I have set the static NAT and forwarded the port. Here is what I get. I've hidden my IP for obvious reasons. Oct 18 19:04:51 darkhoodie-HP-Compaq-Pro-6300-SFF kernel: [441419.629454] [UFW BLOCK] IN=eno1 OUT= MAC=24:be:05:0e:ef:2c:78:67:0e:6c:43:68:08:00 SRC=36.155.109.220 DST=192.168.1.171 LEN=60 TOS=0x04 PREC=0x00 TTL=42 ID=20279 DF PROTO=TCP SPT=41190 DPT=6379 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 18 19:04:55 darkhoodie-HP-Compaq-Pro-6300-SFF kernel: [441423.887061] [UFW BLOCK] IN=eno1 OUT= MAC=24:be:05:0e:ef:2c:78:67:0e:6c:43:68:08:00 SRC=5.8.18.30 DST=192.168.1.171 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=50889 PROTO=TCP SPT=53094 DPT=3629 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 18 19:05:28 darkhoodie-HP-Compaq-Pro-6300-SFF kernel: [441456.454702] [UFW BLOCK] IN=eno1 OUT= MAC=24:be:05:0e:ef:2c:78:67:0e:6c:43:68:08:00 SRC=62.233.50.217 DST=192.168.1.171 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=51669 PROTO=TCP SPT=50240 DPT=6868 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 18 19:05:45 darkhoodie-HP-Compaq-Pro-6300-SFF kernel: [441474.158797] [UFW BLOCK] IN=eno1 OUT= MAC=24:be:05:0e:ef:2c:78:67:0e:6c:43:68:08:00 SRC=167.94.138.135 DST=192.168.1.171 LEN=44 TOS=0x00 PREC=0x00 TTL=40 ID=7261 PROTO=TCP SPT=16092 DPT=9172 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 18 19:05:58 darkhoodie-HP-Compaq-Pro-6300-SFF kernel: [441487.310284] [UFW BLOCK] IN=eno1 OUT= MAC=24:be:05:0e:ef:2c:78:67:0e:6c:43:68:08:00 SRC=113.221.37.58 DST=192.168.1.171 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=15518 PROTO=TCP SPT=34678 DPT=23 WINDOW=41814 RES=0x00 SYN URGP=0 Oct 18 19:06:23 darkhoodie-HP-Compaq-Pro-6300-SFF kernel: [441512.201129] [UFW BLOCK] IN=eno1 OUT= MAC=24:be:05:0e:ef:2c:78:67:0e:6c:43:68:08:00 SRC=104.219.251.172 DST=192.168.1.171 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=40996 PROTO=TCP SPT=52636 DPT=50871 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 18 19:06:28 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[73719]: Your server has not managed to confirm reachability for its ORPort(s) at x.x.x.x:443. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc. Oct 18 19:06:47 darkhoodie-HP-Compaq-Pro-6300-SFF kernel: [441535.989255] [UFW BLOCK] IN=eno1 OUT= MAC=24:be:05:0e:ef:2c:78:67:0e:6c:43:68:08:00 SRC=167.94.146.71 DST=192.168.1.171 LEN=44 TOS=0x00 PREC=0x00 TTL=41 ID=21447 PROTO=TCP SPT=1753 DPT=80 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 18 19:06:56 darkhoodie-HP-Compaq-Pro-6300-SFF kernel: [441544.747086] [UFW BLOCK] IN=eno1 OUT= MAC=24:be:05:0e:ef:2c:78:67:0e:6c:43:68:08:00 SRC=180.107.144.245 DST=192.168.1.171 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=58967 PROTO=TCP SPT=17671 DPT=23 WINDOW=22295 RES=0x00 SYN URGP=0 Oct 18 19:07:24 darkhoodie-HP-Compaq-Pro-6300-SFF kernel: [441572.871562] [UFW BLOCK] IN=eno1 OUT= MAC=24:be:05:0e:ef:2c:78:67:0e:6c:43:68:08:00 SRC=182.139.135.66 DST=192.168.1.171 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=56053 DF PROTO=TCP SPT=24487 DPT=6379 WINDOW=43690 RES=0x00 SYN URGP=0 Oct 18 19:07:37 darkhoodie-HP-Compaq-Pro-6300-SFF kernel: [441585.389512] [UFW BLOCK] IN=eno1 OUT= MAC=24:be:05:0e:ef:2c:78:67:0e:6c:43:68:08:00 SRC=91.191.209.210 DST=192.168.1.171 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=55705 PROTO=TCP SPT=53674 DPT=1111 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 18 19:07:54 darkhoodie-HP-Compaq-Pro-6300-SFF kernel: [441602.939222] [UFW BLOCK] IN=eno1 OUT= MAC=24:be:05:0e:ef:2c:78:67:0e:6c:43:68:08:00 SRC=5.8.18.77 DST=192.168.1.171 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=34142 PROTO=TCP SPT=54102 DPT=14589 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 18 19:08:19 darkhoodie-HP-Compaq-Pro-6300-SFF kernel: [441627.850686] [UFW BLOCK] IN=eno1 OUT= MAC=24:be:05:0e:ef:2c:78:67:0e:6c:43:68:08:00 SRC=139.59.16.136 DST=192.168.1.171 LE
