- tor-relays - lists.torproject.org

Odd activity on my rely
by George Gemelos 19 Jul '11

19 Jul '11

I'm running an exit node, yreka and have noticed as single IP address that has been connected for at least a day, probably longer, which is pushing anywhere from 3Mb to 9Mb but receives very little traffic back from my node, sub 500Kb. My traffic to this machine is going out of 443 (my ORPort) and being sent to port 50090 on the other machine. I only allow exit traffic to ports 80 and 443. So I do not think this is exit traffic. I have also checked on blutmagie and could not find the IP as a relay which would suggest that this is a TOR user and I am serving as an entry node. I have never seen such speeds for a single user. The one sided nature of the traffic and its size have my interests peaked. I just wanted to verify that this is not unusual and something that I should investigating. I did not include the IP address of the machine because I was not sure it would be in the spirit of TOR to post such information. Any feedback would be greatly appreciated.

4 8

Seeking headless TAILS (or similar)
by Steve Snyder 19 Jul '11

19 Jul '11

I'm looking for a Tor installation that boots off of read-only media and acts as a relay, sort of a TAILS but without the user-space applications. Does such a thing exist? Thanks.

2 2

control_auth_cookie problem
by mick 18 Jul '11

18 Jul '11

Hi Guys I use munin to monitor a bunch of stuff (including tor) on my servers. The long run munin stats are quite useful. I checked my stats today and noticed that there were no entries for tor on one machine going back a couple of weeks. Now I know I rebooted the machine in question about 12 days ago and I /think/ I upgraded tor at that time. Certainly the restart will have caused a regeneration of the cookie file anyway. Checking my logs, I see the following from munin: "Unable to connect to Tor ControlPort (515 Authentication failed: Wrong length on authentication cookie" and similarly in the tor log: " Got authentication cookie with wrong length (16)" Now I can see that the cookie file is 32 characters long, so I'm guessing that the file contains a control character that is screwing up the munin php plugin line "$cookie = file_get_contents($cookiepath);" Anyone else seen this before? Any ideas for fixing it? - short of restarting tor again (I've done that and I'm reluctant to keep on stopping and starting what should be a stable server), Thanks Mick --------------------------------------------------------------------- The text file for RFC 854 contains exactly 854 lines. Do you think there is any cosmic significance in this? Douglas E Comer - Internetworking with TCP/IP Volume 1 http://www.ietf.org/rfc/rfc854.txt ---------------------------------------------------------------------

2 1

DNAT question
by Softail 18 Jul '11

18 Jul '11

I'm trying to switch my ports from 9001/9030 to 443/80. The tor configuration seems straight forward. I tried /sbin/iptables --append INPUT --protocol tcp --match state --state NEW --destination a.b.c.d --dport 9001 --jump ACCEPT /sbin/iptables --append INPUT --protocol tcp --match state --state NEW --destination a.b.c.d --dport 9030 --jump ACCEPT /sbin/iptables --table nat --append PREROUTING --protocol tcp --source-port 443 --destination a.b.c.d --jump DNAT --to-destination :9001 /sbin/iptables --table nat --append PREROUTING --protocol tcp --source-port 80 --destination a.b.c.d --jump DNAT --to-destination :9030 but that doesn't seem to work. The OR and Dir ports are not reachable from the outside. I assumed that PREROUTING happened before INPUT but not really an expert on this. The firewall blocks everything else inbound to that address but the two ports I opened. Do I need to open 443/80 on the INPUT chain as well and if so do I also need to keep 9001/9030 open also? CentOS 5.6 if that matters. Thanks -- A man in chains knows he should have acted sooner... Julian Assange

2 4

How to set the path of tor control listener file?
by Klaus Layer 18 Jul '11

18 Jul '11

Hi all, I am running multiple tor instances on my relay server. All instances save the Control listener file to /var/run/tor/control. Therefore one instance overwrites the control listener file of the other. Is there a way to set the location where tor writes the control file as it can be done for PID file with parameter PidFile or authentication cookie file with parameter CookieAuthFile? Thanks, Klaus -- Klaus Layer Walldorf, Germany GPG Fingerprint: 466D 12F8 28A3 D137 A77E FC3B 271C 2D79 6F5E 94C9

