- tor-relays - lists.torproject.org

In which countries are relays needed, disallowed?
by Steve Snyder 25 Nov '11

25 Nov '11

I tried to set up a Tor relay in the UK today and was told that UK law prohibited anonymous Internet traffic. My tentative UK ISP told me that they must be able to provide identification of users if presented with a court order. Hmmm... The topic of country-specific conditions raises 2 questions in my mind: 1. Does the Tor Project keep a list of Tor-hostile countries? I understand that such a list over time would vary in reliability, but it would be nice to know. 2. Given the ability to set up a Tor relay in any political jurisdiction, which ones would be recommended? I'm thinking of both local political conditions and the distribution of relays from a topological perspective. I'm inclined to want a non-US relay because the highest bandwith relays locations are skewed toward the US, which biases the Tor traffic though that jurisdiction. (Today's Tor Metrics report shows 17.55% of traffic coming from the US.) Is this a reasonable approach? Thanks.

6 6

could not access my own hidden service
by cmeclax-sazri 21 Nov '11

21 Nov '11

I run Torchat and Onioncat. For at least an hour last night, my Torchat showed that I was not online, but someone else was, implying that he could see me online. I have a laptop which also has Tor, but it's just a client. I verified with Onioncat that two hidden services on the same box could not contact each other, but the laptop could contact both of them. The relay is running 0.2.2.34; the laptop is running 0.2.1.30. My Torchat now sees that I'm online, without having restarted Tor. What could cause this? cmeclax

2 1

exit atlgonyovLi
by Geoff Down 11 Nov '11

11 Nov '11

Will the owner of exit atlgonyovLi please turn off OpenDNS site blocking. -- http://www.fastmail.fm - Or how I learned to stop worrying and love email again

2 2

Middleman/guard nodes raided in the Netherlands
by David 10 Nov '11

10 Nov '11

I just wanted to let everyone know that my two Tor nodes have been raided (+all my computer equipment and everything that could store data). I'm not sure what triggered all this unwanted attention, but I suspect that it's the local police department trying to make a score after tor getting some media attention. It doesn't look to be a very 'high-tech' operation because I got a call asking me for the root password to the tor servers that are on unencrypted disks... Let this be a warning to everyone running middlemans in the Netherlands, I found out the hard way. Nicknames of the servers where AIVD and MIVD, no clue what the public key was. But consider them compromised. Best regards, David

8 10

v3 directory
by Sebastian Urbach 08 Nov '11

08 Nov '11

Hi, Does anybody run a v3 directory relay ? I read about a long term key in the documentation. Are there any others things to consider ? I would be happy if somebody would share his config :-) Thanks -- Mit freundlichen Grüßen / Yours sincerely Sebastian Urbach -------------------------------------------------------- Religion is something left over from the infancy of our intelligence, it will fade away as we adopt reason and science as our guidelines. -------------------------------------------------------- Bertrand Arthur William Russell (1872-1970), British philosopher, logician, mathematician, historian, and social critic.

1 0

Re: [tor-relays] bad validity timestamps on authority certificates
by Scott Bennett 05 Nov '11

05 Nov '11

On Sat, 5 Nov 2011 02:14:43 -0400 Roger Dingledine <arma(a)mit.edu> wrote: >On Fri, Nov 04, 2011 at 06:06:41PM -0500, Scott Bennett wrote: >> Nov 04 15:51:00.273 [warn] Certificate not yet valid: is your system clock set incorrectly? >> Nov 04 15:51:00.274 [warn] (certificate lifetime runs from Nov 5 04:26:47 2011 GMT through Nov 4 04:26:47 2012 GMT. Your time is Nov 04 20:51:00 2011 GMT.) >[snip] >> My system's clock gets adjusted to the network timeservers' values once per >> hour. I've checked the logs and found that the each adjustment has been less >> than 71 ms during this time. >> So the question is why are the authorities putting out new certificates >> with valid time periods beginning six or more hours in the future? Also, when >> will the authorities be corrected? > >These aren't directory authorities. These are just random relays that >you're connecting to who have clocks more than an hour off, and an >over-active log message. Oh, okay. I had thought that only the authorities passed out "certificates", which then got stored into cached-certs. I didn't know that just any old relay could do so, too. > >See >https://trac.torproject.org/projects/tor/ticket/4370 >https://trac.torproject.org/projects/tor/ticket/4371 Thanks for the explanation, Roger. BTW, those messages seem to have stopped a few hours ago. > >This is the alpha Tor, with a shiny new (and still somewhat >sharp-around-the-edges) v3 link handshake. I'm glad this one doesn't >crash, like the last one did. :) > Yup. After seeing the notes about that bug, I just waited an extra day or two to upgrade, skipping 0.2.3.6-alpha and going straight to 0.2.3.7-alpha when it became available. :-) Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at cs.niu.edu * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************

