Re: [tor-relays] Tor Weather has been discontinued

2016-06-12 Thread Markus Koch
http://imgur.com/4knvU6F 2016-06-12 23:29 GMT+02:00 Green Dream : > Do you guys really run relays just for the t-shirt? Aren't there more > important reasons to run a relay, like serving the community, being an > advocate for privacy, and acting against surveillance and

Re: [tor-relays] TOR router install without access to root

2016-05-25 Thread Markus Koch
ility. " > > Is this your experience as well? > > Paul > > > Am 25.05.2016 um 10:16 schrieb Markus Koch: >> Linux, would like to upgrade my accounts at feralhosting.com with tor >> nodes. It must be possible because there are a lot of TOR nodes on >> fer

Re: [tor-relays] TOR router install without access to root

2016-05-25 Thread Markus Koch
eetings! > > Op 25 mei 2016 7:45 p.m. schreef "Markus Koch" <niftybu...@googlemail.com>: >> >> My experience is: This is the best hosting companyI ever had and I am >> doing this for over 20 years. I will not run an exit node and I am >> sure I will be fi

Re: [tor-relays] DDOS

2016-06-14 Thread Markus Koch
Or you get e-mails ... --- Hi there, Our system has automatically detected an inbound DDoS against your droplet named niftyguineapig with the following IP Address: 178.62.71.57 As a precautionary measure, we have temporarily disabled network traffic to your droplet to protect our

[tor-relays] DDOS

2016-06-13 Thread Markus Koch
4 of my 5 tor servers are under a incoming DDOS attack. Am I the only one or is anyone else feeling the "love"? Markus ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

[tor-relays] tor middle node question

2016-01-26 Thread Markus Koch
hi, as a good TOR support peon I got a dedicated server and set up TOR 3-4 weeks ago. Everything went great, I got my Guard, Fast and Stable etc. Flag and my little server was busy & happy. After restarting the TOR daemon I lost all my flags and even after 12 hours I only got Running and Valid

Re: [tor-relays] Netflix overblocking non-exit Tor relays

2016-02-27 Thread Markus Koch
I dont think its hostility. For the normal support assistant security and/or TOR is like a black hole and they do not know anything about it or know stuff from the mainstream press which is mostly complete bullshit. I would not blame the support person, try to get a supervisor who knows what we

Re: [tor-relays] DDoS attack on relay

2016-01-26 Thread Markus Koch
Not today, but it happens quite often I get nice abuse mails like this: Direction IN Internal 188.40.99.164 Threshold PacketsDiff 200.000 packets/s, Diff: 475.160 packets/s Sum 142.643.000 packets/300s (475.476 packets/s), 5 flows/300s (0 flows/s), 198,002 GByte/300s (5.406 MBit/s) External

Re: [tor-relays] tor middle node question

2016-01-26 Thread Markus Koch
Thank you. TIL: Do not touch anything on your server. :) 2016-01-26 13:16 GMT+01:00 Kurt Besig <kbe...@socal.rr.com>: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 1/26/2016 12:58 AM, Markus Koch wrote: >> hi, >> >> as a good TOR support peon I g

[tor-relays] routing script

2016-02-18 Thread Markus Koch
Hi, after having four entry/middle nodes online I would like to help out with an exit node. Unfortunately you will get in a lot of trouble in Germany for hosting an exit node. I spoke with an VPN provider and they are okay with routing tor traffic over their VPN as long I have exit rulez etc. The

Re: [tor-relays] routing script

2016-02-18 Thread Markus Koch
Thank you, I contacted them a few days before. Unfortunately they cant really help me with routing on Linux and I use my servers for other stuff too so I dont really want to sponsor a dedicated server as an exit node. Dual use 4 the win :) 2016-02-19 0:46 GMT+01:00 I :

Re: [tor-relays] routing script

2016-02-18 Thread Markus Koch
s a month. You > could configure one as an exit node. > > Cheers, > > K. > > > > On 18/02/16 23:16, Markus Koch wrote: >> Hi, >> >> after having four entry/middle nodes online I would like to help out >> with an exit node. Unfortunately you will get i

Re: [tor-relays] routing script

2016-02-18 Thread Markus Koch
At the moment I am hosting with online.net and hetzner with over 1 Petabyte traffic so its not really my home connection :) But both have my personal information and Hetzner even needed a copy of my passport so I am very cautious. But this URL looks great. Any recommendations? Btw, how long does

Re: [tor-relays] Exit node situation in Finland

2016-04-06 Thread Markus Koch
2016-04-06 7:24 GMT+02:00 Juuso Lapinlampi : >and thanks to > Ficora pretty much every building built after 2014 or 2015 has fiber > access and 100-1000 Mbps connections (atypical). Thx for letting the rest of Europe know. I will now cry me to sleep while hugging my PTSD teddy

Re: [tor-relays] Guard flag?

