- tor-relays - lists.torproject.org

ORPort NoListen
by Sina Eetezadi 11 Mar '13

11 Mar '13

Hi! I want to have port 443 advertised but listen on port 9001. My router then forwards 443->9001 to the machine tor is running on. It works with this: ORport 433 ORListenAddress 0.0.0.0:9001 However I thought this is deprecated and I rather use: ORport 443 NoListen ORPort 0.0.0.0:9001 NoAdvertise The latter however does not seem to work. Arm for example still errors "binding failed" and I see no incoming connections. Is this a bug? Thanks. SE

2 4

relay exposed?
by eliaz 09 Mar '13

09 Mar '13

So, some hours ago I noticed a circuit on the network map consisting of a relay in my own country, another one 11,000 km away, and - surprise - my own bridge relay. Can this be so? I thought that bridges, though published, are anonymous. My TBB configuration seems fine, it's what I've used in previous implementations. The only difference I've written into torrc for this run is SocksPort auto. The bandwidth rates seeming way higher than should be allotted to my bridge (10485760 & 5242880, rather than the 196608 & 98304 of previous runs), I checked my bandwidth-limit setting and found that I had inadvertently chosen > 1.5 Mpbs instead of 1.5 Mpbs (but as I'd noted to myself previously, the higher setting doesn't seem to matter, except maybe to improve performance a bit). The relays_ published output is as usual (not that I'd be likely to recognize anything amiss in that report). One other thing that may be pertinent and which I've wanted to ask about for a long time is this: I occasionally for convenience run my open browser from the same vista machine on which I'm running the TBB at the same time. Is this bad practice, and could it have been the reason that the bridge nickname showed in the network map? - eli gpg: 0xE498E90D

1 0

DynDNS and TOR bridge
by Sina Eetezadi 06 Mar '13

06 Mar '13

Hi, I have a bridge running and since my ISP is changing my IP at least daily, I thought it might be a good idea to set my DynDNS in the torrc file. Is it a good idea? How do I set that? Thank you. Sina

5 8

Recommended specifications for 1Gbps exit
by Matt Joyce 05 Mar '13

05 Mar '13

I am wondering if anyone with experience in this area could advise me some on recommended specifications for a 1Gbps exit I think my latest once needs a package upgrade to handle it, currently seems stuck at around 100Mbps worth of traffic. Currently it has access to 3 v cores @1.33Ghz and 1GB of RAM and I think the latter might be becoming the limit instead now I had thought it was the CPU when it had just the one core but that alone hasn't helped. I am not entirely sure if tor is infact using the other cores though watching with top it is sitting at 100 or a fraction over like 104% or so. MaxCPU's is set in torrc to 4 as the OS sees 4 virtual cores but is capped to 300% by the hypervisor perhaps it should be set to 3 not sure if there is any benefit in setting to 4 I have limited experience with virtual servers but unfortunately a fully dedicated server for tor is financially out of my budget at the moment. Also, just to confirm while I'm aware it's very possible that the limitation could be bandwidth given it shares with the other VPS'es on the host I don't believe that was the case, I pulled a backup from there to another server of mine on a different AS and continent and it transferred at 250Mbps while tor was running at 100Mbps the entire time, so unless the contention is over the download which seems less likely for a server I think we should be able to get a good 300Mbps of exit capacity out of this possibly more. So can anyone can advise on recommended CPU, RAM have to consider budget but will try and meet them, also if there are any settings I should check in torrc?

5 9

[ANNOUNCE] check_tor.py: a Nagios check for Tor relays
by Jérémy Bobbio 26 Feb '13

26 Feb '13

Hi! I hereby announce the first release of check_tor.py. It is meant to be used with Nagios (or a similar tool with a compatible interface) in order to check if a bridge, entry node, middle node or exit node is working as intended. check_tor.py is a Python script that relies on Stem [1] to control a dedicated Tor instance in order to perform its checks. For more documentation, please refer to the README at: <http://anonscm.debian.org/gitweb/?p=users/lunar/check_tor.git;a=blob;f=READ…> Download through Git: $ git clone git://anonscm.debian.org/users/lunar/check_tor.git $ cd check_tor && git tag -v 0.1 Browse using gitweb at: <http://anonscm.debian.org/gitweb/?p=users/lunar/check_tor.git> check_tor.py is licensed under GPLv3+. Contributions are highly welcome. [1] https://stem.readthedocs.org/ -- Jérémy Bobbio .''`. lunar(a)debian.org : :Ⓐ : # apt-get install anarchism `. `'` `-

2 2

Google Groups Exit Policy Reject?
by Jonathan Baker-Bates 25 Feb '13

25 Feb '13

Hi All, I've been forwarded a request to block Google Groups IPs due to some abuse or various usenet groups. Is anyone else rejecting from these IPs, and should I do the same? Thanks, Jonathan

4 5

US Investigators seem to learn
by Moritz Bartl 22 Feb '13

22 Feb '13

Hi, I thought I would let you know: Our US hoster is regularly contacted by law enforcement about our exits there. Some agents ask if the traffic pattern is balanced, ie. if the same amount of traffic enters and leaves the box. I always argue that this is a good indicator for Tor traffic, and that it is bad to mix Tor traffic with other traffic for that exact reason. -- Moritz Bartl https://www.torservers.net/

7 9

Problems with Debian package and low ports
by Chris Baines 14 Feb '13

14 Feb '13

I am having some problems with tor (version 0.2.3.25-1), I get warnings when it resumes form hibernation: Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 Can anyone help?

