Re: purging old router information, revocation

2007-02-22 Thread Nick Mathewson
On Wed, Feb 21, 2007 at 02:09:31PM -0500, James Muir wrote:
> I'd like to know how directories are cleaned up after a router leaves 
> the Tor network.  I've read through the specs distributed with 
> 0.1.2.7-alpha but I haven't been able to find a discussion on this. 

Hm.  You're right; this isn't documented well enough.  Let me dig
through the code a little.

Once your router is no longer publishing router descriptors, the clock
starts ticking: it will no longer be included in the network status
documents the authorities generate after it's older then
MAX_AGE_TO_PUBLISH seconds old (currently, 20 hours, though we're
going to crank this up to something higher so clients don't need to
publish so often), the authorities won't include it in the network
status documents they generate.

Some clients may ask caches for the descriptor anyway, since they may
have older network status documents.  Caches throw even old expired
descriptors away after  OLD_ROUTER_DESC_MAX_AGE (currently 5 days).

It would be cool to have a patch to dir-spec.txt to document this
stuff, if it's not documented there somewhere already. :)

peace,
-- 
Nick Mathewson


pgpnQnxEj1wSR.pgp
Description: PGP signature


Re: Tor server web page?

2007-02-22 Thread Matt Glaves


http://tor.stugs.com

I put that up to help filter abuse complaints to a separate address.  
About half my complaints now come through that address, so I guess it's 
working.


matt


Sam Creasey wrote:

I know I've seen this discussed on here, and it's pretty much just a
FAQ at this point, but somehow my google skills are failing me...

Does anyone have a link to some example text to reply to HTTP queries
for the / page of an ip which runs *only* a tor exit server? (http://torserver/)
Something along the lines of "Any traffic you've seen from this IP was
generated by a tor server.  there is nothing to see here."

Thanks.

-- Sam

  


Re: Tor server web page?

2007-02-22 Thread James Muir

Sam Creasey wrote:

I know I've seen this discussed on here, and it's pretty much just a
FAQ at this point, but somehow my google skills are failing me...


From the Tor FAQ:


9.2. How do I respond to my ISP about my exit server?

[link]

A collection of templates for successfully responding to ISPs is collected here. 


This is probably what you want:

http://tor-exit.fscked.org/

-James



Re: Tor server web page?

2007-02-22 Thread Michael Holstein

Run Apache (or whatever) on the same box and follow these instructions :

http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#ServerForFirewalledClients

specifically :

To offer your directory mirror on port 80, where apache is already 
listening, add this to your apache config:


   
   ProxyPass /tor/ http://localhost:9030/tor/
   ProxyPassReverse /tor/ http://localhost:9030/tor/
   

Then just set the basic html page as you describe in httdocs. It's also 
a good idea to have the reverse dns say something like 
"tor-anonymous-proxy.whateverdomain.com" because that's the first place 
folks will look.


Cheers,

Michael Holstein CISSP GCIA
Cleveland State University

Sam Creasey wrote:

I know I've seen this discussed on here, and it's pretty much just a
FAQ at this point, but somehow my google skills are failing me...

Does anyone have a link to some example text to reply to HTTP queries
for the / page of an ip which runs *only* a tor exit server? (http://torserver/)
Something along the lines of "Any traffic you've seen from this IP was
generated by a tor server.  there is nothing to see here."

Thanks.

-- Sam



Tor server web page?

2007-02-22 Thread Sam Creasey
I know I've seen this discussed on here, and it's pretty much just a
FAQ at this point, but somehow my google skills are failing me...

Does anyone have a link to some example text to reply to HTTP queries
for the / page of an ip which runs *only* a tor exit server? (http://torserver/)
Something along the lines of "Any traffic you've seen from this IP was
generated by a tor server.  there is nothing to see here."

Thanks.

-- Sam