- tor-relays - lists.torproject.org

Setting UP an Tor exit node with resrictions
by Anonymous 14 Nov '13

14 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello! How may I create an Tor exit node with some ports and sites blacklisted? So the user trying to enter an blacklisted page will get an page saying that the maintainer has denied the access to that page/site. I whould like to deny access to IRC and some forums so how is that posible if it is? - -- Best Regars, Anonymous - Supporter of Free Speech. GPG: 0x78612223 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJSgRo8AAoJEFy6M0x4YSIjN+AQAKB9GQqNWfGYOdVCUiSE3UGv Kb21VcsK75QEg5ccbTyGs9c4bsh1UNkzHd0tClsVloV67nkdh13aAzXUYqUllJuB S2PzpdAE+mdr1lKpHpOUAeIZwd4KQ6HRb4GA+iLTUoBI0oLP1Le3zVclPl5TO4Ei U3QL6wrQUwOId5cfTk3Q1029oGKptilDzajrqgoR5jMxDsrVZdBp10yM981650Pv ZQe/XBI5hDPM74soEDKitZpAsc6gUUBFWLyRzCUAUtL1U3Bv8hbvkcO/nlWk5yzH GYSTDAyvkq2ZY9Q5F2+Z5+GL7YAnUg8p607ndlB0grXxXb3JpA7ASlLi0SGouQCQ of8gUCKpNbZQk0euSXqqSdU7jQRxmI12K/k7wzidE1G6UNDrMucwbAiLo5TELkEz 6iCQ2FuoH0aFDJ3JF5Ftsu3CKTPlYNjejag5d/139B+0fZ56Sza+sSZvYY9HxWvB JUohIPuY+X9ngUarjtAmBJ61tpOzMFM0QkomRE3XCDrTjb4Vqch2/2lHVODlTBa6 G7MZc2Fx/l71nO87tHHSzG08VBtJ91cmJtFcBZ36zjaj5xNW6TPVYiIMvbjYXVaZ AXALaxtJWa6Lx76F+VLcOK0i3/k1y9y3hgRBT9SVj93sDiAEr7FenXGcDr3XapnZ L6TUANsYlJtb6xsZaykk =Sk1v -----END PGP SIGNATURE-----

4 6

Re: [tor-relays] Checking a bridge
by Gary Anderson 13 Nov '13

13 Nov '13

I have the same worry as Martin. I set up a bridge on AWS 2 weeks ago by following the instructions here https://cloud.torproject.org/ and choosing a bridge image for Ireland. Setup went well, log files on startup tell me my bridge contacts the tor network, and I checked I could use my bridge by explicitly configuring it in a tor client. But the traffic I see in arm is very small (around 100 MB / week) compared to what I observed when I tested a tor relay (over 2 GB in a week-end). On the other hand, I didn't find my fingerprint in Globe. Is there something wrong or can this be a normal situation that happens sometime ? Do all fingerprints end up in Globe ? T. Lunar : > Martin Kepplinger: >> When my bridge uses only the same few MBs each day, i guess it isn't >> used at all right? >> >> Is there a simple way to ensure it is in bridgeDB and functioning as it >> should? > > You can search for the bridge fingerprint in Globe: > http://globe.rndm.de/ > > Globe will hash the fingerprint before sending it to Onionoo to prevent > leaks. >

3 3

Traffic in port 9050 in a relay (denial of service attack?)
by jj tor 12 Nov '13

12 Nov '13

Hello all, I've set up a tor exit relay (0.2.4.17-rc, debian testing) on a VPS, and it's running well (about 20Gbs/day). But a lot of traffic (about 50%!) is using port 9050 for incoming connections. It's something more than random scans. Because I am worried, I've run tcpdump on this port and the packets length is about 50-60 bytes long. It seems like DOS or flood traffic: external ip tries to connect and my server refuses (RST, ACK), each time. My OR port is 9001, and, of course, SocksPort = 0 in my torrc. Do you think something is wrong with my relay? Why that traffic if my only tor port is 9001? Should I block that traffic using iptables?