11 11

Re: [tor-relays] Problems with Debian package and low ports (Chris Baines)
by Christian 14 Feb '13

14 Feb '13

Good night Chris, I hope I don't misunderstand your issue, but if you use hibernation, you use a kind of desktop setup, aren't you? If port forwarding running a firewall and tor on the same machine (that's hibernating) behind a normal router looks tricky by means to verify the config, see my suggestion. If my assumption is correct, you have to set port forwarding in your router, say port 443 to 9090, and then use the torrc file to let tor listen on port 9090, but to advertise port 443. This makes tor bind to a higher port than 1024 and thus not needing root privileges if you run tor as the default user debian-tor, but lets your machine be available on port 443 although hibernating might be a bad idea for a tor node. ;-) If you use a home ISP with small bandwidth, maybe you'd better be a bridge (sufficient uptime also appreciated). I hope this could help. Sincerly, christian Am Mittwoch, den 13.02.2013, 19:35 +0000 schrieb tor-relays-request(a)lists.torproject.org: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Problems with Debian package and low ports (Chris Baines) > 2. Re: Problems with Debian package and low ports (Wessel Nieboer) > 3. Re: Problems with Debian package and low ports (Nils Vogels) > 4. Re: Problems with Debian package and low ports (theo(a)caber.nl) > 5. Re: Problems with Debian package and low ports (Roman Mamedov) > 6. Re: Problems with Debian package and low ports > (Christopher Baines) > 7. Re: Problems with Debian package and low ports > (Christopher Baines) > 8. Re: Problems with Debian package and low ports (Roger Dingledine) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 13 Feb 2013 16:41:54 +0000 > From: Chris Baines <cbaines8(a)gmail.com> > To: tor-relays <tor-relays(a)lists.torproject.org> > Subject: [tor-relays] Problems with Debian package and low ports > Message-ID: > <CAGGGvRs=FYNeKX9_7Ymyn1k2r1xPL1qv11BDGVABgmyDMqA9ZQ(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > I am having some problems with tor (version 0.2.3.25-1), I get > warnings when it resumes form hibernation: > Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied > Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 > > Can anyone help? > > > ------------------------------ > > Message: 2 > Date: Wed, 13 Feb 2013 17:44:02 +0100 > From: Wessel Nieboer <weebl(a)weebl.me> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] Problems with Debian package and low ports > Message-ID: <511BC2D2.40507(a)weebl.me> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Op 13-2-2013 17:41, Chris Baines schreef: > > I am having some problems with tor (version 0.2.3.25-1), I get > > warnings when it resumes form hibernation: > > Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied > > Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 > > > > Can anyone help? > > _______________________________________________ > > tor-relays mailing list > > tor-relays(a)lists.torproject.org > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > Does it work when you've just booted your computer? > > -Wessel > > > ------------------------------ > > Message: 3 > Date: Wed, 13 Feb 2013 18:07:53 +0100 > From: Nils Vogels <bacardicoke(a)gmail.com> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] Problems with Debian package and low ports > Message-ID: > <CAEM+PCU-0xVPEA+H2cMBZCeTgJwhAcWqG7N2Ve567t_sbdrGEw(a)mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > Tor has already changed to a non-privileged user, but you are trying to > bind on ports that only root is allowed to bind on. > > Two solutions: > > 1) Run tor as root (really, a bad idea) > 2) Bind to other ports than 80 and 443. Since you are resuming, you are > unlikely to be a stable relay/exit/bridge anyway, so you can basically > choose any port you want and just use it for your own traffic only. > > On Wed, Feb 13, 2013 at 5:41 PM, Chris Baines <cbaines8(a)gmail.com> wrote: > > > I am having some problems with tor (version 0.2.3.25-1), I get > > warnings when it resumes form hibernation: > > Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied > > Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 > > > > Can anyone help? > > _______________________________________________ > > tor-relays mailing list > > tor-relays(a)lists.torproject.org > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > > > > > -- > Simple guidelines to happiness: > Work like you don't need the money, > Love like your heart has never been broken and > Dance like no one can see you. >

1 0

Re: [tor-relays] [tor-talk] Legal problems: TOR relay & Torrents in .de
by grarpamp 11 Feb '13

11 Feb '13

> I've snail-mailed them a letter based on what Moritz had posted. They > replied with a standardized letter without even commenting on my > statements. It's basically saying "Last chance to pay or we'll go to > court." > > So I'm a little unsure whether or not it's now time to actually > consult a lawyer or wait until FOX makes it's next move. I believe what some others were saying is to simply ignore any initial complaints that come in which appear to be automated or are in some way not sufficiently personalized, lacking in real data, or stamped by a court. Just because someone complains from getting emailspam or can scrape peers off a tracker could just be a courtesy or idle probe. If such first notices bother you, sure, have an initial consult with a lawyer for potential future engagement if needed. But now that you have snailmailed them, it is raised on different level. One for which some would surely say a five minute chat with a prospective lawyer is wise. Also, if other people on the list get such first notices and don't know what to do with them, redacting any identifying material and posting the remaining full text [from an anonymous account if prudent to further avoid confirmation] would let others get a sense of what is out there and offer any experience. Just saying 'I got a mail about filesharing from my node and I mailed them back' doesn't help the poster or others. Then again, we're not lawyers, consult a real one as needed.

1 0