- tor-relays - lists.torproject.org

multisig link
by jason＠icetor.is 10 Aug '14

10 Aug '14

sorry meant to include relevant link to multisignature documentation https://github.com/bitcoin/bips/blob/master/bip-0010.mediawiki -J

1 0

Tor relay giving a OR_CONN_CLOSED error‏
by Richard Dennis 09 Aug '14

09 Aug '14

Hi guys, I created a tor relay set up using a raspberry pi called Goblin500, it has now been up for a while and i have the fast, valid, running and v2dir flag i have been working on some code that can be found at: https://github.com/richarddennis/Masters-Project to connect to various nodes in tor and create a stream, i am able to connect no problem to various nodes such as TorLand1, orion etc no problem, however when i try to create a circuit containing Goblin500, there is a significant delay and when i do receive anything it is only get a destroy cell containing the error code 8 - OR_CONN_CLOSED the node is in the consensus : r Goblin500 IspSUjBIQ/LJ0k18VbKIO6mS1oo yT+H3s9/UYm7p+BmNjnfYUmGHFw 2014-08-09 16:03:43 82.26.108.68 9001 9030s Fast Running V2Dir Validv Tor 0.2.4.23w Bandwidth=20 Unmeasured=1p reject 1-65535my torrc file is SocksPort 0/var/log/tor/debug.logRunAsDaemon 1ControlPort 9051CookieAuthentication 0ORPort 9001Nickname Goblin500DirPort 9030ExitPolicy reject *:* what is causing the error and more importantly how can it be solved there are no errors in the/var/log/tor/notices.log file Thanks Rich

1 0

New router, new IP address
by Rick 08 Aug '14

08 Aug '14

So I saw the Craigslist post in tor-talk and checked to find that I'm at full speed with them. Since I'm an exit relay (residential, US, 15 months) and have been experiencing the CL Dial-Up Retro for a few months, I was surprised. It turns out that I have a new IP address so for the moment I'm a shiny new exit. Two days ago I installed a new router. Nothing special: $45 Linksys but selected specifically for use with DD-WRT. ROM burn and set-up was done completely offline. It took maybe a minute to do the router hot swap and all went well. IP address change never crossed my mind. After all, I was down for four days back in the winter (ice storm) and hoping for a new address when we came back up. No luck. Is this normal? Or at least not unusual? It seems a bit spooky to me. I thought the address was tied to the cable modem (ISP's equipment) and they couldn't care less about my LAN. :-\ Thanks Rick

2 1

tor bridges
by Patrick Kelley 06 Aug '14

06 Aug '14

2 1

Exit Nodes under DDoS attacks
by Tyler Durden 04 Aug '14

04 Aug '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi I just wanted to know from others how often your nodes are being DDoSed? Because this month one of our nodes has been targeted twice. Because DDoS sucks and most providers aren't very happen when this happens often. Greetings virii - enn.lu -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iF4EAREIAAYFAlPfgjcACgkQzowS8yos8Rt1LQD/Rj2zZJpdmCyQhCmG3enWL6Z5 J0tbnnG2FS1GelACY74BAKIYRK8EVUt/pYfuuRzlBWWI84kuzcOmOiehqm6iyVjS =/ay4 -----END PGP SIGNATURE-----

6 6

Re: [tor-relays] Exit Nodes under DDOS attacks
by tor＠t-3.net 04 Aug '14

04 Aug '14

We never had our exit nodes become the targets of DDOS attacks HOWEVER, we occasionally see abuse complaints due to someone abusing Tor to DDOS attack other targets. Perhaps that's what you're seeing?

3 2

Running an AWS bridge on eu-west-1?
by tor-question＠puti.de 04 Aug '14

04 Aug '14

2 2

Learn Linux free for beginners
by I 02 Aug '14

02 Aug '14

A free online course from The Linux Foundation for beginners begins today. https://www.edx.org/

