- tor-relays - lists.torproject.org

A friendly reminder for all ScrambleSuit bridge operators.
by Yawning Angel 24 Sep '14

24 Sep '14

Hello all, This is a friendly reminder to all ScrambleSuit bridge operators that unless you are running tor-0.2.5.x, you should not be running a ScrambleSuit bridge. This is because the method for propagating the ScrambleSuit password (or any other future pluggable transport server side argument) for inclusion in the Bridge line served from BridgeDB was implemented in 0.2.5.x, and is not present in 0.2.4.x, and to make matters worse, 0.2.4.x has a bug that will allow this configuration to run instead of failing with an error[0]. If you are running a ScrambleSuit bridge with tor-0.2.4.x, it is useless. Users that happen to be served your ScrambleSuit bridge will not be able to connect, because the password is missing. Approximately 1/7th of the ScrambleSuit bridges in BridgeDB exhibit this behavior and we will most likely start filtering them on the BridgeDB side. Please see https://trac.torproject.org/projects/tor/ticket/13202 if you wish to know more about this. Best Regards, -- Yawning Angel [0]: Apparently this is not worth patching 0.2.4.x for, which I personally view as unfortunate.

1 0

Re: [tor-relays] Estimating the value and cost of the Tor network
by Tim 24 Sep '14

24 Sep '14

On 24 Sep 2014, at 13:38 , tor-relays-request(a)lists.torproject.org wrote: > Date: Wed, 24 Sep 2014 05:40:00 +0200 > From: Moritz Bartl <moritz(a)torservers.net> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] Estimating the value and cost of the Tor > network > > Hi, > > Prices vary widely across different countries. We pay between $400 and > $1500 per Gbit/s per month in "popular and cheap locations". In a > scenario where we want to grow the network and at least keep the current > geographical diversity (or even grow it), we'd have to at least equally > strengthen less fortunate locations. > > The list of the top 20 countries [0] contains countries such as Russia, > Poland, Norway and Hungary, where international bandwidth is quite > expensive. Hopefully someone from this list can help us compile or find > estimates for pricing per country. It would be interesting to learn the > prices even for mid-size (~50-100Mbit/s+) relays in any country outside > of the top five countries, even more so for crazy places that don't make > the top 20. > > Another factor that we should not ignore is that, while it may be > possible to find a set of ISPs that allow mid-size exit relays, it gets > harder the more traffic you push, because of the additional workload > (and scariness) for the ISP from complaints. > > [0] https://compass.torproject.org/ > > -- > Moritz Bartl > https://www.torservers.net/ Mike, Moritz, Re: crazy places that don't make the top 20 I've noticed that most of the Tor network is concentrated in the northern hemisphere, particularly Europe and North America. I assume the distribution of authorities is similar. Apart from China, no Asia-Pacific country makes the top 20 in Tor compass.[1] And no southern hemisphere country makes the top 20 at all. The first Asia-Pacific countries after China are Japan at #29, then Singapore at #37. And unless I've missed something, the first southern hemisphere country is Australia at #42. Details aside, I'd love to see more routers and exits in countries other than the top 4 (Germany, France, Netherlands, United States). This helps spread failure risk, sovereign risk, and the risk from 3 letter agencies and the like. And it would make Tor faster for those in the southern hemisphere, Africa, and the Asia-pacific. But I don't know how much hope there is for this - I've tried to find pricing in Australia, and the figures I've found are: $8000 per month for 100Mbps.[2] $1500 per month for 25Mbps.[3] $800 per month for 10Mbps.[4] That seems ridiculously pricey… I'd rather wait for the National Broadband Network and run one on 100Mbps fibre at 1% of the price.[5] (Except bandwidth would not be guaranteed on a "home"-style plan.) Time to find a sympathetic university? Tim [1]: https://compass.torproject.org/?family=&ases=&exits=all_relays&by_country=T… [2]: http://www.intervolve.com.au/datacentre/ [3]: http://www.exetel.com.au/corporate/ip-transit-colocation [4]: https://www.xhostsolutions.com.au/services/dedicated-server-unmetered.cfm [5]: http://delimiter.com.au/2014/04/03/unlimited-100mbps-89-99-tpg-equals-top-n…

