- tor-relays - lists.torproject.org

Re: [tor-relays] Running random web services on a bridge-server?
by Kostas Jakeliunas 16 Nov '13

16 Nov '13

On Nov 16, 2013 1:01 PM, "Martin Kepplinger" <martink(a)posteo.de> wrote: > > Hi, > > Sorry for being lazy, I'm not sure if I can figure it enirely out > myself: Is there _any_ implication on the status of a bridge in the Tor > network when I run random web services like an open website, xmpp > server, whatever, on the same device/IP? It'll somehow be more exposed > that way but I'd be happy on any opinion. I guess probability that > someone finds out that there is a bridge behind my IP is rising. I really have nothing to back this up but I would *think* that additional services on the same IP might mask the bridge from / confuse some active/reactive probing based bridge disovery attacks. Then again, if active probing is usually only done on a particular (ip, port) pair (the one that someone in China is connecting to, for example), then there's probably no difference anyway.

1 0

Running random web services on a bridge-server?
by Martin Kepplinger 16 Nov '13

16 Nov '13

Hi, Sorry for being lazy, I'm not sure if I can figure it enirely out myself: Is there _any_ implication on the status of a bridge in the Tor network when I run random web services like an open website, xmpp server, whatever, on the same device/IP? It'll somehow be more exposed that way but I'd be happy on any opinion. I guess probability that someone finds out that there is a bridge behind my IP is rising. thanks, martin

1 0

Tor replay in Finland
by Anonymous 16 Nov '13

16 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello all list readers, Someone has experience with Finland tor replays/exits? Do you know any problem with running it from the lagal side? I may say that I'm currently hosting an tor exit node in Finland, but unsure if it's an good idea. - -- Best Regars, Anonymous - Supporter of Free Speech. GPG: 0x78612223 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJShplBAAoJEFy6M0x4YSIj9N4P/1Mj3Dclm4yJqDqPz2GfsFTk iksvd6y7hiFrSQoEle19DQ7Z/mxC2GFjohJ2zrYNnjEfRb/sUDbyLFbF21CRjrZV spmyv0cvi33hBSEvAB3IHKGj9wMkRU9Yd0DNV58YkrvqavDEPd/8UN+u7GKowuGK ms0Z+wFuIlBeqAA5gdoQZoARbULuXZrIvuJbbmadgXLmBss80YG2UFhLKAt5oJN4 CtW5wibpmIRAxOqBlCJTTGxHatxWarGovgMG4evdSYqqThg7rMf17NXHNIrT6qX/ BELlUn5lkKYoGg5/yxXSUAP9+S2KEnRvEaP0bgPybYhzTs2Y4OAJlkbayq67NMS4 VmiE9aBn3etDSxGGsLtafXWWw1XCN2jIJVkevGTB/Pbr5aBKe48jjAHoQqooHHpQ iRe/G4esipaficbD/74cEOe8yD0Dbt9KDpG+Eqj5NuSJLwqnJdJFXXWVWpNuWVMj TZaCrxArLScdw/2BlfgbQc4sidSGRs6YhijbE1fCe2zq6Jh/KOBentXVGgl8XWel crrjpr0lvg0km076RyMW6Jy9eF6pQSlcHMPP32sfZmQ+V1sZCzfORMxRCSUQmjda jA8ZNXN9yoTHM5pEuTjgl74TaebBjxoI2ZCD6FnP8D5S9vy2lIwT2DYFz8klyrC/ 7p56MdJhPzawQrLnJHdv =Q86H -----END PGP SIGNATURE-----

2 4

Tor relay in Russia
by jj tor 16 Nov '13

16 Nov '13

Hi, list readers, Someone has experience with russian tor relays? Do you know of any legal problem for an exit relay ? Thank you

5 5

Exit nodes on a Gandi VPS
by Eric van der Vlist 15 Nov '13

15 Nov '13

Hi list, I am a (happy) Gandi customer and I'd like to support the Tor project by setting up an exit node on one of their VPS (https://www.gandi.net/hosting/iaas) As mentioned on the list of Good/bad ISPs, (https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs Gandi does accept Tor exit nodes. I have contacted their technical support who said they did support the Tor project but wouldn't ne able to do specific ARIN declarations and that it would be my responsibility to be reactive to abuse complaints. Despite this perspective (and Julien Robin's bad experience) I am still willing to give it a try. Gandi have data centers in Paris (France), Luxembourg and Baltimore (US) that I can use with the same cost and efforts and I am wondering which of these locations would be more useful for the community. Thanks for your advises! Eric

3 4

Ingoing & Outgoing connections
by earlgrey 15 Nov '13

15 Nov '13

Hello, is it possible to achieve this behaviour : RELAY RELAY RELAY RELAYRELAY RELAY | | | | | | +--------+--------+--------+--------+--------+ | | ( internet connection 1 ) | | MY RELAY ( on computer #1 ) | | ( LAN connection ) | | PROXY ( on computer #2 ) | | ( internet connection 2 ) | | +---------------+---------------+----------------+ ||| | EXIT_CONNECTION EXIT_CONNECTION EXIT_CONNECTION EXIT_CONNECTION I cant find / undertand the options in torrc documentation. In fact I would have a "ExitConnectionProxy IP:Port" option. Any idea ?

