[tor-relays] CentOS Tor exit node broken after updating to 2.8.12

2017-02-25 Thread Chris
to ports lower than 1024 but it made no difference. I suspect this an issue with the configuration of the server rather than tor. Where should I start? Best, Chris -- Protect your privacy: encrypt your communications GPG: CF7F98B2 ___ tor-relays mailing

Re: [tor-relays] CentOS Tor exit node broken after updating to 2.8.12

2017-03-16 Thread Chris
Good suggestion, I was indeed getting AVC errors. - Changing to 443 didn't help though. I have returned to the default OrPort of 9001 for now which works and I will try adding 443 to selinux for tor at a later date. Thanks, Chris On 25/02/17 09:23, nusenu wrote: > getsebool -a|g

[tor-relays] Relay has Low Consensus and No Exit Flag Following Upgrade

2017-05-07 Thread Chris
the upgrade has broken it as I had some SELinux issues binding to the ports before - which I resolved. There are no errors in ARM although the log is non existent? - permissions error? The fingerprint is 575F2C60045805ABFDB2B7D7A78982F9571BC277 Where should I start to fix this? Best Wishes, Chris

Re: [tor-relays] List number of circuits per connection

2022-10-19 Thread Chris
You may want to check these links: https://gitlab.torproject.org/tpo/community/support/-/issues/40093 https://github.com/Enkidu-6/tor-ddos https://github.com/toralf/torutils On 10/19/2022 8:47 AM, Logforme wrote: I run the relay

Re: [tor-relays] many connections

2022-10-06 Thread Chris
Hi Richie I was a bit lost myself having to deal with the scripts and additional packages to install. So I put something together for myself based on the same rules and added a few twists but in a simple text n00b proof format. It's as simple

Re: [tor-relays] many connections

2022-10-07 Thread Chris
. On 10/6/2022 1:13 PM, Richie wrote: Hoi, Chris, oh wow, that seems to help a lot. Uptime 1/2 hour now, load 50-60% and six IPs collected according to compare.sh. No signs of overload yet. Thanks a lot, and i'll report, how

Re: [tor-relays] inet_csk_bind_conflict

2022-12-02 Thread Chris
Hi, As I'm sure you've already gathered, your system is maxing out trying to deal with all the connection requests. When inet_csk_get_port is called and the port is found to be occupied then inet_csk_bind_conflict is called to resolve the conflict. So in normal circumstances you shouldn't see it

Re: [tor-relays] inet_csk_bind_conflict

2022-12-05 Thread Chris
opped > below 2 Mbps. > > I've removed all of these new settings and restarted. > > -- > Christopher Sheats (yawnbox) > Executive Director > Emerald Onion > Signal: +1 206.739.3390 > Website: https://emeraldonion.org/ > Mastodon: https://digitalcourage.social/@Em

Re: [tor-relays] inet_csk_bind_conflict

2022-12-06 Thread Chris
ExitPolicy reject 23.129.64.128/25:*,reject6 > [2613:18c:0:192::]/64:*,accept *:*,accept6 *:* > > > > MyFamily > > # end of torrc > > > > -- > Christopher Sheats (yawnbox) > Executive Director > Emerald Onion > Signal: +1 206.739.3390 > Websit

Re: [tor-relays] Tor DDoS Mitigation iptables scripts update. Version 4.0.1

2022-12-05 Thread Chris
/Enkidu-6/tor-ddos/blob/dev/multiple/two-or.sh Let me know how it goes if you decide to have a go at it. Cheers. On 12/3/2022 6:29 AM, Anders Trier Olesen wrote: > Hi Chris > > > Not at all. That's how I'm running my own relays. Just run the > > **combined.sh** on each individual VM

[tor-relays] Tor DDoS Mitigation iptables scripts update. Version 4.0.1

2022-12-01 Thread Chris
Background: A set of bash scripts used to apply iptables rules to fight the current DDoS attacks. They require no dependencies to install except iptable/nftables which all Linux flavors already have and require no particular expertise. The issue was discussed here: [issue

