- tor-relays - lists.torproject.org

Re: [tor-relays] No obfs3 traffic at all on bridge
by TheGreatWent 09 Dec '14

09 Dec '14

From: Marco Gruß<tor-relays(a)email.todmue.de> > Hello, > > my obfs3 bridge has now been up for > 20 days. > > I have iptables rules in place to count packets. To date, > I have not seen a single packet to either the obfs3 or > the scramblesuit port. Both are working though, I just > tried them with the Tor Browser. > > Is this a good sign (i.e. the bridge is still in reserve) > or a bad sign (something's wrong)? > I set one up around the same time and haven't seen any traffic either. Maybe there is a surplus of them? I couldn't figure out what the different bridge pools were or how they got allocated to them.

1 0

exit policy to reflect country-wide ban
by Vladimir Ivanov 08 Dec '14

08 Dec '14

hi. Recently, github was blocked in Russia (see discussion here: https://news.ycombinator.com/item?id=8692584) The ban is executed by all major ISPs (comply with this regulation is necessary to keep the telecom license so no ISP is risking to disobey), this means that if your exit node happens to be in Russia, you're out of luck when you try to connect to github. Some suggest marking exit nodes in Russia as bad exits because connecting via them leads to various problems (like node provider doing MitM on all github https connections). Here is an example: https://twitter.com/wiretapped/status/539934125293961216 I think, if Russian exits operators implement reduced policy rejecting github, that would be better solution: they're still usefull for all other sites and a client would access github using a tor exit elsewhere. Do I miss something here? Are any disatvantages of this? More general, if a network, a particular exit node is connected to, blocks some IP addresses, is it wise to reflect those changes in the node's ExitPolicy? BR, Vladimir

4 5

No obfs3 traffic at all on bridge
by Marco Gruß 07 Dec '14

07 Dec '14

Hello, my obfs3 bridge has now been up for > 20 days. I have iptables rules in place to count packets. To date, I have not seen a single packet to either the obfs3 or the scramblesuit port. Both are working though, I just tried them with the Tor Browser. Is this a good sign (i.e. the bridge is still in reserve) or a bad sign (something's wrong)? Thanks for any help! Marco

1 0

According to globe and atlas, bridges have guard flags, while they actually don't have them at all...
by Justaguy 07 Dec '14

07 Dec '14

What is the cause for this behavior? https://globe.thecthulhu.com/#/bridge/286FD249840142D1C7536C2D12FDBE5EA63AD… https://atlas.thecthulhu.com/#details/286FD249840142D1C7536C2D12FDBE5EA63AD… -- Contact: Irc, justaguy @ Freenode or OFTC OTR fingerprint: FF6D1AC2 13F38B15 EDB21522 D3530A6F 6EE01996

2 1

Re: [tor-relays] Guard flag and some irregularities
by Sebastian Urbach 06 Dec '14

06 Dec '14

On December 6, 2014 9:41:34 PM Rafael Rodriguez <rafaelr(a)icctek.com> wrote: Hi, > https://atlas.thecthulhu.com/#details/48ADFCC561402D7EBB1CDE233F206B01D8FA0… > > > 1- Is it ok for the Guard flag to come and go so often? I do not see > anything wrong with my relay and it is pushing up to 12MBs at times. >From what i can see the numbers are way lower than that. Recently the criterias to qualify as a guard changed, i assume that you drop out of the guard position because you don't make the cut all the time. If im not mistaken the number of guards dropped roughly 50 % after the changes were implemented. > Most of the time, my relay pushes between 3-7MB/s constantly and that's > fine. But there are occasions in which I see it spike and send out as > much as 12MB/s I'm struggling with the numbers, if you take a look at the graphs you are not getting this much traffic. Maybe your system is under attack (DoS, DDoS) ? It does not look like it's regular Tor traffic ... -- Sincerely yours / Sincères salutations Sebastian Urbach ----------------------------------------- Definition of Tor: 10% luck, 20% skill, 15% concentrated power of will, 5% pleasure, 50% pain and 100% reason to remember the name! -----------------------------------------