2016-04-07 Thread Markus Koch
As a CCNP R and Security: STOP using bytes in networking. Networking is measured in bits for fluffys sake. 2016-04-07 20:32 GMT+02:00 SuperSluether : > My mistake, 2Mbits does mean 250 KBytes. I get confused when converting > bits/bytes. Sorry for that confusion.

Re: [tor-relays] NPR story: When A Dark Web Volunteer Gets Raided By The Police

2016-04-07 Thread Markus Koch
The issue is: How do you know a exit server is compromised? As a CCNP I can configure a SPAN Port in 30 seconds and suck all the exit traffic out of it without any indication for the server owner. Even if he visit his server in the data center and no one visit their servers :/ 2016-04-08 1:42

Re: [tor-relays] Unmetered brandwith hosting

2016-04-13 Thread Markus Koch
I can recommend https://www.feralhosting.com for your torrent needs :) No not mix things up with exitnodes. 2016-04-11 23:28 GMT+02:00 CJ Barlow : > If you are looking to torrent it's best to use a seedbox (a VPS dedicated to > torrents). I doubt there are any really good

Re: [tor-relays] NPR story: When A Dark Web Volunteer Gets Raided By The Police

2016-04-07 Thread Markus Koch
Even if he is formating all the things: You can't be sure that any middle/exit/guard node is compromised. How do you know I am one of the good guys with my nodes? You can't. I could role play here and in reality be a member of the super secret society of the supreme awesome bunnies to take over

Re: [tor-relays] Tor Weather has been discontinued

2016-04-04 Thread Markus Koch
Any chance I could *buy* some t-shirts? I am running 4 tor middles nodes atm and 2 exit nodes coming soon and I would kill for some t-shirts. 2016-04-04 16:48 GMT+02:00 Karsten Loesing : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Dear relay operators, > > as

Re: [tor-relays] New month, new TOR exit servers, need ELI5 pls

2016-05-22 Thread Markus Koch
2016-05-22 16:30 GMT+02:00 Random Tor Node Operator <t...@unterderbruecke.de>: > On 05/22/2016 04:00 PM, Markus Koch wrote: >> Yes, but how many ports do I have to open to be "useful"? In an >> extreme case: Would it help just to forward port 80 and 433? > > I

Re: [tor-relays] New month, new TOR exit servers, need ELI5 pls

2016-05-22 Thread Markus Koch
Port 6667 ... long time no see thank you for the information! markus 2016-05-22 16:10 GMT+02:00 Felix Eckhofer <fe...@tribut.de>: > Hey. > > Am 22.05.2016 16:00, schrieb Markus Koch: >> >> Yes, but how many ports do I have to open to be "useful"? In a

Re: [tor-relays] Tor authorities blocked by Cisco Senderbase

2016-05-12 Thread Markus Koch
As a CCNP: WELCOME TO CISCO! *sigh* I need more booze for this ... 2016-05-12 23:47 GMT+02:00 Zwiebel : > > I've contacted them about this via [1] and explained that these hosts are > most likely not malicious and got a replay via e-mail saying that they will >

Re: [tor-relays] https://itldc.com/

2016-05-01 Thread Markus Koch
>> On May 1, 2016 6:12:29 PM GMT+02:00, Markus Koch <niftybu...@googlemail.com> >> wrote: >> its fair to say they are fed up and dont want to have any Tor Exit >> Nodes anymore. Just revieved: >> >> Subject: Lots of abuse reports (ID 234162) >> ---

[tor-relays] https://itldc.com/

2016-05-01 Thread Markus Koch
its fair to say they are fed up and dont want to have any Tor Exit Nodes anymore. Just revieved: Subject: Lots of abuse reports (ID 234162) Hi, We receive abuse reports regarding your VDS from our colleagues. At least: 1) Registrations

[tor-relays] I am failing with newbie stuff :((((

2016-04-20 Thread Markus Koch
hi there, just got 3 new didiservers and would like to move my old tor nodes over to the brand new hardware. I am running the latest Debian version. I copied /etc/tor/* and /var/lib/tor/* to the new servers. I thought this should do the trick that I get the same key etc and Tor will think this is