Re: [tor-relays] Tor DDoS Mitigation iptables scripts update. Version 4.0.1

2022-12-02 Thread Chris
on github in case you have any questions, suggestions or simply need further help. On 12/1/2022 11:57 AM, Anders Trier Olesen wrote: > Hi Chris > > We run all the 12 dotsrc relays on a single host with many IP > addresses. Would we need to change anything? > > Btw, you can mak

Re: [tor-relays] preventing DDoS is more than just network filtering

2022-11-10 Thread Chris
On 11/10/2022 2:38 AM, Scott Bennett wrote: Toralf F?rster wrote: On 11/8/22 10:57, Chris wrote: The main reason is that a simple SYN flood can quickly fill up your conntrack table and then legitimate packets

[tor-relays] Tor DDoS Mitigation iptables scripts updated to version 3.0.0

2022-11-09 Thread Chris
Background: A set of bash scripts used to apply iptables rules to fight the current DDoS attacks. They require no dependencies to install except iptable/nftables which all Linux flavors already have and require no particular

[tor-relays] iptables for relays not behind a nat

2013-01-30 Thread Chris Baines
Can anyone help with equivalents of the iptables rules given here https://trac.torproject.org/projects/tor/wiki/doc/TorFAQ#HowcanImakemyrelayaccessibletopeoplestuckbehindrestrictivefirewalls but for a relay on a vps with a static ip? Thanks, Chris

Re: [tor-relays] iptables for relays not behind a nat

2013-01-30 Thread Chris Sheats
verbose sudo ufw reload And of course any other ports that you use, like I do serve my This is an Exit Router page from the same host, so: sudo ufw allow 80/tcp sudo ufw reload Cheers On Wed, Jan 30, 2013 at 12:29 PM, Chris Baines cbain...@gmail.com wrote: Can anyone help with equivalents

[tor-relays] Problems with Debian package and low ports

2013-02-13 Thread Chris Baines
I am having some problems with tor (version 0.2.3.25-1), I get warnings when it resumes form hibernation: Feb 11 00:00:00.000 [warn] Could not bind to 0.0.0.0:80: Permission denied Feb 11 00:00:00.000 [notice] Opening OR listener on 0.0.0.0:443 Can anyone help?

Re: [tor-relays] Support for Relay Operators (signed)

2013-05-03 Thread Chris Sheats
What are the benefits/support of this network? Cheers On May 3, 2013 7:11 AM, Moritz Bartl mor...@torservers.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 The last mail was not signed, because the Mail Merge addon does not work together with Enigmail. Sorry. - cut

[tor-relays] Final Warning Notice

2013-07-09 Thread Chris Sheats
this change may cause you. Please feel free to contact me directly if you have any questions. Sincerely, Operations Manager CondoInternet -- Chris Sheats yawn...@gmail.com ___ tor-relays mailing list tor-relays@lists.torproject.org https

Re: [tor-relays] Final Warning Notice

2013-07-11 Thread Chris Sheats
Mike- On Thu, Jul 11, 2013 at 8:43 AM, Mike Perry mikepe...@torproject.org wrote: Lunar: Chris Sheats: Hey tor-relays, The past few months, since I upgraded my net connection to 1Gbps, I've hit the top 40 fastest relays and the top 20 fastest exit nodes, peaking to over 17 MB/s. I've

Re: [tor-relays] Final Warning Notice

2013-07-11 Thread Chris Sheats
Lunar- On Wed, Jul 10, 2013 at 12:26 AM, Lunar lu...@torproject.org wrote: Chris Sheats: Hey tor-relays, The past few months, since I upgraded my net connection to 1Gbps, I've hit the top 40 fastest relays and the top 20 fastest exit nodes, peaking to over 17 MB/s. I've always prided

Re: [tor-relays] Sitevalley is no longer Tor-friendly

2013-07-30 Thread Chris Patti
. A *lot* of people run bridge nodes there, myself included. -Chris (Running an exit relay in the US cost effectively seems quite difficult) On Thu, Jul 18, 2013 at 11:51 AM, mick m...@rlogin.net wrote: On Thu, 18 Jul 2013 10:49:46 -0400 Tom Ritter t...@ritter.vg allegedly wrote: Sending

