Re: [ANNOUNCE] Incognito CD/USB 20070824.1 released

2007-09-18 Thread Scott Bennett
 On Tue, 18 Sep 2007 07:35:06 +0200 Thomas Hluchnik
[EMAIL PROTECTED] wrote:

 Oh, for crying out loud.  Another top-poster.  What is it with the
people on this list that there are so many who are too damned lazy to edit
their followups properly?

can you find out which graphics driver is used? It seems to me as if the fglrx
driver is used, which works bad for older ATI cards. Is ist possible to use the
radeon driver instead?

 Hold on a bit.  Zitat von Ano Nymous [EMAIL PROTECTED] has yet to
show us any kernel messages, so we don't have a clue what's going on.  Or,
rather, we have several possibilities with no way to distinguish which one
might be the real problem.

I have a ATI card, too, and I am just going to throw it away, though its quite 
a

 Such impatience.

good card. Next time I buy a Nvidia, hope that runs better.

 How about mentioning which card you have?  They do not all have the same,
or even similar, characteristics.  How about some kernel messages from your
system, as well as the X log messages about the card?


Zitat von Ano Nymous [EMAIL PROTECTED]:

 I hope this is the right place to ask this question. If not, please
 point me to the right one!

 It definitely is not.  I would recommend not following up to this list,
but you and/or Mr. Hluchnik are welcome to email me directly.  A more
appropriate place would be one of the LINUX lists or one of the lists for X.org
or XFree86, as the case may be.

 Im having a problem with booting the incognito cd. i am always being
 dropped to the command prompt. my video card seems to be detected
 correctly though.

 after trying startx the screen goes black for one second, and then i
 get this error message:

 (EE) no devices detected
 fatal server error:
 no screens found
 XIO: fatal IO error 104 (Connection reset by peer) on X server :0.0
 after 0 requests (0 known processed) with 0 remaining.

 it looks like its a problem with the video card driver, maybe? which
 is weird because incognito detects my video card correctly. it not

 What is incognito in this context?

 only says that its an ati card, but it also knows the correct model
 (1900xt).

 Which X (i.e., X.org or XFree86) are you using and which version of it?
Did you ever configure by running Xorg -configure if you're running X.org?
(There's an equivalent thing to run for XFree86, but it has been so long since
I last did that that I don't remember exactly what it is.)

 i had the exact same problem with the previous incognito version by the way.

 I hope that i have included all the necessary information. if you need
 to know more, to diagnose the problem, just ask! i already tried

 At a minimum, you need to
a) identify the X11 package and version that you are using,
b) identify the operating system and version that you are using, and
c) state the hardware configuration you are using.

 googling for the error, but i couldnt find anything useful. but since
 im a linux noob, thats no suprise.

 I can't imagine why you chose a tor list to post questions about LINUX
or X11.


  Scott Bennett, Comm. ASMELG, CFIAG
**
* Internet:   bennett at cs.niu.edu  *
**
* A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army.   *
*-- Gov. John Hancock, New York Journal, 28 January 1790 *
**


Re: [ANNOUNCE] Incognito CD/USB 20070824.1 released

2007-09-18 Thread Roger Dingledine
Hi folks,

I've been absent the past few weeks, and it looks like the list has
gotten very, er, exciting in that short time. I'll try to bring a bit
more signal/noise ratio back to it now that I'm back.

On Tue, Sep 18, 2007 at 01:01:20AM -0500, Scott Bennett wrote:
 Zitat von Ano Nymous [EMAIL PROTECTED]:
  I hope this is the right place to ask this question. If not, please
  point me to the right one!
 
  It definitely is not.  I would recommend not following up to this list,
 but you and/or Mr. Hluchnik are welcome to email me directly.  A more
 appropriate place would be one of the LINUX lists or one of the lists for 
 X.org
 or XFree86, as the case may be.

[snip]

  it looks like its a problem with the video card driver, maybe? which
  is weird because incognito detects my video card correctly. it not
 
  What is incognito in this context?

Incognito, in this context, is the subject of this thread that you
are participating in:
http://archives.seul.org/or/talk/Sep-2007/threads.html#00037

People who are rude have to be extra-careful to be both correct and
useful; otherwise they just contribute to the problem. :(

As to whether user support for Incognito is on-topic for or-talk, let's
find out whether Pat wants to deal with it here, and whether it's one
user per month or hundreds.

