[tor-relays] cannot keep my bridge up

trinity pointard trinity.pointard at gmail.com
Thu Dec 22 12:15:17 UTC 2022


Hi,

These lines Toralf references come from the logs you sent. It looks
like apparmor didn't want obfs4proxy to open some file.
I'm not sure why obfs4proxy would care about this file, maybe it's
something the go runtime likes to look at. It does not look fatal
though.

Logs also says
> Dec 20 09:15:27 mxh-HP-Compaq-Pro-6300-SFF Tor[17727]: Your server has not managed to confirm reachability for its ORPort(s) at 100.38.62.232:443.
> Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.

It looks like your bridge isn't reachable from the internet. Have you
checked if your firewall accepts incoming connections? If you are on
an at home installation,
have you checked if your router NAT is configured to forward that port
properly. If you are on an at home installation too, is it possible
you are behind a CG-NAT
(https://en.wikipedia.org/wiki/Carrier-grade_NAT)?

Sidenotes: these logs contains your bridge fingerprint and its ip
address. These are informations you should never share publicly as it
allows censors to block
your bridge easily, while being hard to block is supposed to be the
whole purpose of bridges.

Regards,

trinity-1686a

On Thu, 22 Dec 2022 at 12:47, Anonforpeace via tor-relays
<tor-relays at lists.torproject.org> wrote:
>
> I'm not sure I understand. Are you showing me more lines of code to add?
>
>
> Sent from Proton Mail mobile
>
>
>
> -------- Original Message --------
> On Dec 21, 2022, 5:18 AM, Toralf Förster < toralf.foerster at gmx.de> wrote:
>
>
> On 12/20/22 15:27, Anonforpeace via tor-relays wrote: > Dec 20 08:55:16 mxh-HP-Compaq-Pro-6300-SFF kernel: [137278.310446] > audit: type=1400 audit(1671544516.974:36): apparmor="DENIED" > operation="open" profile="system_tor" > name="/sys/kernel/mm/transparent_hugepage/hpage_pmd_size" pid=17728 > comm="obfs4proxy" requested_mask="r" denied_mask="r" fsuid=128 ouid=0 What about this ? -- Toralf _______________________________________________ tor-relays mailing list tor-relays at lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays _______________________________________________
> tor-relays mailing list
> tor-relays at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


More information about the tor-relays mailing list