- tor-relays - lists.torproject.org

Re: [tor-relays] [tor-relay] Spam
by tor＠t-3.net 26 Jun '14

26 Jun '14

The spam to my own Tor relay operator email address (same one as in this list) isn't meaningful in volume. I haven't seen any amounts that a delete key couldn't easily handle. In my experience, you should be careful with spam filtering, as you could end up dumping abuse complaints that you wanted to see and maybe respond to, or have legitimate relay list email not come through. I ended up having to whitelist some stuff for this list to work right because of automatic spam behavior of this mail service. It's not like the sight of spam email in your tor relay box is toxic to your workstation. It's usually obvious from the subject what it is, and that it can be safely and immediately deleted.

2 1

Need help to get TorDNSEL compiled
by BlueStar88 26 Jun '14

26 Jun '14

Hi there, today I've read about the outage at "check.torproject.org". Since my torcheck-service "torcheck.xenobite.eu" needs the underlying TorDNSEL feature I'm trying to get this to work on my host. Like this I won't need to query the TorDNSEL-part of "check.torproject.org" anymore. I'm not into programming and do not know anything about haskell, c++ and such. So be patient with me on such matters. ;-) I've DL'ed the code from the internet website mirror [2]. I've prepp'ed all the dependencies using lucid binary packages: ghc6 6.12.1-12 libghc6-mtl-dev 1.1.0.2-10 libghc6-network-dev 2.2.1.7-1 libghc6-time-dev 1.1.2.4-2 libghc6-hunit-dev 1.2.2.1-2 libssl-dev 0.9.8k-7ubuntu8.15 libghc6-stm-prof 2.1.1.2-5 libghc6-binary-prof 0.5.0.2-1 First error I got on compile attempt was: src/TorDNSEL/Main.hs:81:21: parse error on input `#' That was quite easy thought: import GHC.Prim (Addr#) I deleted the '#' hopefully making it correct this way. Next error is some numbers too high for me now: src/TorDNSEL/DeepSeq.hs:20:7: Could not find module `Data.ByteString': It is a member of the hidden package `bytestring-0.9.1.5'. Perhaps you need to add `bytestring' to the build-depends in your .cabal file. Use -v to see a list of the files searched for. The libghc6-bytestring-dev-0.9.1.5-125af ist installed by it's main package ghc6 6.12.1-12. Any ideas? Or are there some binary packages for TorDNSEL around, to make this more easy for me? :-P Thanks, BlueStar88 [1] https://blog.torproject.org/blog/tor-check-outage-03-and-04-july-2013 [2] https://www.torproject.org/tordnsel/dist/tordnsel-0.0.6.tar.gz

3 7

My exit's traffic isn't rising, is this normal?
by Jesse Victors 24 Jun '14

24 Jun '14

Hello everyone, I run https://globe.torproject.org/#/relay/1946F5E4748B069D3B989B5AF50C7DDD3AC618… and from the graphs it's clear that the traffic has roughly leveled off, rather than continue to climb. I generated a new key after Heartbleed, so it's been up for nearly three months. The bandwidth cap is set at about 100 MB/sec, (gigabit connection) which it's not even close to reaching. There's plenty of CPU available, and by all rights its got enough resources. At this rate, I've no idea how it is supposed to grow and help Tor more. For comparison, when I look at https://globe.torproject.org/#/relay/D3BDECB920E0B7543AD2BA7BF573F7B0F37F7B…, one of the Top 10 relays, I see the traffic growing much at a much higher rate, and https://globe.torproject.org/#/relay/F3B57BB429B4CA82A844B713E42666DF4BF7B8… is another example. What are they doing that I'm not? Another of my exits, https://globe.torproject.org/#/relay/2FC06226AE152FBAB7620BB107CDEF0E70876A…, is on a downward trend, yet has the same configuration as my first one. What can I do to reverse it? Thanks, Jesse V. 0xC20BEC80

1 0

KVM based virtual machine showing 4 MB/s in atlas, others showing 8-9MB/s ?
by s7r＠sky-ip.org 23 Jun '14

