Re: [tor-relays] Handling abuse - like to get your help please

If it is Tor philosophy to prevent criminal activity then should not tor develop other tools apart from port and IP blocking? I am less certain that we can ring our hands of this issue. We will have fewer and fewer exit nodes until the gross attacks like multiple login attempts are restrained

[tor-relays] rendezvous on non-OR circuit

What does this error message mean? Is it serious for users and what do I do about it? “ 09:57:16 [WARN] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendevous (pending)” This is on a Ubuntu VPS Tor exit, although exit is limited range IP4 port 80 addresses.

[tor-relays] Secret Google and Microsoft Blacklists affecting non tor IPs if on same server.

Secret Google and Microsoft Blacklists affecting non tor IPs if on same server. Just had to shut down my exit temporally while Google sorts out their secret blacklisting system on my innocent non-tor IP. My server has two IPs, not consecutive. One I use for my own email server and public

Re: [tor-relays] Secret Google and Microsoft Blacklists affecting non tor IPs if on same server.

Thanks PAUL, assuring. Nobody else IS using out email server, which now really an archive, as we are pretty much retired now and no other users left on our old system. Logs show only our emails. SPF, reverse DNS. DKIM DMARC all 100% fail2ban, no relay, no proxy, few working email

Re: [tor-relays] Secret Google and Microsoft Blacklists affecting non tor IPs if on same server.

I just seen that my abuse email address gets a shower of abuse reports when I send an email to this tor-relays@lists.torproject.org The forwarded emails do not come from me so fails DKIM/DMARC Gerry From: tor-relays

[tor-relays] Nyx and Arm

Arm says I have 3506 outbound 354 exit Nyx has long blue list but states 50 outbound. No mention of exits. What am I doing wrong with Nyx? Gerry ___ tor-relays mailing list tor-relays@lists.torproject.org

Re: [tor-relays] Nyx and Arm

My exit has been around for a year or more. Bit Nyx now reports 120 outbound, but has pages of blue labelled outbound. Arm 3044 502 exit shows 531.6 Mb/s- 1.02Mbs Exit, Fast, HSDir, Running, Stable, V2Dir, Valid Nyx does not show any exits. Tor Relay (Atlas) shows exit probability of

Re: [tor-relays] Spam Emails Received From This Mailing List

I may be missing something, but does the domain torproject.org have DNS set SPF strict, DKIM, DMARC set up? Gerry -Original Message- From: tor-relays On Behalf Of Johan Fleury Sent: 09 June 2018 04:51 To: tor-relays@lists.torproject.org; Mirimir Subject: Re: [tor-relays] Spam Emails

Re: [tor-relays] Turning down my relay from DigitalOcean

So far, for a year now https://www.1and1.com/ (co.uk) have ignored my exit mycontribution. They must know it is there as have logged in, let alone seen the traffic. 2.90 TB a month. Their help desk told me “it’s your server, you can do what you like” so I took them at their word. My

Re: [tor-relays] SSH login attempts

Waste of time move SSH port? My fail2ban has hardly anything to do since moving port some time back. Very rarely does it see any attempts on my new odd number SSH port, but on port 22 the attacks were continuous. I agree in terms of security for a determined hacker moving port does nothing.

Re: [tor-relays] Extreme Exit Policy

I always blocked the obvious abuse ports, but for reasons I do not know, blocking port 80 except to a few subnets, abolished complaints about my exits. I widened the number of subnets and complaints started again, so put restrictions back. 443 wide open, along with very wide range of ports

Re: [tor-relays] community team highlights: Relay Advocacy

OVH are not monitoring: I did not see it in the T that you only run on Tor with OVH on dedicated servers. I have been running an exit on OVH VPS for many months now at 17TB a month and not a squeak from OVH, and not a single complaint forwarded to me so far. The Tor is open to many 1000s

