Re: [tor-bugs] #32891 [Applications/Tor Browser]: Set up default bridge in Denmark

[Tor Bug Tracker & Wiki]

#32891: Set up default bridge in Denmark
-+-
 Reporter:  phw  |  Owner:  tbb-
 |  team
 Type:  task | Status:  closed
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-bridges, TorBrowserTeam202001R,  |  implemented
  9.5a5, 9.0.5   |  Actual Points:
Parent ID:   | Points:  0.2
 Reviewer:  boklm|Sponsor:
-+-
Changes (by sysrqb):

 * keywords:  tbb-bridges, TorBrowserTeam202001R, 9.5a5, 9.0.4 => tbb-
 bridges, TorBrowserTeam202001R, 9.5a5, 9.0.5


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #32891 [Applications/Tor Browser]: Set up default bridge in Denmark

[Tor Bug Tracker & Wiki]

#32891: Set up default bridge in Denmark
-+-
 Reporter:  phw  |  Owner:  tbb-
 |  team
 Type:  task | Status:  closed
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-bridges, TorBrowserTeam202001R,  |  implemented
  9.5a5, 9.0.4   |  Actual Points:
Parent ID:   | Points:  0.2
 Reviewer:  boklm|Sponsor:
-+-
Changes (by sysrqb):

 * keywords:  tbb-bridges, TorBrowserTeam202001R => tbb-bridges,
 TorBrowserTeam202001R, 9.5a5, 9.0.4


Comment:

 Replying to [comment:8 sysrqb]:
 > Replying to [comment:7 boklm]:
 > > Replying to [comment:4 phw]:
 > > > * My task/32891 branch [https://github.com/NullHypothesis/tor-
 browser-build/commit/21faabfdbf08dbf25ff1fcf77c54d684b15c6fa1 has a patch]
 for tor-browser-build.
 > >
 > > This looks good to me. I merged the patch to master with commit
 `215aed39ee177bd0a371e8e4b6d7de3fcf69ffed`, and cherry-picked it to
 `maint-9.0` as commit `82672d50af26c862214f3c1c2670897f94a9dbf9`.
 > >
 > > > * My task/32891 branch [https://github.com/NullHypothesis/tor-
 android-service/commit/694ef51f3a59c39c74bd22d1a1ee48f4b91d235f has a
 patch] for tor-android-service.
 > >
 > > This looks good to me too, however I don't have write access on this
 repository, so someone else (sysrqb?) will have to push it.
 >
 > Thanks! Merged this as `18ba7d2780b1d5194cc5854d703655f6c9d3d196`.
 And merged on maint-9.0 as commit
 `0d50bcb46dc0ec08c7076d26da3eb561ba10d6b1`.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #32891 [Applications/Tor Browser]: Set up default bridge in Denmark

[Tor Bug Tracker & Wiki]

#32891: Set up default bridge in Denmark
+--
 Reporter:  phw |  Owner:  tbb-team
 Type:  task| Status:  closed
 Priority:  Medium  |  Milestone:
Component:  Applications/Tor Browser|Version:
 Severity:  Normal  | Resolution:
|  implemented
 Keywords:  tbb-bridges, TorBrowserTeam202001R  |  Actual Points:
Parent ID:  | Points:  0.2
 Reviewer:  boklm   |Sponsor:
+--
Changes (by sysrqb):

 * status:  needs_review => closed
 * resolution:   => implemented


Comment:

 Replying to [comment:7 boklm]:
 > Replying to [comment:4 phw]:
 > > * My task/32891 branch [https://github.com/NullHypothesis/tor-browser-
 build/commit/21faabfdbf08dbf25ff1fcf77c54d684b15c6fa1 has a patch] for
 tor-browser-build.
 >
 > This looks good to me. I merged the patch to master with commit
 `215aed39ee177bd0a371e8e4b6d7de3fcf69ffed`, and cherry-picked it to
 `maint-9.0` as commit `82672d50af26c862214f3c1c2670897f94a9dbf9`.
 >
 > > * My task/32891 branch [https://github.com/NullHypothesis/tor-android-
 service/commit/694ef51f3a59c39c74bd22d1a1ee48f4b91d235f has a patch] for
 tor-android-service.
 >
 > This looks good to me too, however I don't have write access on this
 repository, so someone else (sysrqb?) will have to push it.