Re: [tor-relays] TOR router install without access to root

2016-05-25 Thread Markus Koch
need a > root access to the server. > It will create a debian-tor group, write into the system... > > Or if your user is in the "sudo" group, it can be ok. > > On windows, I'm not sure if there's a portable version of Tor... > portable = no need to install > >

Re: [tor-relays] TOR router install without access to root

2016-05-25 Thread Markus Koch
Thank you. What about the config filez in /etc/tor/ ... /etc/ should be root only? Sent from my iPad > On 25 May 2016, at 10:24, Sebastian Niehaus <nieh...@web.de> wrote: > >> Am 25.05.2016 um 10:16 schrieb Markus Koch: >> Linux, would like to upgrade my accounts at f

[tor-relays] TOR router install without access to root

2016-05-25 Thread Markus Koch
possible or do I have to ask my hosting company for the install on a shared server? Markus ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

[tor-relays] switching between exit and guard

2016-07-26 Thread Markus Koch
Hi there, now I am getting abuse mails nearly every day and digital ocean looks like getting pissed off. Is it technical possible to switch between exit and guard so I only run an exit for 14 days a months (less abuse mails per month if it is a exit only 14 days). Or is this a really bad idea?

Re: [tor-relays] switching between exit and guard

2016-07-27 Thread Markus Koch
l 26, 2016 at 5:43 PM Tristan <supersluet...@gmail.com> wrote: >> >> Oh dear, I'll take this as a warning since I just spun up a Tor droplet >> with DO not too long ago. >> >> >> On Jul 26, 2016 4:48 PM, "Markus Koch" <niftybu...@googlemail.com>

Re: [tor-relays] switching between exit and guard

2016-07-27 Thread Markus Koch
> On 27 Jul 2016, at 12:06, Mirimir <miri...@riseup.net> wrote: > >> On 07/27/2016 02:30 AM, Markus Koch wrote: >> I am all in for a "hide the exit node with a VPN" solution. But pls >> make it dummy proof for people like me :) > > It's not such a great

Re: [tor-relays] switching between exit and guard

2016-07-26 Thread Markus Koch
I looked 8 hours for a better home and after 8 hours I was exhausted from laughing of offers like "VPS 25 gigz traffic and $120 price tag in panama". I simply have not the money to host on expensive datacenters and most of the offers out there are max 1 terrabyte... thats a joke for any of my tor

Re: [tor-relays] cheap unmetered non-exit VPS offers

2016-07-28 Thread Markus Koch
Just chatted with the Support and I highly doubt they are knowing what they are doing, anyway setup one exit relay and will report back after my first abuse mail. This will be fun :) btw: Jul 28 15:24:19.832 [warn] Failed to parse/validate config: Nickname 'niftychinchillarabbit' is wrong length

Re: [tor-relays] cheap unmetered non-exit VPS offers

2016-07-28 Thread Markus Koch
exit allowed? 2016-07-28 13:59 GMT+02:00 tor relay : > > On July 28, 2016 at 9:11 AM Roman Mamedov wrote: > > On Thu, 28 Jul 2016 08:09:12 +0100 > "Louie Cardone-Noott" wrote: > > Am I right in thinking that even 2 TByte/month is

Re: [tor-relays] AWS abuse handling

2016-07-27 Thread Markus Koch
15 Gb? I think this must be typo. Markus Sent from my iPad > On 27 Jul 2016, at 20:42, Snehan Kekre wrote: > > On 07/27/2016 11:04 PM, Toralf Förster wrote: > > >> (/capped/ at 15GB/month of traffic each way). > >seems to be just 5 KB/sec, or ? > > I've set

Re: [tor-relays] AWS abuse handling

2016-07-27 Thread Markus Koch
gt; On Wed, Jul 27, 2016 at 11:48 AM, Markus Koch <niftybu...@googlemail.com> >> wrote: >> 15 Gb? I think this must be typo. >> >> Well they do say >> "Data Transfer >> >> 15 GB of bandwidth out aggr

Re: [tor-relays] cheap unmetered non-exit VPS offers

2016-07-28 Thread Markus Koch
> > no, that is why I put "non-exit" in the subject of my email. > > https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs#Italy1 > > And yes, their support is poor, but as long as your servers run you won't > need them. Looking it up: SEFLOW Avoid it. they say it's against Italian law

Re: [tor-relays] outgooing UDP flooding on middle relay

2016-08-01 Thread Markus Koch
How many packets per second? Markus 2016-08-01 14:28 GMT+02:00 pa011 : > Hello, > > one of my middle relays got auto limited by the ISP because of > "outgooing UDP flooding ". > > The VPS is pure debian8, fail2ban, pub key and nothing else installed - > so I highly doubt the give

