Re: Very low performance in CriptolabTORRelays*

2010-12-03 Thread Justin Aplin

On Dec 3, 2010, at 3:14 AM, Mike Perry wrote:
[snip]

Nope. Transfer rates are equally ridiculous. Tried in windows, same.

[/snip]

Out of curiosity, how long are you letting these tests run for? My  
nodes generally take a full 2 or 3 days to get up to full capacity,  
and even then, traffic through them has its sporadic highs and lows.  
But then, I also run nodes on the lower end of the bandwidth scale, so  
I'm not sure how things compare...



~Justin Aplin

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Very low performance in CriptolabTORRelays*

2010-12-03 Thread Moritz Bartl
Hi,

On 03.12.2010 13:12, Olaf Selke wrote:
> At least my relay holds a couple of connections to Cryptolab.

We (torservers) do, too. About the same amount of connections.

Moritz
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Very low performance in CriptolabTORRelays*

2010-12-03 Thread Olaf Selke
On 03.12.2010 11:22, Daniel Franganillo wrote:
> El 03/12/10 09:18, Olaf Selke escribió:
>
>> why don't you ask them?

> Well, you know, network administrators are one species by themself. My
> University spent almost 1M€ (yeah, one million) in a network filtering
> infrastructure and we're still waiting to know *What* they are filtering
> and *why* (here we make network research and we need to know if
> something fails and why); that was one year ago...

ok, tell 'em they suck ;-)

At least my relay holds a couple of connections to Cryptolab.

anonymizer2:~# netstat -nt | grep 138.100.10
tcp0  0 192.251.226.205:22  138.100.10.146:47381
ESTABLISHED
tcp0  0 192.251.226.205:34041   138.100.10.146:9001
ESTABLISHED
tcp0  0 192.251.226.206:8080138.100.10.146:38165
ESTABLISHED
tcp0  0 192.251.226.206:443 138.100.10.146:43145
ESTABLISHED
tcp0   9592 192.251.226.205:22  138.100.10.242:58237
ESTABLISHED
tcp0   6696 192.251.226.205:22  138.100.10.242:58237
ESTABLISHED
tcp0  0 192.251.226.206:28065   138.100.10.242:9001
ESTABLISHED
tcp0  0 192.251.226.205:443 138.100.10.242:42052
ESTABLISHED



Olaf
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Very low performance in CriptolabTORRelays*

2010-12-03 Thread Daniel Franganillo

El 03/12/10 09:18, Olaf Selke escribió:

On 03.12.2010 08:40, Daniel Franganillo wrote:


Well, im not asking for help to run a Tor relay, I did it for more than
a year without problems. Im asking for help to gather intel so I can
make an statement to our ISP (I work at a Dept. in a univeristy) to
unblock Tor.


why don't you ask them?

Olaf
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Well, you know, network administrators are one species by themself. My 
University spent almost 1M€ (yeah, one million) in a network filtering 
infrastructure and we're still waiting to know *What* they are filtering 
and *why* (here we make network research and we need to know if 
something fails and why); that was one year ago...
So no, I've not asked for an answer on Do you block TOR?. But I know for 
certain what they will answer, nothing.

Thanks.

--
---
   Daniel Franganillo Corrales
---
e-mail: dani...@dilmun.ls.fi.upm.es
---
CriptoLab. Despacho 6305.
Facultad de Informática.
Campus de Montegancedo S/N
Universidad Politécnica de Madrid.
Boadilla del Monte. Madrid (Spain)
Teléfono - 91 336 (3673)
---



smime.p7s
Description: S/MIME Cryptographic Signature


Re: Very low performance in CriptolabTORRelays*

2010-12-03 Thread Olaf Selke
On 03.12.2010 08:40, Daniel Franganillo wrote:
> 
> Well, im not asking for help to run a Tor relay, I did it for more than
> a year without problems. Im asking for help to gather intel so I can
> make an statement to our ISP (I work at a Dept. in a univeristy) to
> unblock Tor.

why don't you ask them?

Olaf
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Very low performance in CriptolabTORRelays*

2010-12-03 Thread Mike Perry
Thus spake Daniel Franganillo (dani...@dilmun.ls.fi.upm.es):

> Our ISP wont say nothing about their filters (It seems to be a Top Secret 
> issue :P). As I said before there's no problem reported at debug.log except 
> for the frequent:
> 
> [debug] TLS error: unexpected close while reading (SSL_ST_OK)
> 
> >Another way to do this is to try to use Tor as a client. Does that
> >work?
> 
> Nope.
> 
> >How about using a client with bridges. Do they work?
> >https://www.sesawe.net/Using-Tor-with-Bridges.html
> >
> 
> Nope. Transfer rates are equally ridiculous. Tried in windows, same.