Re: [tor-relays] Botnet issues and upgrading to 0.2.4.x

2013-10-14 Thread Chris Whittleston
Thanks Logforme - yeah I was trying that before I sent the first email in this chain, but maybe I didn't go low enough with the advertised bandwidth. When the 0.2.4 compilation is done (it's still chugging along) I'll try going lower and see if it helps. Chris On 14 October 2013 21:38, Logforme

Re: [tor-relays] Botnet issues and upgrading to 0.2.4.x

2013-10-14 Thread Chris Whittleston
all! Chris On 14 October 2013 21:43, Chris Whittleston cs...@cam.ac.uk wrote: Thanks Logforme - yeah I was trying that before I sent the first email in this chain, but maybe I didn't go low enough with the advertised bandwidth. When the 0.2.4 compilation is done (it's still chugging along

Re: [tor-relays] Raspberry Pi binary .debs - 0.2.4.21

2014-03-22 Thread Chris Whittleston
important - please let me know. I know it's long (and goes through some pretty simple stuff), but the idea was to make it accessible to people who weren't otherwise likely to give setting up a relay a try. Chris On 22 March 2014 22:33, Gordon Morehouse gor...@morehouse.me wrote: -BEGIN PGP SIGNED

Re: [tor-relays] Raspberry Pi binary .debs - 0.2.4.21

2014-03-24 Thread Chris Whittleston
are working on :) Chris On 24 March 2014 21:17, Gordon Morehouse gor...@morehouse.me wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, Chris! Chris Whittleston: Thanks for this Gordon M - just thought I'd add that if it's useful for anyone, I threw a Pi Tor (middle) relay setup

Re: [tor-relays] Heartbleed Exchange of keys now or later?

2014-04-09 Thread Chris Whittleston
I've also noticed a big uptick in traffic in the last 24/48 hours which has somewhat overwhelmed my poor Raspberry Pi :( guess we sit tight and wait for things to settle. On 9 Apr 2014 15:27, Sebastian Urbach sebast...@urbach.org wrote: Hi, I recall that Roger Dingledine pointed out that this

[tor-relays] NHS UK blocking Tor?

2014-04-14 Thread Chris Whittleston
- advice on how to approach contacting them to resolve this would be appreciated. Thanks, Chris -- *Dr Chris Whittleston 栗主* Department of Chemistry University of Cambridge Lensfield Road, Cambridge, CB2 1EW Email: cs...@cam.ac.uk Tel: +44 (0)1223 336423

Re: [tor-relays] NHS UK blocking Tor?

2014-04-15 Thread Chris Whittleston
Ross also so we'll see if he has any insight or advice. Here is their reply: - Dear Chris, Thank you for contacting the NHS Choices Service desk Unfortunately the issue you have raised seem to be to with your internet connection

Re: [tor-relays] Recommended reject lines for relays affected by Heartbleed

2014-04-17 Thread Chris Whittleston
FYI guys - The Guardian just published an article about the effect of Heartbleed on the network: Tor may be forced to cut back capacity after Heartbleed bug http://gu.com/p/3zfqj On 17 Apr 2014 12:51, Steve Snyder swsny...@snydernet.net wrote: On 04/17/2014 12:17 AM, Roger Dingledine wrote:

Re: [tor-relays] Recommended reject lines for relays affected by Heartbleed

2014-04-17 Thread Chris Whittleston
://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays -- *Dr Chris Whittleston 栗主* Department of Chemistry University of Cambridge Lensfield Road, Cambridge, CB2 1EW Email: cs...@cam.ac.uk Tel: +44 (0)1223 336423 ___ tor-relays mailing list tor-relays

Re: [tor-relays] A few questions about my setting up my first Tor relay.

2014-04-18 Thread Chris Whittleston
That sounds great Nastase, please share the results! Chris On 18 Apr 2014 23:14, Nastase G. Eduard nastase.edu...@gmail.com wrote: Well, this really convinced me on using Raspberry as a relay. Very nice guide. Due to the very low power consumption I'm thinking on setting relays

[tor-relays] BBC iPlayer blocked for UK middle relay operators?

