Research project - comparing abuse complaints on Tor exits to those of regular ISPs
Hi folks, I am looking to research what proportion of Tor traffic across a Tor exit is "legitimate"/regular internet traffic, by comparing abuse complaints on Tor exits to those of regular ISPs. I think this is an interesting project because it is illegal to analyse traffic on the exit node without amounting to a wiretap, so this is a good way to get some idea about what traffic is comparable to regular internet traffic. I am aware that some people on this list run small ISPs. I am asking a favour that you might be able to send me a sample of abuse complaints over several months, or at least and some idea of how many complaints you recieved. I would need to know what type of complaint they were (torrenting vs more serious complaints), and the volume of traffic that passed through your network. My public key is posted below. Thank you, Duncan Guthrie 4096R/16BD5A5D 425A BEE8 24BB 7665 7FDC F7B6 8767 0301 16BD 5A5D
On Mon, Oct 24, 2016 at 02:20:06PM +0200, Volker Mink wrote:
Mine is running for close to two years now and i got 2 regular complaints with specific accusation (torrent...) from known german lawyers. And one really common from my ISP - "we detected illegal activities. please perform a virus scan on your computers...".
Thats all :)
cool, I'm about to move a relay to exit node, I'm a bit scared do. Do you run the "standard" [1] restricted exit policy? do you run an even more reduced exit policy? could you shared it? thanks! [1] https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy -- 1AE0 322E B8F7 4717 BDEA BF1D 44BB 1BA7 9F6C 6333
I started running a small Exit Node (nostromo) from a VPS (Pulse Servers), with the ReducedExitPolicy but after a few days got a "Abuse complaint" regarding SSH sessions. Apparently, there was alot of SSH connections and they were scanning for vunerable/misconfigured SSH connections. And, a note from the Tech Support stating that they "didn't allow SSH on the exit nodes". So, I changed SSH to be Rejected. And it's been working fine since then. So, it's basically the ReducedExitPolicy but without SSH. /Robin ----- Original message ----- From: tor admin <tor-admin@zumbi.com.ar> To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] Research project - comparing abuse complaints on Tor exits to those of regular ISPs Date: Mon, 24 Oct 2016 22:32:08 +0800 On Mon, Oct 24, 2016 at 02:20:06PM +0200, Volker Mink wrote:
Mine is running for close to two years now and i got 2 regular complaints with specific accusation (torrent...) from known german lawyers. And one really common from my ISP - "we detected illegal activities. please perform a virus scan on your computers...".
Thats all :)
cool, I'm about to move a relay to exit node, I'm a bit scared do. Do you run the "standard" [1] restricted exit policy? do you run an even more reduced exit policy? could you shared it? thanks! [1] https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy -- 1AE0 322E B8F7 4717 BDEA BF1D 44BB 1BA7 9F6C 6333 _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 10/24/2016 05:08 PM, Robin Kjeld wrote:
So, I changed SSH to be Rejected. And it's been working fine since then. So, it's basically the ReducedExitPolicy but without SSH. /Robin I kicked off telnet and whois (and ftp a long time ago) too for similar reasons.
- -- Toralf PGP: C4EACDDE 0076E94E, OTR: 420E74C8 30246EE7 -----BEGIN PGP SIGNATURE----- iHYEAREIAB4FAlgOJjsXHHRvcmFsZi5mb2Vyc3RlckBnbXguZGUACgkQxOrN3gB2 6U7BmwD+Kfwj8HA554yXKp356B9xHwo7ULgFoSjb8Twi4flHUkcA/12pmj3gA5HC ch+x3e9V/HuJMjQzeb1MV1jhu4Xgm/Fy =C8MC -----END PGP SIGNATURE-----
https://atlas.torproject.org/#details/E20FF09A9A800B16C1C7C16E8C0DF95F46F649... https://atlas.torproject.org/#details/0534295ACFD5A84312183B41D3FB275E9ADD9E... look there ;) -----Ursprüngliche Nachricht----- Von: tor-relays [mailto:tor-relays-bounces@lists.torproject.org] Im Auftrag von tor admin Gesendet: Montag, 24. Oktober 2016 16:32 An: tor-relays@lists.torproject.org Betreff: Re: [tor-relays] Research project - comparing abuse complaints on Tor exits to those of regular ISPs On Mon, Oct 24, 2016 at 02:20:06PM +0200, Volker Mink wrote:
Mine is running for close to two years now and i got 2 regular complaints with specific accusation (torrent...) from known german lawyers. And one really common from my ISP - "we detected illegal activities. please perform a virus scan on your computers...".
Thats all :)
cool, I'm about to move a relay to exit node, I'm a bit scared do. Do you run the "standard" [1] restricted exit policy? do you run an even more reduced exit policy? could you shared it? thanks! [1] https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy -- 1AE0 322E B8F7 4717 BDEA BF1D 44BB 1BA7 9F6C 6333 _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Um, did you mean to reply to this thread? On 24 October 2016 15:32:08 BST, tor admin <tor-admin@zumbi.com.ar> wrote:
On Mon, Oct 24, 2016 at 02:20:06PM +0200, Volker Mink wrote:
Mine is running for close to two years now and i got 2 regular complaints with specific accusation (torrent...) from known german lawyers. And one really common from my ISP - "we detected illegal activities. please perform a virus scan on your computers...".
Thats all :)
cool, I'm about to move a relay to exit node, I'm a bit scared do. Do you run the "standard" [1] restricted exit policy? do you run an even more reduced exit policy? could you shared it?
thanks!
[1] https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy
-- 1AE0 322E B8F7 4717 BDEA BF1D 44BB 1BA7 9F6C 6333
_______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
participants (6)
-
dguthrie＠posteo.net -
Duncan Guthrie
-
Robin Kjeld -
tor admin -
Toralf Förster -
Volker Mink