23 Jun '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, The same virtualization technique at different providers gives me different advertised bandwidth for relays in atlas: one provider 8-9MB/s other 3-4 MB/s The relays are all exit, having the same RAM and CPU configuration, as well as 100mbit port and unmetered traffic, they use the same Tor version, none of them are capped in any way via torrc or other means, same operating system and same virtualization technique. Why could be this difference in advertised bandwidth? Suggestions? - -- s7r PGP Fingerprint: 7C36 9232 5ABD FB0B 3021 03F1 837F A52C 8126 5B11 PGP Pubkey: http://www.sky-ip.org/s7r@sky-ip.org.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (MingW32) iQEcBAEBAgAGBQJTqIMAAAoJEIN/pSyBJlsRTg0IAKGweB8grMmx18rB33/xBrBC 6UAbpnUxj3tDlD+7J9SwK1jkPSvxpKEkKuwblFifJ2J1o4xoUKCvQQWLVfwP4qRI 0R6cn/Zx9pShzZ6MRRIOmuxaZjiavddqeM0/qcnwhsvGVH/6sTw80000VrLV2TMH vExzu7ofEjV1205CZ1CBAj0sOW2s+3nld7iulvttWbBoeHs2+CbRpEfQu1QPoZYu NtJ6f0vBBkenCWD/yv9Xaiwo/Ywej6jH97LIdksr9msRcDmJnbmY3VSmrlnm8n7z YFJSCFlOi3LJIB0y8QmZuowHAQcGe0Q1LmGCWU4uGgB4OHU7QRgC/jM7qffp+eQ= =+FWS -----END PGP SIGNATURE-----

1 0

Shutting down middle relays (off-topic)
by Tora Tora Tora 23 Jun '14

23 Jun '14

Regretfully, I have to shutdown my two middle relays (not too big, you won't even notice it :-D), since I am unable to resolve issues with the latest OpenSSL bug. I was able to find upgraded packages for Centos and Fedora that are supposed to address CVE-2014-0224 vulnerability (the change log claims so). However, the Tripwire )SSL_CCS_InjectTest and Qualys onlien tests both disagree. If someone can suggest a resolution that works, I might be able to keep them running, otherwise I see no point in running vulnerable relays until I figure things out. Thanks ...

7 15

CLI tool like Atlast
by Kali Tor 23 Jun '14

23 Jun '14

Hi all, Is there a CLI client/tool that does what https://atlas.torproject.org/ does? Basically provide an output based on a node's fingerprint? e.g. https://atlas.torproject.org/#details/7EDE11A41D1C7DF4F9103ABAA4F0A31E42CB0… Thanks, KaliTor

5 14

Lost hsdir flag
by kingqueen 21 Jun '14

21 Jun '14

hello, I don't know why, my relay nicknamed kingqueenbtnftw used to have the hsdir flag but now doesn't. I think from what I can gather, hsdir is based purely on the time since last boot / restart Tor service, rather than how long the relay has been up in total? That would explain it. Thanks kingqueen --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com

2 2

Traffic limitation
by johhher 20 Jun '14

20 Jun '14

Hi, I'm running a Tor relay on a cheap Linux vserver with high bandwidth. I have a traffic limitation of 500Gb per month and was just wondering what would be the best configuration for the network. Currently I've limited the traffic to a daily maximum to prevent it from hibernating a long time at the end of the month. Is this the right way to do it? Or would be better to limit it on a monthly basis. Thanks for an answer! Johhher

6 5

Yahoo and AOL emails removed from tor-relays due to bounces
by Andrew Lewman 20 Jun '14

20 Jun '14

It seems Yahoo and AOL email servers have decided to refuse all messages from this tor-relays list. Other lists aren't affected, yet. We're seeing this message from Yahoo and AOL servers: "Status: 5.2.1 Remote-MTA: dns; mailin-04.mx.aol.com Diagnostic-Code: smtp; 521 5.2.1 : (DMARC) This message failed DMARC Evaluation and is being refused due to provided DMARC Policy" There is no fix for this yet as it breaks mailing list software globally. This bug explains the situation, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752084 If you use yahoo or aol for email, unfortunately you can't join nor receive email from our lists. I suspect this will become true for all of our email lists soon. -- Andrew pgp 0x6B4D6475 https://www.torproject.org/ +1-781-948-1982

3 2

CentOS of the air
by I 19 Jun '14

19 Jun '14

"At about 02:00 UTC June 18th 2014, changes at the domain registrar caused the CentOS.org domain to get marked as Inactive. This caused widespread outages, with all services in centos.org including: - - Mirror Network ( internal centos.org as well as external ) - - All mirrorlist - - All isolist - - Website ( including bugs.centos.org and wiki.centos.org - - All internal support infrastructure Services were restored at the registrar just before 9:00 AM UTC June 18th, however depending on dns path some users might still see issues for upto 6 to 8 hrs from that point.

1 0