Re: [tor-talk] ExcludeExitNodes doesn't take effect at all.

[Hongyi Zhao]

2016-10-17 20:23 GMT+08:00 Geoff Down :
>
>
> On Mon, Oct 17, 2016, at 02:49 AM, Hongyi Zhao wrote:
>> The command for obtaining the ExcludeExitNodes list is as follows:
>>
>> $ curl -s https://collector.torproject.org/recent/exit-lists/ | grep
>> -E -m1 'href=\"[0-9-]+\"' | tr '"' '\n' | grep -E '^[0-9-]+' | xargs
>> -r -I{} curl -s https://collector.torproject.org/recent/exit-lists/{}
>> | grep -Po '(\d+\.){3}\d+' | paste -sd,
>>
> It looks like you are extracting the IP addresses. It should be the
> fingerprints.

But, from the in-place manual page of tor, I can find the following description:

-
|   ExcludeExitNodes node,node,...
|   A list of identity fingerprints, country codes, and address
|   patterns of nodes to never use when picking an exit node---that is,
|   a node that delivers traffic for you outside the Tor network. Note
|   that any node listed in ExcludeNodes is automatically considered to
|   be part of this list too. See the ExcludeNodes option for more
|   information on how to specify nodes. See also the caveats on the
|   "ExitNodes" option below.
---

As you can see, all of the fingerprints, country codes, and address
patterns can be acceptable for using as ExcludeExitNodes.  Why you say
that: "It should be the fingerprints."?

As a result, I still cann't figure out what's the reason for my
original issue posted in this thread.

Regards

> GD
>
> --
> http://www.fastmail.com - Access all of your messages and folders
>   wherever you are
>



-- 
Hongyi Zhao 
Xinjiang Technical Institute of Physics and Chemistry
Chinese Academy of Sciences
GnuPG DSA: 0xD108493
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] ExcludeExitNodes doesn't take effect at all.

[Geoff Down]

On Mon, Oct 17, 2016, at 02:49 AM, Hongyi Zhao wrote:
> The command for obtaining the ExcludeExitNodes list is as follows:
> 
> $ curl -s https://collector.torproject.org/recent/exit-lists/ | grep
> -E -m1 'href=\"[0-9-]+\"' | tr '"' '\n' | grep -E '^[0-9-]+' | xargs
> -r -I{} curl -s https://collector.torproject.org/recent/exit-lists/{}
> | grep -Po '(\d+\.){3}\d+' | paste -sd,
> 
It looks like you are extracting the IP addresses. It should be the
fingerprints.
GD

-- 
http://www.fastmail.com - Access all of your messages and folders
  wherever you are

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

[tor-talk] ExcludeExitNodes doesn't take effect at all.

[Hongyi Zhao]

Hi all,

I try to test the ExcludeExitNodes parameter of tor, so I use the
latest exit-lists from here to construct the list for using in
ExcludeExitNodes:

https://collector.torproject.org/recent/exit-lists/

The command for obtaining the ExcludeExitNodes list is as follows:

$ curl -s https://collector.torproject.org/recent/exit-lists/ | grep
-E -m1 'href=\"[0-9-]+\"' | tr '"' '\n' | grep -E '^[0-9-]+' | xargs
-r -I{} curl -s https://collector.torproject.org/recent/exit-lists/{}
| grep -Po '(\d+\.){3}\d+' | paste -sd,

Then I use the above result as the node-list of ExcludeExitNodes, at
the same time, I set the following parameter in my torrc:

StrictNodes 1

Finally, I start the tor client for surfing the internet, and find
that it still can use the IPs listed in the  ExcludeExitNodes as the
exit node.

Any hints for this issue?

Regards
-- 
Hongyi Zhao 
Xinjiang Technical Institute of Physics and Chemistry
Chinese Academy of Sciences
GnuPG DSA: 0xD108493
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk