- tor-relays - lists.torproject.org

control_auth_cookie problem
by mick 18 Jul '11

18 Jul '11

Hi Guys I use munin to monitor a bunch of stuff (including tor) on my servers. The long run munin stats are quite useful. I checked my stats today and noticed that there were no entries for tor on one machine going back a couple of weeks. Now I know I rebooted the machine in question about 12 days ago and I /think/ I upgraded tor at that time. Certainly the restart will have caused a regeneration of the cookie file anyway. Checking my logs, I see the following from munin: "Unable to connect to Tor ControlPort (515 Authentication failed: Wrong length on authentication cookie" and similarly in the tor log: " Got authentication cookie with wrong length (16)" Now I can see that the cookie file is 32 characters long, so I'm guessing that the file contains a control character that is screwing up the munin php plugin line "$cookie = file_get_contents($cookiepath);" Anyone else seen this before? Any ideas for fixing it? - short of restarting tor again (I've done that and I'm reluctant to keep on stopping and starting what should be a stable server), Thanks Mick --------------------------------------------------------------------- The text file for RFC 854 contains exactly 854 lines. Do you think there is any cosmic significance in this? Douglas E Comer - Internetworking with TCP/IP Volume 1 http://www.ietf.org/rfc/rfc854.txt ---------------------------------------------------------------------

2 1

DNAT question
by Softail 18 Jul '11

18 Jul '11

I'm trying to switch my ports from 9001/9030 to 443/80. The tor configuration seems straight forward. I tried /sbin/iptables --append INPUT --protocol tcp --match state --state NEW --destination a.b.c.d --dport 9001 --jump ACCEPT /sbin/iptables --append INPUT --protocol tcp --match state --state NEW --destination a.b.c.d --dport 9030 --jump ACCEPT /sbin/iptables --table nat --append PREROUTING --protocol tcp --source-port 443 --destination a.b.c.d --jump DNAT --to-destination :9001 /sbin/iptables --table nat --append PREROUTING --protocol tcp --source-port 80 --destination a.b.c.d --jump DNAT --to-destination :9030 but that doesn't seem to work. The OR and Dir ports are not reachable from the outside. I assumed that PREROUTING happened before INPUT but not really an expert on this. The firewall blocks everything else inbound to that address but the two ports I opened. Do I need to open 443/80 on the INPUT chain as well and if so do I also need to keep 9001/9030 open also? CentOS 5.6 if that matters. Thanks -- A man in chains knows he should have acted sooner... Julian Assange

2 4

How to set the path of tor control listener file?
by Klaus Layer 18 Jul '11

18 Jul '11

Hi all, I am running multiple tor instances on my relay server. All instances save the Control listener file to /var/run/tor/control. Therefore one instance overwrites the control listener file of the other. Is there a way to set the location where tor writes the control file as it can be done for PID file with parameter PidFile or authentication cookie file with parameter CookieAuthFile? Thanks, Klaus -- Klaus Layer Walldorf, Germany GPG Fingerprint: 466D 12F8 28A3 D137 A77E FC3B 271C 2D79 6F5E 94C9

2 1

Fwd: Arm 1.4.3 Release
by Damian Johnson 17 Jul '11

17 Jul '11

(especially relevant to relay operators...) Hi all. A new release of arm (http://www.atagar.com/arm/) is now available. This completes the codebase refactoring project that's been a year in the works and provides numerous performance, usability, and stability improvements... * Relay Setup Wizard Setting up a relay can be tricky for new users. In headless environments this means navigating Tor's massive, user unfriendly man page and even when Vidalia's an option it makes relatively poor exit configurations. Starting arm before Tor now provides instructions for auto-generating a good relay setup... a. Selection for what you'd like to be http://www.atagar.com/transfer/tmp/arm_wizard1.png b. Picking your relay options http://www.atagar.com/transfer/tmp/arm_wizard2.png c. Confirmation for the configuration it's making http://www.atagar.com/transfer/tmp/arm_wizard3.png * Menu Interface All of arm's capabilities are now available via a simple menu interface. http://www.atagar.com/transfer/tmp/arm_menu.png * Arm Gui Prototype Over this summer Kamran Khan has been working on a GTK frontend for arm as part of Google Summer of Code. The initial prototype is ready! http://inspirated.com/2011/06/28/summer-of-code-progress-graphs-logs-and-ac… * Performance Improvements Several arm and TorCtl performance fixes providing a 83% faster startup time, 12% lower memory usage, and instantaneous shutdown. * Improved Platform Support Vastly better support for Mac OSX. Arm has also been backported to Debian Squeeze and Ubuntu Lucid / Maverick. http://packages.debian.org/squeeze-backports/tor-arm https://bugs.launchpad.net/maverick-backports/+bug/721886 * ... etc Options for requesting a new identity, shutting down Tor, reconnecting if Tor's been restarted and many, many bugfixes. http://www.atagar.com/arm/releaseNotes.php#1.4.3 Cheers! -Damian