Re: [tor-relays] New exit node

Olaf “which you can use for your own purposes (with only 10% of the bandwidth given to Tor) Not worth the risk. I did do that. I had a server with our email and old business web pages, so I wondered what should I do with the spare capacity? Hand 50% over to Tor. Felt good. Alas you

Re: [tor-relays] Extreme Exit Policy

Thanks Roger for your helpful explanations, as always. I still have exit flags. The total traffic through through my exits does not see change whatever I do to port 80, with some 3,000 exits. Vnstat makes it 17 T a month on my main server. I am puzzled that amount of activity, with limited

Re: [tor-relays] Email Blocked by ISP

Yea, the big corporates do not want anyone to run their own email servers now, and I may end up giving up, as no longer really need a VPS as I am retired. Email servers that are not a run through big corporation are by definition suspicious. At one time I ran Tor with a separated IP address

Re: [tor-relays] [tor-talk] Explain yourself Conrad Rockenhaus

RE Greypony & Conrad. Those of us on the edge of this community do not have a clue what you are talking about and why there is so much animosity. We are listening to one end of the "conversation" , as when one's ears are assaulted by a loud phone user on the train. You may know each other

Re: [tor-relays] Running on a Raspberry Pi

Despite the OS running from a memory card I have been delighted how stable my Pi3s have been for VPN and routing to my office and others tasks I give them They just sit there quietly doing their stuff and don't need needs rebooting. G3WIP@piaware:~ $ w 16:43:50 up 385 days, 2:34, 3 user,

Re: [tor-relays] DoS attack on Tor exit relay

Can we have your fail2ban scripts for the OR port? The jail and rules? Gerry -Original Message- From: tor-relays On Behalf Of teor Sent: 01 August 2019 00:28 To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] DoS attack on Tor exit relay Hi, > On 1 Aug 2019, at 02:27,

Re: [tor-relays] DoS attack on Tor exit relay

Thanks. I just could not see how Fail2ban would work on an ORport. What log would it look at? What criteria for the jail? The fai2ban on my non-tor VPS does not yet work with IPv6, which is partly the nature of IPV6 rather than a programming issue. I did not realise IPV6 was ignored

Re: [tor-relays] Got my first abuse

What about running a bridge from home? Many of us now have 1GB fibre at home, and much wasted, it would be nice to use it for TOR without creating problems for yourself by getting on block lists, abuse complaints and ISP protesting, PC Plod calling round. So far IPV6, even with many open

Re: [tor-relays] BadExit

"btw, you need to have at least port 80 and 443 … port 80 is missing …" It there. But to a /8 area IPV4, all IPv6 I have not changed my exit policy for years. Port 80 is there, just limited to a /8 network and all IPv6 addresses port 80 allowed. 443 all there IPv4 and IPv6 Testing seems to

Re: [tor-relays] BadExit

George Thanks My exit, still badexit, is 51AE5656C81CD417479253A6363A123A007A2233 and I did get an email which I missed, as it is simply failing to exit, Implying my ISP was doing something before they told me. Seems to be exiting from my local port now. -Original Message- From:

Re: [tor-relays] BadExit

Thanks. Funny that my long time restricted IPv4 port 80 exit was noticed just now giving the bad exit tag. I suspect the hour one of my server was quarantined by my ISP may have precipitated the system to look hard. As for my single /8 for port 80, for reason not clear to me, having many

Re: [tor-relays] Again: abuse email for non-exit relay (masergy)

That is really unhelpful of them to state Type of Attack/Scan: Generic Hosts: 10.10.10.182 which is non-routable address. Something on their LAN is wrong. You cannot even respond by blocking their actual WAN IP in torrc. Ask for the real WAN IP of their network so you can block the attack

Re: [tor-relays] Relay keeps crashing (raspberry)

I had a pi3 running for 374 days. Acting as a router. No crashes. Just sat there doing its thing. I found them astonishingly stable unless you are thrashing the sdcard. But I find my cameras beak SD cards more often than a pi Not run Tor with a pi though. -Original Message-

Re: [tor-relays] Does OVH cloud support exit relays?

