- tor-relays - lists.torproject.org

Log message
by Zakwan Kalb 24 Jun '21

24 Jun '21

Hi, I have an issue: a day after I start my relay I get a bunch of error messages from Tor. Here is an example: http status 400 ("Fingerprint and/or ed25519 identity is marked rejected -- if you think this is a mistake please set a valid email address in ContactInfo and send an email to bad-relays(a)lists.torproject.org mentioning your fingerprint(s)?") response from dirserver 204.13.164.118:80. Please correct. Did anyone have the same issue?

3 5

Verify my Relay
by S1l3nt Hash 24 Jun '21

24 Jun '21

Hello, I wanted to do my part in helping the TOR network grow, so I've started a tor relay on a debian system. After running for a while and monitoring on Nyx, and checking Relay Search I've notice my link says "Offline". Just wanted to know if there is a way to confirm working status, apologies in advance as I'm quite new to this. Torrc Nickname **** SocksPort 0 RunAsDaemon 1 Address xxx.xxx.xxx.xxx (static public ip) DirPort 9030 NoAdvertise DirPort xxx.xxx.xxx.xxx:9030 NoListen (static public ip) ORPort 9001 NoAdvertise ORPort xxx.xxx.xxx.xxx:9001 NoListen (static public ip) ContactInfo (my email) Log notice file /var/log/tor/notices.log ExitPolicy reject6 *:*, reject *:* RelayBandwidthRate 16777216 RelayBandwidthBurst 16777216 DisableDebuggerAttachment 0 ControlPort 9051 CookieAuthentication 1 CookieAuthFile /var/lib/tor/control_auth_cookie CookieAuthFileGroupReadable 1 DataDirectoryGroupReadable 1 HashedControlPassword *** Also configured Port Forwarding on my router for 9001 and 9030 to the private IPv4 address on the tor relay. Confirmed with my ISP no ports are being blocked. When I first started I had the confirmation MSG that DirPort could be reached, and have active incoming and outing connections. Now currently only have several outgoing connections. Was at one stage appearing "Online" on Relay Search, now "Offline" Currently have: [NOTICE] No circuits are opened. Relaxed timeout for circuit *** (a Testing circuit 3-hop circuit in state doing handshakes with channel state open) to 60000ms. However, it appears the circuit has timed out anyway. [1 similar message(s) suppressed in last 7740 seconds] Have not configured 9001 and 9030 to open in linux, are they by default? Thanks in advance for any help and knowledge, looking forward to helping. Hash.

4 3

Bad relay mark
by Zakwan Kalb 23 Jun '21

23 Jun '21

Please email me (kalbzakwan(a)gmail.com) if your relay was marked as bad relay. There is something suspicious happening, I would like to discuss it.

1 0

Torweather is still alive or back ;-)
by lists＠for-privacy.net 21 Jun '21

21 Jun '21

Damn cool, I was surprised when I got mail from torweather.org. (Some IPv6 addresses were down and I didn't notice.) And you can adjust your delivery frequency. Relay down since 3, 12, 24, 48 Hours or 1 Week. https://github.com/thingless/torweather Hint: You must have a working mail address in torrc contact info for it. -- ╰_╯ Ciao Marco! Debian GNU/Linux It's free software and it gives you freedom!