1 0

CPU utilization for relay
by swsnyder＠snydernet.net 15 Jul '11

15 Jul '11

FYI, this is a profile of my Tor v0.2.2.30-rc relay, taken in a 10-minute sampling: CPU: CPU with timer interrupt, speed 0 MHz (estimated) Profiling through timer interrupt samples % linenr info symbol name 3126 29.7290 cast-586.s:9 CAST_encrypt 1677 15.9486 sha256-586.s:8 sha256_block_data_order 1149 10.9272 aes-586.s:424 _x86_AES_encrypt 844 8.0266 sha1-586.s:8 sha1_block_data_order 273 2.5963 crypto.c:1649 crypto_digest_get_digest 221 2.1018 md32_common.h:283 SHA1_Update 182 1.7309 encode.c:190 EVP_EncodeBlock 171 1.6262 OpenBSD_malloc_Linux.c:1793 ifree 136 1.2934 cast-586.s:379 CAST_decrypt 130 1.2363 md32_common.h:348 SHA1_Final 127 1.2078 obj_lib.c:66 OBJ_dup 122 1.1602 memarea.c:221 memarea_alloc 110 1.0461 aes-586.s:1610 _x86_AES_decrypt After running for 14 hours, the Tor relay has consumed 1.6% of CPU time. It is now using 45MB of RAM, servicing 112 active connections. According to http://torstatus.blutmagie.de my Max/Burst/Observed (Bps) bandwidth is: 153600 / 307200 / 127170 Environment: CPU: Pentium-M (Dothan) @ 1.80 GHz RAM: 1.0 GB DDR1 Net: Fast Ethernet connected to a Surfboard cable modem CentOS v5.6 Tor v0.2.2.30-rc libevent 2.0.12-stable openssl 1.0.0d zlib 1.2.5 glibc 2.5-58 Just another data point.

1 0

Setting up a relay
by Lalle Bralle 12 Jul '11

12 Jul '11

Anyone that has a very specific guide available to setting up a relay? I was thinking of doing this since I'm a firm believer in anonymity, I use TOR myself so might as well help the network and I have decent internet connection that is quite unused most of the time (100 Mbps down/10Mbps up). I was trying to follow up on that help section on the official site but it wasn't enough. There's a possibility the relay didn't work because of my router but I have opened the rights ports, tested by putting some limits and just testing some settings but not avail.

6 7

Bandwidth
by Tomas Sironi 07 Jul '11

07 Jul '11

Hi people. In the Tor manual, the next options are specified: * * * - BandwidthRate* - RelayBandwidthRate However i don't get to see the difference between those two. I imagined the first one is the bandwidth of tor being a client, and the second for the relay (server). But then i read this in the *BandwidthRate* description, breaking my previous supposition: ... If you want to run a relay in the public network, this needs to be *at > the very least* 20 KB ... I know those options limit the bandwidth but i don't know exactly which affects what. I'm running my Tor as client and relay, so i'm a little bit confused. Can anyone explain that for me? Thanks!

2 2

Relay Seccurity
by Tomas Sironi 05 Jul '11

05 Jul '11

Hi people. I'm new with Tor and i'm very interested in this project. I'm now being a relay, only acting as middleman (no exits). I would like to contribute more by having some services as exit. However i'm concerned about security. The machine i'm running as a relay is a pc in my home. From it, i have access to my router's web interface. The problem if i act as a exit for the port 80, would be that anyone can log into (or try to) my home router just by pointing to its ip address. Am i right? I've thought about using iptables to block outgoing connection from the relay to my router using iptables -A OUTPUT -d 192.168.15.1 -j DROP Not sure that's the correct line to do that. It blocks ping requests but i still can access the web interface of my router from that pc. Can anyone help me here? Thanks.

4 4

TOR on webOS?
by Bruno Kitzis 05 Jul '11

05 Jul '11

Good evening, I was wondering if TOR can be installed on WebOS? I was wondering because the OS family of webOS is Linux and TOR can be installed on LInux. But on your website it's written that TOR can only be installed on Android, iPhone and Maemo. Thanks a lot for your answer. Bruno Kitzis.

1 0

Registration for tor relay list
by Chris Boyd 03 Jul '11

03 Jul '11

thanks!

1 0