an unusual log event or not, > it may be completely unrelated. > > As it stands I am afraid that there doesn't seem to be any real alternative > other than decommissioning this exit relay. It is costing money and doing > nobody any good right now. No dirservers reachable sounds like a pretty good reason why your not getting anything anymore. Did you try to reach any of them manually ? That sounds to me like there is either something wrong with the connectivity or it is massive blocking. > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays -- Sincerely yours / Sincères salutations Sebastian Urbach ----------------------------------------- Definition of Tor: 10% luck, 20% skill, 15% concentrated power of will, 5% pleasure, 50% pain and 100% reason to remember the name! -----------------------------------------

1 0

odd list of connections
by TOR Zone 04 Jan '15

04 Jan '15

1 0

Someone broke the tor-relay speed record?
by Justaguy 04 Jan '15

04 Jan '15

https://globe.thecthulhu.com/#/relay/F528DED21EACD2E4E9301EC0AABD370EDCAD2C… Someone just got 149.08 MB/s on a non-exit relay. This is amazing! Would you mind saying what kind of hardware you use for this? Ipredator used https://ipredator.se/guide/torserver to get to 101MB/s. So your setup should be even more extreme. -- PGP fingerprint: 8516 5FFC 011A 6465 D042 6AC1 D719 1F41 B7CE EDFF OTR fingerprint OFTC: FF6D1AC2 13F38B15 EDB21522 D3530A6F 6EE01996 OTR fingerprint freenode: 293FAFD3 1155A465 C5B77015 B65E8AEC 63A1AF21 Full PGP public key: https://justaguy.pw

6 11