Thanks,
--Roger



Re: [ANNOUNCE] Incognito CD/USB 20070824.1 released

2007-09-18 Thread Scott Bennett
 On Tue, 18 Sep 2007 02:26:54 -0400 Roger Dingledine [EMAIL PROTECTED]
wrote:

I've been absent the past few weeks, and it looks like the list has

 For being absent, you have been very frequently helpful. :-)

gotten very, er, exciting in that short time. I'll try to bring a bit
more signal/noise ratio back to it now that I'm back.

On Tue, Sep 18, 2007 at 01:01:20AM -0500, Scott Bennett wrote:
 Zitat von Ano Nymous [EMAIL PROTECTED]:
  I hope this is the right place to ask this question. If not, please
  point me to the right one!
 
  It definitely is not.  I would recommend not following up to this list,
 but you and/or Mr. Hluchnik are welcome to email me directly.  A more
 appropriate place would be one of the LINUX lists or one of the lists for 
 X.org
 or XFree86, as the case may be.

[snip]

  it looks like its a problem with the video card driver, maybe? which
  is weird because incognito detects my video card correctly. it not
 
  What is incognito in this context?

Incognito, in this context, is the subject of this thread that you
are participating in:
http://archives.seul.org/or/talk/Sep-2007/threads.html#00037

 Thank you, Roger.  I'll take a look shortly.

People who are rude have to be extra-careful to be both correct and
useful; otherwise they just contribute to the problem. :(

 The rudeness has been discussed before, namely, the laziness of some
people on the list to post followups in the normally accepted format, which
preserves a sequential record of previous information.  Top-posting destroys
that record's time sequence and makes it difficult for readers joining a thread
to follow what has been going on.  Another rudeness exhibited on this list is
completely omitting the record completely when following up (not applicable
in the instant case, of course, because you've included the parts to which
you were responding).  That some readers dislike both the inconvenience and the
rudeness involved in causing the inconvenience may be expressed bluntly with
cause.

As to whether user support for Incognito is on-topic for or-talk, let's
find out whether Pat wants to deal with it here, and whether it's one
user per month or hundreds.

 I interpreted the content of the original message in the thread as being
a question regarding driver support for a particular, though unidentified,
graphics card under X11 running on a LINUX system.  Incognito appeared to be
only an application whose request to X11 had failed due to X11's, or perhaps
the LINUX kernel's, failure to provide service to the graphics card.  It did
not appear, from the few messages included in the original posting, to be
related to any problem with Incognito itself.
 FWIW, I use FreeBSD 6.2-STABLE with X.org 6.9 and on occasion (grimacing
with distaste) Windows XP w/SP2.  My graphics card is a Mobility Radeon 9800
which apparently has the mobile version of the R420 chip.  AFAIK, all Radeon
cards have support under X.org as VESA devices, which can be used as a last
resort.  Radeon cards with model numbers above 9200 (R200-series GPUs)
generally have only 2-D acceleration using the radeon driver, though there is
apparently some experimental support for 3-D acceleration available for a few
old models with numbers slightly higher than 9200 (R300-series).  So I use the
radeon driver and get 2-D acceleration and 3-D support via the Pentium IV.  To
get this support under either LINUX or FreeBSD, the kernel must be generated
with the correct kernel driver, which the fglrx LINUX driver from ATi also
requires, and with the X11 driver (either radeon or fglrx) configured in
xorg.conf (or the equivalent for XFree86).
 Thus was the provenance of my diagnostic questions for the OP and the
author of the first followup.  I've been around some of these blocks already
and might well be able to help, but the or-talk list really doesn't seem to
be the place to proceed with that.


  Scott Bennett, Comm. ASMELG, CFIAG
**
* Internet:   bennett at cs.niu.edu  *
**
* A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army.   *
*-- Gov. John Hancock, New York Journal, 28 January 1790 *
**


Re: [ANNOUNCE] Incognito CD/USB 20070824.1 released

2007-09-18 Thread Scott Bennett
 On Tue, 18 Sep 2007 01:56:34 -0500 (CDT) I wrote:
 On Tue, 18 Sep 2007 02:26:54 -0400 Roger Dingledine [EMAIL PROTECTED]
wrote:

I've been absent the past few weeks, and it looks like the list has

 For being absent, you have been very frequently helpful. :-)

gotten very, er, exciting in that short time. I'll try to bring a bit
more signal/noise ratio back to it now that I'm back.

