Problems with Debian package and low ports

I am having some problems with tor (version 0.2.3.25-1), I get warnings when it resumes form hibernation: Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 Can anyone help?

Op 13-2-2013 17:41, Chris Baines schreef:
I am having some problems with tor (version 0.2.3.25-1), I get warnings when it resumes form hibernation: Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443
Can anyone help? _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays Does it work when you've just booted your computer?
-Wessel

On Wed, 2013-02-13 at 17:44 +0100, Wessel Nieboer wrote:
Op 13-2-2013 17:41, Chris Baines schreef:
I am having some problems with tor (version 0.2.3.25-1), I get warnings when it resumes form hibernation: Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443
Can anyone help? _______________________________________________ Does it work when you've just booted your computer?
Yes.

Hi Chris, This is docemented in https://trac.torproject.org/projects/tor/wiki/doc/TorFAQ#HowcanImakemyrelaya... I hope those instructions will help you. Chris Baines schreef op 2013-02-13 17:41:
I am having some problems with tor (version 0.2.3.25-1), I get warnings when it resumes form hibernation: Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443
Can anyone help? _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

On Wed, 2013-02-13 at 17:51 +0100, theo@caber.nl wrote:
Hi Chris,
This is docemented in https://trac.torproject.org/projects/tor/wiki/doc/TorFAQ#HowcanImakemyrelaya...
I hope those instructions will help you.
I have seen those instructions, and as far as I am aware, followed them. It says that if you use the Debian package, you just set the ports in the torrc, but this causes the errors mentioned on my system.

Tor has already changed to a non-privileged user, but you are trying to bind on ports that only root is allowed to bind on. Two solutions: 1) Run tor as root (really, a bad idea) 2) Bind to other ports than 80 and 443. Since you are resuming, you are unlikely to be a stable relay/exit/bridge anyway, so you can basically choose any port you want and just use it for your own traffic only. On Wed, Feb 13, 2013 at 5:41 PM, Chris Baines <cbaines8@gmail.com> wrote:
I am having some problems with tor (version 0.2.3.25-1), I get warnings when it resumes form hibernation: Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443
Can anyone help? _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
-- Simple guidelines to happiness: Work like you don't need the money, Love like your heart has never been broken and Dance like no one can see you.

On Wed, 13 Feb 2013 18:07:53 +0100 Nils Vogels <bacardicoke@gmail.com> wrote:
Tor has already changed to a non-privileged user, but you are trying to bind on ports that only root is allowed to bind on.
Two solutions:
1) Run tor as root (really, a bad idea) 2) Bind to other ports than 80 and 443. Since you are resuming, you are unlikely to be a stable relay/exit/bridge anyway, so you can basically choose any port you want and just use it for your own traffic only.
3) or just do not Hibernate. Use RelayBandwidthRate to limit your bandwidth utilization instead. -- With respect, Roman

Tor has already changed to a non-privileged user, but you are trying to bind on ports that only root is allowed to bind on.
Two solutions:
1) Run tor as root (really, a bad idea) 2) Bind to other ports than 80 and 443.
3) Remap the ports outside the restricted range using your packet filter. 4) Hack the port range check out of the kernel and recompile.

No need to hack. Can set the proc entries to control that. On Feb 13, 2013 9:26 PM, "grarpamp" <grarpamp@gmail.com> wrote:
Tor has already changed to a non-privileged user, but you are trying to bind on ports that only root is allowed to bind on.
Two solutions:
1) Run tor as root (really, a bad idea) 2) Bind to other ports than 80 and 443.
3) Remap the ports outside the restricted range using your packet filter. 4) Hack the port range check out of the kernel and recompile. _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

On Wed, Feb 13, 2013 at 04:41:54PM +0000, Chris Baines wrote:
I am having some problems with tor (version 0.2.3.25-1), I get warnings when it resumes form hibernation: Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443
Can anyone help?
Known bug, alas: https://trac.torproject.org/projects/tor/ticket/918 See also https://trac.torproject.org/projects/tor/ticket/8195 Do you also see this warning when you start Tor? log_warn(LD_CONFIG, "You have set AccountingMax to use hibernation. You have also " "chosen a low DirPort or OrPort. This combination can make Tor stop " "working when it tries to re-attach the port after a period of " "hibernation. Please choose a different port or turn off " "hibernation unless you know this combination will work on your " "platform."); --Roger

I assume what you're experiencing is: 1 - it initially starts up and functions as expected 2 - hits the weekly accounting max and hibernates 3 - Never recovers from hibernation because of error If so then try this: That port binding is a known issue when coming out of hibernate, I also experienced it. The solution I use is setting my Accounting Max higher than my bandwidth will be able to achieve per week. Then throttle the bandwidth to a rate that I can be sure actually does not ever attain that limit, but reaches the limit I really want it to hit. If not: Check your logs and you'll discover the error there. - David On 02/13/2013 08:41 AM, Chris Baines wrote:
I am having some problems with tor (version 0.2.3.25-1), I get warnings when it resumes form hibernation: Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443
Can anyone help? _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Hi, Run this as root: setcap 'cap_net_bind_service=+ep' /usr/sbin/tor This will give Tor the ability to bind to ports below 1024 without requiring root. On 13.02.2013 17:41, Chris Baines wrote:
I am having some problems with tor (version 0.2.3.25-1), I get warnings when it resumes form hibernation: Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443
Can anyone help? _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
-- Moritz Bartl https://www.torservers.net/
participants (11)
-
Chris Baines
-
Christopher Baines
-
David Gilbert
-
Dennis Ljungmark
-
grarpamp
-
Moritz Bartl
-
Nils Vogels
-
Roger Dingledine
-
Roman Mamedov
-
theo@caber.nl
-
Wessel Nieboer