2 1

Good/Bad ISPs
by obx 23 Sep '14

23 Sep '14

I've updated the list of good/bad ISPs. It shows relay [ ] exit [ ] in front of every good ISP. Please verify that information is accurate. Special information, like anonymous hosting, would be appreciated. Thanks

1 0

printfection - tor shop
by Sebastian Urbach 23 Sep '14

23 Sep '14

Hi, Is it just temporary or is the tor-shop at printfection permanently deactivated ? -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ----------------------------------------- Definition of TOR: 10% luck, 20% skill, 15% concentrated power of will, 5% pleasure, 50% pain and 100% reason to remember the name! -----------------------------------------

1 0

Correctly setting up arm
by Chris Whittleston 23 Sep '14

23 Sep '14

Dear all, Previously, I've run arm using 'sudo -u debian-tor arm'. As was mentioned here previously, this is not how you should run it - in fact there is a bit of documentation to suggest how it should be done. Unfortunately I'm having some issues getting arm working correctly as described here in step 14: https://www.torproject.org/docs/tor-relay-debian.html.en#after Having added my user (pi) to the debian-tor group, I try to run 'arm' and get the following: Failed to read authentication cookie (permission denied): /var/run/tor/control.authcookie I've tried reinstalling arm, relogged and checked that I'm in the right group still using 'groups' (which I am) - no joy. I've checked my torrc and found the following lines: ## If you enable the controlport, be sure to enable one of these ## authentication methods, to prevent attackers from accessing it. #HashedControlPassword 16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C #CookieAuthentication 1 CookieAuthentication wasn't initially enabled, turning it on makes no difference, I get the same error. I am able to get it working when setting up HashedControlPassword by generating a has using tor --hash-password <password> and editing torrc accordingly. Am I missing something when it comes to setting up CookieAuthentication? I guess I must be...although it seems strange that I was getting that error even with CookieAuthentication disabled. Any insight appreciated :) Chris -- *Dr Chris Whittleston 栗主* Department of Chemistry University of Cambridge Lensfield Road, Cambridge, CB2 1EW Email: csw34(a)cam.ac.uk Tel: +44 (0)1223 336423

4 5

help with getting CentOS 5
by I 23 Sep '14

23 Sep '14

Hej, Following the installation on CentOS instructions on https://www.torproject.org/docs/rpms.html.en it appears there is no package for CentOS 5 only 6 and 7. "http://deb-master.torproject.org/torproject.org/rpm/el/5/i386/repodatarepom…: [Errno 4] IOError: <urlopen error (110, '\xe8\xbf\x9e\xe6\x8e\xa5\xe8\xb6\x85\xe6\x97\xb6')> " Could someone tell me whether CentOS 6 version can be used on CentOS 5? Robert

1 0

Mac OS X configuration problem(s)
by Surf Norway 23 Sep '14

23 Sep '14

I've installed the tor package via homebrew, and cofigured /usr/local/etc/tor/torrc according to the documentation. My problem is that every time I try to use launchctl I get an error, both as an admin user and via sudo. As an admin user: Could not open job overrides database at: /private/var/db/launchd.db/com.apple.launchd.peruser.502/overrides.plist: 13: Permission denied launch_msg(): Socket is not connected When run via sudo it complains about "dubious owbership on file" and says "nothing found to load". I followed whatever documentation I could find. The torrc config is on torproject.org under "configuring a relay graphically" (I know this isn't graphically), the homebrew info is linked to in the same article and looks to be from a mailing list discussion. I wanted to set up a simple relay to run automatically when the (OS X) machine boots. It's a home server on a 30MB/sec symmetrical fiber line. Since I run the machine as a file server anyway, I figured I could allocate some bandwidth and help support the community. Thanks, Surf Norway