On Tue, Sep 18, 2007 at 01:01:20AM -0500, Scott Bennett wrote:
 Zitat von Ano Nymous [EMAIL PROTECTED]:
  I hope this is the right place to ask this question. If not, please
  point me to the right one!
 
  It definitely is not.  I would recommend not following up to this list,
 but you and/or Mr. Hluchnik are welcome to email me directly.  A more
 appropriate place would be one of the LINUX lists or one of the lists for 
 X.org
 or XFree86, as the case may be.

[snip]

  it looks like its a problem with the video card driver, maybe? which
  is weird because incognito detects my video card correctly. it not
 
  What is incognito in this context?

Incognito, in this context, is the subject of this thread that you
are participating in:
http://archives.seul.org/or/talk/Sep-2007/threads.html#00037

 Thank you, Roger.  I'll take a look shortly.

 Uh, Roger...that's just the announcement I did see here, which tells me
what has been done to Incognito, but doesn't tell me what Incognito is nor
why it should be related to tor, vidalia, and so on.  Guess I'll have to
search the web on it...


  Scott Bennett, Comm. ASMELG, CFIAG
**
* Internet:   bennett at cs.niu.edu  *
**
* A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army.   *
*-- Gov. John Hancock, New York Journal, 28 January 1790 *
**


time needed to register a serve

2007-09-18 Thread Scott Bennett
 Does anyone have a sense of the current processing delay in registering
a server?  I ask only because I sent off the registration information to
[EMAIL PROTECTED] last Thursday evening, 13 Sept., and my server is still
showing up in the status documents without the Named flag in them.
 It's not a big deal; I'm just curious.  Processing of flight instructor
certificate renewals is now said to take more than six months, and the
certificates have to be renewed every 24 months.  (Your tax dollars at work,
of course. :-)


  Scott Bennett, Comm. ASMELG, CFIAG
**
* Internet:   bennett at cs.niu.edu  *
**
* A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army.   *
*-- Gov. John Hancock, New York Journal, 28 January 1790 *
**


Re: [ANNOUNCE] Incognito CD/USB 20070824.1 released

2007-09-18 Thread Ano Nymous
sorry for creating such an excitement, it wasnt my intention. i
would love to continiue this discussion on an incognito forum or
mailinglist, but i couldnt find any.

i just asked here, because i couldnt find a more appropriate place to
ask for help with incognito. for those who dont know what it is: its a
linux live cd (like knoppix) with a focus on privacy, and privacy
applications. its pre configured for the best possible anonymity (i
hope ;) )

anyway, i didnt want to take my problem to a random linux forum,
because i need help with the specific configuration of the incognito
cd, which i thought was best known here. since incognito is a live cd
it is also supposed to work out of the box with little or no user
interaction required to boot correctly! this irritates me even more,
because i am not aware that i have special hardware that requires
extra configuraton on my end. its just a one year old ati card, which
was very popular at the time.

the fglrx driver also shouldnt be the problem, because i have ubuntu
installed on a partition on my harddrive, and it works correctly
there. if you need me to supply logs or anything just tell me how, and
i will post them.


Re: [ANNOUNCE] Incognito CD/USB 20070824.1 released

2007-09-18 Thread Scott Bennett
 On Tue, 18 Sep 2007 10:54:29 +0200 Ano Nymous [EMAIL PROTECTED]
wrote:

sorry for creating such an excitement, it wasnt my intention. i
would love to continiue this discussion on an incognito forum or
mailinglist, but i couldnt find any.

i just asked here, because i couldnt find a more appropriate place to
ask for help with incognito. for those who dont know what it is: its a
linux live cd (like knoppix) with a focus on privacy, and privacy
applications. its pre configured for the best possible anonymity (i
hope ;) )

 Ah.  Thank you.

anyway, i didnt want to take my problem to a random linux forum,
because i need help with the specific configuration of the incognito
cd, which i thought was best known here. since incognito is a live cd
it is also supposed to work out of the box with little or no user
interaction required to boot correctly! this irritates me even more,
because i am not aware that i have special hardware that requires
extra configuraton on my end. its just a one year old ati card, which
was very popular at the time.