Re: [tor-relays] outgooing UDP flooding on middle relay

2016-08-01 Thread Markus Koch
ing the CPU to 100% and > dropping. > > > Am 01.08.2016 um 14:36 schrieb Markus Koch: >> How many packets per second? >> >> Markus >> >> >> >> 2016-08-01 14:28 GMT+02:00 pa011 <pa...@web.de>: >>> Hello, >>> >>> one of my mi

Re: [tor-relays] outgooing UDP flooding on middle relay

2016-08-01 Thread Markus Koch
21263.147 > 383.444 > 06 5.279.142 5.443.89014 40.052.678 40.824.13822176.040 > 258.865 > > > Am 01.08.2016 um 14:51 schrieb Markus Koch: >> In and outgoing traffic is the same size? >> >> >> >> 2016-08-01 14:44 GMT+02:00 pa011 <pa...@

Re: [tor-relays] outgooing UDP flooding on middle relay

2016-08-01 Thread Markus Koch
If this is a synflood or any other ddos attack on his vps the tor server would not relay the attack and in and outgoing traffic would be vastly different. Sent from my iPad > On 01 Aug 2016, at 15:12, teor <teor2...@gmail.com> wrote: > > >> On 1 Aug 2016, at 23:08,

Re: [tor-relays] How to exclude a CDN ?

2016-08-09 Thread Markus Koch
Got the same abuse mail on my exits ... you get a IP depending where you are so you dont know where the attacker is and thats why you cant block the IP. You are out of luck. 2016-08-09 18:38 GMT+02:00 Toralf Förster : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 >

Re: [tor-relays] Out of memory: Kill process (tor)

2016-08-12 Thread Markus Koch
2016-08-12 15:11 GMT+02:00 Tristan : > Last night I received my first abuse complaint on DigitalOcean. Congratulations! > When I logged in, I saw Tor was no longer running because the system ran out > of > memory. > > Is it possible the system ran out of memory because

Re: [tor-relays] wubthecaptain1 relay is no longer an exit

2016-07-12 Thread Markus Koch
running 3 exit nodes with HTTP + HTTPS (niftymouse,niftygerbil and niftyguineapig) on cheap VPSs and can confirm: There are heavily used and meaningful. Even with only HTTP + HTTPS. I got 12 abuse mails ... so you wont get rid of this issue but I will be way less. Please think about using less

Re: [tor-relays] VPS for Exits

2016-07-06 Thread Markus Koch
I am testing www.hostwinds.com and www.digitalocean.com right now, both work fine atm. Markus 2016-07-06 10:19 GMT+02:00 tor relay : >> Well, I'm still sticking with CoolHousing/Virtual Server Lite because I >> hardly ever get abuse >> complaints. For ITL, I may leave

Re: [tor-relays] Pi3 mid relay dropping lil bit of packets

2016-08-15 Thread Markus Koch
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:1053088862188 errors:0 dropped:0 overruns:511390 frame:0 TX packets:306784541602 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:1413645618747401 (1.2 PiB)

Re: [tor-relays] DigitalOcean pricing (Re: tomhek - the (new) biggest guard relay operator)

2016-09-11 Thread Markus Koch
I use Debian 64 minimal. Works. 2016-09-11 15:53 GMT+02:00 Ralph Seichter <tor-relays...@horus-it.de>: > On 11.09.2016 14:30, Markus Koch wrote: > >> So around 90 terabyte a month for $5. Seems fair :) > > Yeah, it does, doesn't it... ;-) Leaves me with figuring out wh

Re: [tor-relays] DigitalOcean pricing (Re: tomhek - the (new) biggest guard relay operator)

2016-09-11 Thread Markus Koch
sfer be limited to 300 Mbps. > > > On Sep 11, 2016 5:46 AM, "Markus Koch" <niftybu...@googlemail.com> wrote: >> >> They do not bill traffic at the moment, this can change at will of >> DigitalOcean but atm there is no traffic limit and there is no extra >&

Re: [tor-relays] DigitalOcean pricing (Re: tomhek - the (new) biggest guard relay operator)

2016-09-13 Thread Markus Koch
There are worlds between a Rasperry Pi1 and the DigitalOcean VPS. $5 is dirt cheap. What provider do you use? Sent from my iPad > On 13 Sep 2016, at 17:26, Admin Kode-IT wrote: > > 5$ for 512 MB RAM, 1 Core and 20 Gig SSD Space is actually bad if you ask me. > Don't know if

Re: [tor-relays] DigitalOcean pricing (Re: tomhek - the (new) biggest guard relay operator)