1 0

tor fails on start-up after yum update
by Eddie 20 Jun '21

20 Jun '21

Running a CentOS 7.9 system, pulling tor updates from https://rpm.torproject.org/centos/$releasever/$basearch The last 2 times that tor has been yum updated, the restart of the service has just stopped, at exactly the same point: Jun 18 06:46:50.000 [notice] Tor 0.4.6.5 opening log file. Jun 18 06:46:50.830 [notice] We compiled with OpenSSL 100020bf: OpenSSL 1.0.2k 26 Jan 2017 and we are running with OpenSSL 100020bf: 1.0.2k-fips. These two versions should be binary compatible. Jun 18 06:46:50.831 [notice] Tor 0.4.6.5 running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.2k-fips, Zlib 1.2.7, Liblzma 5.2.2, Libzstd 1.5.0 and Glibc 2.17 as libc. Jun 18 06:46:50.831 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning Jun 18 06:46:50.831 [notice] Read configuration file "/usr/share/tor/defaults-torrc". Jun 18 06:46:50.831 [notice] Read configuration file "/etc/tor/torrc". Jun 18 06:46:50.833 [notice] Based on detected system memory, MaxMemInQueues is set to 6342 MB. You can override this by setting MaxMemInQueues by hand. Jun 18 06:46:50.833 [notice] You configured a non-loopback address '192.168.0.254:9100' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. Jun 18 06:46:50.833 [notice] Opening Socks listener on 192.168.0.254:9100 Jun 18 06:46:50.833 [notice] Opened Socks listener connection (ready) on 192.168.0.254:9100 Jun 18 06:46:50.833 [notice] Opening Control listener on 127.0.0.1:9051 Jun 18 06:46:50.833 [notice] Opened Control listener connection (ready) on 127.0.0.1:9051 Jun 18 06:46:50.833 [notice] Opening OR listener on 0.0.0.0:9001 Jun 18 06:46:50.834 [notice] Opened OR listener connection (ready) on 0.0.0.0:9001 Jun 18 06:46:50.834 [notice] Opening Directory listener on 0.0.0.0:9030 Jun 18 06:46:50.834 [notice] Opened Directory listener connection (ready) on 0.0.0.0:9030 Jun 18 06:46:51.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip. Starting the service then it starts correctly. I also couldn't see anything out of the ordinary in the main system logs, other than it echoing the above. Any ideas on what's going on here. Also, what is the correct setting for systemctl enable/disable tor/tor-master (I don't have any tor@ services), because I get inconsistent results using tor-master. Issuing "systemctl stop tor-master" will stop the accompanying tor instance, but "systemctl start tor-master" doesn't start it, but a "systemctl restart tor-master" does do a stop/start. I haven't had time to experiment with what happens on a re-boot (yet). Cheers.

2 1

Can't compile 0.4.6.5 on Ubuntu 18.04
by William Denton 15 Jun '21

15 Jun '21

I went to upgrade a relay running on Ubuntu 18.04 to the new release (0.4.6.5) and to my surprise it didn't compile. Every other version has built without any trouble. Wading into the Gitlab site was rather confusing, so I thought I'd send this here, in the hopes it reaches the right people and someone else might be interested. I ran ./configure, then make, and pretty soon this happened: CC src/feature/dirclient/dirclient.o In file included from ./src/core/or/or.h:50:0, from src/feature/dirclient/dirclient.c:13: src/feature/dirclient/dirclient.c: In function ‘dir_client_decompress_response_body’: ./src/lib/log/ratelim.h:55:27: error: initializer element is not constant #define RATELIM_INIT(r) { (r), 0, 0, 0 } ^ src/feature/dirclient/dirclient.c:1877:38: note: in expansion of macro ‘RATELIM_INIT’ static ratelim_t warning_limit = RATELIM_INIT(LOG_INTERVAL); ^~~~~~~~~~~~ ./src/lib/log/ratelim.h:55:27: note: (near initialization for ‘warning_limit.rate’) #define RATELIM_INIT(r) { (r), 0, 0, 0 } ^ src/feature/dirclient/dirclient.c:1877:38: note: in expansion of macro ‘RATELIM_INIT’ static ratelim_t warning_limit = RATELIM_INIT(LOG_INTERVAL); ^~~~~~~~~~~~ Makefile:12141: recipe for target 'src/feature/dirclient/dirclient.o' failed make[1]: *** [src/feature/dirclient/dirclient.o] Error 1 make[1]: Leaving directory '/usr/local/src/tor/tor-0.4.6.5' Thanks, Bill -- William Denton https://www.miskatonic.org/ Librarian, artist and licensed private investigator.