 As noted previously, the few messages you posted before showed the
problem to be one of X11, and possibly LINUX kernel, support for your
graphics card, rather than of Incognito.  So, please, let's take this
off the list to private email.
 If your ATi card is only a year old and is not of an old model
(e.g., Radeon 9200), then the support you'll get with the native drivers
is quite limited, but is available and does work.  The recent R500-
series-based cards are, AFAIK, only supported as VESA devices.  The
R500-series core is apparently unrelated to the earlier, R100-R40 series
of cores, and thus the open source community has not yet devised an
appropriate driver.  Thanks to ATi's intransigence in refusing to
provide information to the open source developers, we still don't have
open-source support for hardware 3-D acceleration for chips that are
now over three years old, much less for the newer hardware.

the fglrx driver also shouldnt be the problem, because i have ubuntu
installed on a partition on my harddrive, and it works correctly

 You haven't yet posted the configuration file or any of the other
stuff we would need to know whether you even have the fglrx driver
installed, much less are using it.  You may be using it with just the
VESA support.
 Here's the list of cards that the native radeon driver recognizes
as of X.org 6.9, though the more recent ones do not have support for
3-D hardware acceleration.  I haven't messed with 7.x yet, but am told
that no new Radeon support was added during the X.org reorganization
that occurred with 7.x.

(II) RADEON: Driver for ATI Radeon chipsets: ATI Radeon QD (AGP),
ATI Radeon QE (AGP), ATI Radeon QF (AGP), ATI Radeon QG (AGP),
ATI Radeon VE/7000 QY (AGP/PCI), ATI Radeon VE/7000 QZ (AGP/PCI),
ATI ES1000 515E (PCI), ATI ES1000 5969 (PCI),
ATI Radeon Mobility M7 LW (AGP),
ATI Mobility FireGL 7800 M7 LX (AGP),
ATI Radeon Mobility M6 LY (AGP), ATI Radeon Mobility M6 LZ (AGP),
ATI Radeon IGP320 (A3) 4136, ATI Radeon IGP320M (U1) 4336,
ATI Radeon IGP330/340/350 (A4) 4137,
ATI Radeon IGP330M/340M/350M (U2) 4337,
ATI Radeon 7000 IGP (A4+) 4237, ATI Radeon Mobility 7000 IGP 4437,
ATI FireGL 8700/8800 QH (AGP), ATI Radeon 8500 QL (AGP),
ATI Radeon 9100 QM (AGP), ATI Radeon 8500 AIW BB (AGP),
ATI Radeon 8500 AIW BC (AGP), ATI Radeon 7500 QW (AGP/PCI),
ATI Radeon 7500 QX (AGP/PCI), ATI Radeon 9000/PRO If (AGP/PCI),
ATI Radeon 9000 Ig (AGP/PCI), ATI FireGL Mobility 9000 (M9) Ld (AGP),
ATI Radeon Mobility 9000 (M9) Lf (AGP),
ATI Radeon Mobility 9000 (M9) Lg (AGP),
ATI Radeon 9100 IGP (A5) 5834,
ATI Radeon Mobility 9100 IGP (U3) 5835, ATI Radeon 9100 PRO IGP 7834,
ATI Radeon Mobility 9200 IGP 7835, ATI Radeon 9200PRO 5960 (AGP),
ATI Radeon 9200 5961 (AGP), ATI Radeon 9200 5962 (AGP),
ATI Radeon 9200SE 5964 (AGP), ATI FireMV 2200 (PCI),
ATI Radeon Mobility 9200 (M9+) 5C61 (AGP),
ATI Radeon Mobility 9200 (M9+) 5C63 (AGP), ATI Radeon 9500 AD (AGP),
ATI Radeon 9500 AE (AGP), ATI Radeon 9600TX AF (AGP),
ATI FireGL Z1 AG (AGP), ATI Radeon 9700 Pro ND (AGP),
ATI Radeon 9700/9500Pro NE (AGP), ATI Radeon 9700 NF (AGP),
ATI FireGL X1 NG (AGP), ATI Radeon 9600 AP (AGP),
ATI Radeon 9600SE AQ (AGP), ATI Radeon 9600XT AR (AGP),
ATI Radeon 9600 AS (AGP), ATI FireGL T2 AT (AGP),
ATI FireGL RV360 AV (AGP),
ATI Radeon Mobility 9600/9700 (M10/M11) NP (AGP),
ATI Radeon Mobility 9600 (M10) NQ (AGP),
ATI Radeon Mobility 9600 (M11) NR (AGP),
ATI Radeon Mobility 9600 (M10) NS (AGP),
ATI FireGL Mobility T2 (M10) NT (AGP),
ATI FireGL Mobility T2e (M11) NV (AGP), ATI Radeon 9650,
ATI Radeon 9800SE AH (AGP), ATI Radeon 9800 AI (AGP),
ATI 