2016-09-13 Thread Markus Koch
iki-page is any > indication. > >> Am 13.09.2016 um 16:14 schrieb Markus Koch: >> Seflow is only 1,99 € ... So compared to $5 DigitalOcean is expensive :) >> >> Sent from my iPad >> >> On 13 Sep 2016, at 15:01, Tristan <supersluet...@gmail.com> w

Re: [tor-relays] DigitalOcean pricing (Re: tomhek - the (new) biggest guard relay operator)

2016-09-14 Thread Markus Koch
Guard or exit? 2016-09-14 12:27 GMT+02:00 Petrusko : > On my last relay, the bandwidth max rate was set up to 20Mbits/s > up+down, and no problem about this "1TB traffic" after 2 months with > full bandwidth used ;) > Sooo many TB were forwarded during those months without

Re: [tor-relays] DigitalOcean pricing (Re: tomhek - the (new) biggest guard relay operator)

2016-09-13 Thread Markus Koch
1 TB traffic :( 2016-09-14 6:19 GMT+02:00 Petrusko : > Hey, > Since 1-2 months I'm using a VPS on this provider, don't want to > advertise here, but only share my little experience: > https://www.pcextreme.com/aurora/compute > Starting price is 3€/month for a virtual machine

Re: [tor-relays] DigitalOcean pricing (Re: tomhek - the (new) biggest guard relay operator)

2016-09-13 Thread Markus Koch
Seflow is only 1,99 € ... So compared to $5 DigitalOcean is expensive :) Sent from my iPad > On 13 Sep 2016, at 15:01, Tristan wrote: > > Well, if $5 a month is high for you, I don't know what to say. > > >> On Sep 13, 2016 4:01 AM, "Admin Kode-IT"

Re: [tor-relays] Node families and guard flags

2016-09-15 Thread Markus Koch
100% normal. Welcome to tor. No, no clue why ;) Markus Sent from my iPad > On 15 Sep 2016, at 18:12, Ralph Seichter wrote: > > When running two non-exit nodes, configured as a single family with no > other members, and using identical bandwidth settings, is it to

[tor-relays] Guard/Middle/Exit Hosting

2016-09-15 Thread Markus Koch
Just 2 let you know, DigitalOcean has a new Promo: $15 free aka 3 months free droplet. Guard/Middle is no problem at all. My exits have been kicked after around 4 months (too many abuse mails :( ) Promocode: LOWENDBOX https://lowendbox.com/blog/september-hosting-vps-coupon-round-up/ I do not

Re: [tor-relays] tomhek - the (new) biggest guard relay operator

2016-09-11 Thread Markus Koch
> On 11 Sep 2016, at 12:02, nusenu wrote: > > Considering digital oceans traffic pricing, I'm also wondering why DO is > so popular? > https://www.digitalocean.com/pricing/ You do not have to pay the traffic at the moment. Markus > > regards, > nusenu > > > tomhek

Re: [tor-relays] DigitalOcean pricing (Re: tomhek - the (new) biggest guard relay operator)

2016-09-11 Thread Markus Koch
9.2016 12:09, Markus Koch wrote: > >> > Considering digital oceans traffic pricing, I'm also wondering >> > why DO is so popular? https://www.digitalocean.com/pricing/ >> >> You do not have to pay the traffic at the moment. > > That caught my attention, but br

[tor-relays] help #3

2016-09-29 Thread Markus Koch
me again ... I need the knowledge of the almighty tor operators. I set up three new and shiny tor exists and got a not so shiny error message: [WARN]Failing because we have 4063 connections already. Please read doc/TUNING for guidance It was already in this mailing list:

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-05 Thread Markus Koch
No, you are not. Its not that simple as "just find a ISP" The Tor network is made up of volunteers, so you need a: 1. ISP with more than laughable traffic limits 2. Tor friendly 3. Cheap 4. and with traffic connections that the Tor network likes Thats not easy. OVH (the biggest in Tor) is

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-05 Thread Markus Koch
if we exclude the trouble with blocked IP ranges and the other stuff. Markus PS: Yes, the Tor wiki says: Get your own IP with your own data so the ISP is not involved. That's easier said than done. 2016-10-05 13:44 GMT+02:00 Ralph Seichter <tor-relays...@horus-it.de>: > On 05.10.16 13:1

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-05 Thread Markus Koch
> - During my praxis, I've met only like 10% of customers (tor exit node) with > real data - unfortunately ISP is not the one who can judge that - we have to > trust our customer > TIL that I am an idiot for using my real data. How do they pay? With all of my webhosting companies I pay with