2 1

Guard flag and some irregularities
by Rafael Rodriguez 06 Dec '14

06 Dec '14

https://atlas.thecthulhu.com/#details/48ADFCC561402D7EBB1CDE233F206B01D8FA0… 1- Is it ok for the Guard flag to come and go so often? I do not see anything wrong with my relay and it is pushing up to 12MBs at times. Most of the time, my relay pushes between 3-7MB/s constantly and that's fine. But there are occasions in which I see it spike and send out as much as 12MB/s when I have set a limit of @6MB/s. 2- Is Tor not respecting the limits? If it doesn't respect the limits consistently it might as well overkill my budget which translates into me killing the relay.

2 2

Running a New Relay
by Abhiram Chintangal 06 Dec '14

06 Dec '14

Hello, About two days ago, I started running my first tor relay using a digital ocean vps instance. Yesterday, I found this nice article[1] about the life-cycle of a tor relay. It was a great read and I think I understanding of how tor works has improved quite a bit. Currently, my relay[2] whose up-time is roughly 2 days 18 hours doesn't have any active circuits ( via tor-arm). Since its in the unmeasured phase( days 0-3) shouldn't it be making circuits back to itself? I believe the number that was mentioned in the article was four. I apologize if my question seems silly. Thanks! -- Abhiram Chintangal I guess we agree with reason, but now it's a matter of disposition [1]https://blog.torproject.org/blog/lifecycle-of-a-new-relay [2]: https://atlas.thecthulhu.com/#details/0D63999A202B34EF1CD9669BC45B0A697D9BF…

2 1

Atlas slow/not working?
by Abhiram Chintangal 06 Dec '14

06 Dec '14

Hello, I am not able to check my relays status via Atlas for the last two days. Any ideas? Thanks -- Abhiram Chintangal I guess we agree with reason, but now it's a matter of disposition.

5 5

ArchWiki article about fast relay configuration
by usprey 06 Dec '14

06 Dec '14

Hi List I have written my own notes into https://wiki.archlinux.org/index.php/Tor#.2B100Mbps_Exit_Relay_configuratio… . All and any feedback will be appreciated! Are there any privacy concerns about using pdnsd to cache DNS locally?

1 0

Planning a relay
by TT 06 Dec '14

06 Dec '14

I'm thinking of running a relay, and i've a few questions regarding the requirements and the general setup. So far this is just planning. The hardware would be clean and in my possession, but the connection would go through a Swedish-based VPN provider because i'm not interested in running it through my own IP address. The provider endorses Tor and places no limits whatsoever on the services run through their connection, has port forwarding and allows exits, so no issues there. They also have a strict no-logging policy, but words are cheap so you never know. I guess the first question should be whether such a relay would be welcome on the Tor network in the first place? I am aware that connecting to Tor through a VPN isn't generally recommended, but what about running a relay through one? Better idea, or a ridiculously bad one? Second, while it would run on a (nearly) dedicated 100mbit connection, i do not have dedicated equipment. The machine needs to be taken offline between every 2-4 weeks, for some days at a time. Frequent OS updates also often require reboots in addition to this downtime. So much for a stable flag, but more importantly i need to know if this behavior is undesirable for running middle/exit relays? If so, would a bridge be better suitable with the tools i have at hand? Third, regarding running bridges. The Tor Project FAQ states running your own bridge might improve your own anonymity. I assume this means you would manually set up your TBB to connect to *your own* bridge, is this correct? And finally, since the bridge would run on a separate (VPN) IP address, would this make a difference (re:anonymity) for better or worse if you connected through it yourself? I'm likely missing something here because it seems it would basically be the same as simply connecting to Tor through the VPN client alone. Thanks.

7 9