tor-relays March 2019

tor-relays@lists.torproject.org

51 participants
26 discussions

Questions to ask exit node providers
by F67 Group 08 Oct '19

08 Oct '19

We are thinking of running a Tor Exit Node. Does anybody have a list of questions to ask before purchasing a VPS or colocation? I came up with some basic questions: - Do you allow a Tor exit node? [with explanation] - What are the policies for handling abuse complaints? - How much uplink bandwidth do you provide? Any other questions one should ask? Thanks.

17 49

Please help, my relay is unresponsive
by digitalist00 08 Apr '19

08 Apr '19

Dear helpers! Nyx says that my relay is unresponsive and that it was resumed. As I write this mail I have already 334 duplicates hidden. What's my problem and how can I solve this? The relay runs on a Raspberry Pi and is connected via LAN. Yours Digitalist [Unbenannt.JPG] Sent with [ProtonMail](https://protonmail.com) Secure Email.

4 16

Relay C19B33758B3A5144894233EC4C95D7985B9FD101
by ylms 08 Apr '19

08 Apr '19

Hello, I just setup a new exit, I know it takes time to "train", but I would be interested in tips on how to tweak it. I just replaces a old exit that used the same IP, but unfortunately we lost that config/key. So any tips are welcome in general. I also have some questions. Atlas does not show any IPv6 address, is this normal? WHat loglevel can I set to see if there is any problems, to find possible improvements? I know the logging should not be changed, but I want tot make sure tor works fine, so I would like to see some more information for now. Thanks for your help. yl

6 14

Protecting the bridge port from active probes
by Marek Szuba 30 Mar '19

30 Mar '19

Hello, I run a private obfuscated Tor bridge for myself and some friends. All in all it has worked fine so far but having recently run some security scans on the bridge host, I now wonder how resistant to active probing my bridge is. Apologies if this has already been asked, I have yet to find a searchable archive of this list. Anyway, here is my logic. In order to operate properly, my bridge must have its ORPort reachable from the Internet. I have chosen a port to be used for this purpose at random but these days, scanning all 64k TCP ports on a host takes mere minutes. The X.509 server certificate offered on the ORPort is rather suspicious, if only because of the randomly generated name; I suspect there might be other peculiarities as well. Therefore, I strongly suspect that it wouldn't take more than a few minutes for any attacker employing active probing to detect my bridge and block access to it. Does this make sense? And in any case, is there anything else I could do to protect my bridge against active probing? The best I could come up with is to make the bridge host periodically change the ORPort, I reckon wouldn't really help because if I had to restart tor on the bridge every few minutes the it wouldn't be of much use connectivity-wise. Having the border firewall block or slow down suspected port scans might perhaps make it possible to change the ORPort less frequently but alas, I have no control over the border firewall beyond being able to ask to open or close specific ports on my host. Thank you in advance for your time. -- MS

4 5

Tor website overhaul -- who deserves punishment?
by Ralph Seichter 30 Mar '19

30 Mar '19

Not sure if this is the right place to vent, but here goes: Whoever changed the Tor website's design seems to a) have a serious vision impairment and b) done his utmost to hide access to the Tor source code. I think the site feels dumbed down to cater only to those with the shortest attention spans (and bad eyesight) now. Also, as a relay and exit operator, I care most about the source code and documentation, not some management summary. Was there no QA process involved before rolling out the new website? Annoyed, Ralph

15 22

New TOR
by TERRY McKINNEY 30 Mar '19

30 Mar '19

Say what you like.Tor was great.Now it isn’t.I don’t know code.I do know function. terryGmckinney 201-8725 Oak st Vancouver,BC.Canada V6P4B4 (604)2639203

2 1

Relay without OpenSSL
by Alexander Nasonov 30 Mar '19

30 Mar '19

I recently tried updating one of my relays to Tor 0.4.0.1 compiled with NSS (and without OpenSSL) but it failed to start, see the logs below. I wonder if this configuration is supported at all and whether I should try running a brand new relay instead of updating? Alex [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [notice] Bootstrapped 15% (handshake_done): Handshake with a relay done [notice] Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits [notice] Bootstrapped 90% (ap_handshake_done): Handshake fininshed with a relay to build circuits [notice] Bootstrapped 95% (circuit_create): Establishing a Tor circuit [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [notice] Bootstrapped 100% (done): Done [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) -- Alex

3 5

Relay operators meetup Valencia (28.03.2019)
by Vasilis 27 Mar '19

27 Mar '19

Dear Tor friends and relay operators, Tomorrow (28.03.2019) a relay operators meetup will take place at HackerspaceVLC. When: Thursday, March 28th, 2019 Time: 18:30 Where: Hackerspace Valencia Calle Francisco Martínez, 19, Bajo CP 46020, Valencia (Benimaclet), España Map coordinates: https://www.openstreetmap.org/?mlat=39.48828&mlon=-0.35839#map=19/39.48828/… Event link: https://blog.torproject.org/events/tor-meetup-valencia Hope to see many of you there! Cheers, ~Vasilis

1 0

(no subject)
by Ahmed Ahmed 22 Mar '19

22 Mar '19

2 1

(no subject)
by Ahmed Ahmed 22 Mar '19

22 Mar '19

Aboskenaa(a)gmail.com

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

tor-relays March 2019