Great! Now we're getting somewhere. Now, your question isn't "How do I
run a relay at a censored ISP" it's "Please help me use Tor at a
censored ISP." That is a question we are prepared to at least *try* to
answer :)

Can you access the following page:
https://trac.torproject.org/projects/tor/wiki/TheOnionRouter/BlockingDiagnostics

If it too is blocked, blocked, it is also available via the
ssl-encrypted proxy link on ixquick:
https://us2.ixquick.com/do/metasearch.pl?q=TheOnionRouter+BlockingDiagnostics

Similarly it is in the Google Cache, which is now available over SSL.
https://webcache.googleusercontent.com/search?q=cache:wDewL-f-g9gJ:https://trac.torproject.org/projects/tor/wiki/TheOnionRouter/BlockingDiagnostics+&cd=1&hl=en&ct=clnk&gl=us


If you feel you can follow those instructions, can we meet on IRC? Can
you access #tor-dev on irc.oftc.net? Port 6697 is SSL, if you suspect
keyword filtering too.

Specify a time and we can give you a private bridge IP and try to
diagnose exactly how your ISP is blocking access to Tor.


P.S. The above goes for anyone who knows anyone having trouble
*accessing* the Tor network from anywhere else. Please contact me or
show up on #tor-dev. 

We are in desperate need of people inside China to help us with this.
So far we have zero people there who can help us diagnose what is
going on.


-- 
Mike Perry
Mad Computer Scientist
fscked.org evil labs


pgpasY5OZXx1e.pgp
Description: PGP signature


Re: Very low performance in CriptolabTORRelays*

2010-12-02 Thread Daniel Franganillo

El 03/12/10 01:55, Mike Perry escribió:

Thus spake Daniel Franganillo (dani...@dilmun.ls.fi.upm.es):


El 29/11/10 16:27, Daniel Franganillo escribió:

Hi,
I'm the admin of CriptoLabTorRelays[1][2][3][4]
As you can see at [1][2][3][4] our relays are having almost no transfer
rate (3KB or so)
It started on Monday 14 of November and after some testing we came to a
conclusion... Our Univeristy (our workplace) somehow filtered Tor
without us noticing.


I think no one is answering your mail because of this statement. If
the Tor network is blocked by your ISP, you can't exactly expect to
run a relay...


Well, im not asking for help to run a Tor relay, I did it for more than a year 
without problems. Im asking for help to gather intel so I can make an statement 
to our ISP (I work at a Dept. in a univeristy) to unblock Tor.



Did you confirm the block? Did you try connecting to some of the other
public tor relays? A simple way to do this is to just use Firefox and
type in https://random.tor.node.ip and see if you get a cert warning
or not.


Our ISP wont say nothing about their filters (It seems to be a Top Secret issue 
:P). As I said before there's no problem reported at debug.log except for the 
frequent:


[debug] TLS error: unexpected close while reading (SSL_ST_OK)


Another way to do this is to try to use Tor as a client. Does that
work?


Nope.


How about using a client with bridges. Do they work?
https://www.sesawe.net/Using-Tor-with-Bridges.html



Nope. Transfer rates are equally ridiculous. Tried in windows, same.
Thanks.

--
---
   Daniel Franganillo Corrales
---
e-mail: dani...@dilmun.ls.fi.upm.es
---
CriptoLab. Despacho 6305.
Facultad de Informática.
Campus de Montegancedo S/N
Universidad Politécnica de Madrid.
Boadilla del Monte. Madrid (Spain)
Teléfono - 91 336 (3673)
---




smime.p7s
Description: S/MIME Cryptographic Signature


Re: Very low performance in CriptolabTORRelays*

2010-12-02 Thread Mike Perry
Thus spake Daniel Franganillo (dani...@dilmun.ls.fi.upm.es):

> El 29/11/10 16:27, Daniel Franganillo escribió:
> >Hi,
> >I'm the admin of CriptoLabTorRelays[1][2][3][4]
> >As you can see at [1][2][3][4] our relays are having almost no transfer
> >rate (3KB or so)
> >It started on Monday 14 of November and after some testing we came to a
> >conclusion... Our Univeristy (our workplace) somehow filtered Tor
> >without us noticing.

I think no one is answering your mail because of this statement. If
the Tor network is blocked by your ISP, you can't exactly expect to
run a relay...

Did you confirm the block? Did you try connecting to some of the other
public tor relays? A simple way to do this is to just use Firefox and
type in https://random.tor.node.ip and see if you get a cert warning
or not.

Another way to do this is to try to use Tor as a client. Does that
work?

How about using a client with bridges. Do they work?
https://www.sesawe.net/Using-Tor-with-Bridges.html

-- 
Mike Perry
Mad Computer Scientist
fscked.org evil labs


pgpFqlH8oZYMa.pgp
Description: PGP signature


Re: Very low performance in CriptolabTORRelays*

2010-12-02 Thread Daniel Franganillo

El 01/12/10 12:03, Jim escribió:

Daniel Franganillo wrote:


Hi,
still no luck with our bandwidth problems. I even tried to set up a
tor relay under windows (to discard a linux problem) and it does not
work.
Also, if I setup an https server at 9001 or 9030 and download a file
from there it works fine.
Can you help me to gather some clues on how our School is filtering Tor?
I need that information so i can fill a request to stop Tor filtering.
Thanks.
PD: Will it help if I pastebin a debug log?