3 3

tor relay + sslh
by Casper 14 Jun '21

14 Jun '21

Hello, I recently discovered an SSL multiplexer called "sslh": """ sslh accepts connections on specified ports, and forwards them further based on tests performed on the first data packet sent by the remote client. Probes for HTTP, SSL, SSH, OpenVPN, tinc, XMPP are implemented, and any other protocol that can be tested using a regular expression, can be recognized. A typical use case is to allow serving several services on port 443 (e.g. to connect to ssh from inside a corporate firewall, which almost never block port 443) while still serving HTTPS on that port. Hence sslh acts as a protocol multiplexer, or a switchboard. Its name comes from its original function to serve SSH and HTTPS on the same port. """ Since many of my network services claims to listen on 433 (to bypass mobile network limitations), I'm thinking to configure and deploy sslh on large scale. If tor handshake can be handled by sslh, could the process (of the tor relay) be listening on 127.0.0.1:12345 and publish good relay descriptor as well ? Currently, in my relay config, I have the following: """ ORPort 26719 ORPort [{{ ansible_default_ipv6.address }}]:26719 DirPort 26720 and Address <my_public_ipv4_here> """ Tor will accept to be listening on the localhost interface only? """ ORPort 127.0.0.1:26719 Address <my_public_ipv4_here> """ Best regards, -- GnuPG: AE157E0B29F0BEF2 at keys.openpgp.org CA Cert: https://dl.casperlefantom.net/pub/ssl/root.der