2 1

Fwd: Arm 1.4.3 Release
by Damian Johnson 17 Jul '11

17 Jul '11

(especially relevant to relay operators...) Hi all. A new release of arm (http://www.atagar.com/arm/) is now available. This completes the codebase refactoring project that's been a year in the works and provides numerous performance, usability, and stability improvements... * Relay Setup Wizard Setting up a relay can be tricky for new users. In headless environments this means navigating Tor's massive, user unfriendly man page and even when Vidalia's an option it makes relatively poor exit configurations. Starting arm before Tor now provides instructions for auto-generating a good relay setup... a. Selection for what you'd like to be http://www.atagar.com/transfer/tmp/arm_wizard1.png b. Picking your relay options http://www.atagar.com/transfer/tmp/arm_wizard2.png c. Confirmation for the configuration it's making http://www.atagar.com/transfer/tmp/arm_wizard3.png * Menu Interface All of arm's capabilities are now available via a simple menu interface. http://www.atagar.com/transfer/tmp/arm_menu.png * Arm Gui Prototype Over this summer Kamran Khan has been working on a GTK frontend for arm as part of Google Summer of Code. The initial prototype is ready! http://inspirated.com/2011/06/28/summer-of-code-progress-graphs-logs-and-ac… * Performance Improvements Several arm and TorCtl performance fixes providing a 83% faster startup time, 12% lower memory usage, and instantaneous shutdown. * Improved Platform Support Vastly better support for Mac OSX. Arm has also been backported to Debian Squeeze and Ubuntu Lucid / Maverick. http://packages.debian.org/squeeze-backports/tor-arm https://bugs.launchpad.net/maverick-backports/+bug/721886 * ... etc Options for requesting a new identity, shutting down Tor, reconnecting if Tor's been restarted and many, many bugfixes. http://www.atagar.com/arm/releaseNotes.php#1.4.3 Cheers! -Damian

1 0

CPU utilization for relay
by swsnyder＠snydernet.net 15 Jul '11

15 Jul '11

FYI, this is a profile of my Tor v0.2.2.30-rc relay, taken in a 10-minute sampling: CPU: CPU with timer interrupt, speed 0 MHz (estimated) Profiling through timer interrupt samples % linenr info symbol name 3126 29.7290 cast-586.s:9 CAST_encrypt 1677 15.9486 sha256-586.s:8 sha256_block_data_order 1149 10.9272 aes-586.s:424 _x86_AES_encrypt 844 8.0266 sha1-586.s:8 sha1_block_data_order 273 2.5963 crypto.c:1649 crypto_digest_get_digest 221 2.1018 md32_common.h:283 SHA1_Update 182 1.7309 encode.c:190 EVP_EncodeBlock 171 1.6262 OpenBSD_malloc_Linux.c:1793 ifree 136 1.2934 cast-586.s:379 CAST_decrypt 130 1.2363 md32_common.h:348 SHA1_Final 127 1.2078 obj_lib.c:66 OBJ_dup 122 1.1602 memarea.c:221 memarea_alloc 110 1.0461 aes-586.s:1610 _x86_AES_decrypt After running for 14 hours, the Tor relay has consumed 1.6% of CPU time. It is now using 45MB of RAM, servicing 112 active connections. According to http://torstatus.blutmagie.de my Max/Burst/Observed (Bps) bandwidth is: 153600 / 307200 / 127170 Environment: CPU: Pentium-M (Dothan) @ 1.80 GHz RAM: 1.0 GB DDR1 Net: Fast Ethernet connected to a Surfboard cable modem CentOS v5.6 Tor v0.2.2.30-rc libevent 2.0.12-stable openssl 1.0.0d zlib 1.2.5 glibc 2.5-58 Just another data point.

1 0

Setting up a relay
by Lalle Bralle 12 Jul '11

12 Jul '11

Anyone that has a very specific guide available to setting up a relay? I was thinking of doing this since I'm a firm believer in anonymity, I use TOR myself so might as well help the network and I have decent internet connection that is quite unused most of the time (100 Mbps down/10Mbps up). I was trying to follow up on that help section on the official site but it wasn't enough. There's a possibility the relay didn't work because of my router but I have opened the rights ports, tested by putting some limits and just testing some settings but not avail.

6 7

Bandwidth
by Tomas Sironi 07 Jul '11

07 Jul '11

Hi people. In the Tor manual, the next options are specified: * * * - BandwidthRate* - RelayBandwidthRate However i don't get to see the difference between those two. I imagined the first one is the bandwidth of tor being a client, and the second for the relay (server). But then i read this in the *BandwidthRate* description, breaking my previous supposition: ... If you want to run a relay in the public network, this needs to be *at > the very least* 20 KB ... I know those options limit the bandwidth but i don't know exactly which affects what. I'm running my Tor as client and relay, so i'm a little bit confused. Can anyone explain that for me? Thanks!

2 2

Relay Seccurity
by Tomas Sironi 05 Jul '11

05 Jul '11

Hi people. I'm new with Tor and i'm very interested in this project. I'm now being a relay, only acting as middleman (no exits). I would like to contribute more by having some services as exit. However i'm concerned about security. The machine i'm running as a relay is a pc in my home. From it, i have access to my router's web interface. The problem if i act as a exit for the port 80, would be that anyone can log into (or try to) my home router just by pointing to its ip address. Am i right? I've thought about using iptables to block outgoing connection from the relay to my router using iptables -A OUTPUT -d 192.168.15.1 -j DROP Not sure that's the correct line to do that. It blocks ping requests but i still can access the web interface of my router from that pc. Can anyone help me here? Thanks.

4 4