11 23

(no subject)
by Jon Hernandez 12 Nov '13

12 Nov '13

1 0

Does TOR need TUN/TAP
by Sebastian Pfeifer 12 Nov '13

12 Nov '13

Hello! A short question I didn't found in the FAQ or with Google: "Does Tor (as an exit node) need a TUN or TAP device"? I am a poor pupil and with my provider servers without TUN/TAP (VRS) are 1€ cheaper per month than the ones with (KVM). LG Sebastian -- vy 73 de Sebastian Pfeifer OE6SPD Folgt mir auf Twitter! @0xDEADDA7A http://www.qth.at/oe6spd/index.php?seite=start http://www.greenpeace.org/austria/de/aktivwerden/greenpeace-teams/team_wien/ Denk an die Umwelt! Musstest du diese Mail wirklich ausdrucken? 0xB1120583 生き甲斐

3 3

Re: [tor-relays] tor-relays Digest, Vol 34, Issue 27
by bbzxrmy wowman 12 Nov '13

12 Nov '13

MATH SPAWN 4 INFINITEZMALL PLAYSIMZ 0.4190909090909091 ZRVYNIMPLKKJUYTRMBBBGFDDRWQSA EARTH TRAVELLING@ 96000 YEARS A DAY, TIME COMPRESSION - 4 BILLION YEARS, FROM 13BILLION PIONT 6= 12 YEARS REMAINING TO DISABLE THE VIRAL JAM SYSTEM PROGRAM CODE LIFE SPANKER EARTH FLYING OFF COURSE 0 TO 9 CAN CREATE PARADISE IN 2022 4000YRZ X 24HRS= 96000 YRZ/DAY 96000 X 366DAY/YR =35136000YRZ/ YR X 3 {TRIATH OF 9 REPEAT) = 105408000 BILLION YEARS PER 1 YEAR EARTH TIME****<*> 13BILLION YR CYCLE(+0} CREATION(TEST LIFE)- 4BILLION OFF(MISTAKES) 4BILLION YEARS SPACE(HOLOGRAPHIC TRAIL+ERROR} = 12 YEARS FROM 2012 2022 X 4 PIONT GALAXY SEX PAIRS = 8088 ARMY OF PARADISE 8088 MEN DIVIDED/ 22 OMEGA GIRLS= ***367.6363636363636*** ( 1.60 DAYS MISSING FROM YEAR{SECRET SONMAP) 367 RECIPROCAL= 19.57 .10{REPEAT ALL TEST LIFE) .10 HIGHER THAN GOLD RATIO 19.47 = MISSING LEADER 10 (PHONY DEVOURALL| HIDING IN GOLD PROJECTED FALSE UNIVERSE 8088/22 % = 1351.564958677686 OUTER ROTATION TRIAX / 22 HELL/HEAVEN GATES= ***0.136363636363634*** THEN SQROOOT==== ============= 0.3 >69{} 27 44 >72937<-99+82 ||||||||||||| 9BIRTH .22 NEGATIVE FORCE / 22 NOOQ = 0.4190909090909091 6 SOLMATES BLOCKED BY WAVE CALIBRE DIRECTIONAL PROGRAM p{DEATH| .4= 4 PIONT 4 ELEMENT GRID EXPONENTIALIEZER PREVENTING ALPHA-+ OMEGA+- 2 PROCEED TO ZERO TEST HOLOGRAM LIFE FINAL, WEAR AFTER NIL, POSSIBLE FOR BOTH 2 2CREATE REALITY.... STARTING @ 2 PERFECT OPPOSITE FROZEN EXISTENCES {MAN + GIRL WHO WAITED 14BILLION YEARS FOR THIS VIRTUAL UNIVERSE TO COMPLETE ITS ETHERIC TESTING| @ CLIMAX ALPHA + OMEGA(CODES) + EXISTENCE MINIMAL + LIFE MAX = 0-9 INFINATE LIFE 4 ALL EXISTING AND CREATION _{+})_*ETERNIADISE%%*&^()?"}" }{}{}{}{}{}{}{}{ BbZzXArmy PrajectoRkiDD ****MASS CHAIN MESSAGE read and spread to all your friendlists (. http://zeja11.blogspot.com/ .) 22eterniA .xex ________________________________ From: "tor-relays-request(a)lists.torproject.org" <tor-relays-request(a)lists.torproject.org> To: tor-relays(a)lists.torproject.org Sent: Monday, November 11, 2013 12:06:18 PM Subject: tor-relays Digest, Vol 34, Issue 27 Send tor-relays mailing list submissions to tor-relays(a)lists.torproject.