- tor-relays - lists.torproject.org

Re: [tor-relays] Trying Trusted Tor Traceroutes
by starlight.2014q2＠binnacle.cx 08 May '14

08 May '14

At 22:35 5/7/2014 -0500, Anupam Das wrote: >Those are not our machines and moreover, we have not received any measurement (i.e., traceroute data) from those IPs. One more thing our traceroutes use UDP packets, not TCP packets. Thank you for your reply. I blocked the IPs.

1 0

Re: [tor-relays] Trying Trusted Tor Traceroutes
by starlight.2014q2＠binnacle.cx 08 May '14

08 May '14

forgot log entries

2 1

Re: [tor-relays] Trying Trusted Tor Traceroutes
by starlight.2014q2＠binnacle.cx 08 May '14

08 May '14

>Dear list members, > >Just a quick update regarding the TTTT >project. There are multiple GB's of data to >analyse and it is still being worked on. We are >also working on the public script(s) as well. > >Sebastian Urbach Have been seeing some dubious traffic warnings the last few days on the firewall from 50.116.9.77, 74.207.228.161 and 109.74.204.217. Are these IPs performing traceroutes for your project and can you vouch for them? If so will it improve your results if the ICMP TTL-expired packets are permitted? You should avoid the duplicate TCP SYNs if you don't want to annoy people. Maybe explain exactly (and tersely) how this works. If they're not yours they go on the black-hole ACL never to be seen again.

1 0

(no subject)
by I 07 May '14

07 May '14

4 4

SSH scans from Tor exit
by I 02 May '14

02 May '14

12 21

Relay down, "rejected", help
by kbesig 30 Apr '14

30 Apr '14

My relay became one of the "rejected" since the heartbleed vulnerability surfaced so I reformatted my XP relay and did a fresh Ubuntu 14.04 LTS install. Built vidalia-0.2.21 from source using: deb http://deb.torproject.org/torproject.org trusty main deb-src http://deb.torproject.org/torproject.org trusty main apt-get install build-essential fakeroot devscripts qt4-dev-tools qt4-designer libqt4-dev g++ cmake apt-get build-dep vidalia mkdir ~/debian-packages; cd ~/debian-packages apt-get source vidalia cd vidalia-* debuild -rfakeroot -uc -us cd .. sudo dpkg -i vidalia_*.deb Edited /etc/tor/torrc allowing connection ports. I'm unable to open vidalia with these error messages: 1. As non-admin: /usr/bin/vidalia (process:540): GConf-WARNING **: Client failed to connect to the D-BUS daemon: An AppArmor policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_call", sender="(null)" (inactive) interface="org.freedesktop.DBus" member="Hello" error name="(unset)" requested_reply="0" destination="org.freedesktop.DBus" (bus) (<unknown>:540): GLib-GIO-ERROR **: No GSettings schemas are installed on the system Trace/breakpoint trap (core dumped) 2. As root: /usr/bin/vidalia No protocol specified vidalia: cannot connect to X server :0 3. As root: /usr/bin/X11/vidalia No protocol specified vidalia: cannot connect to X server :0 I've seen similar errors searching for a fix, but none that seemed "resolved". Any suggestions would be appreciated as I'd like to get back up and running ASAP Thanks ------------------------------------------------------------------------

15 23

MaxAdvertiseBandwith
by jchase 30 Apr '14

30 Apr '14

Hi, I have a non-exit relay running Tor 0.2.25 on a Pi. Consensus weight 37. exit-policy: reject *:* Now Iḿ back from vacation and my relay has 1600 incoming conncts and arm warns me that my bandwidth is too small to support so many incomers. Would I kindly restrict my reject policy or limit my MaxAdvertiseBandwidth. Which I believe is no longer supported(?). Can anyone help me cut down on the traffic and the notices? J. Chase

4 3

can the old compromised keys be invalidated, "named" be recovered
by starlight.2014q2＠binnacle.cx 29 Apr '14

29 Apr '14

I just read that the relay can't get its old name back for six months now that the keys have been changed due to Heartbleed. Does any way exist to invalidate the old keys and transfer the name to the new relay? I realize that naming a relay is strictly an exercise in vanity, but hey, who is entirely immune?