 Thanks! Merged this as `18ba7d2780b1d5194cc5854d703655f6c9d3d196`.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #32891 [Applications/Tor Browser]: Set up default bridge in Denmark

[Tor Bug Tracker & Wiki]

#32891: Set up default bridge in Denmark
+--
 Reporter:  phw |  Owner:  tbb-team
 Type:  task| Status:
|  needs_review
 Priority:  Medium  |  Milestone:
Component:  Applications/Tor Browser|Version:
 Severity:  Normal  | Resolution:
 Keywords:  tbb-bridges, TorBrowserTeam202001R  |  Actual Points:
Parent ID:  | Points:  0.2
 Reviewer:  boklm   |Sponsor:
+--
Changes (by boklm):

 * cc: sysrqb (added)


Comment:

 Replying to [comment:4 phw]:
 > * My task/32891 branch [https://github.com/NullHypothesis/tor-browser-
 build/commit/21faabfdbf08dbf25ff1fcf77c54d684b15c6fa1 has a patch] for
 tor-browser-build.

 This looks good to me. I merged the patch to master with commit
 `215aed39ee177bd0a371e8e4b6d7de3fcf69ffed`, and cherry-picked it to
 `maint-9.0` as commit `82672d50af26c862214f3c1c2670897f94a9dbf9`.

 > * My task/32891 branch [https://github.com/NullHypothesis/tor-android-
 service/commit/694ef51f3a59c39c74bd22d1a1ee48f4b91d235f has a patch] for
 tor-android-service.

 This looks good to me too, however I don't have write access on this
 repository, so someone else (sysrqb?) will have to push it.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #32891 [Applications/Tor Browser]: Set up default bridge in Denmark

[Tor Bug Tracker & Wiki]

#32891: Set up default bridge in Denmark
+--
 Reporter:  phw |  Owner:  tbb-team
 Type:  task| Status:
|  needs_review
 Priority:  Medium  |  Milestone:
Component:  Applications/Tor Browser|Version:
 Severity:  Normal  | Resolution:
 Keywords:  tbb-bridges, TorBrowserTeam202001R  |  Actual Points:
Parent ID:  | Points:  0.2
 Reviewer:  boklm   |Sponsor:
+--
Changes (by boklm):

 * reviewer:   => boklm


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #32891 [Applications/Tor Browser]: Set up default bridge in Denmark

[Tor Bug Tracker & Wiki]

#32891: Set up default bridge in Denmark
+--
 Reporter:  phw |  Owner:  tbb-team
 Type:  task| Status:
|  needs_review
 Priority:  Medium  |  Milestone:
Component:  Applications/Tor Browser|Version:
 Severity:  Normal  | Resolution:
 Keywords:  tbb-bridges, TorBrowserTeam202001R  |  Actual Points:
Parent ID:  | Points:  0.2
 Reviewer:  |Sponsor:
+--
Changes (by gk):

 * keywords:  tbb-bridges => tbb-bridges, TorBrowserTeam202001R


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #32891 [Applications/Tor Browser]: Set up default bridge in Denmark

[Tor Bug Tracker & Wiki]

#32891: Set up default bridge in Denmark
--+--
 Reporter:  phw   |  Owner:  tbb-team
 Type:  task  | Status:  needs_review
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-bridges   |  Actual Points:
Parent ID:| Points:  0.2
 Reviewer:|Sponsor:
--+--
Changes (by phw):

 * status:  new => needs_review


Comment:

 * My task/32891 branch [https://github.com/NullHypothesis/tor-browser-
 build/commit/21faabfdbf08dbf25ff1fcf77c54d684b15c6fa1 has a patch] for
 tor-browser-build.
 * My task/32891 branch [https://github.com/NullHypothesis/tor-android-
 service/commit/694ef51f3a59c39c74bd22d1a1ee48f4b91d235f has a patch] for
 tor-android-service.

 I also updated our [https://dip.torproject.org/torproject/anti-censorship
 /sysmon-configuration/commit/bb8aa3964d4bf55d5380c9465bbb81343ef03bc4
 sysmon.conf] and added both bridges to our
 
[https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/DefaultBridges?action=diff=41
 default bridges wiki page].