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-05 Thread Markus Koch
Sounds great, but the reality is many sites will not block Tor traffic but will send (automated) abuse mails over and over and over again. Had this with a bank in South Korea who sent weekly abuse mails with "we will sue you in the USA, we will sue you in South Kora and we will never ending suing

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-06 Thread Markus Koch
Or you simply block port 22 and everyone everyone lived happily ever after. I do not care about a script kiddie trying to hack something. Bots are what I am afraid of, you get the same abuse over and over and over. Markus 2016-10-06 6:43 GMT+02:00 Green Dream : >>> >

Re: [tor-relays] Dealing with OVH Abuse Complaints

2016-10-05 Thread Markus Koch
*cough* Resellers *cough* 2016-10-05 14:21 GMT+02:00 Tristan : > Interesting seeing as how OVH is one of the biggest VPS services running Tor > exits. > > > On Oct 5, 2016 3:10 AM, "Roman Mamedov" wrote: >> >> On Wed, 5 Oct 2016 18:55:26 +1100 >> teor

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-05 Thread Markus Koch
Okay, I´ll volunteer as an guinea pig if you are okay with it, I´ll get 2 VPSs and you do your Snort magic on them. Worst case is that we all know it isnt working and we have learned something :) Markus 2016-10-05 14:06 GMT+02:00 : It's really time consuming and that's > why

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-04 Thread Markus Koch
Just 2 make 1 thing clear: Its not we against you (ISPs). Working myself years ago at an ISP I know the trouble and I understand the issues. Markus 2016-10-04 19:49 GMT+02:00 : > Hello, > > I'm the ISP technician who is negotiating with Paul who started this thread. > I just

Re: [tor-relays] Tor Services on Amazon

2016-10-04 Thread Markus Koch
The BEST relay I can see is https://torstatus.blutmagie.de/router_detail.php?FP=3181f36ce226b30bd2845872655d55e7d0b4a846 with whopping 776 KByte/sec 95% of the amazon relays are dead. zero traffic. Markus 2016-10-04 21:53 GMT+02:00 nusenu : >> Awhile ago Tor blocked

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-04 Thread Markus Koch
Just for shits and giggles: Do you have a good, easy, workable solution to this complex problem? Markus 2016-10-04 22:19 GMT+02:00 : > And I'm not against you (tor admins/operators) ;) > > I'm really glad that this discussion started, let's see, if we can find some >

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-04 Thread Markus Koch
Everyone is running a reduced exit policy ... I only allow HTTP + HTTPS and I know nobody who allows port 25 at the end of the day we all shape our exit traffic. Markus 2016-10-04 21:42 GMT+02:00 Roger Dingledine : > On Tue, Oct 04, 2016 at 10:21:14AM -0500, BlinkTor wrote:

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-04 Thread Markus Koch
Thank you very much, interesting. So I could block URLs but not on deep packet inspection? Markus 2016-10-04 22:04 GMT+02:00 Roger Dingledine <a...@mit.edu>: > On Tue, Oct 04, 2016 at 09:55:01PM +0200, Markus Koch wrote: >> Everyone is running a reduced exit policy ... I

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-04 Thread Markus Koch
Okay, I am getting confused. (OSI model here) ATM we are traffic shaping/blocking at layer 3 DNS is layer 7. destination IP and port should be layer 1-4, right? Markus 2016-10-04 22:18 GMT+02:00 Roger Dingledine <a...@mit.edu>: > On Tue, Oct 04, 2016 at 10:08:25PM +0200, Markus K

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-04 Thread Markus Koch
2016-10-04 19:21 GMT+02:00 Tristan : > I hate Webiron. They never marked any of my IP abuses as resolved, even > though I responded and revised my exit policy within 24 hours of the > complaint. > > Ticket or e-mail? Markus ___

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-04 Thread Markus Koch
What should a tor exit op do? Ban the user? exits get the traffic from middle nodes and we cant tell (by design) who anyone is. We can block ips but that is not really helping with bots who tries to find vulnerabilities and scan large blocks. markus Sent from my iPad > On 4 Oct 2016, at

Re: [tor-relays] Digital Ocean - running Exit node locked

2016-10-07 Thread Markus Koch
gt; > > On Oct 7, 2016 4:34 PM, "Markus Koch" <niftybu...@googlemail.com> wrote: > > They will kick you after 2-3 months. Delete account, make new account. > They will kick you after 2-3 months. Delete account, make new account. > They will kick you after 2-3 mont