1 0

bad validity timestamps on authority certificates
by Scott Bennett 05 Nov '11

05 Nov '11

For the last day or so, my relay has been logging messages like these: Nov 04 15:51:00.273 [warn] Certificate not yet valid: is your system clock set incorrectly? Nov 04 15:51:00.274 [warn] (certificate lifetime runs from Nov 5 04:26:47 2011 GMT through Nov 4 04:26:47 2012 GMT. Your time is Nov 04 20:51:00 2011 GMT.) Nov 04 17:28:37.359 [warn] Certificate not yet valid: is your system clock set incorrectly? Nov 04 17:28:37.361 [warn] (certificate lifetime runs from Nov 5 06:26:47 2011 GMT through Nov 4 06:26:47 2012 GMT. Your time is Nov 04 22:28:37 2011 GMT.) Nov 04 17:56:47.782 [warn] Certificate not yet valid: is your system clock set incorrectly? Nov 04 17:56:47.782 [warn] (certificate lifetime runs from Nov 5 06:26:47 2011 GMT through Nov 4 06:26:47 2012 GMT. Your time is Nov 04 22:56:47 2011 GMT.) My system's clock gets adjusted to the network timeservers' values once per hour. I've checked the logs and found that the each adjustment has been less than 71 ms during this time. So the question is why are the authorities putting out new certificates with valid time periods beginning six or more hours in the future? Also, when will the authorities be corrected? Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at cs.niu.edu * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************

2 1

TOR notice.log is spammed with "Certificate not yet valid" warnings
by Klaus Layer 03 Nov '11

03 Nov '11

Hi, since 0.2.3.6-alpha the logs of my instances are full of these messages: 14:56:23 [WARN] (certificate lifetime runs from Nov 3 16:15:34 2011 GMT through Nov 2 16:15:34 2012 GMT. Your time is Nov 03 13:56:23 2011 GMT.) 14:56:23 [WARN] Certificate not yet valid: is your system clock set incorrectly? Any idea how I can get rid off these warnings? Best regards, Klaus

3 3

ARM: Client locales on connections page
by Klaus Layer 23 Oct '11

23 Oct '11

Hi, I recently found the "Client locales" function on the connection page of ARM. What exactly is the number behind the country code: ir 223334 (%13) us 188412 (%11) │ it 133819 (%8 ) │ de 121516 (%7 ) │ kr 102462 (%6 ) Thanks, Klaus

2 2

TBB on same system as relay?
by Rick Huebner 21 Oct '11

21 Oct '11

I run a relay 24/7, but sometimes also want to use Tor myself as a client. Until now, I've been using the Tor Button in my normal Firefox browser to switch in and out of Tor mode as needed, but now I see that going forward, the standalone Tor Browser Bundle is the only recommended way of using Tor as a client. How can I run the TBB on my system without interfering with my relay? When I just tried it now, the TBB brought up a second Vidalia instance which then tried to command my relay's existing Tor instance instead of spawning a second one for itself. This caused it to prompt for the relay's command interface password, but I cancelled out since I suspect that allowing the TBB to interfere with my relay's Tor process would lead to Bad Things, e.g. reconfiguring its options on the fly to a client-mode config and dropping all my users. So... how do relay operators use Tor themselves, if they can't run TBB? Or is there a way to configure them to live safely together? Or have I misinterpreted the new TBB focus, and the relay bundles will continue to support use as a client in the future as they do now? I'm using Windows 7 if that matters, but I doubt it.

4 4