2 1

Compiling tor-0.2.5.3-alpha on Raspberry Pi
by Lance Hathaway 29 Apr '14

29 Apr '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Apologies if this would be better addressed in a different list... I know there are a couple of people here who are working on making the Raspberry Pi a good option for running Tor--and the work is appreciated! Gordon Morehouse has built binary pickages for the Pi, but I wanted to try compiling it myself (for good practice, mostly). I followed the directions for compiling from source on a Debian-based system, but the compile fails with the following: config/parse_bridge_line: FAIL ../src/test/test_config.c:373: a.b.c.d was supposed to fail, but it didn't. FAIL ../src/test/test_config.c:374: assert(!bridge_line) [parse_bridge_line FAILED] ...some log lines skipped for brevity... 1/201 TESTS FAILED. (1 skipped) make[1]: *** [test] Error 1 make[1]: Leaving directory `/home/pi/debian-packages/tor-0.2.5.3-alpha/build' dh_auto_test: make -j1 test returned exit code 2 make: *** [build] Error 29 dpkg-buildpackage: error: debian/rules build gave error exit status 2 debuild: fatal error at line 1357: dpkg-buildpackage -rfakeroot -D -us -uc failed I confess, I haven't the slightest clue what to do with this. Have I overlooked something stupid? I don't want to open a "bug" unless it's an honest-to-goodness bug (developers have better things to do with their time than chase down "bugs" which are actually "user errors"), but I don't have the knowledge to say whether this is a bug or not... Any thoughts? -Lance -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQIcBAEBCgAGBQJTWW95AAoJEECmBqfoBgXnbVcQALl69M5KuGTfpUH/nsl6hxCu RwB+u5kothwRIPoJblHdEa7m00sWJxUc8HlHfczgjIYkC1gob+vgIDiMR6skAc2t RdSaCYuKWTh6RVTXUAb4UNd3GdvTu/QW/5NsUYDFlTT4QIxg7W2OEOirC4x9bNei gspV+TyOBdJbrTWmVoBFh8YPbpVeY1R5rwARjv7BOhkDCAle3N4vh+S3LvUNr3hk bUimllKSK7fht7bFyesiCrPB1wUxEazAwD7iIDCj6XmVRM57Wu9TV48RO+LLWEB5 qdKuTvN4MyqFbCiuBQXWU5Ps+IEOwoLSVzkQDvtdXhA1WvQmt8gVavXlRlZ+vWIi bEnJFxLMTqcwmC7RRk5blKr73/fBllaEumTpV4TfO3wRDwCKvtKLum9Z6wyV6g8n iY1WoJIThAiN6UM/nohKiecwM/L5e0gwEbkIxYLiCDGwzR3/QAvU84dv4a3EvWcy ptVZgcSQ3B4g55FOlTSJTasBG/rkCIm0Kdi6D7qXAUdm+ylSn/9eMcealSBwk38F Cfm/5P0bMAaKyGugY9VvoMPku8rsQgcimuUY8jH+8WgUxlUcZoL0fYSZ9hiVZ+m4 zW+MiA8Ct2MSzx5GNDDjdBYs7TqOE/MywkSIoxzgy/h0fhAaC3Vm5+NpkI8Z7MUD /1MdDUHCawEZk8KHt7ev =GIPd -----END PGP SIGNATURE-----

3 3

Help setting up an exit relay on CentOS linux
by Chuck Bevitt 28 Apr '14

28 Apr '14

Hello all, I've run an exit node from my home in the past using my consumer ISP service (Time Warner) and Windows 8, I'm pretty much of a Windows guy (I make my living building business applications with Microsoft tools) but now I have an opportunity to run an exit node on a hosted server running CentOS linux. I've loaded CentOS at home to test it out and the problem I'm having is that I can't get the Vidalia control to run. The browser bundle works OK - I can open FireFox and make a Tor connection. As far as I know I've downloaded the correct files for CentOS linux and I have the Vidalia start icon. However nothing happened when I try to open the Vidalia icon. Since I'm not familiar with linux, I don't know where to start looking. I had assumed that I would just open Vidalia and set up my exit relay the same way I did on Windows 8. I greatly appreciate help with this especially from someone who's configured a relay on CentOS. Thanks, Chuck Bevitt

3 2