3 2

'relay early' attack detection at the infrastructure level
by Nusenu 02 Aug '14

02 Aug '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 [moved to tor-relays] Hi relay ops, please consider having a regular look at your logs after upgrading to the latest tor releases to spot relay_early attacks (even if the attack origin is not directly attributable from a relays point of view). searching your logs for 'Received an inbound RELAY_EARLY cell' should do it. https://gitweb.torproject.org/tor.git/commitdiff/68a2e4ca4baa595cc4595a511d… >>> It doesn't have to decrypt the stream to see it, because >>> whether a cell is relay or relay_early is a property of the >>> (per hop) link, not a property of the (end-to-end) stream. >> >> Does a patched relay also create a log entry as soon as it >> "kills" the circuit or is logging only happening on tor instances >> acting as clients? > > The patched relay also does a log message, yes. > > But the relay can only see its immediate neighbor in the circuit, > so it will only log that. Whether the attacking relay is that > (adjacent) one, or one farther on the circuit, isn't something your > relay can learn. -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJT3Bt6AAoJEDcK3SCCSvoensYQAJnuXhPNbhdJF7C6P9L8elG7 elPinCK6vmTbRXCoQam5j1VeL9C3FCBv415s811hfZxA37K17VdiKoS1NXB2kzkW 7WvL5/lH8culr83GTxrca0m7i2x6n0gCPOVPUWI3Go5bzwlsEidZsj7V14h2lfXH Ew8ZavvL0SLnRYJTvcjzqrWf3L8LsfYou6R2Y7yn085rGaGtUyVkQM44G9Zy3TVY 3lS4XqkZekXmmKjP06JjWdFMFdkaQhItbcdn3fF131ptlZlM5hFUaEpZHbpLLcjz fgJOt36jlkfILKRvxGyzcI118wmgrFVJFz9d7fuLVOdekK49aWxKh9Yh2aAekQEn Z3uF/eskL+Txptrc7iEKuWQZVlEkA8WVaQ70F1ADD/irln6ShJ17zrKqJ0qtaYlU V+CNfj/v2R6AgRhbVsNRdq8SWhDz4Nk4WgdYoUvxzgM1jmkAhQamlkC4f6JCqVQE /O0qeuXr/Z02pBwshcZlqKnBmPtuilSZwmlstIEfPAX9Tg6S1a0B/ycp3ByyJHJP QUNKwJ/cHtLpdPmIh2XUOT/5Kf10qmrLP5amYdRtBh304GoeHir3N/zfPmxdLfy7 Spb8W4p2C1HITzRlb9J97OGdKOR/2OOziZHOWZimF5O3fsrzsXQZe3Wlwbt5AxtY LJ5aXCUjNJ/TXe93nSQH =3FwX -----END PGP SIGNATURE-----

4 5

More attack traffic against Tor detected on exit relay
by tor＠t-3.net 01 Aug '14

01 Aug '14

IPTables rule involved: -A INPUT -p tcp -m string --hex-string "|00002800390038008800870035008400160013000a00330032009a009900450044002f00960041000500ff020100000400230000|" --algo kmp -j LOG --log-prefix "IPTables-GFC-new " -A INPUT -p tcp -m string --hex-string "|00002800390038008800870035008400160013000a00330032009a009900450044002f00960041000500ff020100000400230000|" --algo kmp -j DROP Logs generated Wednesday from hits against these rules: Jul 30 13:44:38 Libero2-vserver kernel: IPTables-GFC-new IN=eth0 OUT= MAC=00:16:3e:21:6d:34:00:21:d8:25:c0:20:08:00 SRC=1.50.250.198 DST=64.113.44.206 LEN=147 TOS=0x08 PREC=0x20 TTL=44 ID=21838 DF PROTO=TCP SPT=13717 DPT=9001 WINDOW=46 RES=0x00 ACK PSH FIN URGP=0 Jul 30 13:44:59 Libero2-vserver kernel: IPTables-GFC-new IN=eth0 OUT= MAC=00:16:3e:21:6d:34:00:21:d8:25:c0:20:08:00 SRC=175.152.3.46 DST=64.113.44.206 LEN=147 TOS=0x00 PREC=0x00 TTL=50 ID=21839 DF PROTO=TCP SPT=49229 DPT=9001 WINDOW=46 RES=0x00 ACK PSH FIN URGP=0 Jul 30 13:45:41 Libero2-vserver kernel: IPTables-GFC-new IN=eth0 OUT= MAC=00:16:3e:21:6d:34:00:21:d8:25:c0:20:08:00 SRC=124.90.49.99 DST=64.113.44.206 LEN=147 TOS=0x00 PREC=0x00 TTL=49 ID=21840 DF PROTO=TCP SPT=10200 DPT=9001 WINDOW=46 RES=0x00 ACK PSH FIN URGP=0

2 1