Re: Maximum num ExitPolicy

2007-09-18 Thread Peter Palfrader
On Tue, 18 Sep 2007, Mike Cardwell wrote:

 Is there a maximum number of ExitPolicy entries you can have for a node?

Probably not, but remember that all the Tor clients will have to
download it, and all the Tor directory servers will have to serve it, so
it probably shouldn't be more than a dozen or so lines.

Peter
-- 
   |  .''`.  ** Debian GNU/Linux **
  Peter Palfrader  | : :' :  The  universal
 http://www.palfrader.org/ | `. `'  Operating System
   |   `-http://www.debian.org/


Maximum num ExitPolicy

2007-09-18 Thread Mike Cardwell

Hi,

Is there a maximum number of ExitPolicy entries you can have for a node?

Mike


Re: Maximum num ExitPolicy

2007-09-18 Thread Peter Palfrader
On Tue, 18 Sep 2007, Mike Cardwell wrote:

 Peter Palfrader wrote:
 
 Is there a maximum number of ExitPolicy entries you can have for a node?
 Probably not, but remember that all the Tor clients will have to
 download it, and all the Tor directory servers will have to serve it, so
 it probably shouldn't be more than a dozen or so lines.
 
 So what will happen if some prat creates a torrc with 100 million 
 ExitPolicy entries?

We'll deal with that when it becomes an issue.

-- 
   |  .''`.  ** Debian GNU/Linux **
  Peter Palfrader  | : :' :  The  universal
 http://www.palfrader.org/ | `. `'  Operating System
   |   `-http://www.debian.org/


Re: Maximum num ExitPolicy

2007-09-18 Thread Mike Cardwell

Peter Palfrader wrote:


Is there a maximum number of ExitPolicy entries you can have for a node?

Probably not, but remember that all the Tor clients will have to
download it, and all the Tor directory servers will have to serve it, so
it probably shouldn't be more than a dozen or so lines.


So what will happen if some prat creates a torrc with 100 million 
ExitPolicy entries?


Mike


Re: [ANNOUNCE] Incognito CD/USB 20070824.1 released

2007-09-18 Thread Pat Double
On Monday 17 September 2007, Ano Nymous wrote:
 I hope this is the right place to ask this question. If not, please
 point me to the right one!

 Im having a problem with booting the incognito cd. i am always being
 dropped to the command prompt. my video card seems to be detected
 correctly though.

 after trying startx the screen goes black for one second, and then i
 get this error message:

 (EE) no devices detected
 fatal server error:
 no screens found
 XIO: fatal IO error 104 (Connection reset by peer) on X server :0.0
 after 0 requests (0 known processed) with 0 remaining.

 it looks like its a problem with the video card driver, maybe? which
 is weird because incognito detects my video card correctly. it not
 only says that its an ati card, but it also knows the correct model
 (1900xt).

 i had the exact same problem with the previous incognito version by the
 way.

 I hope that i have included all the necessary information. if you need
 to know more, to diagnose the problem, just ask! i already tried
 googling for the error, but i couldnt find anything useful. but since
 im a linux noob, thats no suprise.

When booting and it lists that you've got an ATI card and the model, it should 
list what X video driver is going to be used. Can you tell me what that is. 
It should be radeon, ati or fglrx.

-- 
Pat Double, [EMAIL PROTECTED]
Ye must be born again. - John 3:7


signature.asc
Description: This is a digitally signed message part.


Incognito CD with QEMU support - request testing

2007-09-18 Thread Pat Double
Incognito is a live CD/USB that uses Tor to anonymously use the Internet. See 
details at 
http://www.patdouble.com/index.php?option=com_contenttask=blogsectionid=3Itemid=6
for details.