I though there are too many exits with OVH. I run an OVH exit…. But no high risk ports like 22,limited port 80 but 443 and most others open. I am getting no complaints or comment from OVH. I avoided asking them direct! $6 good value but wonder if memory low or bandwidth restriction

[tor-relays] BadExit

Oh the shame! Never had that tag on my exit before. I assume it was due to a bad boy attacking an IP, pointed out by my ISP, and the ISP put my server "under mitigation".I assume some filtering, which of course would have looked bad to TOR users. I did not spot the ISP's email for 30

Re: [tor-relays] How do I add relays to a "family" and what are the benefits?

My understanding is that you don’t, if you do you give the game away about your bridge. From: tor-relays On Behalf Of Keifer Bly Sent: 22 May 2020 23:24 To: tor-relays@lists.torproject.org Subject: [tor-relays] How do I add relays to a "family" and what are the benefits? Hi all,

Re: [tor-relays] Many SSH requests

Move SSH from port 22 Certificate only, deny passwords gets rid of most of this from the kiddies From: tor-relays On Behalf Of Cristiano Kubiaki Gomes Sent: 31 March 2021 17:36 To: tor-relays@lists.torproject.org Subject: [tor-relays] Many SSH requests Hi there, O noticed many ssh

Re: [tor-relays] ssh request from Virgin Media (Liberty Global)

Surely it is one of their customers….. From: tor-relays On Behalf Of Cristiano Kubiaki Gomes Sent: 05 April 2021 16:34 To: tor-relays@lists.torproject.org Subject: [tor-relays] ssh request from Virgin Media (Liberty Global) I have a Relay and a Bridge up and running with ssh password

Re: [tor-relays] I was banned from PayPal

Are we sure it was not a phishing spam? I cannot even find the T on my PayPal login to check what it says. -Original Message- From: tor-relays On Behalf Of Sebastian Urbach Sent: 11 March 2021 08:45 To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] I was banned from PayPal

Re: [tor-relays] I was banned from PayPal

Potlatch: Thanks for not accepting PayPal nonsense and seeking legal advise. Some bot so call "AI" got in the way I assume. When you try and talk to a human at Paypal or any of these mega corporations, they behave as bots and cannot move off script. But you are not often allowed to talk

[tor-relays] OVH killed me

I have had no reports of abuse with my partial exit for a couple of years, then suddenly OVH kills the server (Reinstalling is a pain and IPV6 not autoloaded and they and Ubuntu keep changing networking) Anyway “Abnormal activity has been detected on your VPS vps585081.ovh.net. As

Re: [tor-relays] Cheap Servers? There MUST be a catch

ee credit > card) but I have no experience with that particular host. > > tontu > > On 2020-11-09 11:37 a.m., niftybunny wrote: > > I cant find any prices on the website. What do you get for under a > dollar? > > > >> On 8. Nov 2020, at 23:21, Dr Gerard Bulger

Re: [tor-relays] Filter Tor Exit Node for blatant attacks on servers

arrant / permission etc. (Caveats etc apply) > On 12 June 2016 at 16:12, Dr Gerard Bulger <ger...@bulger.co.uk > <mailto:ger...@bulger.co.uk> > wrote: >> Once TOR >> exits attempts any filtering where would it stop? It is a slippery slope. FWIW one of the reasons w

[tor-relays] TORRC Exit not obeying httproxy

My tor exit node has been using a https proxy for a long time with great success in that I have had no abuse complaints directed to me and my VPS provider. Until recently. Traffic has increased as I made the bandwidth wider, which might be an explanation. I am getting complaints directed to

[tor-relays] Filter Tor Exit Node for blatant attacks on servers

It is heresy to suggest that Exit relays do anything of a sort, that is attempt to reject obvious attackers on an IP? Tor is neutral. Once TOR exits attempts any filtering where would it stop? It is a slippery slope. I think not, as to extend to other areas would far too complex and have