2014-06-28 Thread Chris Whittleston
use for iPlayer might have started just blocking all Tor IPs recently - including middle relays. Chris ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] BBC iPlayer blocked for UK middle relay operators?

2014-06-28 Thread Chris Whittleston
turning your router off and on' or 'check your IP is registered in the UK with your ISP' - ugh... Thanks for the info all On 28 June 2014 13:23, Paul Blakeman blakey...@mac.com wrote: Chris I have had several issues that appeared whilst running a Tor network. This has happened to me too even

Re: [tor-relays] BBC iPlayer blocked for UK middle relay operators?

2014-06-28 Thread Chris Whittleston
again, thanks for taking the time to contact us. - Chris On 28 June 2014 15:52, Paul Blakeman blakey...@mac.com wrote: Hi all Matthew’s advice is correct. Switching to “modem only” DOES achieve getting a dynamic IP assigned. Not too sure why

Re: [tor-relays] BBC iPlayer blocked for UK middle relay operators?

2014-06-28 Thread Chris Whittleston
FYI - I've just sent another email/contact form to them asking if running a Tor relay could be an issue and explaining in detail the differences between middle and exit relays etc. We shall see if this yields any more useful response from them. I'll keep you posted. On 28 June 2014 16:54, Chris

Re: [tor-relays] Contacting Apple About a Block IP Address

2014-08-13 Thread Chris Whittleston
suggested, notify them off the issue and politely explain where they can find out more about Tor. I found Twitter to be a surprisingly good channel for contacting the BBC tech guys. Good luck getting it resolved, Chris On 13 Aug 2014 18:22, Jesse Victors jvict...@jessevictors.com wrote: -BEGIN

Re: [tor-relays] BBC and UK Lottery blocking ip addresses running relay nodes

2014-09-11 Thread Chris Whittleston
problem...but we can't be sure. I'd get whatever contact details you can from them and explain the problem, what a middle relay is, how it's just you etc and see what they say. Good luck, Chris On 11 September 2014 17:23, Dan Hanley hanley@gmail.com wrote: All I can see

Re: [tor-relays] BBC and UK Lottery blocking ip addresses running relay nodes

2014-09-17 Thread Chris Whittleston
end up having to explain that you're running a relay in the end anyway, but you never know. Chris On 17 September 2014 21:48, Matt Puckey m...@puckey.org wrote: Stephen Mollett: [...] Thank you for contacting the BBC iPlayer support team. I understand you’re experiencing problems

Re: [tor-relays] BBC and UK Lottery blocking ip addresses running relay

2014-09-18 Thread Chris Whittleston
That's great news Dan, keep us posted! Chris On 18 Sep 2014 21:40, Dan Hanley hanley@gmail.com wrote: I have just received a slightly more positive reply: At present, our GeoIP data provider classes Tor nodes as proxies, regardless of whether or not they're an exit node. We understand

Re: [tor-relays] Correctly setting up arm

2014-09-22 Thread Chris Whittleston
Aha - thanks Grace, that explains the initial error for sure! Chris On 22 September 2014 21:53, Grace H. gr...@mail2tor.com wrote: On Mon, 22 Sep 2014 21:34:40 +0100 Chris Whittleston cs...@cam.ac.uk wrote: Am I missing something when it comes to setting up CookieAuthentication? I guess

Re: [tor-relays] Correctly setting up arm

2014-09-22 Thread Chris Whittleston
installing deb.torproject.org-keyring will help prevent those issues in the future. I'll update my Pi relay tutorial with this and the updated arm instructions https://docs.google.com/document/d/1bf_D_j1O-9ckTS9DY8ngIdiFwHta6Q5Uj_5dvOiavCQ/edit?usp=sharing Thanks again both, Chris On 22 September

Re: [tor-relays] Scramblesuit

2014-10-01 Thread Chris Whittleston
://blog.patternsinthevoid.net/isis.txt ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays -- *Dr Chris Whittleston 栗主* Department of Chemistry University of Cambridge Lensfield

Re: [tor-relays] Scramblesuit

2014-10-01 Thread Chris Whittleston
Thanks, will look at that link - sounds interesting indeed! Maybe something to play with in the future. On 2 Oct 2014 01:24, isis i...@torproject.org wrote: Chris Whittleston transcribed 5.0K bytes: I'm right in thinking that running scramblesuit is not going to do anything for a middle

Re: [tor-relays] Arch Linux packages?