Sent with Proton Mail secure email. ------- Original Message ------- On Monday, October 17th, 2022 at 5:03 AM, trinity pointard <[email protected]> wrote: > Hi, > > Bridges are usually not impacted by network-wide DoS as they are not > as public as any other node. > Your node thinks it's unreachable. Have you confirmed the IP it uses > is not hard-coded in your torrc to be your former IP. Have you > configured your router NAT correctly? > Lastly, is it possible that after moving, you no longer have an entire > public IP, but are now behind CG-NAT > (https://en.wikipedia.org/wiki/Carrier-grade_NAT) ? > > Regards, > > Le lun. 17 oct. 2022 à 08:46, Anonforpeace via tor-relays > [email protected] a écrit : > > > Hello: > > > > My Tor Bridge has been down for awhile as I was moving to a new home. I > > have been trying to bring it up again and have been receiving the messages > > you see below. I have checked the the tor project status and see that there > > is a Ddos attack affecting the network. Is that why I am getting this or am > > I doing something wrong? Thank you. > > > > darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:~$ sudo systemctl enable --now > > tor.service > > Synchronizing state of tor.service with SysV service script with > > /lib/systemd/systemd-sysv-install. > > Executing: /lib/systemd/systemd-sysv-install enable tor > > darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:~$ sudo systemctl restart > > tor.service > > darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:~$ journalctl -e -u tor@default > > Oct 16 00:20:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 00:40:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 01:00:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 01:00:15 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Unable to > > find IPv6 address for ORPort 443. You might want to specify IPv4Only to it > > or set an explicit address or set Address. [59 similar message(s) > > suppressed in last 3540 > > > Oct 16 01:20:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 01:40:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 02:00:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 02:00:15 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Unable to > > find IPv6 address for ORPort 443. You might want to specify IPv4Only to it > > or set an explicit address or set Address. [60 similar message(s) > > suppressed in last 3540 > > > Oct 16 02:14:16 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: No circuits > > are opened. Relaxed timeout for circuit 875 (a Testing circuit 3-hop > > circuit in state doing handshakes with channel state open) to 60000ms. > > However, it appears the> > > Oct 16 02:20:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 02:40:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 03:00:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 03:00:15 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Unable to > > find IPv6 address for ORPort 443. You might want to specify IPv4Only to it > > or set an explicit address or set Address. [60 similar message(s) > > suppressed in last 3540 > > > Oct 16 03:20:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 03:40:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 04:00:13 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Heartbeat: > > Tor's uptime is 1 day 12:00 hours, with 0 circuits open. I've sent 6.47 MB > > and received 36.85 MB. I've received 0 connections on IPv4 and 0 on IPv6. > > I've made 161 c> > > Oct 16 04:00:13 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: While not > > bootstrapping, fetched this many bytes: 28998071 (server descriptor fetch); > > 2431916 (consensus network-status fetch); 310310 (microdescriptor fetch) > > Oct 16 04:00:13 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Heartbeat: > > Since last heartbeat message, I have seen 0 unique clients. > > Oct 16 04:00:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 04:00:15 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Unable to > > find IPv6 address for ORPort 443. You might want to specify IPv4Only to it > > or set an explicit address or set Address. [59 similar message(s) > > suppressed in last 3540 > > > Oct 16 04:20:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 04:40:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 05:00:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 05:00:15 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Unable to > > find IPv6 address for ORPort 443. You might want to specify IPv4Only to it > > or set an explicit address or set Address. [60 similar message(s) > > suppressed in last 3540 > > > Oct 16 05:20:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 05:24:16 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: No circuits > > are opened. Relaxed timeout for circuit 920 (a Testing circuit 3-hop > > circuit in state doing handshakes with channel state open) to 60000ms. > > However, it appears the> > > Oct 16 05:40:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 