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays or, via email, send a message with subject or body 'help' to tor-relays-request(a)lists.torproject.org You can reach the person managing the list at tor-relays-owner(a)lists.torproject.org When replying, please edit your Subject line so it is more specific than "Re: Contents of tor-relays digest..." Today's Topics: 1. Re: exit and skype (David Carlson) 2. Setting UP an Tor exit node with resrictions (Anonymous) 3. Re: Setting UP an Tor exit node with resrictions (krishna e bera) 4. Re: Setting UP an Tor exit node with resrictions (Anonymous) 5. Does TOR need TUN/TAP (Sebastian Pfeifer) 6. Re: Does TOR need TUN/TAP (Anonymous) ---------------------------------------------------------------------- Message: 1 Date: Mon, 11 Nov 2013 08:21:40 -0600 From: David Carlson <david.carlson.417(a)gmail.com> To: tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] exit and skype Message-ID: <5280E7F4.1020707(a)gmail.com> Content-Type: text/plain; charset="iso-8859-1" On 11/10/2013 5:37 AM, Thomas Hand wrote: > > This is true. Some websites download lists of all relays and just mass > block the ips. Its usually webmasters who have no idea how tor works > and don't realise that a middle relay poses them no threat whatsoever. > This is why education is best. If someone is blocking your IP, just > email them explaining how tor works and try to convince them that your > IP is no threat. > If a web commerce provider is summarily blocking every IP address on his copy of the list, chances are that they will not change to a policy of only blocking exit addresses, as that takes extra thinking. Of course such a list goes out of date faster than a phone book. That is another reason that using a list is an exercise in futility. Even more thought required to see that. Thus it would be hit or miss to try to access their website using Tor. If they do not respond to a suggestion that they learn more about Tor, a better choice is either to move on to a competitive website or to move our relay (exit or not) to a different IP address. Those options are already on the table in this thread. The situation would change if Tor became the normal means of accessing Internet commerce websites. > On Nov 10, 2013 8:27 AM, "Sebastian G. <bastik.tor>" > <bastik.tor(a)googlemail.com <mailto:bastik.tor@googlemail.com>> wrote: > > 10.11.2013 07:56, gq: > > Dave, > > > > Unless I am mistaken, your non-exit relay never connects to a > web page. > > Only exit relays do that, so it can't be your IP that is blocked but > > whatever exit relay you may be connecting through. > > The original problem seemed to be that Skype rejects connection > attempts > from exits. In the mentioned case someone tried to make a call > from one > of the exits (the same machine with the same IP address) without > using Tor. > > Unless I am getting the reply you replied to wrong, the same may > happen > when one runs a non-exit relay and tries to connect from the same > machine to a service that blocks the Tor network, whenever the traffic > comes form an exit or not. (One reason could be, not knowing that > there > is a difference, or just to be sure there's no trouble, or that's just > the default [third-party]list they always use for blocking without > carrying what's on the list) >

