[tor-relays] Ports 443 and 80 are open, but 443 not Tor reachable

oseump Wed, 04 Mar 2015 07:54:06 -0800

Hello everyone, this is my first post, and would be very grateful for help.


My Tor relay (0.2.5.10 and now compiled from source) has had a checkered 
history since I installed it, first on an Efika MX in December (which proved 
unstable), and then on a Raspberry Pi model 2 (Linux 3.18.8-v7+) starting a 
couple or so weeks ago. 

In trying to follow recommendations, and wanting to be helpful to less 
fortunate souls, I changed from the usual ORPort 9001 and DirPort 9030 (which 
worked) to ports 443 and 80 respectively. I now know that this is a pathway to 
misery and sorrow.

With ORPort 443 Tor could not confirm the port was reachable even though it was 
wide open to online port checkers and nmap -sT -O localhost shows ports 22/tcp, 
80/tcp, 443/tcp to be open.

And yet torstatus monitors show many relays displaying ports ORPOrt 443 and 
DirPort 80 running on Linux. 

Yesterday I swapped the ports and within a moment ORPort 80 was confirmed and 
server descriptor published. DirPort 443 fails to confirm it is reachable. 

sudo iptables -L -nv
Chain INPUT (policy DROP 4328 packets, 200K bytes)
&nbsp;pkts bytes target&nbsp;&nbsp;&nbsp;&nbsp; prot opt 
in&nbsp;&nbsp;&nbsp;&nbsp; out&nbsp;&nbsp;&nbsp;&nbsp; 
source&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 destination 
&nbsp;144K&nbsp;&nbsp; 60M ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp; --&nbsp; 
lo&nbsp;&nbsp;&nbsp;&nbsp; *&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0.0.0.0/0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0.0.0.0/0&nbsp;&nbsp; 
91861&nbsp;&nbsp; 23M ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; tcp&nbsp; --&nbsp; 
*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; *&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0.0.0.0/0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0.0.0.0/0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; tcp 
dpt:80
&nbsp;4711 1087K ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; tcp&nbsp; --&nbsp; 
*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; *&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0.0.0.0/0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0.0.0.0/0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; tcp 
dpt:443
1497K&nbsp; 202M ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp; --&nbsp; 
*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; *&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
192.168.1.0/24&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0.0.0..0/0&nbsp;&nbsp; 
&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp; 0 ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; 
icmp --&nbsp; *&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0.0.0.0/0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0.0.0.0/0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
icmptype 8
1221K 1521M ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp; --&nbsp; 
*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; *&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0.0.0.0/0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0.0.0.0/0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
state RELATED,ESTABLISHED

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
&nbsp;pkts bytes target&nbsp;&nbsp;&nbsp;&nbsp; prot opt 
in&nbsp;&nbsp;&nbsp;&nbsp; out&nbsp;&nbsp;&nbsp;&nbsp; 
source&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 destination 

Chain OUTPUT (policy ACCEPT 2929K packets, 1979M bytes)
&nbsp;pkts bytes target&nbsp;&nbsp;&nbsp;&nbsp; prot opt 
in&nbsp;&nbsp;&nbsp;&nbsp; out&nbsp;&nbsp;&nbsp;&nbsp; 
source&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 destination 


So what is it about port 443 on my little RP 2 that Tor dislikes?

_______________________________________________
tor-relays mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

[tor-relays] Ports 443 and 80 are open, but 443 not Tor reachable

Reply via email to