2014-10-05 Thread Chris Bero
https://www.archlinux.org/packages/community/x86_64/tor/ https://aur.archlinux.org/packages/arm/ Chris Bero On Sun, Oct 5, 2014 at 8:54 AM, Eric Hocking ehock7...@outlook.com wrote: Hi all, I looked through the Arch Linux repository, and wasn’t able to find any packages for Tor or arm

Re: [tor-relays] Less Traffic on my relay

2014-10-07 Thread Chris Whittleston
, you'll need to slightly modify things, but it should help you get started at least :) Good luck! Chris On 7 Oct 2014 14:57, Tor Zilla torzill...@hotmail.com wrote: Hi Julien, Thanks a lot for your reply. I got your point now.. You are right. I am using a DSL connection and my IP keeps changing

[tor-relays] Avoiding using my own Exit

2015-02-06 Thread Chris Tilt
be lacking clarity. Cheers, Chris ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Very Safe Exit Policy

2015-02-18 Thread Chris Patti
insurance works in the US with 'points' might make sense, but that would totally break the whole point of Tor - to provide anonymity for its users. Bleah. Pesky humans :) -Chris On Tue, Feb 17, 2015 at 11:55 AM, Roger Dingledine a...@mit.edu wrote: On Tue, Feb 17, 2015 at 11:02:45AM -0500

Re: [tor-relays] tor weather not sending emails?

2015-02-10 Thread Chris Whittleston
I've also stopped getting emails from Tor weather for my relay. It has been months since I got anything. On Tue Feb 10 2015 at 12:18:11 Nusenu nus...@openmailbox.org wrote: Hi, I subscribed to tor weather to get notifications in case something is wrong with a relay. Although the relay had

Re: [tor-relays] 7 relays gone because of spammers

2015-02-25 Thread Chris Patti
. -Chris On Wed, Feb 25, 2015 at 1:35 PM, Speak Freely when2plus2...@riseup.net wrote: Hello fellow relay runners, This morning OVH decided to kill 7 of my relays due to spamming, and block all access to all services. I ran the Reduced Exit policy for all of my relays. Due to heightened

[tor-relays] Exit Node Geographical Location

2016-12-08 Thread Chris Adams
Hello, I want to start up another exit node. I have a few choices for which country it's in. I currently live in a country with quite a high exit node/population density. Are there any advantages to distributing nodes around the globe in terms of performance/privacy? Are there some countries

Re: [tor-relays] Creanova hosting Finland

2016-12-08 Thread Chris Adams
ists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > -- Chris Adams <http://chrisada.co.uk> ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Exit Node Geographical Location

2016-12-08 Thread Chris Adams
d to go for geo diversity but usuage remains low for me in > more isolated areas e.g Bangalore,Africa > > regards > > Mark B > > > > On 8 Dec 2016, at 09:53, Chris Adams <ch...@chrisada.co.uk> wrote: > > > > Hello, > > > > I want to start up anothe

Re: [tor-relays] Exit Node Geographical Location

2016-12-09 Thread Chris Adams
Okay, So I've found a ISP in Kenya that says they're happy to host a tor exit node. The ping is 270ms from a Canadian ISP, 16 hops. 183ms from Germany, 13 hops. Ultimately, am I making the tor network better or worse, if I were to set up some tor nodes here? - Chris On Fri, Dec 9, 2016 at 8:41

Re: [tor-relays] Kitten1 and kitten2 compromised (guard/hs/fallback directory)

2017-05-20 Thread Chris Kerr
On Saturday, 20 May 2017 17:31:25 CEST Anders Andersson wrote: > On Sat, May 20, 2017 at 5:20 PM, aeris wrote: > >> Could you please share some more information about the incident? > > > > From what I know and what I can speak about : > > > > A big and sensible French