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #32891 [Applications/Tor Browser]: Set up default bridge in Denmark

[Tor Bug Tracker & Wiki]

#32891: Set up default bridge in Denmark
--+--
 Reporter:  phw   |  Owner:  tbb-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-bridges   |  Actual Points:
Parent ID:| Points:  0.2
 Reviewer:|Sponsor:
--+--

Comment (by tohojo):

 Yes. In case anyone wants to replicate it, I setup the port using systemd
 sockets and netcat, using these two files:

 {{{/etc/systemd/system/tor-proxy-defaultbr.socket}}}:
 {{{
 [Unit]
 Description=Socket for IPv6 proxying of Tor defaultbr

 [Socket]
 ListenStream=[2a0c:4d80:42:702::1]:27015
 BindIPv6Only=yes
 Accept=yes
 TriggerLimitIntervalSec=0

 [Install]
 WantedBy=multi-user.target
 }}}

 {{{/etc/systemd/system/tor-proxy-defaultbr@.service}}}:
 {{{
 [Unit]
 Description=Tor defaultbr netcat proxy

 [Service]
 ExecStart=/bin/nc 45.145.95.6 27015
 StandardInput=socket
 StandardOutput=socket
 StandardError=journal
 SuccessExitStatus=1
 }}}

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #32891 [Applications/Tor Browser]: Set up default bridge in Denmark

[Tor Bug Tracker & Wiki]

#32891: Set up default bridge in Denmark
--+--
 Reporter:  phw   |  Owner:  tbb-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-bridges   |  Actual Points:
Parent ID:| Points:  0.2
 Reviewer:|Sponsor:
--+--

Comment (by phw):

 For the record, we ran into an issue with the IPv6 bridge because it was
 configured to be IPv6-only, meaning that it did not have an IPv4 address
 in its descriptor. This resulted in the bridge being unable to create its
 own descriptor and I was unable to bootstrap a connection over the bridge.
 We solved this problem by running an IPv4-only bridge and configuring a
 port forward from an IPv6 address to the IPv4 address.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #32891 [Applications/Tor Browser]: Set up default bridge in Denmark

[Tor Bug Tracker & Wiki]

#32891: Set up default bridge in Denmark
--+--
 Reporter:  phw   |  Owner:  tbb-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-bridges   |  Actual Points:
Parent ID:| Points:  0.2
 Reviewer:|Sponsor:
--+--

Comment (by tohojo):

 Right, running a v4 and a v6 bridge now with these configs:

 v4:
 {{{
 SocksPort 0
 ExtORPort auto
 ExitPolicy reject *:*

 # memory
 MaxMemInQueues 1 GB

 # more useful statistics
 EntryStatistics 1
 ExtraInfoStatistics 1
 HeartbeatPeriod 1 hour
 AssumeReachable 1

 # obfs4 and parameters
 ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy
 ServerTransportOptions obfs4 iatMode=0

 # announce bridges
 BridgeRelay 1
 BridgeDistribution none

 # These ports must be externally reachable.  Avoid port 9001.
 ServerTransportListenAddr obfs4 45.145.95.6:27015
 OutboundBindAddress [2a0c:4d80:42:702::1]
 OutboundBindAddress 45.145.95.6
 ORPort 45.145.95.6:27018

 # identity
 Nickname dktoke
 ContactInfo ab...@toke.dk
 }}}

 v6:
 {{{
 SocksPort 0
 ExtORPort auto
 ExitPolicy reject *:*

 # memory
 MaxMemInQueues 1 GB

 # more useful statistics
 EntryStatistics 1
 ExtraInfoStatistics 1
 HeartbeatPeriod 1 hour
 AssumeReachable 1

 # obfs4 and parameters
 ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy
 ServerTransportOptions obfs4 iatMode=0

 # announce bridges
 BridgeRelay 1
 BridgeDistribution none

 # These ports must be externally reachable.  Avoid port 9001.
 ServerTransportListenAddr obfs4 [2a0c:4d80:42:702::1]:27015
 OutboundBindAddress [2a0c:4d80:42:702::1]
 OutboundBindAddress 45.145.95.6
 ORPort [2a0c:4d80:42:702::1]:27018

 # identity
 Nickname dktoke6
 ContactInfo ab...@toke.dk
 }}}

 Bridge lines:
 {{{
 obfs4 45.145.95.6:27015 C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C
 cert=TD7PbUO0/0k6xYHMPW3vJxICfkMZNdkRrb63Zhl5j9dW3iRGiCx0A7mPhe5T2EDzQ35+Zw
 iat-mode=0
 obfs4 [2a0c:4d80:42:702::1]:27015 EFEBBDE5685DDF3E268A8E1D6CE6837C4910D4B3
 cert=zLXgiAK19V3FYc8cKsSyO0bZwhUBw37ZVhLyP1sH5SeMwdfXZURyEcF3DUesMNzsY7JseQ
 iat-mode=0
 }}}

 Also available in DNS as {{{tor-bridge.toke.dk}}}.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs