- tor-relays - lists.torproject.org

Exit Relay on VPS by WEDOS
by dope457 04 Mar '14

04 Mar '14

Hello, I have been running Exit Relay for the last three months on VPS by czech company WEDOS. Even though I reduced exit policy ( https://atlas.torproject.org/#details/F12AFDB3FEC184E76944579579F762F1142C7… ) there were two "attacks" from this relay accompanied by abuse reports. 1) Jan 15 02:46:21 65.20.0.47 pop3: Failed password from 31.31.78.141 2) Dear Administrator, The CSIRT.CZ Intrusion Detection System has recorded connection attempt(s)from your hosts to our honeypots. This may indicate a security risk for your network and for the whole Internet. Would you please investigate this and/or inform all parties responsible that the following system(s)may be compromised? Both times I quickly replied with explanation it is Tor relay and offering further steps to do in case it is not going to stop. Today, few weeks from last incident, they just pulled out ethernet cable from my VPS and I am not sure what to do. I would like to contribute to the Tor network with this Exit and not just as a middle relay. Thanks for any suggestions, dope457

2 2

Problem encountered with Bandwith Authority algorithm (was : "bandwidth authority algorithm is cracked")
by julien.robin28＠free.fr 03 Mar '14

03 Mar '14

Hi everybody, 15 days, 16 hours and 15 minutes (without any restart) have passed since my 2 involved in this problem are restarted (started at the same time). And there is something very clear and interesting to see. They both have restarted from nearly zero (~100kB/s) in the first days, and a problem is still completly present on 1 of the 2 identity : -> The first one (the older one also) is stuck at less than 1MB/sec (5,510 in consensus weight) - ArachnideFR94 -> The second one is growing, growing and growing, now around 9MB/sec (and more than 75,000 in the consensus weight) - ArachnideFR94v2 It can be very clearly seen by observing graph on Tor Atlas. (But there is no more bandwith earthquake like I had on december.) On this machine, the first daemon is launched by /etc/init.d, while the second one is manually lauched via another non-admin user. No differences, same nice value, completely the same torrc file apart from nickname, DirPort, ORPort and MyFamily. Pretty large max bandwith for both of them : RelayBandwidthRate 25600 KB RelayBandwidthBurst 122070 KB ShutdownWaitLength 90 -- Into the log file : The only one difference was this (I just corrected it) - it was on the server that is working perfectly fine (ArachnideFR94v2) : Jan 30 06:07:03.000 [warn] Failing because we have 4063 connections already. Please raise your ulimit -n. [6978 similar message(s) suppressed in last 21600 seconds] Jan 30 12:07:17.000 [warn] Failing because we have 4063 connections already. Please raise your ulimit -n. [20004 similar message(s) suppressed in last 21600 seconds] -> Oops :s I know very well this problem and I just forgot to prevent it this time - Sorry for that - Corrected by editing /etc/security/limits.conf and adding some lines about the user used by my second tor daemon - I just restarted this one by SIGINT, wait and new launch (logged with a much better ulimit !) today at 12:35 UTC. Absolutely nothing else abnormal into the log of the 2 daemons. And the problem of ulimit was on the one that runs perfectly well! -- Any idea of why the first one is completely stuck at such a low value ? The next steps would be to set the 2 tor daemons on the /etc/init.d using the Multiple Tor Processes example at www.torservers.net on this machine, and to watch if ArachnideFR94v2 launched by /etc/init.d is still working as well as today. If no solution appears, may be trying to re-install the entire system, and watch what happens would be interesting. If still no solutions, it will be complicated to understand ! Best regards, and thank you in advance for your ideas Julien ROBIN

1 1

Re: [tor-relays] TTTT
by Sebastian Urbach 03 Mar '14

03 Mar '14

Hi, I'm sorry but there is no Windows executable available or planned due to the insignificant number of Windows relays. Is it necessary to run it by scripts or is it possible to create a exe or dmg file -----Original Message----- From: tor-relays [mailto:tor-relays-bounces@lists.torproject.org] On Behalf Of Sebastian Urbach Sent: Sunday, March 2, 2014 2:10 PM To: tor-relays(a)lists.torproject.org Subject: [tor-relays] TTTT Dear list members, The next big data review regarding the "Trying Trusted Tor Traceroutes" project was initiated this week. It will probably take a while (weeks) before we have solid conclusions. We are very close to 100 complete runs from different IP's, in fact 99 right now. I hope that we will reach this goal very soon :-) We are not sure yet if we gathered enough data, but time will tell. We want to thank you for your support and if you want to make sure that we have more data in case the amount we collected turns out to be insufficient, then join us or keep running multiple rounds. Project: http://web.engr.illinois.edu/~das17/tor-traceroute_v1.html Results: http://datarepo.cs.illinois.edu/relay_scoreboard.html I make sure that this list is getting the results from the data review before anyone else. -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat and statesman _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Tor plugin for Nagios
by ramo＠goodvikings.com 02 Mar '14

