[tor-relays] BadExit

[Georg Koppen]

Hi!

gerard at bulger.co.uk:
> Oh the shame!   Never had that tag on my exit before.

Sorry to hear. :(

>  
> 
> I assume it was due to a bad boy attacking an IP, pointed out by my ISP, and
> the ISP put my server "under mitigation".    I assume some filtering, which
> of course would have looked bad to TOR users.
> 
>  
> 
> I did not spot the ISP's email for 30 minutes, but then I was able to block
> the offended IP.  Within minutes of doing that the ISP said attack stop and
> my server was removed from mitigation.  However the next day badexit tag on
> my exit and remains there
> 
>  
> 
> How long does the tag last?

So long as the Directory Authorities assign it.

>  
> 
> I go to my other, overseas exit, a family member, to see the tag is aslo
> applied there to.    Do family members get tarred with the same brush?  

It depends on the reason for badexiting.

>  
> 
> I have turned both into relays for the time being.     
> 
>  
> 
>  
> 
> Or have I got this wrong.   Is it a  DNS thing?  Are no some DNS providers
> causing issues forcing the tag?   I am not using opendns.

It could be a DNS thing, I am not sure. I recently pushed a commit that
leads to some exits getting that flag. I tried to contact all the relay
operators beforehand (some did not have any ContactInfo set) but I got
almost no reply back. For details see [1].

What's the fingerprint of your relay that got the badexit flag?

Georg

[1] https://trac.torproject.org/projects/tor/ticket/32864

>  
> 
> Gerry
> 
>  
> 
>  
> 
> 
> 
> _______________________________________________
> tor-relays mailing list
> tor-relays at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> 


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20200324/4d3f11d5/attachment.sig>