06:00:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 06:00:15 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Unable to > > find IPv6 address for ORPort 443. You might want to specify IPv4Only to it > > or set an explicit address or set Address. [60 similar message(s) > > suppressed in last 3540 > > > Oct 16 06:20:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 06:40:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 07:00:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 07:00:15 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Unable to > > find IPv6 address for ORPort 443. You might want to specify IPv4Only to it > > or set an explicit address or set Address. [59 similar message(s) > > suppressed in last 3540 > > > Oct 16 07:20:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 07:40:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 08:00:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 08:00:15 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Unable to > > find IPv6 address for ORPort 443. You might want to specify IPv4Only to it > > or set an explicit address or set Address. [60 similar message(s) > > suppressed in last 3540 > > > Oct 16 08:20:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 08:40:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 09:00:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 09:00:15 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Unable to > > find IPv6 address for ORPort 443. You might want to specify IPv4Only to it > > or set an explicit address or set Address. [60 similar message(s) > > suppressed in last 3540 > > > Oct 16 09:02:21 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your network > > connection speed appears to have changed. Resetting timeout to 60000ms > > after 18 timeouts and 103 buildtimes. > > Oct 16 09:20:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 09:40:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 10:00:13 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Heartbeat: > > Tor's uptime is 1 day 18:00 hours, with 0 circuits open. I've sent 7.75 MB > > and received 43.92 MB. I've received 0 connections on IPv4 and 0 on IPv6. > > I've made 188 c> > > Oct 16 10:00:13 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: While not > > bootstrapping, fetched this many bytes: 34600394 (server descriptor fetch); > > 2858305 (consensus network-status fetch); 361968 (microdescriptor fetch) > > Oct 16 10:00:13 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Heartbeat: > > Since last heartbeat message, I have seen 0 unique clients. > > Oct 16 10:00:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 10:00:15 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Unable to > > find IPv6 address for ORPort 443. You might want to specify IPv4Only to it > > or set an explicit address or set Address. [59 similar message(s) > > suppressed in last 3540 > > > Oct 16 10:20:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 10:40:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 11:00:14 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Your server > > has not managed to confirm reachability for its ORPort(s) at > > 100.2.224.20:443. Relays do not publish descriptors until their ORPort and > > DirPort are reachable. Plea> > > Oct 16 11:00:15 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Unable to > > find IPv6 address for ORPort 443. You might want to specify IPv4Only to it > > or set an explicit address or set Address. [60 similar message(s) > > suppressed in last 3540 > > > Oct 16 11:05:13 darkhoodie-HP-Compaq-Pro-6300-SFF systemd[1]: Stopping > > Anonymizing overlay network for TCP... > > Oct 16 11:05:13 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Interrupt: we > > have stopped accepting new connections, and will shut down in 30 seconds. > > Interrupt again to exit now. > > Oct 16 11:05:13 darkhoodie-HP-Compaq-Pro-6300-SFF Tor[16182]: Delaying > > directory fetches: We are hibernating or shutting down. > > > > Sent with Proton Mail secure email. > > > > _______________________________________________ > > tor-relays mailing list > > [email protected] > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > _______________________________________________ > tor-relays mailing list > [email protected] > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays _______________________________________________ tor-relays mailing list [email protected] https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
