[tor-relays] DoS attack on Tor exit relay

[David Poulsen]

Reboot your connected device through hw

Sent from ProtonMail mobile

-------- Original Message --------
On 31 Jul 2019, 18.27, Larry Brandt wrote:

> Yes, I have fail2ban installed but the attack is focused on my ORPort 9001.  Similarly, I have an external firewall but it permits 9001 port passage.
>
> Thanks for the thoughts, though,  --potlatch
>
> On 7/31/2019 2:40 AM, TorGate wrote:
>
>> You can install failtoban, have you a extern firewall ?
>>
>> Am 31.07.2019 um 05:14 schrieb potlatch <potlatch at protonmail.com>:
>>
>>> Hello Tor users,
>>> Help me with a problem please.  I have a small exit/backup & directory VPS in Finland [1].  This last week the server (and Tor) have been overwhelmed with non-Tor IP addresses.  This may be a small version of a DoS attack.  I took the server down for a few days but when I restarted it the attack was there before Tor users.  Eventually, the load caused kernal crash.
>>> I noticed this last week, that my Consensus Weight had dropped from 5500 to 68.
>>> Does anyone have an efficient way to defeat this ongoing attack?
>>> --potlatch
>>>
>>> [1]   9B31F1F1C1554F9FFB3455911F82E818EF7C7883     TorExitFinland
>>>
>>> Sent with [ProtonMail](https://protonmail.com) Secure Email.
>>
>>> _______________________________________________
>>> tor-relays mailing list
>>> tor-relays at lists.torproject.org
>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>
>> _______________________________________________
>> tor-relays mailing list
>> tor-relays at lists.torproject.org
>>
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
> --
> 1. When a distinguished but elderly scientist states that something is possible, he is almost certainly right. When he states that something is impossible, he is very probably wrong. 2. The only way of discovering the limits of the possible is to venture a little way past them into the impossible. 3. Any sufficiently advanced technology is indistinguishable from magic. - Arthur C. Clarke
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20190731/71bb5f7e/attachment.html>