Re: [tor-relays] Filter Tor Exit Node for blatant attacks on servers

inking about this it has been too fraught with moral hazard for me. Morally, Tor is about keeping private communications private, in the hope that more good than bad will come of it. On 12 Jun 2016 8:40 p.m., "Dr Gerard Bulger" <ger...@bulger.co.uk <mailto:ger...@bulger.co.uk> >

Re: [tor-relays] TORRC Exit not obeying httproxy

ning exits! On 6/11/2016 1:49 PM, Dr Gerard Bulger wrote: > My tor exit node has been using a https proxy for a long time with > great success in that I have had no abuse complaints directed to me and my VPS > provider. Until recently. > > Traffic has increased as I made t

Re: [tor-relays] Search warrant and house search because of an exit in DE

...@lists.torproject.org] On Behalf Of grarpamp Sent: 30 April 2016 18:47 To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] Search warrant and house search because of an exit in DE On 4/30/16, Dr Gerard Bulger <ger...@bulger.co.uk> wrote: > Once I set my outgoing connection via a UK and

Re: [tor-relays] What's this Abuse

Dr Gerard Bulger: > 5.77.47.142 - - [16/May/2016:15:19:56 -0400] "POST /admin/ HTTP/1.1" > 302 > 1079 "http://www.liteline.com/admin/; "Mozilla/5.0 (Windows NT 6.1; > rv:38.0) Gecko/20100101 Firefox/38.0" > __

Re: [tor-relays] What's this Abuse

-relays] What's this Abuse > On 20 May 2016, at 11:52, Dr Gerard Bulger <ger...@bulger.co.uk> wrote: > > Point taken. Can admin remove my post? No, we don't censor our own archives, and we can't censor other public archives. > > > > > -Original Message-

[tor-relays] Tor Stats

Tor Atlas and https://torstatus.blutmagie.de does not report any activity in graphs for my Tor exit. This data has been missing for some days now. Says online. Not stable yet as I keep it rebooting my new server once a day for 30 mins as checking if there are any errors. Which leads to another

Re: [tor-relays] Tor Stats

ieb Dr Gerard Bulger: > Tor Atlas and https://torstatus.blutmagie.de  does not report any activity > in graphs for my Tor exit.  This data has been missing for some days now. > Says online. Not stable yet as I keep it rebooting my new server once a day > for 30 mins as checking if th

Re: [tor-relays] https://itldc.com/

The ISP holding my VPS kindly forwards the abuse complaints for me to answer. The ISP needs to know that I have done so, and “have taken steps”. I think the ISP pretends not to know this is from a TOR exit node. After I connected outgoing TOR to another proxy service (VPN normally but

Re: [tor-relays] switching between exit and guard

I have turned off all exits after worried ISP was forwarding too many abuse notices. This is pending a solution which, if possible would send all exiting port data off to a local anonymous proxy or VPN server. Anonymous proxies and VPN servers seem more impervious or tolerant to abuse

Re: [tor-relays] Hostname in DirAuthority config

I wonder if TOR design should now be more supportive of variable IPs and a spread of IPs for TOR exits. I am not an IT guru. I gather it was thought to be good manners that the IP of Tor exits were known to the public. It would at least let recipients know that the originating IP could

[tor-relays] Grizzly Steppe

I ran an exit node, but gave up after too many abuse reports that annoyed my ISP. So I turned al exit ports off, and reports stopped as a rely.After months and many terabytes of data I get an abuse complaint that my tor IP has been used for espionage. "NCSC have been made aware of a

Re: [tor-relays] Just got my first Abuse email :-)

So far I have had no abuse emails or complaints after two months on a new server, using the longer suggested reduced policy list, but I do exclude 80, which seems safer but limits the role as an exit. But 443 open. I closed other potential abuse ports such as 22, 8080, 5900. It's not the

Re: [tor-relays] DIR Port. and NATO

-Original Message- From: tor-relays [mailto:tor-relays-boun...@lists.torproject.org] On Behalf Of Roger Dingledine Sent: 30 August 2017 16:36 To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] DIR Port On Wed, Aug 30, 2017 at 01:39:34PM +0100, Dr Gerard Bulger wrote: > DIR p

[tor-relays] DIR Port

DIR port on my relay and mini exit as being there on Atlas. The DIR port is open, indeed the DirPortFrontPage can be seen. Bandwidth is “fast” The exit is very limited in scope to avoid abuse claims, so few ports forwarded such as 443, but not 80. Is that the reason not showing?

