- tor-relays - lists.torproject.org

MaxOnionQueueDelay
by nsane 01 Oct '13

01 Oct '13

Hello, there is a Tor setting "MaxOnionQueueDelay" in torrc (see https://www.torproject.org/docs/tor-manual-dev.html.en) with a default of "1750 msec". As operator of a Tor relay 0.2.4.17-rc (on Debian) I would like to know were I can find the current processing time for onionskins to set "MaxOnionQueueDelay" different from its default value (1750) in the torrc. Where can I find the current processing time? -- http://www.fastmail.fm - Choose from over 50 domains or use your own

3 4

tor 0.2.4.x on the Raspberry Pi. How to?
by Martin Kepplinger 01 Oct '13

01 Oct '13

In order to run an obfsproxy bridge on my Pi, I need tor from git or tor's experimental repos; raspbian's packages are too old right? I got confused with recent discussions on raspberry pi here. What's the simples way to run a obfsproxy bridge on my Pi and keep it up to date as well! thanks!

3 2

New GPG key for Mike Perry
by Mike Perry 01 Oct '13

01 Oct '13

Hi everyone, I've finally made a new GPG key (after a scant 7 years!). This new key will be used to sign email from me going forward, and will be used to sign software releases until such time as I get around to creating a second set of keys on a hardware token for that purpose. While I dislike the Web of Trust for a number of reasons*, my plan is to cross-certify these two sets of new keys, and also sign both with my old key. Hence I will not immediately be issuing a revocation for my old key. The new key is attached, and is available on the keyservers (with a signature from my old key) at: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x29846B3C683686CC Here's the fingerprint and current subkey information for reference: pub 8192R/29846B3C683686CC 2013-09-11 Key fingerprint = C963 C21D 6356 4E2B 10BB 335B 2984 6B3C 6836 86CC uid Mike Perry (Regular use key) <mikeperry(a)torproject.org> sub 4096R/717F1F130E3A92E4 2013-09-11 [expires: 2014-09-11] sub 4096R/A3BD8153BC40FFA0 2013-09-11 [expires: 2014-09-11] This message should also be signed by my previous key, which was used extensively to sign my email and my source code releases prior to today. * Ensuing flamewars about the Web of Trust should reply only to tor-talk. -- Mike Perry

2 1

What do bridge operators expect when providing a ContactInfo line?
by Karsten Loesing 30 Sep '13

30 Sep '13

Hi bridge operators, Nick rightly suggests moving this discussion from Trac here: What do bridge operators expect when providing a ContactInfo line? Details are on Trac, pasting below: https://trac.torproject.org/projects/tor/ticket/9854 There's an interesting question in the Tor StackExchange beta: """ I'm guessing that a bridge uploads its ContactInfo to the bridge authority, so there's a point of contact for the Tor project. Is this information available to any other parties, i.e. users requesting bridges, or people randomly connecting to IP addresses looking for Tor installations? """ In practice, users of a bridge will be able to learn the bridge's ContactInfo line, because they download the bridge's descriptor. But Tor people will have a hard time to do that, because this line is removed from bridge descriptors in the sanitizing process. One needs access to the non-sanitized descriptors, which limits the set of people to maybe five. I don't remember a single time in the past couple of years when we tried to contact bridge operators using provided contact information. This is rather unexpected for bridge operators, I'd think. I guess most bridge operators would expect their contact information to be known to Tor project people and used for debugging only. Three options: 1. We conclude we don't need the contact line for bridges, because we wouldn't contact the bridge operator anyway. Bridges should remove that line from their descriptor before uploading. 2. We decide this information is important and that we should have it available more easily. We don't remove the ContactInfo line when we sanitize bridge descriptors. 3. We don't change anything, because everything's fine as it is. At least now we know this information is theoretically available to a few Tor people and definitely available to bridge users. Feel free to reply on the ticket. If you reply here (tor-relays@) and *don't* want me to paste your reply on the ticket, please mention that in your reply. Thanks! Karsten