3 2

Problem moving my Tor Bridge Relay
by Cor.ling 12 Jun '21

12 Jun '21

Hello, I have a Tor Bridge and it worked well (thanks also for your kind support) but it doesn't work anymore after I tried to move it. Basically I copied the 'Keys' folder (at /var/lib/tor/keys) on a USB flash drive. After that I put the folder into the /var/lib/tor folder of the new device (deleting the pre-existing "Keys" folder). But I receive these errors on syslog (/var/log/syslog): > "Jun 12 15:13:59 PC systemd[1]: Stopped Anonymizing overlay network for TCP. > Jun 12 15:13:59 PC systemd[1]: Starting Anonymizing overlay network for TCP... > Jun 12 15:13:59 PC tor[38309]: Jun 12 15:13:59.472 [notice] Tor 0.4.5.6 running on Linux with Libevent 2.1.12-stable, OpenSSL 1.1.1j, Zlib 1.2.11, Liblzma 5.2.5, Libzstd 1.4.8 and Glibc 2.33 as libc. > Jun 12 15:13:59 PC tor[38309]: Jun 12 15:13:59.472 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning > Jun 12 15:13:59 PC tor[38309]: Jun 12 15:13:59.472 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc". > Jun 12 15:13:59 PC tor[38309]: Jun 12 15:13:59.472 [notice] Read configuration file "/etc/tor/torrc". > Jun 12 15:13:59 PC tor[38309]: Jun 12 15:13:59.474 [notice] Based on detected system memory, MaxMemInQueues is set to 2875 MB. You can override this by setting MaxMemInQueues by hand. > Jun 12 15:13:59 PC tor[38309]: Jun 12 15:13:59.476 [warn] /var/lib/tor/keys is not owned by this user (debian-tor, 124) but by root (0). Perhaps you are running Tor as the wrong user? > Jun 12 15:13:59 PC tor[38309]: Jun 12 15:13:59.476 [warn] Failed to parse/validate config: Couldn't access private data directory "/var/lib/tor/keys" > Jun 12 15:13:59 PC tor[38309]: Jun 12 15:13:59.476 [err] Reading config failed--see warnings above. > Jun 12 15:13:59 PC systemd[1]: tor(a)default.service: Control process exited, code=exited, status=1/FAILURE > Jun 12 15:13:59 PC systemd[1]: tor(a)default.service: Failed with result 'exit-code'. > Jun 12 15:13:59 PC systemd[1]: Failed to start Anonymizing overlay network for TCP. > Jun 12 15:13:59 PC systemd[1]: tor(a)default.service: Scheduled restart job, restart counter is at 4. > Jun 12 15:13:59 PC systemd[1]: Stopped Anonymizing overlay network for TCP. > Jun 12 15:13:59 PC systemd[1]: Starting Anonymizing overlay network for TCP... > Jun 12 15:13:59 PC tor[38314]: Jun 12 15:13:59.721 [notice] Tor 0.4.5.6 running on Linux with Libevent 2.1.12-stable, OpenSSL 1.1.1j, Zlib 1.2.11, Liblzma 5.2.5, Libzstd 1.4.8 and Glibc 2.33 as libc. > Jun 12 15:13:59 PC tor[38314]: Jun 12 15:13:59.721 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning > Jun 12 15:13:59 PC tor[38314]: Jun 12 15:13:59.721 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc". > Jun 12 15:13:59 PC tor[38314]: Jun 12 15:13:59.721 [notice] Read configuration file "/etc/tor/torrc". > Jun 12 15:13:59 PC tor[38314]: Jun 12 15:13:59.723 [notice] Based on detected system memory, MaxMemInQueues is set to 2875 MB. You can override this by setting MaxMemInQueues by hand. > Jun 12 15:13:59 PC tor[38314]: Jun 12 15:13:59.726 [warn] /var/lib/tor/keys is not owned by this user (debian-tor, 124) but by root (0). Perhaps you are running Tor as the wrong user? > Jun 12 15:13:59 PC tor[38314]: Jun 12 15:13:59.726 [warn] Failed to parse/validate config: Couldn't access private data directory "/var/lib/tor/keys" > Jun 12 15:13:59 PC tor[38314]: Jun 12 15:13:59.726 [err] Reading config failed--see warnings above. > Jun 12 15:13:59 PC systemd[1]: tor(a)default.service: Control process exited, code=exited, status=1/FAILURE > Jun 12 15:13:59 PC systemd[1]: tor(a)default.service: Failed with result 'exit-code'. > Jun 12 15:13:59 PC systemd[1]: Failed to start Anonymizing overlay network for TCP. > Jun 12 15:13:59 PC systemd[1]: tor(a)default.service: Scheduled restart job, restart counter is at 5. > Jun 12 15:13:59 PC systemd[1]: Stopped Anonymizing overlay network for TCP. > Jun 12 15:13:59 PC systemd[1]: tor(a)default.service: Start request repeated too quickly. > Jun 12 15:13:59 PC systemd[1]: tor(a)default.service: Failed with result 'exit-code'. > Jun 12 15:13:59 PC systemd[1]: Failed to start Anonymizing overlay network for TCP." (i'm using a PC with Kubuntu 21.04 and I followed this guide for the setting up: https://community.torproject.org/relay/setup/bridge/debian-ubuntu/) What can I do to solve these errors?

2 1

torrc
by Walenty Czerwinski 12 Jun '21

12 Jun '21

I wonder what's the difference between BandwidthRate, MaxAdvertisedBandwidth and RelayBandwidthRate?

1 0

Running Tor exit nodes on university networks
by Andreas Kempe 11 Jun '21

11 Jun '21

Hello everyone, I'm a member of Lysator ACS at Linköping university, Sweden. I'm currently investigating the possibility for our computer society to run Tor exit nodes. The IT department has made it clear that they will need some convincing that this is a good idea. One thing that they are wondering is whether there are other universites with experience running Tor nodes. If anyone is currently running Tor nodes on university networks, I'd love to hear about your experiences. A few questions that turned up are listed below. - Have you seen any good or bad press because of the node? - Are you receiving a lot of abuse complaints? - How are you handling abuse complaints? - How are you protecting the rest of your infrastructure from possibly malicious traffic? - Do you have any killer arguments as to why supporting Tor is a good idea that helped sway the people in charge at your university? Thank you in advance for any feedback! Cordially, Andreas Kempe

4 5