I've added support to Incognito for booting the CD in a Windows session using 
QEMU. This is to address the problem when a public computer disables booting 
from removable media. I am limited in testing this so I would appreciate 
feedback. If you insert the CD it should auto-run if you have this enabled, 
otherwise double-click the CD icon or execute run.bat. Note this will work 
with Windows 2000/XP or greater.

I am looking into how to make it work with USB, but for me the vvfat is broken 
(i.e. qemu -hda fat://./d:), so until I figure that out USB support won't 
work :(

http://files1.cjb.net/incognito/incognito-i686-trunk.iso

Signature:
http://files1.cjb.net/incognito/incognito-i686-trunk.iso.asc



-- 
Pat Double, [EMAIL PROTECTED]
Ye must be born again. - John 3:7


signature.asc
Description: This is a digitally signed message part.


Re: [ANNOUNCE] Incognito CD/USB 20070824.1 released

2007-09-18 Thread Pat Double
On Monday 17 September 2007, Ano Nymous wrote:
 I hope this is the right place to ask this question. If not, please
 point me to the right one!

I think email directly to me would be more appropriate since the problem isn't 
directly related to Tor or anonymity concerns. I'll respond hereafter 
off-list.

In my future announcements I'll try to remember to include a short blurb about 
what Incognito is.

-- 
Pat Double, [EMAIL PROTECTED]
Ye must be born again. - John 3:7


signature.asc
Description: This is a digitally signed message part.


Re: Arrested/surveillance/etc Tor-operators (was: [Fwd: Re: I break the silence: My arrest])

2007-09-18 Thread xiando
 A question to all Tor-operators:
 I'd like to do a survey about all incidents which happened to
 operators. Stuff like:

 * arrested
 * confiscated equippment
 * nastygram
 * surveillance
 * ...

 What would be possible other questions/point in the survey?

I was put under surveillance and tortured by the Nowegian Security Police. 
Note that this is why I now run Tor-servers, not the other way around (I just 
assumed it would be a good thing to include in the survey).


Re: Arrested/surveillance/etc Tor-operators (was: [Fwd: Re: I break the silence: My arrest])

2007-09-18 Thread Alexander W. Janssen
Hi!

On 9/18/07, xiando [EMAIL PROTECTED] wrote:
  A question to all Tor-operators:
  I'd like to do a survey about all incidents which happened to
  operators. Stuff like:
 
  * arrested
  * confiscated equippment
  * nastygram
  * surveillance
  * ...
 
  What would be possible other questions/point in the survey?

 I was put under surveillance and tortured by the Nowegian Security Police.
 Note that this is why I now run Tor-servers, not the other way around (I just
 assumed it would be a good thing to include in the survey).

What does torture mean in your case?

Alex.


-- 
I am tired of all this sort of thing called science here... We have spent
millions in that sort of thing for the last few years, and it is time it
should be stopped.
 -- Simon Cameron, U.S. Senator, on the Smithsonian Institution, 1901.


.


Re: ExitPolicy questions

2007-09-18 Thread Scott Bennett
 I finally found time to follow this up a bit.
 On Wed, 05 Sep 2007 13:22:11 +0200 Juliusz Chroboczek
[EMAIL PROTECTED] wrote:

  2) ExitPolicyRejectPrivate 1 rejects 127.0.0.0/8, among others.  Why
  doesn't it then also reject 14.0.0.0/8, which is the alternate set of
  localhost addresses?

Huh?  According to http://www.iana.org/assignments/ipv4-address-space ,
it's supposed to be used by X.25 PDNs:

  014/8   Jun 91   IANA - Public Data Network

 After searching through old RFC's, I see that the address reallocation
occurred well before the 1991 date above.  I'm glad it happened, though I
obviously missed it.

Please file a bug against your favourite IBM mainframe operating system.

 Probably a bit late now.  It was IBM's VM/XA, as I recall, and its
usage of 14.0.0.1 as localhost was probably begun before the address was
reallocated to a PDN.  I've been totally out of touch with VM/XA or VM/ESA
for more than a decade, but I'll assume for now that IBM changed its
localhost address to 127.0.0.1 long ago.


