- tor-relays - lists.torproject.org

Re: [tor-relays] obfsproxy issue
by Mike Patton 31 Jul '14

31 Jul '14

On 01/08/2014 3:00 am, Fereydoon Sepehri <fereydoonsepehri(a)gmail.com> wrote: > > Dear All, > > I want to set up tor Bridge. the bridge is up and working normally. > I decided to use obfsproxy to set up obfs3 bridge. > > I installed Python, python-pip and obfsproxy. > the obfsproxy is in "/usr/bin/" directory. The "obfsproxy which" command did not show this directory but this: > -bash: /usr/local/bin/obfsproxy: No such file or directory > > could you please advise me on this issue. > > Best Regards > Fereydoon As a suggestion, perhaps take the error meager as instructive? Try putting obfsproxy in /use/local/bin instead of /use/bin. M.

2 1

obfsproxy issue
by Fereydoon Sepehri 31 Jul '14

31 Jul '14

Dear All, I want to set up tor Bridge. the bridge is up and working normally. I decided to use obfsproxy to set up obfs3 bridge. I installed Python, python-pip and obfsproxy. the obfsproxy is in "/usr/bin/" directory. The "obfsproxy which" command did not show this directory but this: -bash: /usr/local/bin/obfsproxy: No such file or directory could you please advise me on this issue. Best Regards Fereydoon

1 0

Auto Response
by bbzxrmy wowman 31 Jul '14

31 Jul '14

1 0

how sensitive is relay 'state' file?
by starlight.2014q3＠binnacle.cx 31 Jul '14

31 Jul '14

Can anyone comment on how sensitive the information in the relay 'state' is? In particular, if entry guards are recorded in the file should one be concerned about protecting the file via a) encrypting the file system where it resides b) making a point of not backing up the file I suppose it comes down to how likely it is that an adversary can use entry guard information for correlation attacks against past and present tor-client traffic originating from a targeted client-relay.

1 0

Finding relay Sybils / Groups [re: relay_early/blackhat]
by grarpamp 30 Jul '14

30 Jul '14

As a project then to production development, someone should go back through the entire history of descriptors and look for groups coming online... dates, IP's, contacts, tor/OS versions, nicknames, ISP's, geoip, numbers coming online over sliding timeframes, correlation to 'news events', etc. There may be more questionable relays to be found. We were talking about such influxes around july 4 09, ironically, or not.

2 1

German company Webtropia: Terminated contract without notice because of abuse
by tor＠t-3.net 30 Jul '14

30 Jul '14

You somewhat made a mistake here - you've got to have an exit policy that (minimally) rejects ports 25 and 465, or else your relay becomes a giant abuse tool for spammers, scammers, and phishers instead of what you intended it to be (which was a standard-functioning Tor relay). You might try telling your ISP that you made a mistake in your configuration which allowed spam email to go out, and you're willing to correct that error and move forward. ExitPolicy reject *:25 ExitPolicy reject *:465

4 3

0.2.4.23 availability on trusty armhf?
by trash eighty 30 Jul '14

30 Jul '14

I am running a pretty active relay, using Ubuntu Trusty on armhf. I see 0.2.4.23 for Intel architecture in the repositories, but not on Trusty/armhf. Didn't know if this was an oversight, or if it's still coming down the pipe. Thanks, Trash80

2 1

Re: [tor-relays] German company Webtropia: Terminated contract without notice because of abuse
by tor＠t-3.net 30 Jul '14

30 Jul '14

Let's not confuse two things, here. The customer wanting to host a Tor exit relay is a different service request than wanting to run a wide-open SMTP relay. No reputable ISP would agree to host an open SMTP relay and I'm sure this one did not knowingly do so. It would be unfortunate for ISPs to come under the incorrect impression that hosting Tor is equal to hosting open SMTP. ISPs which might have been Tor-friendly at the outset would do a 180 and unnecessarily adopt a No-Tor service policy. On 07/30/2014 03:39 PM, Lunar wrote: > tor(a)t-3.net: >> You somewhat made a mistake here - you've got to have an exit policy that >> (minimally) rejects ports 25 and 465, or else your relay becomes a giant >> abuse tool for spammers, scammers, and phishers instead of what you intended >> it to be (which was a standard-functioning Tor relay). > > Please don't blame the victim. If this ISP acted differently than what > they initially promised, then they are the problem. >

1 0

German company Webtropia: Terminated contract without notice because of abuse
by uf＠riseup.net 30 Jul '14

30 Jul '14

Hi all, I've been running two exit relays, [1] and [2], at the German company Webtropia [3] for the past two weeks. Things went quite nice and smoothly, the speed of the server was decent and the network great, pushing quite some terabyte. Before renting the server, I told them what I wanted to do, if the would forward abuse etc. They said there were fine with this and forwarding would be no problem, given that I would deal with such mails in a timely manner. So I decided to rent the server, maybe naive? Yesterday (29th) they stopped routing/switching traffic to the server, so it wasn't accessible anymore. They sent me a mail, the subject read "termination without notice", claiming they did this because I didn't pay the invoice. I replied that I doubt this and sent them the transaction details. Their reply claimed that my contract wasn't quited because of this, but instead of abuse: They wrote that they got "52 mails" the day before (28th) dealing with phishing mails, bittorent downloads, ddos, etc. I told them once again that this server is housing tor exit nodes, and I'm not responsible for the traffic. However, I asked if we could find an agreement and "meet in the middle": Closing some ports (25 for example) and forward the mails to me, so I would take care of these and they could lie back and think "not our department" (actually as spoken about beforehand). Sadly there wasn't any negotiation possible, the denied me (up until now at least) even a refund of the money I already paid (is this legal?). Just to inform you about this. Stay away of them - they don't keep their words. Cheers, uf [1] https://globe.torproject.org/#/relay/94CB5C820BF97391BFDCAF8DD1B3176A452E8F… [2] https://globe.torproject.org/#/relay/55A463CAB24AFB91073C6D6D7CC6CA741A1430… [3] https://www.webtropia.com/en/

2 1

Re: [tor-relays] German company Webtropia: Terminated contract without notice because of abuse
by tor＠t-3.net 30 Jul '14

30 Jul '14

IMO, even relaying SMTP-like for the email which typically requires auth first isn't a great idea if there is any concern about an upstream getting abuse complaints about a relay (such as a leased box). A frequent way that spammers get their garbage out these days is to compromise a user account, I say this as a mail server admin who has to deal with the mess regularly. Oftentimes they guess the PW via dictionary attacks, but sometimes they keylog the user's box to get the email login. If the spammer has compromised an account and is forced to use webmail to dump the spam instead of an SMTP-like means, your relay doesn't show up in the email headers in the same way and may even be obfuscated. The differences are good things if you want to minimize abuse complaints of this sort. Also the SMTP-like sending seems to get more spam out the door faster than something which must use webmail instead. On 07/30/2014 03:08 PM, krishna e bera wrote: > On 14-07-30 05:11 AM, tor(a)t-3.net wrote: >> >> You somewhat made a mistake here - you've got to have an exit policy >> that (minimally) rejects ports 25 and 465, or else your relay becomes a >> giant abuse tool for spammers, scammers, and phishers instead of what >> you intended it to be (which was a standard-functioning Tor relay). >> >> You might try telling your ISP that you made a mistake in your >> configuration which allowed spam email to go out, and you're willing to >> correct that error and move forward. >> >> >> ExitPolicy reject *:25 >> ExitPolicy reject *:465 > > Most SMTP servers i have seen listening on port 465 and 587 require > authentication, so it shouldnt be necessary to block those ports. Can > anyone name some that dont need authentication to send email? > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0