1 0

exit and skype
by Jan Hendrik den Besten 11 Nov '13

11 Nov '13

Boy, now I am in trouble... I run an exit node from my home address for a few weeks now, but my gf starts complaining she cannot use Skype anymore to chat with her mum. I understand Microsoft blocks all tor exits from accessing Skype. Is there anything I can do except converting the exit into a relay? --

14 16

(no subject)
by bbzxrmy wowman 11 Nov '13

11 Nov '13

00:11][BlakbirdzejA] ()+_earth changes spawning chaos releases, react to time speeding, and proclaim a more established eternia for all exisT. aviod control, imperge immortality and fight with new designs without permitting harm, devour opposites, refrain from weakness hiding in false powers. when the weather shifts 2 death burn the corpses and re-taliate with health and completionZ, do not starve there is soil and water for all to eat for 100s of years. gather and destroy not-wanted pain and looping, seperate for strength and evolve. SeX interRaciaLL to merge galaxy code N eradicate idolismz BBZzXArmy8::22 }{}{}{}{}{}{}{}{ BbZzXArmy PrajectoRkiDD ****MASS CHAIN MESSAGE read and spread to all your friendlists (. http://zeja11.blogspot.com/ .) 22eterniA .xex

1 0

Tor relays and exits exposing Privoxy publicly
by Claudio 11 Nov '13

11 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello everyone, Some months ago I encountered a situation where a user running an exit node with a publicly exposed privoxy (intentionally or not, I'm not sure) was constantly receiving a number of requests directed to advertisement networks. Fundamentally, someone is/was running an infrastructure using exposed Privoxies to perform some sort of advertisement fraud. It's been roughly documented also here: https://b.kentbackman.com/2013/04/15/rotpoion-botnet-powered-by-thousands-o… Out of interest, I gave a quick look at existing relays and exists and it turns out that there's ~20 nodes exposing Privoxy on public IPs. Host: 46.65.12.134 (46-65-12-134.zone16.bethere.co.uk) Ports: 8118/open/tcp//privoxy/// Host: 66.146.193.31 (sable.dredel.com) Ports: 8118/open/tcp//privoxy/// Host: 66.180.193.219 (tor-proxy.die.net) Ports: 8118/open/tcp//privoxy/// Host: 69.164.211.18 (nsi.mirt.net) Ports: 8118/open/tcp//privoxy/// Host: 71.246.241.109 (koansys.com) Ports: 8118/open/tcp//privoxy/// Host: 75.137.122.118 (75-137-122-118.dhcp.gnvl.sc.charter.com) Ports: 8118/open/tcp//privoxy/// Host: 78.47.41.125 (maurer-web.wisseberger-jonges.de) Ports: 8118/open/tcp//privoxy/// Host: 81.56.102.224 (perso.schenck.fr) Ports: 8118/open/tcp//privoxy/// Host: 82.45.34.136 (cpc11-hawk13-2-0-cust135.aztw.cable.virginm.net) Ports: 8118/open/tcp//privoxy/// Host: 93.207.83.51 (p5DCF5333.dip0.t-ipconnect.de) Ports: 8118/open/tcp//privoxy/// Host: 95.140.34.187 (medea.tobias.vn) Ports: 8118/open/tcp//privoxy/// Host: 95.140.34.188 (mikrobi.tobias.vn) Ports: 8118/open/tcp//privoxy/// Host: 123.254.105.104 () Ports: 8118/open/tcp//privoxy/// Host: 151.28.124.42 (ppp-42-124.28-151.libero.it) Ports: 8118/open/tcp//privoxy/// Host: 162.243.5.88 () Ports: 8118/open/tcp//privoxy/// Host: 165.154.108.120 () Ports: 8118/open/tcp//privoxy/// Host: 176.31.127.140 (ks396886.kimsufi.com) Ports: 8118/open/tcp//privoxy/// Host: 199.184.154.12 () Ports: 8118/open/tcp//privoxy/// First thing first, I'm interested to know whether there's an actual reason for doing this or if it's something discouraged. Best, /nex -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJSf4ReAAoJEDmTLM1sbEdvCgMP/id8RbYksJwVBwAXQwJmRMbI +MDLGARDSRlLaQYfNoJyfViuj2rX1RowbwemUsmOQgogHMBJgWSzHMhE4cuxmRG0 dFlcSQI5Fs9y2aFzo4BeS2409yU3/ewpBcgly9AFWAiChCyV2j1q7pZjDcbmxQZK /2AQjRmNeAtLuEnJO7cTSc3ljmnr6IXENFuS4I440c3YWubjqa4TTSy1iONLH0Xi iq0Sgfz/Fs2rGArKRlfamNZIaAyvecuFkbqSp96lu5klAVlCnmYhqt9TStMvskb6 yWegDjTlzVfnjEC5dZIwlMTtHBJT3ERKbShouErjKgGGv0Ld4bgOR56JZO+wmUzC 4XRh41wxh7WbWryTFbdYup546rASPIPSeuyWwqKLnDyVUJa2ehm/8ZQoYT4To4tk eYDOkYkEmr9seqn1p+5+H2CbqPotHscyPwpDTyKTVhg+WhACX2jiZSTBCuJQ61wt rqGlnuZgy28nw+4jzk8V6BrqxSw9t0l7hfGTCqNimE0EHIvb80wwMH80tztR4CNT CpkY3o3DOqQkk0CSjTIRmzR62kmGdNCRP3QnLXCQuA61RdH1Lg5GZh4zCcfitnS3 4ixaIaDhMnRqyUR5QNEpWXBGHEDc3EHjcBCI1Vy/j03fSZaxGZ/BavJfK+0GEE31 VeVmDYjM0Kut1w5PXFEx =asRg -----END PGP SIGNATURE-----

5 7

Amazon abuse report
by Sanjeev Gupta 10 Nov '13

10 Nov '13

Hi, I am running a number of Tor relays, in my own DC and at Amazon Singapore. I got an email from Amazon last week, for the Windows instance: == Hello, It's come to our attention that one of your EC2 instances may be configured as a Tor exit node. Please note that any open proxy activity is prohibited in our AUP: http://aws.amazon.com/aup/ Please respond to this email detailing the corrective measures you plan to take. If you believe our findings to be in error, please provide additional information about how this activity relates to your use case. Regards, Amazon EC2 Abuse Team == Since Tor Cloud https://cloud.torproject.org/ suggests running on Amazon EC2, I am confused. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane

20 53