17 Apr
2020
17 Apr
'20
8:03 a.m.
Hello all I just set up a bridge and want to make sure I didn't forget anything. //the torrc I use Nickname FancyNick ContactInfo see https://example.com/torcontact/ ControlPort 9051 ORPort 443 SocksPort 0 BridgeRelay 1 ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy ServerTransportListenAddr obfs4 0.0.0.0:80 ExtORPort auto CookieAuthentication 1 ExitPolicy reject *:* ExitPolicy reject6 *:* ClientUseIPv6 1 #%include /etc/tor/torrc_family //End of torrc For the family, is this setting needed for a Bridge? Should it be set? Thanks for any advice yl
17 Apr
17 Apr
9:05 a.m.
On 17.04.2020 10:03, ylms wrote: > Hello all > > I just set up a bridge and want to make sure I didn't forget anything. > > > //the torrc I use > > Nickname FancyNick > ContactInfo see https://example.com/torcontact/ > ControlPort 9051 > ORPort 443 + ORPort [YOUR:V6:IP]:443 ## If you have multiple network interfaces, specify one for outgoing traffic to use. OutboundBindAddress IPv4 OutboundBindAddress [YOUR:IP:V6] > SocksPort 0 > BridgeRelay 1 ## uncomment if you don't want torproject.org to know your bridge #PublishServerDescriptor 0 > ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy > ServerTransportListenAddr obfs4 0.0.0.0:80 > ExtORPort auto > > > CookieAuthentication 1 > ExitPolicy reject *:* > ExitPolicy reject6 *:* > ClientUseIPv6 1 ^^^^Not used. For Clients. > > #%include /etc/tor/torrc_family ^^^Not needed for Tor Bridge > //End of torrc -- ╰_╯ Ciao Marco! Debian GNU/Linux It's free software and it gives you freedom!
9:32 a.m.
On 17.04.2020 11:05, i forget: > On 17.04.2020 10:03, ylms wrote: >> Hello all >> >> I just set up a bridge and want to make sure I didn't forget anything. >> >> >> //the torrc I use >> >> Nickname FancyNick >> ContactInfo see https://example.com/torcontact/ >> ControlPort 9051 >> ORPort 443 > + ORPort [YOUR:V6:IP]:443 > ## If you have multiple network interfaces, specify one for outgoing > traffic to use. > OutboundBindAddress IPv4 > OutboundBindAddress [YOUR:IP:V6] > >> SocksPort 0 >> BridgeRelay 1 > ## uncomment if you don't want torproject.org to know your bridge > #PublishServerDescriptor 0 > >> ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy >> ServerTransportListenAddr obfs4 0.0.0.0:80 ## The ServerTransportListenAddr line is dual stack friendly. ServerTransportListenAddr obfs4 [::]:80 >> ExtORPort auto >> >> >> CookieAuthentication 1 >> ExitPolicy reject *:* >> ExitPolicy reject6 *:* >> ClientUseIPv6 1 > ^^^^Not used. For Clients. >> >> #%include /etc/tor/torrc_family > ^^^Not needed for Tor Bridge >> //End of torrc -- ╰_╯ Ciao Marco! Debian GNU/Linux It's free software and it gives you freedom!
9:46 a.m.
Hello Marco On 4/17/20 11:32 AM, lists@for-privacy.net wrote: > On 17.04.2020 11:05, i forget: >> On 17.04.2020 10:03, ylms wrote: >>> ORPort 443 >> + ORPort [YOUR:V6:IP]:443 So I should use ORPort twice, once for IPv4 and once for IPv6? What is the option "OutboundBindAddressOR" for? >> ## If you have multiple network interfaces, specify one for outgoing >> traffic to use. >> OutboundBindAddress IPv4 >> OutboundBindAddress [YOUR:IP:V6] OK, I will add that. What is the option "OutboundBindAddressOR" for? Should I use that too? >> >>> SocksPort 0 >>> BridgeRelay 1 >> ## uncomment if you don't want torproject.org to know your bridge >> #PublishServerDescriptor 0 no, I want the relay to be distributed by the various services that torprojects.org is offering. >> >>> ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy >>> ServerTransportListenAddr obfs4 0.0.0.0:80 > ## The ServerTransportListenAddr line is dual stack friendly. > ServerTransportListenAddr obfs4 [::]:80 So I'll add another line for IPv6 here too. > >>> ExtORPort auto >>> >>> >>> CookieAuthentication 1 >>> ExitPolicy reject *:* >>> ExitPolicy reject6 *:* >>> ClientUseIPv6 1 >> ^^^^Not used. For Clients. you're right, somehow I must have copied that over from somewhere. >>> >>> #%include /etc/tor/torrc_family >> ^^^Not needed for Tor Bridge OK. >>> //End of torrc >
18 Apr
18 Apr
6:03 p.m.
On 17.04.2020 11:46, ylms wrote: > Hello Marco > > On 4/17/20 11:32 AM, lists@for-privacy.net wrote: >> On 17.04.2020 11:05, i forget: >>> On 17.04.2020 10:03, ylms wrote: > >>>> ORPort 443 >>> + ORPort [YOUR:V6:IP]:443 > > So I should use ORPort twice, once for IPv4 and once for IPv6? Yes. IPv4 only Port & IPv6 with brackets: [YOUR:V6:IP]:Port >>> ## If you have multiple network interfaces, specify one for outgoing >>> traffic to use. >>> OutboundBindAddress IPv4 >>> OutboundBindAddress [YOUR:IP:V6] > > OK, I will add that. > > What is the option "OutboundBindAddressOR" for? Should I use that too? Normally not needed. Make all outbound non-exit (relay and other) connections originate from the IP address specified. This option overrides OutboundBindAddress for the same IP version. OutboundBindAddress OutboundBindAddressOR OutboundBindAddressExit is only useful when you have multiple network interfaces or IP's. >>> >>>> SocksPort 0 >>>> BridgeRelay 1 >>> ## uncomment if you don't want torproject.org to know your bridge >>> #PublishServerDescriptor 0 > > no, I want the relay to be distributed by the various services that > torprojects.org is offering. It's a good thing. Just wanted to point out the option. >>> >>>> ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy >>>> ServerTransportListenAddr obfs4 0.0.0.0:80 >> ## The ServerTransportListenAddr line is dual stack friendly. >> ServerTransportListenAddr obfs4 [::]:80 > > So I'll add another line for IPv6 here too. You only need it once. Change 0.0.0.0:80 to [::]:80. You then have IPv4 and IPv6. ServerTransportListenAddr obfs4 [::]:80 >> >>>> ExtORPort auto >>>> >>>> >>>> CookieAuthentication 1 >>>> ExitPolicy reject *:* >>>> ExitPolicy reject6 *:* >>>> ClientUseIPv6 1 >>> ^^^^Not used. For Clients. > > you're right, somehow I must have copied that over from somewhere. > >>>> >>>> #%include /etc/tor/torrc_family >>> ^^^Not needed for Tor Bridge > > OK. > >>>> //End of torrc >> > _______________________________________________ > tor-relays mailing list > tor-relays@lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays -- ╰_╯ Ciao Marco! Debian GNU/Linux It's free software and it gives you freedom!
1869
Age (days ago)
1870
Last active (days ago)
4 comments
2 participants
participants (2)
-
lists＠for-privacy.net -
ylms