02 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Heya List I've recently started on developing a nagios plugin for tor, since a cursory google search didn't come up with anything I would describe as 'comprehensive.' Generally speaking, it works by connecting to the control port and running various commands to check the health of the server. You would either drop it on the Tor box and run it with NRPE, or on the monitoring server and open your control port to that IP. So far I've implemented / plan to implement the following checks: * Fetch a page through the socks port * Check if the server is hibernating * Check the current bandwidth (up and down combined) * Check the accounting values (how close to hibernation) * OR / Dir port reachable It's in a very early stage at the moment, but I'm posting here now to ask: Are there any other checks relay operators would want to see implemented? You can check out the code so far at https://github.com/goodvikings/tor_nagios/ Cheers Ramo -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) iQEcBAEBAgAGBQJTEsR5AAoJEAXQWoW8lug/m7AH/iEJ6X1kKcOCkUkhgVHyT6aX Nusu9yADtaRzyNrRUtWIgHw80SQSItr8Sgtt9pGIDZssetUYyxKCPN7YFztBJGL5 Fym/Iv+lF6jCyyWRm4SH84yA3k/rW+gPiiNg0mw5di6V2Bx311GM2YavOnZWs0Yh rdX2ljdqbJuIQIOxhaMVrX3jYFRCYv6LvSZwxh9CA8KVgvosiiQTU76ubekoZoCt XUXLepqgD+sUxeRh7QWrM8BxTkY1Yp0XxXaeU87aO40sBB18dozgXuBsTO43ssvK s82iYorusIPdpjuVIr6FnmPrbwuDEaWVJ6ktcVz9Z9WRMP5AbJISU7LuRSxRNBU= =m/S7 -----END PGP SIGNATURE-----

2 2

is comcast throttling relays?
by Steve Rich 01 Mar '14

01 Mar '14

Hey, I am running the following relay, and never see traffic going more than 250k. Is Comcast throttling non-exit tor proxies? https://atlas.torproject.org/#details/7E6183143778259F025576A5803E3334AB95C…

5 7

Effects of Rebooting?
by Tor Relay 28 Feb '14

28 Feb '14

I am a n00b relay (OnionTorte) operator, and, as such, know lamentably little of what I'm doing. (Yes, I'm one of *those* relay operators.) When I went to bed last night I had an HSDir flag, but it has since disappeared. And since this A.M. my consensus was halved. A bit of promiscuous pokings-about in relay metrics leads me to think that this happened in the wake of my having had to reboot my machine to unwedge it. Speed Test shows that even on the worst of BadHair Days my u/l speed doesn't sink below 15Mb/s (1900KB/s), and almost always cruises at >25Mb/s, so I don't think that it's so much a bandwidth issue as one of perceived reliability. :( I read https://blog.torproject.org/blog/lifecycle-of-a-new-relay but wasn't able to take away as much as I would have liked. If somebody can explain to me, using small words and interpretive dance as befits a callow contributor, what happened I should certainly appreciate it. Thanks, P -- Dirt kicked to the curb goes into the gutter. Professionals kicked to the curb go into retail.

2 1

tor-browser still fails on FreeBSD 9.2-STABLE
by Scott Bennett 28 Feb '14

28 Feb '14

I just downloaded tor-browser-linux32-3.5.2.1_en-US.tar.xz and tried it. It fails on FreeBSD 9.2-STABLE exactly the same way the previous version did: [hellas] 128 % ./start-tor-browser Launching Tor Browser Bundle for Linux in /home/hellas/bennett/src/tor/tor-browser_en-US XPCOMGlueLoad error for file /usr/home/hellas/bennett/src/tor/tor-browser_en-US/Browser/libxul.so: libasound.so.2: cannot open shared object file: No such file or directory Couldn't load XPCOM. Tor Browser exited abnormally. Exit code: 255 [hellas] 129 % So I guess it did *not* get statically linked. I checked the ports tree, but didn't find any port named libasound or just asound, so I don't know where to get the library that the browser wants and is lacking. Is there much likelihood of having a secure browser for FreeBSD anytime soon? Using firefox 27 turns out to be several orders of magnitude more identifiable than firefox 3.51, which was already bad enough in that respect, so I'd really like to have something that's much safer. Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at sdf.org *or* bennett at freeshell.org * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************

2 1

procedure for TBB to use localhost relay
by Zenaan Harkness 28 Feb '14

28 Feb '14

I am running a tor relay - gracemissionstor - and have begun providing the relay name to friends who would like to use TBB. What I have not been able to google yet properly, is what startup/connection procedure is "best" for those using TBB, _and_ are on the local network - many people come and go here and there, and connect to the Internet from the LAN/internal network. Should those connecting in this way, simply select the default connection options, and add "gracemissionstor" into the final "I need to use a bridge relay" screen, or is there a preferred way to connect - I am running the TOR SOCKS proxy for example. I would like to be able to explain to people how to use TBB and connect to the local TOR relay when they are connected to the LAN - either via SOCKS or otherwise - but of course, it does not make sense to have TBB connect through TOR relay SOCKS (on the local network TOR relay), just to thereafter be tunnelled through the TOR network, just to thereafter establish _another_ connection back to the "gracemissionstor" relay, thereby having all Internet access travelling multiple times through the TOR network unnecessarily. Does this make sense? There ideally ought be a TORButton config option, or similar, to "connect using local TOR relay SOCKS port" and an easy way to let the TBB know (perhaps on each startup default to safety option) that (eg on next boot) we are no longer on a trusted local network. E.g. when TBB starts up (at least first time, and there SHOULD be option to have TBB ask _every_ time), and the user chooses "use SOCKS proxy to connect to Internet", then when TBB connects to the SOCKS proxy, the TOR relay which is that SOCKS proxy ought notify the TBB that it is in fact connected to the desired (if the TOR relay name matches of course) TOR relay. Of course, it would _also_ make sense for TBB to SSL encrypt its connection to the local tor relay SOCKS port. This might all be wishful thinking and pie in the sky, but please forgive my enquiry if so - I don't yet have a full understanding of these things. TIA Zenaan

1 1

tor is not connecting
by Rupesh Kumar 28 Feb '14

28 Feb '14

in my collage tor browser is blocked in proxy server what can i do how can i connect the tor browser help me

4 4

Named status
by John Ricketts 27 Feb '14

27 Feb '14

All, At what point does the router acquire "Named" status? My exit node is called "QuintexSJT" and has been up for 20 days. I suspect it requires some sort of human intervention? John

4 5