3 2

Bad idea to switch from a relay to a bridge?
by Nick 15 Nov '13

15 Nov '13

Hi, I've been running a very low bandwidth relay for a little while with my home ADSL connection, but given the up speed is so poor, and (more importantly) my ADSL provider has stopped switching my IP about every 24 hours, I'd like to switch to be a bridge. However, I'm wondering whether the fact that my IP is already known as a relay means that it wouldn't be useful? That is, if the people bridges try to foil are likely to just blacklist any relays they see by default (it wasn't an exit or guard). Thanks for any advice, Nick

3 3

Setting UP an Tor exit node with resrictions
by Anonymous 15 Nov '13

15 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello! How may I create an Tor exit node with some ports and sites blacklisted? So the user trying to enter an blacklisted page will get an page saying that the maintainer has denied the access to that page/site. I whould like to deny access to IRC and some forums so how is that posible if it is? - -- Best Regars, Anonymous - Supporter of Free Speech. GPG: 0x78612223 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJSgRo8AAoJEFy6M0x4YSIjN+AQAKB9GQqNWfGYOdVCUiSE3UGv Kb21VcsK75QEg5ccbTyGs9c4bsh1UNkzHd0tClsVloV67nkdh13aAzXUYqUllJuB S2PzpdAE+mdr1lKpHpOUAeIZwd4KQ6HRb4GA+iLTUoBI0oLP1Le3zVclPl5TO4Ei U3QL6wrQUwOId5cfTk3Q1029oGKptilDzajrqgoR5jMxDsrVZdBp10yM981650Pv ZQe/XBI5hDPM74soEDKitZpAsc6gUUBFWLyRzCUAUtL1U3Bv8hbvkcO/nlWk5yzH GYSTDAyvkq2ZY9Q5F2+Z5+GL7YAnUg8p607ndlB0grXxXb3JpA7ASlLi0SGouQCQ of8gUCKpNbZQk0euSXqqSdU7jQRxmI12K/k7wzidE1G6UNDrMucwbAiLo5TELkEz 6iCQ2FuoH0aFDJ3JF5Ftsu3CKTPlYNjejag5d/139B+0fZ56Sza+sSZvYY9HxWvB JUohIPuY+X9ngUarjtAmBJ61tpOzMFM0QkomRE3XCDrTjb4Vqch2/2lHVODlTBa6 G7MZc2Fx/l71nO87tHHSzG08VBtJ91cmJtFcBZ36zjaj5xNW6TPVYiIMvbjYXVaZ AXALaxtJWa6Lx76F+VLcOK0i3/k1y9y3hgRBT9SVj93sDiAEr7FenXGcDr3XapnZ L6TUANsYlJtb6xsZaykk =Sk1v -----END PGP SIGNATURE-----

4 6

Re: [tor-relays] Checking a bridge
by Gary Anderson 13 Nov '13

13 Nov '13

I have the same worry as Martin. I set up a bridge on AWS 2 weeks ago by following the instructions here https://cloud.torproject.org/ and choosing a bridge image for Ireland. Setup went well, log files on startup tell me my bridge contacts the tor network, and I checked I could use my bridge by explicitly configuring it in a tor client. But the traffic I see in arm is very small (around 100 MB / week) compared to what I observed when I tested a tor relay (over 2 GB in a week-end). On the other hand, I didn't find my fingerprint in Globe. Is there something wrong or can this be a normal situation that happens sometime ? Do all fingerprints end up in Globe ? T. Lunar : > Martin Kepplinger: >> When my bridge uses only the same few MBs each day, i guess it isn't >> used at all right? >> >> Is there a simple way to ensure it is in bridgeDB and functioning as it >> should? > > You can search for the bridge fingerprint in Globe: > http://globe.rndm.de/ > > Globe will hash the fingerprint before sending it to Onionoo to prevent > leaks. >

3 3

Traffic in port 9050 in a relay (denial of service attack?)
by jj tor 13 Nov '13

13 Nov '13

Hello all, I've set up a tor exit relay (0.2.4.17-rc, debian testing) on a VPS, and it's running well (about 20Gbs/day). But a lot of traffic (about 50%!) is using port 9050 for incoming connections. It's something more than random scans. Because I am worried, I've run tcpdump on this port and the packets length is about 50-60 bytes long. It seems like DOS or flood traffic: external ip tries to connect and my server refuses (RST, ACK), each time. My OR port is 9001, and, of course, SocksPort = 0 in my torrc. Do you think something is wrong with my relay? Why that traffic if my only tor port is 9001? Should I block that traffic using iptables?

11 23