Re: [tor-relays] Relay has Low Consensus and No Exit Flag Following Upgrade

2017-05-07 Thread Chris Adams
Why is that? Perhaps they tried to measure and it failed? On 7 May 2017 2:39 p.m., "nusenu" wrote: > > I recently upgraded my tor exit relay's tor version to 0.2.8.12. > > > > The uptime is 51 days and it has valid, running and stable flags. > > > > However, it no

Re: [tor-relays] Relay has Low Consensus and No Exit Flag Following Upgrade

2017-05-07 Thread Chris Adams
The update was over 30 days ago. How long should I wait? C On 7 May 2017 4:59 p.m., "Roger Dingledine" <a...@mit.edu> wrote: > On Sun, May 07, 2017 at 02:20:42PM +0100, Chris wrote: > > However, it no longer has the exit node flag and the consensus is very > >

Re: [tor-relays] 10 Years Torservers.net: Death or Future?

2019-05-12 Thread Chris Kerr
On Saturday, 4 May 2019 11:57:24 CEST Moritz Bartl wrote: > The only capacity I can offer is that we *need* someone to step up, and grab > me at some event in meatspace. Ideally at that point that person is willing > to have the A record pointed at some new place under their control, and we >

[tor-relays] Best practice for tor-exit node when I switch internet providers?

2019-06-28 Thread Chris Dagdigian
address. -Chris ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

[tor-relays] Cherryservers (formerly balticservers) account terminated for exit relay

2019-07-30 Thread Chris Kerr
I just heard from the hosting provider cherryservers.com that they are terminating my account (after 2.5 years) where I run the exit relay "ostwaldripening" (46.166.162.53), because they no longer wish to host tor exit nodes. I tried to create an account on trac.torproject.org to edit the

Re: [tor-relays] Log warning : possible (zlib) compression bomb on middle relays

2020-11-02 Thread Chris Dagdigian
Same on my US exit relay: Nov 02 04:03:50.000 [warn] Possible zlib bomb; abandoning stream. Nov 02 04:03:50.000 [warn] Possible zlib bomb; abandoning stream. Christoph Graf November 2, 2020 at 11:59 AM Same here on my bridge: Nov  2 06:21:04 raspipfupf

Re: [tor-relays] Exit relay operators please help test #2667 branch

2021-01-28 Thread Chris Dagdigian
Have a tor exit running in the US ; fingerprint is 3DE567C1350C0E858C6147AECB06EA9B3EAF3261 and OR address is 71.174.105.126:9001 Just built and launched the ticket-2667 branch; came up as: [notice] Tor 0.4.6.0-alpha-dev running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.1t, Zlib

Re: [tor-relays] Tor project helping to attempt to cancel Richard Stallman

2021-03-26 Thread Chris Dagdigian
Roman Mamedov wrote on 3/26/21 11:10 AM: Could be important to note that no harassment allegations were ever aimed at RMS himself, he's just being attacked for posting a personal opinion about unrelated events. The mattress on the floor of his MIT office and the 30 year history of him

Re: [tor-relays] Tor project helping to attempt to cancel Richard Stallman

2021-03-25 Thread Chris Dagdigian
I've already tripled the bandwidth and burst settings on my US exit relay that I've been running for many years in honor of the poutrage flounces we've seen today niftybunny wrote on 3/25/21 3:37 PM: I will spin up 2 relays for every relay this guy and other RMS supporters will shut down.