3 2

Multithreading progress
by Sebastian Urbach 22 Sep '14

22 Sep '14

Dear list members, I asked Mikhail Belous for a quick status update regarding the multithread feature for the tor-daemon. Here's what he said: Good news: My version of multi-thread tor passes the test and doesn't shows mem racing problems. Bad news: 1)Processing channel is only big enough operation to be paralysed. Tor daemon uses a lot of global variables that should be locked. I have already done this for some resources. 2) Multithread branch is behind master for over 1000 commits. What should be done before release: 1) Merge master in better_workqueue branch. 2) Find all global resources, that are available from command_proccess_cells. I already sent you a list, but it should be checked. 3) Lock all global resources. 4) Code review 5) Compare performance of one thread and multi-thread daemons. -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ----------------------------------------- Definition of TOR: 10% luck, 20% skill, 15% concentrated power of will, 5% pleasure, 50% pain and 100% reason to remember the name! -----------------------------------------

1 0

exit relay not receiving flag
by jason＠icetor.is 22 Sep '14

22 Sep '14

Hey All, I'm a bit embarassed here but I don't see what I'm doing wrong. I've recently inherited a VPS donation from an anonymous donor. I've configured it up like the rest of Icetor's exit relays but it never receives the exit flag. The exit in question is loki4: https://atlas.torproject.org/#details/44DB05F3AEDA5DA34BC713201DD0394418C7D… An external Nmap scan of the IP shows the DirPort and ORPort open and accessible, so what gives? -Jason

3 3

Re: [tor-relays] Mac OS X configuration problem(s)
by Tim 21 Sep '14

21 Sep '14

On 21 Sep 2014, at 22:00 , Surf Norway <surfnorway(a)gmail.com> wrote: > > I've installed the tor package via homebrew, and cofigured > /usr/local/etc/tor/torrc according to the documentation. > > My problem is that every time I try to use launchctl I get an error, > both as an admin user and via sudo. > > As an admin user: > > Could not open job overrides database at: > /private/var/db/launchd.db/com.apple.launchd.peruser.502/overrides.plist: > 13: Permission denied > launch_msg(): Socket is not connected > > When run via sudo it complains about "dubious owbership on file" and > says "nothing found to load". > > I followed whatever documentation I could find. The torrc config is on > torproject.org under "configuring a relay graphically" (I know this > isn't graphically), the homebrew info is linked to in the same article > and looks to be from a mailing list discussion. > > I wanted to set up a simple relay to run automatically when the (OS X) > machine boots. It's a home server on a 30MB/sec symmetrical fiber > line. Since I run the machine as a file server anyway, I figured I > could allocate some bandwidth and help support the community. > > Thanks, > Surf Norway Hi Surf, A few pointers: 1. On OS X, launchctl has to be run as root/superuser in order to start system-wide services. You can do this using sudo. 2. launchd plist files can't be writable by anyone other than the superuser. If you've installed the tor launchd plist file as your admin user, it will have permissions based on your user, not root. You have a few options here: A. Disk Utility's "Fix Permissions" might automatically fix ownership for you, but it might also leave the file alone because it wasn't installed by the OS X Installer. B. You could try (re-)installing the launchd plist file as root using "sudo". This will make sure the owner is "root". C. Or you could use the "ls -l", "chown" and/or "chmod" commands in the Terminal to investigate and fix the ownership and permissions yourself. 3. It's hard to tell what torrc instructions you're following, but instructions for other platforms will require modifications. OS X launchd works differently to both Linux/BSD and Windows services. For example, you can't use "RunAsDaemon 1" on OS X, or launchd will think tor has crashed. A. You might want to try the OS X-specific instructions at: https://trac.torproject.org/projects/tor/wiki/doc/MacRunOnBoot By the way, if this is your first tor relay, and since it's at home, you probably want to run a relay with no exit ports open. And if you have multiple IPs, on its own IP. This is a much safer option than running an exit on a shared IP. If you're still having problems, can you please include URL(s) of the instructions you're following, copies of your torrc and launchd plist files, and the exact output from the launchctl and tor programs? This really helps us help you, because then we can see exactly what you're seeing. A final question: can you manually launch tor without using launchd? It sounds like you're not even getting to the point where launchd tries to run tor. But it can be helpful to make sure that tor will run without the added intermediary of launchd. T

1 0