[tor-relays] Exit from Different IP from OR Port

Direct Exit to a different IP. I naively thought that the proxy lines in torrc could to that via an https proxy. Alas that's not what that line is for! I got an impression from earlier chats a while ago that exiting to a non-advertised IP was regarded as simply not cricket, in that the

Re: [tor-relays] Testers needed for Nyx beta release

Arm says 1568 outbound 151 exit. Since My exit policy blocks abused ports and has only one /8 range for port 80 I think that is true. Nyx says 668 outbound 1173 exit. Also nyx does not list the exits by port number Gerry -Original Message- From: tor-relays

Re: [tor-relays] So long and thanks for all the abuse complaints

I so far have got away with no abuse with quite a wide range of ports open, avoiding obvious abuse ports and only allowing port 80 to a single Class A, chosen belonging to a benign country/service: x.x.x.x/8:80Gets the server listed as an exit. I have not seen, via arm, anyone use port

Re: [tor-relays] DoS attacks are real (probably)

I am getting these warnings, not very often, and the exit (restricted) is working well otherwise: "Dec 11 18:07:23.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendevous (pending)" Some posts about this elsewhere hinted this warning could be caused by

[tor-relays] Exit probability

How is exit probability counted? Is it only port 80 exit tested? I exit many 1000s of ports, including 443, but not those of high risk of abuse emails and thus upsetting the ISP. So port 80 along with others are blocked. I realise no port 80 limits the use of the exit so not expecting so

[tor-relays] Curious up disclosure possible?

Conclusion...avoid http, 80 ? https://blog.duszynski.eu/tor-ip-disclosure-through-http-301-cache-poisoning/ Gerry Mobile Device > On 3 Jun 2019, at 9:26 pm, Keifer Bly wrote: > > So I am trying to limit as google cloud has strict pricing plans. Perhaps I > should go back to just running a

[tor-relays] IPV6

Is there any work going on which would allow Tor to work with IPV6 alone? i.e. no IPV4 OR ports etc. Gerry ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

[tor-relays] OVH Mitigation

I know we should dilute our dependence on OVH, but cheap and seem to ignore the fact the machine is an exit node. OVH has a seemingly patented a system to deal with denial of service attacks. I am not sure what they detect but when they do we get this: "We have just detected an attack on

[tor-relays] OVH Warnings

OVH seemed to have upped their game with more information than just throwing all traffic into "mitigation" which can result in bad exit status, with no information as to what their systems are detecting as a threat of denial of service attack. For the first time I got an email.no mitigation.

Re: [tor-relays] BadExit: Rerouting exit relays detected (1) 45.63.11.98

Torrc allows you to exit from a different IP. I thought it a good idea to stop arbitrary blocking of the advertised Tor exit IP, the captchas and blacklists that tor users suffer. When IPv6 implemented fully we have a wide range of IPs to send from on each server. Perhaps it is not

Re: [tor-relays] SSH

I also found failed2ban had much less work to do, banning handful a day, not a thousand, by stopping ssh password authentication and using private key authentication. Something I should have done from the start anyway. It seems when if a server sends public key on attempted login and refuses

Re: [tor-relays] "Your server (xxxx:443) has not managed to confirm that its ORPort is reachable."