1 0

Slow exit node over VPN
by Konstantinos Asimakis 29 Sep '13

29 Sep '13

Hello everyone. I am usually connecting to the internet through VPN (Mullvad). Would it make sense to setup an exit relay to run whenever I can? I can forward one or two ports to my machine. My IP may change often and I might have to shut down the node when I need the bandwidth for something else. Also the bandwidth won't be much. I expect 40KB/s upload on average with bursts to 70 or 80. Mullvad is obviously already receving a bazilion complaints about forum SPAM etc (thus I often find myself blocked from a few sites, having to solve captchas in many cases) so I guess they will see no diference. ----- My full signature with lots of links etc.<https://bittit.info/publicDro/signature.html>

3 5

(Re)Introduction
by Jonathan D. Proulx 29 Sep '13

29 Sep '13

Hi All, It's been quite a while since I've been active in TOR, but recent events have reminded me I should be doing more. To that end I've started running a Fast Exit again: racktor fingerprint: 8B7D6BFF6AE63BE39E438FE7A4249FEA1A340EBD This is running in the Rackspace public cloud (Chicago region) on my personal account. Next week I plan on looking into (re)starting an exit at my place of employ (will set MyFamily fo the nodes). That's mostly a practical issue of making sure I'm the one getting the complaints and not my coworkers... In the mean time I'm reading a lot and trying to catch up on the past few years of TOR news and development. -Jon

2 1

Relay bandwidth usage drop
by Jobiwan Kenobi 27 Sep '13

27 Sep '13

About 2 days ago, around midnight of September 20, bandwidth usage on my relay dropped from averaging a bit over 100KB/s to around 20KB/s. It's been low ever since. Consensus weight dropped accordingly. You can see on the graphs on atlas and globe. My relay is named jobiwan. There seems to be nothing wrong with my relay. Log is pretty clean and handshake and heartbeat reports indicate normal operation (just not much of it). From time to time I have bits of normal throughput. I have no indication that I'm being throttled or traffic shaped. Is there anything I should look into? Thanks, -Job

2 2

(no subject)
by ابوصالح 27 Sep '13

27 Sep '13

Android مرسل من الهاتف المحمول Samsung

2 1

. Re: Relay security, re: local network
by Harold Naparst 26 Sep '13

26 Sep '13

I have been running an exit relay from my home for many years with no issues. If you are willing to support the ideals of the Tor project, you should be willing to run an exit relay. Obviously, without exit relays, the Tor project would be useless. I am unable to surf to exactly one site that I know of, a hosting provider. I solved that problem by choosing another hosting provider, Amazon Web Services (AWS). If you are ever blocked, it is easy enough to rent another IP address at AWS for $7 per month by signing a one-year contract for a reserved micro-instance. Then run a squid server on that micro instance and use it as a proxy server. But as I said, this hasn't been a problem for me. Also, keep in mind that running an exit relay from your home will provide you with better anonymity. If you combine that with surfing using the Tor Browser bundle, you will have pretty good anonymity. (I read that once on the Tor project's site.) Regards, Harold

3 2

Which is more helpful, availability or speed?
by phoneyball＠vfemail.net 26 Sep '13

26 Sep '13

Hello all, If my relay is in a datacenter with a fast link but constrained by a in+out<100GByte monthly limit, is it more helpful to provide: * a slow relay that is usually available, e.g. 30KByte/sec available about two-thirds of the time, or: * a fast relay that hibernates a lot, e.g. 1MByte/sec but only available 1/50th of the time? Secondly, is it more helpful to be: * available every day for a fraction of that day, or: * available continuously for some consecutive days then hibernated for the rest of the month? Thanks for any advice. (I've read differing opinions on these questions written at different times, but haven't found a clear consensus.) P. Honeyball ------------------------------------------------- VFEmail.net - http://www.vfemail.net $24.95 ONETIME Lifetime accounts with Privacy Features! 15GB disk! No bandwidth quotas! Commercial and Bulk Mail Options!

3 2