Re: [tor-relays] Relay Bandwidth

2023-04-04 Thread Chris Enkidu-6
Hi, The reason you find the answers confusing is because the whole thing is confusing. A lot of what you see advertised by hosts is somehow misleading. For example they advertise a 1000 mb/s network speed and then they give you 3 TB of bandwidth. The truth is that even if you have a sustained

[tor-relays] Questions about 4 Relays per IP and the ddos mitigation scripts

2023-02-06 Thread Chris Enkidu-6
Hello Everyone, Before I make changes to [my scripts](https://github.com/Enkidu-6/tor-ddos), I need to understand a few things and any help is much appreciated. - First, Does an Exit relay with zero Guard probability and zero middle relay probability need to initiate circuits with a Guard or

Re: [tor-relays] Questions about 4 Relays per IP and the ddos mitigation scripts

2023-02-07 Thread Chris Enkidu-6
@nusenu Thank you very much for taking the time to help me understand things better. I can use all the help I can get.     > You can also not be sure whether it is an actual authenticated relay to relay     > connection or a client to relay connection just by looking at the source IP.     > In

Re: [tor-relays] Questions about 4 Relays per IP and the ddos mitigation scripts

2023-02-07 Thread Chris Enkidu-6
t; just spin up 8 new relays per IP.) > > Also, it might be good to have a more conservative (higher) rate limit > by default and > let users turn it down as necessary. > -- > Danny > > On Tue, Feb 7, 2023 at 8:34 AM Chris Enkidu-6 <mailto:t...@wcbsecurity.

Re: [tor-relays] Questions about 4 Relays per IP and the ddos mitigation scripts

2023-02-07 Thread Chris Enkidu-6
> DDoS rate limit filters do not require an all or nothing approach, > different source IPs can be handled differently > see toralf's use of onionoo to feed ipsets as an example. > I would recommend to use tor's controlport as a source of information instead > though > because onionoo is not

Re: [tor-relays] Receiving abuse reports for Non-Exit Relay

2023-07-27 Thread Chris Enkidu-6
As others have mentioned, this does not look like a Tor issue to me. It more seems like a compromised or misconfigured server. You mentioned you reinstalled the OS. Did you use the same root password? My suggestion is that you go about this step by step. First reinstall the OS with a different

Re: [tor-relays] Way to be notified when relay goes offline?

2024-02-04 Thread Chris Enkidu-6
Or, like me, you can run your own monitoring service: https://github.com/louislam/uptime-kuma docker-compose.yml  content: ``` version: '3.8' services:   uptime-kuma:     image: louislam/uptime-kuma:latest     container_name: uptime-kuma     volumes:   - uptime-kuma:/app/data     ports:   

Re: [tor-relays] Relay data limit

2023-12-22 Thread Chris Enkidu-6
Hi Dan, There's of course another option. Change your provider unless it's important to you to use them in particular. The market is full of good deals with very good bandwidth allowances. I really don't understand how some providers can get away with using bandwidth as money grab. I use my own

Re: [tor-relays] Exit operators on the 0.4.8.x series, please upgrade to 0.4.8.10 ASAP!

2023-12-08 Thread Chris Enkidu-6
And epel repo for Centos and Almalinux pretty please... On 12/8/2023 3:20 PM, Georg Koppen wrote: > Hello exit node operators! > > Today (2023-12-08) the Network Team has released a new Tor version, > 0.4.8.10[1]. This update contains a fix to a remotely triggerable > crash bug (TROVE-2023-007)

Re: [tor-relays] Relay that's been running for a long time suddenly saying it's new?

2024-01-15 Thread Chris Enkidu-6
It's not just you. 3 of my relays show as new for the past few days and they still do. It doesn't seem to affect the traffic though so I'm assuming it's just a reporting issue and Authorities don't see your relay as new. On 1/12/2024 1:00 PM, Keifer Bly wrote: > Hi, > > So my relay > at  >

[tor-relays] A new kind of attack?

2024-01-15 Thread Chris Enkidu-6
I've noticed a new kind of possible attack on some of my relays, as early as Dec.23 which causes huge spikes of outbound traffic that eventually maxes out RAM and crashes Tor. The newest one today lasted for 5 hours switching between two of the three relays on the same IP. During the attack, Tor

Re: [tor-relays] Relay no longer acting as a gaurd node?

2023-11-11 Thread Chris Enkidu-6
Just wondering, you haven't set a bandwidth limit on that node, have you? Setting an AccountingMax directive will cause you to lose your Guard flag since your server can't be available at all times. On 11/9/2023 10:03 AM, Jonathan Proulx wrote: > Hi All, > > A little while ago one of my relays