Re: [tor-relays] Digital Ocean - running Exit node locked

2016-10-07 Thread Markus Koch
They will kick you after 2-3 months. Delete account, make new account. They will kick you after 2-3 months. Delete account, make new account. They will kick you after 2-3 months. Delete account, make new account. They will kick you after 2-3 months. Delete account, make new account. Welcome to

Re: [tor-relays] Digital Ocean - running Exit node locked

2016-10-07 Thread Markus Koch
reduced-reduced exit policy. ? Illuminate me, pls. Markus ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-08 Thread Markus Koch
Would not help. These are bots, you can slow them down but this will not stop them at all. Markus 2016-10-09 1:57 GMT+02:00 teor : > >> On 7 Oct 2016, at 05:07, Green Dream wrote: >> >> If we're going to change anything I think it needs to happen

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-08 Thread Markus Koch
I am more of a fan of closing certain URL paths. So we could at least stop these very old Apache directory bug attacks. Or forbid accessing whatever.com/admin/ Markus 2016-10-09 2:03 GMT+02:00 teor <teor2...@gmail.com>: > >> On 9 Oct 2016, at 11:00, Markus Koch <niftybu...@goo

Re: [tor-relays] new warn message: Duplicate rendezvous cookie in ESTABLISH_RENDEZVOUS.

2016-10-06 Thread Markus Koch
Same here, no clue why :( markus 2016-10-06 10:45 GMT+02:00 Toralf Förster : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Today I got this for the first since I run exits: > > Oct 06 08:23:03.000 [warn] Duplicate rendezvous cookie in >

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-05 Thread Markus Koch
These are getting rare. It is much easier to get a seedbox than a tor exit. I had even bulletproof ISPs who dont want to host exits. Believe me, I was chatting /mailing ISPs for days and its a mess. Markus PS: Tor changed years ago the exit policy and since then Tor is not anymore one big

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-04 Thread Markus Koch
same shit here: Dear User, We are contacting you because of unusual activity coming from your IP address towards the IT infrastructure of the European Commission. In specific, since 03/10/2016, IP addresses 95.85.45.159 & 104.236.225.19 of Digital Ocean, located in the Netherlands (NL) and the

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-04 Thread Markus Koch
gt;> which are potentionaly endagered to be marked as source of malicious content >> / blacklisted / whatever ... so you see, this is quite critical for us." >> >> Am 04.10.2016 um 17:48 schrieb Markus Koch: >> > same shit here: >> > >>

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-05 Thread Markus Koch
> > > No, we don't need to do anything. Tor has been running under these > principles of uncensored access for a long time. Find an ISP that > understands Tor, appreciates the nature of the service and its value, > and is willing to work with you in a reasonable manner on abuse > complaints. It's

Re: [tor-relays] HALP!

2016-08-23 Thread Markus Koch
Sent from my iPad > On 23 Aug 2016, at 22:41, Roger Dingledine <a...@mit.edu> wrote: > >> On Tue, Aug 23, 2016 at 10:00:57PM +0200, Markus Koch wrote: >> I just deleted my best running exit node to move to another vps. >> >> I copied /etc/tor a

[tor-relays] HALP!

2016-08-23 Thread Markus Koch
I just deleted my best running exit node to move to another vps. I copied /etc/tor and /var/lib/tor + keys dir and moved it to the new vps. I double-checked the files/keys are the same but i still get a new fingerprint. Wtf is wrong with me? Markus Sent from my iPad

Re: [tor-relays] HALP!

2016-08-23 Thread Markus Koch
Okay :( http://i.imgur.com/r1ZxAAH.png Is there anything important missing? 2016-08-24 0:22 GMT+02:00 Roger Dingledine <a...@mit.edu>: > On Tue, Aug 23, 2016 at 10:53:04PM +0200, Markus Koch wrote: >> > Do the log files give you any hints? >> >> I copied all the

Re: [tor-relays] HALP!

2016-08-23 Thread Markus Koch
Okay, I should have said that this is my backup server ... so ... old tor exit -> backup server -> new VPS its running on the new VPS with the right permissions :) 2016-08-24 0:44 GMT+02:00 Michael Armbruster <t...@armbrust.me>: > On 2016-08-24 at 00:41, Markus Koch

Re: [tor-relays] HALP!