If you are on a VPS, a firewall may be external to the server and it is on the VPS panel. Log into your provider account and VPS settings. -Original Message- From: tor-relays On Behalf Of Pham Minh Duc Sent: 20 September 2020 07:40 To: tor-relays@lists.torproject.org Subject: Re:

Re: [tor-relays] Call for Testing - New Feature: Relay IPv6 Address Discovery

Where do we get daily builds? -Original Message- From: tor-relays On Behalf Of David Goulet Sent: 22 July 2020 20:55 To: tor-relays@lists.torproject.org Subject: [tor-relays] Call for Testing - New Feature: Relay IPv6 Address Discovery Greetings everyone! We've very recently merged

Re: [tor-relays] Fwd: Thailand block

provider do you use? How much does it cost? -- Forwarded message -- From: Dr Gerard Bulger mailto:ger...@bulger.co.uk> > Date: On Tue, Nov 24, 2020 at 08:29 AM Subject: [tor-relays] Thailand block To: BRBfGWMz mailto:brbfgwmz@concealed.company> > I have been run

Re: [tor-relays] Thailand block

Done -Original Message- From: tor-relays On Behalf Of Felix Sent: 24 November 2020 17:05 To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] Thailand block Hi Gerry Running a relay in Thailand is cool :) Am 23.11.2020 um 09:55 schrieb Dr Gerard Bulger: > In some w

[tor-relays] Thailand block

I have been running an exit (mythaicontribution) in Thailand for 3 Years (the exit has narrow port 80 range but full 443 and all other less risky ports open. It has never been that busy as an exit, unlike my other UK and USA exits of similar profile. I noticed it was off line last week. The

Re: [tor-relays] No port IPv4 80 so not an called exit even when 443 open wide.

and IPv6 and port 80 wide open on IPv6. 443 should be the marker as an exit these days. Gerry From: tor-relays On Behalf Of Dr Gerard Bulger Sent: 11 December 2020 17:14 To: tor-relays@lists.torproject.org Subject: [tor-relays] No port IPv4 80 so not an called exit even when 443 open wide

[tor-relays] No port IPv4 80 so not an called exit even when 443 open wide.

It is now out of date that Tor servers are required to have port 80 IPv4 open, even if limited to a single Class A network in order that the relay can be labelled as an exit. Port 443 should be enough. For reasons I do not understand, if I open port IPv4 80 to a wider range I get abuse

Re: [tor-relays] So my relay is apparently being attacked

I have had the same today. Once I left it in this state and next day got bad exit flag, so not sure what hoovering up actually does, the embarrassing flag took a long time to go. So when I get those notices I shut tor down as soon as I can, that seems to stop what they see as an attack

[tor-relays] Cheap Servers? There MUST be a catch

Worried about dominance of OVH for relays and exits? How about Google! Setting up a fast server is SO cheap on their https://cloud.google.com/ platform, it is tempting to set up relays, if not exits there. Looking at their T they do not seem to mention TOR or banning running a proxy, but a

Re: [tor-relays] IPv6

quot;firewall"). I cannot have my personal VPS seen as a Tor node, so cannot do that. Gerry -Original Message- From: tor-relays On Behalf Of David Goulet Sent: 25 February 2021 13:16 To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] IPv6 On 24 Feb (12:02:11), Dr Gerard Bu

Re: [tor-relays] IPv6

Thinking of IPv6: How far has the team got in implementing IPv6 only OR port facility ? Currently you can only run tor relay of any sort if there is open IPv4 OR port to the internet. This is getting a bit quaint. I am sure I am not alone in having much wasted bandwidth that could be

Re: [tor-relays] Nyx

Fixed it by installing from deb file. -Original Message- From: Dr Gerard Bulger Sent: 21 February 2021 19:09 To: 'tor-relays@lists.torproject.org' Subject: Nyx Sorry if wrong forum Nyx install out of the box, never had this error on starting before Ubuntu 18.04 Traceback (most

[tor-relays] Nyx

Sorry if wrong forum Nyx install out of the box, never had this error on starting before Ubuntu 18.04 Traceback (most recent call last): File "/usr/bin/nyx", line 11, in load_entry_point('nyx==2.0.4', 'console_scripts', 'nyx')() File