- tor-relays - lists.torproject.org

Relay Search without AS number/name information?
by nusenu 05 Apr '21

05 Apr '21

Hi, as many of you know AS level data (AS number and name) on Relay Search/onionoo is using a rather outdated geoip database from maxmind. That is the reason why Relay Search displays inaccurate or no AS information for many relays. Recently the geoip database used by tor (not Relay Search) switched [1] from maxmind's db to ipfire [2] for license reasons. Since tor only needs the country level information in only ships country level informat (but ipfire's geoip also contains AS level data). Today I read about the idea to remove AS level data from onionoo/Relay Search on the gitlab issue: https://gitlab.torproject.org/tpo/metrics/relay-search/-/issues/40004#note_… If you also have an opinion on whether Relay Search should improve its AS level information instead of removing it completely now is probably a good time to state it - especially if your tools depend on it. kind regards, nusenu [1] https://gitlab.torproject.org/tpo/core/tor/-/issues/40224 [2] https://location.ipfire.org/ -- https://nusenu.github.io

1 0

ISP
by Андрей Гвоздев 05 Apr '21

05 Apr '21

Which ISP is better? Scaleway or OVH?

6 6

We will start a test run with M1
by niftybunny to-surf-and-protect.net 04 Apr '21

04 Apr '21

Hi there, next week we will drop the first M1 Mac Minis in the datacenter. With the thread of bugs in the current BSD version of tor: Any known issue with the Mac version of Tor? Any other suggestions / comments from Tor relay operators with Macs? nifty

1 0

Many SSH requests
by Cristiano Kubiaki Gomes 03 Apr '21

03 Apr '21

Hi there, O noticed many ssh requests to my Debian VM running a Relay and I am wondering if this is normal or if this is happening only with me. Anyone else see this ssh attemptives? Is it normal? sshd[27004]: Failed password for root from 45.91.226.235 port 41012 ssh2 sshd[27004]: Received disconnect from 45.91.226.235 port 41012:11: Bye Bye [preauth] sshd[27004]: Disconnected from authenticating user root 45.91.226.235 port 41012 [preauth] sshd[27006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.36.253.227 user=root It's many different ips and trying to access in many different ports. Thank you!

7 8

syn flood iptables rule
by Toralf Förster 02 Apr '21

02 Apr '21

The following 3 statements # Make sure NEW incoming tcp connections are SYN packets; otherwise we need to drop them. $IPT -A INPUT -p tcp ! --syn -m state --state NEW -j DROP # DDoS $IPT -A INPUT -p tcp -m state --state NEW -m recent --name synflood --set $IPT -A INPUT -p tcp -m state --state NEW -m recent --name synflood --update --seconds 60 --hitcount 10 -j DROP seems to work and to help here ata fast Tor relay. CPU went down from 109% to 95%. There're 500 connections less than before for a Tor fast relay. The /proc/net/xt_recent/synflood is quickly filled. Unfortunately I cannot change the "ip_list_tot" of "xt_recent" b/c I do use a non-modular kernel. Does anybody knows a circumvention? Are there any objections against this approach? -- Toralf

5 9

Is OVH a safe vps provider to run an exit relay on?
by Keifer Bly 02 Apr '21

02 Apr '21

7 9

bridge static or dynamic ip and multiple bridge config
by gi vi an 02 Apr '21

02 Apr '21

does bridge require static or dynamic ip? if more than one bridge can be configured per one isp connection, how do i configure? -- who am i ? https://mstdn.social/@gvian donate or patron: [+]₿ bitcoin (BTC): 3K7Ba2DFyyuGTukNqXEmogG4VgYp2RWnZV [×]gridcoin (GRC): SK7A2yq4rsoDSKc592dxSb3JSYeSSopbNB [÷]Ᵽ peercoin (PPC): PENnyj6dvEqaAKtqh9tV9KzRKc4N5EWfeH [=]pivx (PIVX): DNyihy8xWXkGyaLnipzWUrC3kjrbcvahHJ [<]blackcoin (BC): B4pCYCRhS6itEs2rsSAVbRnoKkL6thj3Bt

5 7

DirPortFrontPage file '.....' not found | Permission denied
by Petrusko 02 Apr '21

02 Apr '21

Hey, I'm having a little problem with setting up (my be some rights...) the html page on the relay DIRPort. On my logs : 00:00:03 [NOTICE] Tor 0.4.5.7 opening new log file. 00:00:03 [WARN] Could not open "/var/www/html/tor-relay.html": Permission denied 00:00:03 [WARN] DirPortFrontPage file '/var/www/html/tor-relay.html' not found. Continuing anyway. I've not found any information about how to set up this correctly. Many thanks in advance.

4 4

ipv6 ORPort + DIRPort too ?
by Petrusko 01 Apr '21

01 Apr '21

Hey, I've set up a new relay, available with ipv4 and ipv6. And I'm not sure if I can serve DIRPort on the ipv6 too ? In the torrc file, I've config : ORPort 9001 ORPort [xxxx:xxxx:xxx:x:xxxx:xxxx:xxxx:xxx]:9001 DIRPort 9030 Is it allowed to add something like this, to advertise on ipv6 too ?? : DIRPort [xxxx:xxxx:xxx:x:xxxx:xxxx:xxxx:xxx]:9030 Thank you all !

4 7

Help with FreeBSD relays
by xplato 31 Mar '21

31 Mar '21

Greetings, I am a bit of a noob here so please bear with me. I ran a relay using Ubuntu with very few issues however I decide to add an additional relay and decided to use FreeBSD. They will only run for around 18 hours and then they shut down. I have adjust the torrc file every way I know how and increased the Max vnodes thinking this may have been my issue. I can post the sysrc and torrc if needed. Anyone that might help me figure this out I would be grateful otherwise I am going to reluctantly move them both back to Ubuntu. Thanks, Dan Sent from ProtonMail for iOS

5 13