Hi Daniel,

I am surprised that nobody on this list that is more knowledgeable than
I has responded to your request.

I am certainly no expert here, but based both on what has been posted on
this list previously and the TLS entries that ended up in your debug
log, I would have to wonder if your problem doesn't have to do with an
incompatibilty between the version of Tor you are using and the version
of SSL you are using rather than being a problem with your school's
filtering Tor. I did not respond sooner in part because, based on my
(admittedly limited) understanding of these issues, I did not see a
conflict between what you posted you were using, based on recent other
posts about this. Still there have been recent (say the last 6 months or
so) issues between Tor and SSL. I can only hope that either you can
research this some yourself or somebody else with more knowledge about
this will post.

Good luck!

Jim
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talk in the body. http://archives.seul.org/or/talk/


Its verly unlikely that the issue comes from an incompatible version of 
OpenSSL and Tor because it fails in windows too :/
Any help is welcomed, we were donating more than 1MB on bandwidht and 
now nothing...

Thanks.

--
---
   Daniel Franganillo Corrales
---
e-mail: dani...@dilmun.ls.fi.upm.es
---
CriptoLab. Despacho 6305.
Facultad de Informática.
Campus de Montegancedo S/N
Universidad Politécnica de Madrid.
Boadilla del Monte. Madrid (Spain)
Teléfono - 91 336 (3673)
---



smime.p7s
Description: S/MIME Cryptographic Signature


Re: Very low performance in CriptolabTORRelays*

2010-12-01 Thread Jim

Daniel Franganillo wrote:


Hi,
still no luck with our bandwidth problems. I even tried to set up a tor 
relay under windows (to discard a linux problem) and it does not work.
Also, if I setup an https server at 9001 or 9030 and download a file 
from there it works fine.

Can you help me to gather some clues on how our School is filtering Tor?
I need that information so i can fill a request to stop Tor filtering.
Thanks.
PD: Will it help if I pastebin a debug log?


Hi Daniel,

I am surprised that nobody on this list that is more knowledgeable than 
I has responded to your request.


I am certainly no expert here, but based both on what has been posted on 
this list previously and the TLS entries that ended up in your debug 
log, I would have to wonder if your problem doesn't have to do with an 
incompatibilty between the version of Tor you are using and the version 
of SSL you are using rather than being a problem with your school's 
filtering Tor.  I did not respond sooner in part because, based on my 
(admittedly limited) understanding of these issues, I did not see a 
conflict between what you posted you were using, based on recent other 
posts about this.  Still there have been recent (say the last 6 months 
or so) issues between Tor and SSL.  I can only hope that either you can 
research this some yourself or somebody else with more knowledge about 
this will post.


Good luck!

Jim
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Very low performance in CriptolabTORRelays*

2010-12-01 Thread Daniel Franganillo

El 29/11/10 16:27, Daniel Franganillo escribió:

Hi,
I'm the admin of CriptoLabTorRelays[1][2][3][4]
As you can see at [1][2][3][4] our relays are having almost no transfer
rate (3KB or so)
It started on Monday 14 of November and after some testing we came to a
conclusion... Our Univeristy (our workplace) somehow filtered Tor
without us noticing.
I need your help to get some proofs of the filter being applied so we
can make a statement and ask for permission.

Looking at the logs I see a frequently

[debug] TLS error: unexpected close while reading (SSL_ST_OK)

Tor:
0.2.2.18-alpha-2
SSL:
0.9.8o-3

Thanks.

PD: We even tried using bridges (as in https://bridges.torproject.org/)
with no luck.

[1]
http://torstatus.blutmagie.de/router_detail.php?FP=b0ebd113c29fa546596dae34e88b8ad82ffdaa3d

[2]
http://torstatus.blutmagie.de/router_detail.php?FP=a65f3cbe32d8b52afcd2b09f0258d5cef1b12f48

[3]
http://torstatus.blutmagie.de/router_detail.php?FP=1d6a27aed313662e35f550b212335d4797dccdf6

[4]
http://torstatus.blutmagie.de/router_detail.php?FP=3e628de58df60a228c38fa83d000439d129d00cc




Hi,
still no luck with our bandwidth problems. I even tried to set up a tor 
relay under windows (to discard a linux problem) and it does not work.
Also, if I setup an https server at 9001 or 9030 and download a file 
from there it works fine.

Can you help me to gather some clues on how our School is filtering Tor?
I need that information so i can fill a request to stop Tor filtering.
Thanks.
PD: Will it help if I pastebin a debug log?


--
---
   Daniel Franganillo Corrales
---
e-mail: dani...@dilmun.ls.fi.upm.es
---
CriptoLab. Despacho 6305.
Facultad de Informática.
Campus de Montegancedo S/N
Universidad Politécnica de Madrid.
Boadilla del Monte. Madrid (Spain)
Teléfono - 91 336 (3673)
---



smime.p7s
Description: S/MIME Cryptographic Signature