  Scott Bennett, Comm. ASMELG, CFIAG
**
* Internet:   bennett at cs.niu.edu  *
**
* A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army.   *
*-- Gov. John Hancock, New York Journal, 28 January 1790 *
**


Re: end-to-end encryption question

2007-09-18 Thread Roger Dingledine
On Thu, Sep 13, 2007 at 12:07:08PM -0400, Nick Mathewson wrote:
   In http://tor.eff.org/docs/tor-doc-server.html.en it says,
  
  14.  If your Tor server provides other services on the same IP
  address--such as a public webserver--make sure that
  connections to the webserver ae allowed from the local host,
  too.  You need to allow these connections because Tor clients
  will detect that your Tor server is the safest way to reach
  that webserver, and always build a circuit that ends at your
  server.  If you don't want to allow the connections, you must
  explicitly reject them in your exit policy.
  
   I have a few questions about the above text.
  
  a) Who translates the destination address to 127.0.0.1?  Is it the
  tor client?  Or is it the exit server?
 
 Nobody is supposed to translate the destination address to
 127.0.0.1...  Oh!  I see what went wrong here.  The local host is
 not the same as localhost, but the instructions should be a lot more
 clear about that point.

Actually, this isn't true. The local host in this text is the same as
localhost. It is 127.0.0.1.

 The paragraph quoted above is about publicly visible webservers:
 Suppose for example that you have a webserver running at IP 1.2.3.4.
 Suppose that there is also a Tor exit at 1.2.3.4.  If your webserver
 is configured to reject requests from 127.0.0.1, that's fine.  If your
 webserver is configured to reject requests from 1.2.3.4, that's no
 good.

If your webserver rejects requests from 127.0.0.1, that's bad, and it
will break people trying to reach your website from your Tor server.

The reason for this is that many modern OSes look at the destination
(1.2.3.4), realize they've got a better route for that, and decide to
route it via 127.0.0.1.

(This might not be true for your favorite OS -- I'm not sure which OSes
have this behavior -- but in practice it's true for enough of them that
many people run into it.)

  b) If I have ExitPolicyRejectPrivate 1 in my torrc, does that
  prevent such end-to-end encryption?

No, because Tor looks at the address (1.2.3.4) and your exit policy is
fine with it. It's only later, in the OS, that it gets switched over.

   If not, then does an
  ExitPolicy reject *:* at the end of my exit policy list count as
  explicitly rejecting such connections?

Yes, because then your exit policy rejects 1.2.3.4, and Tor clients
won't try to use you to exit to it.

  d) If normal connections to directory servers are unencrypted at any
  point along the way, what is the procedure to get them to be
  encrypted from end to end?
 
 AllDirActionsPrivate, I believe.

Right, but note that you're going to have to bootstrap your first set of
directory information somehow. There is no simple procedure currently,
since we haven't seen the need for it yet.

Hope that helps,
--Roger



Re: time needed to register a serve

2007-09-18 Thread Robert W Capps II

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Funny, I was just coming to post this same question :)

I sent my first request to add a new node (BinaryBLENDER) on August  
23rd,
and then sent a follow-up today . . . still no named flag in the  
directory.


I would be happy to assist if there's a backlog of requests and a  
need for

volunteers to clear them.

Robert

-BEGIN PGP SIGNATURE-
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFG8LWrB7FAVdwjg9QRAgLnAJ9RcGutXPQ1g9v3Xy6gpVw0waT/hQCdGYx3
qzHZPS+bBgnSXfVSKSutdzM=
=F8So
-END PGP SIGNATURE-




On Sep 18, 2007, at 1:06 AM, Scott Bennett wrote:

 Does anyone have a sense of the current processing delay in  
registering
a server?  I ask only because I sent off the registration  
information to
[EMAIL PROTECTED] last Thursday evening, 13 Sept., and my  
server is still

showing up in the status documents without the Named flag in them.
 It's not a big deal; I'm just curious.  Processing of flight  
instructor

certificate renewals is now said to take more than six months, and the
certificates have to be renewed every 24 months.  (Your tax dollars  
at work,

of course. :-)


  Scott Bennett, Comm. ASMELG, CFIAG
**
* Internet:   bennett at cs.niu.edu  *
**
* A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army.   *
*-- Gov. John Hancock, New York Journal, 28 January 1790 *
**