2016-08-23 Thread Markus Koch
ingerprint file. Did you copy these other files as well, and > they’re just not included in the screenshot? > > > On 24.08.2016 00:48, Markus Koch wrote: >> Okay, I should have said that this is my backup server ... so ... >> >> old tor exit -> backup server -> new

Re: [tor-relays] halp #2

2016-08-23 Thread Markus Koch
<3 2016-08-24 6:28 GMT+02:00 Ivan Markin <t...@riseup.net>: > Markus Koch: >> I just complied TOR (hurray!) on a NON-ROOT server. > TOR -> Tor (tor here, I guess). > >> 1. Issue: I cant find the torrc file. I found out that the rest of the >> stuff

[tor-relays] halp #2

2016-08-23 Thread Markus Koch
Sorry to bother you guys again Its 6am here and after reading the FAQ and other install guides I am out of ideas I just complied TOR (hurray!) on a NON-ROOT server. 1. Issue: I cant find the torrc file. I found out that the rest of the stuff is in ~./tor but no torrc at all. Where is it/should

Re: [tor-relays] #torstrike

2016-08-24 Thread Markus Koch
We have 2016 not 1950. Update your ntp server. > assault/abuse/exploitation. The western culture we have collectively > created, where women are the lesser equals, and this underlining tone of > male arrogance that if a women was sexually abused/exploited that she > wanted it, was looking for

Re: [tor-relays] TOR Services on Microsoft Azure

2016-10-01 Thread Markus Koch
Tor on amazon is not allowed anymore :( Does Azure allow exits? Markus Sent from my iPad > On 1 Oct 2016, at 09:54, Volker Mink wrote: > > Hi. > > I read some pages on the internet about TOR-servers on cloud-services like > Microsoft Azure or Amazon AWS. > Just gave it

Re: [tor-relays] TOR Services on Microsoft Azure

2016-10-01 Thread Markus Koch
https://azure.microsoft.com/en-us/free/free-account-faq/ What do I get when I sign up for a free account? You get an Azure account, plus a $200 credit to spend on Azure services for 30 days. You can use this $200 credit to try out any combination of Azure services, exploring our cloud for free.

Re: [tor-relays] help #3

2016-09-30 Thread Markus Koch
Thx, already thought about this and its not :( Markus 2016-09-30 14:46 GMT+02:00 David S <d...@bitmail.cc>: > On 09/30/2016 05:05 AM, Markus Koch wrote: >> >> me again ... I need the knowledge of the almighty tor operators. >> >> I set up three new and shiny

Re: [tor-relays] Abuses: Suspicious botnet ramnit attack

2016-10-27 Thread Markus Koch
No. Thats my problem too, around 90% of my abuse mails are bot related and you cant do anything about it. Markus 2016-10-27 20:24 GMT+02:00 pa011 : > Hi, > > got the abuse below on three different exits. Anybody having any idea what to > do and how to possibly to stop this in the

Re: [tor-relays] manual vs. automated updates

2016-10-29 Thread Markus Koch
I was talking about the bridges you can see on the screen shot. These were my "backup" Digital Ocean accounts because Digital Ocean kicked my exits after 2-3 months. Digital Ocean is not allowing any exits anymore so I use the prepaid accounts to run bridges. The bridges will all die end of the

Re: [tor-relays] Drop in consensus weight

2016-11-08 Thread Markus Koch
https://atlas.torproject.org/#details/B771AA877687F88E6F1CA5354756DF6C8A7B6B24 the same, others are perfectly fine. no clue why :/ markus 2016-11-08 12:52 GMT+01:00 r1610091651 : > Hi all > > The consensus weight of the relay I'm running drop recently (5th of nov) to >

[tor-relays] You dont love me anymore :(

2016-10-18 Thread Markus Koch
20:08:18 [WARN] Received http status code 404 ("Not found") from server '86.59.21.38:80' while fetching "/tor/keys/fp-sk/14C131DFC5C6F93646BE72FA1401C02A- 8DF2E8B4-692049A2E7868BE9933107A39B1CE0C7CBF1BF65". 20:06:18 [WARN] Received http status code 404 ("Not found") from server

Re: [tor-relays] You dont love me anymore :(

2016-10-18 Thread Markus Koch
new. Did you get a bad relay > flag somehow??? > > > On Oct 18, 2016 1:12 PM, "Markus Koch" <niftybu...@googlemail.com> wrote: >> >> 20:08:18 [WARN] Received http status code 404 ("Not found") from >> server '86.59.21.38:80' while fetching >

Re: [tor-relays] You dont love me anymore :(

2016-10-18 Thread Markus Koch
tor/wiki/doc/ReportingBadRelays > > Looks like you need to get in touch work bad-rel...@lists.torproject.org > > What's strange is that the bad relay team should have contacted you before > making a decision. > > > On Oct 18, 2016 1:23 PM, "Markus Koch" <niftybu...

  1   2   >