Re: Full bandwidth is not used.
Am Dienstag, den 09.03.2010, 14:01 +0100 schrieb Paul Menzel: Am Dienstag, den 09.03.2010, 07:40 -0500 schrieb and...@torproject.org: On Mon, Mar 08, 2010 at 10:21:29AM +0100, paulepan...@users.sourceforge.net wrote 1.6K bytes in 52 lines about: : I now increased the RAM too and restarted the server to no avail. It is : still below 100 KB/s. What is the network configuration? $ more /etc/tor/torrc SocksPort 0 # what port to open for local application connections ControlPort 9051 ORPort 443 ORListenAddress 0.0.0.0:9090 Address 62.141.42.186 ContactInfo 1024D/6C0E1D58 Paul Menzel p...@gw90.de DirPort 80 # what port to advertise for directory connections DirListenAddress 0.0.0.0:9091 I implemented the changes suggested by arma on IRC (due to Exit and Guard flag [1]) to configure my server as non-exit relay, so I added the following line. ExitPolicy reject *:* It is a virtual machine and connections to port 80 and 443 are forwarded by an IPtables entry in the nat table with DNAT to the virtual host. On the virtual host using IPtables ports 80 and 443 are forwarded to 9090 and 9091. Sebastian on IRC helped me to gather more data. In `cached-descriptors` I have the following. bandwidth 5242880 10485760 155910 There are more entries for my IP address when I restarted and upgraded Tor. In `cached-consensus` (from 12:28 UTC) there is r anonymisierungsdien s+wb9df31yS6Y02Rvl0i0tenAWA vyRDgH2XTP6Tn1MPiJkWE0Yk9e8 2010-03-08 18:05:07 62.141.42.186 443 80 s Exit Fast HSDir Running Stable V2Dir Valid v Tor 0.2.1.23 w Bandwidth=61 p reject 25,119,135-139,445,563,1214,4661-4666,6346-6429,6699,6881-6999 and Bandwidth even decreased by 1 (from 62) compared to the value before the update (11:14 UTC). Unfortunately changing the server to a non-exit relay on 2010-03-10 09:28:25 UTC did not change anything. Although looking at my logs and the data on [2] I would say it differs a bit. According to my logs I would say, that traffic even decreased. $ grep -A 6 62.141.42.186 cached-descriptors | grep -E 'published|bandwidth' published 2010-03-07 17:51:12 bandwidth 5242880 10485760 55006 published 2010-03-08 00:05:02 bandwidth 5242880 10485760 155910 $ grep -A 6 62.141.42.186 cached-descriptors | grep bandwidth bandwidth 5242880 10485760 214272 bandwidth 5242880 10485760 141962 $ LANG=C date grep -A 6 62.141.42.186 cached-descriptors | grep bandwidth Thu Mar 11 10:30:02 UTC 2010 bandwidth 5242880 10485760 181555 $ LANG=C date grep -A 6 62.141.42.186 cached-descriptors | grep -E 'published|bandwidth' Fri Mar 12 09:46:43 UTC 2010 published 2010-03-10 09:28:24 bandwidth 5242880 10485760 181555 published 2010-03-11 03:28:50 bandwidth 5242880 10485760 178964 published 2010-03-11 21:29:37 bandwidth 5242880 10485760 143546 The value displayed on [2] seems to be more up to date. Here are some compiled values from `cached-consensus`. $ grep -A4 62.141.42 cached-consensus # adapted the output. r anonymisierungsdien s+wb9df31yS6Y02Rvl0i0tenAWA QvLgYWR3HuX0DKMSPBCwzjIVpCk 2010-03-09 12:05:55 62.141.42.186 443 80 s Exit Fast HSDir Running Stable V2Dir Valid w Bandwidth=63 $ ls -al (adapted) 384600 9. Mär 21:27 cached-consensus w Bandwidth=102 362245 9. Mär 23:15 cached-consensus w Bandwidth=90 342063 10. Mär 07:32 cached-consensus w Bandwidth=88 # (configure as non-exit relay) 356455 10. Mär 11:14 cached-consensus w Bandwidth=86 385656 10. Mär 21:16 cached-consensus w Bandwidth=81 w Bandwidth=64 390325 11. Mär 20:03 cached-consensus w Bandwidth=58 Thu Mar 11 20:21:07 UTC 2010 w Bandwidth=58 anonymisierungsdien s+wb9df31yS6Y02Rvl0i0tenAWA BfwbPy3Xd3P2smQnEdl3Tqp9E9I 2010-03-11 21:29:37 62.141.42.186 443 80 w Bandwidth=52 r anonymisierungsdien s+wb9df31yS6Y02Rvl0i0tenAWA BfwbPy3Xd3P2smQnEdl3Tqp9E9I 2010-03-11 21:29:37 62.141.42.186 443 80 w Bandwidth=52 Do you have more ideas? Thanks, Paul [1] http://archives.seul.org/or/talk/Jan-2010/msg00175.html [2] http://trunk.torstatus.kgprog.com/router_detail.php?FP=b3ec1bf5d7f7d724ba634d91be5d22d2d7a70160 signature.asc Description: Dies ist ein digital signierter Nachrichtenteil
Re: filling a network with Tor traffic
On Thu, Mar 11, 2010 at 01:39:26PM -0500, Andrew Lewman wrote: On Thu, 11 Mar 2010 17:38:25 +0100, Eugen Leitl eu...@leitl.org wrote: :Any suggestions for making Tor filling up 2-3 /24 networks, :so that it doesn't break anything for the users? Do you mean traffic from every IP in a 2-3 /24's? Run a few VMs, set Yes. the Family option, and let lots of traffic flow. I do not currently have the resources for 700+ VMs with a Tor instance each. I can can fire up some 10, and rotate them through the address space. What is the minimum useful time for a Tor node? Hours, days? I don't want to hurt the Tor network through pointless churn through address space but to help it. I've received below suggestion. Does it make sense/ will it break anything with Tor? From: Greg Hennessy greg.henne...@nviz.net Date: Thu, 11 Mar 2010 18:35:49 + To: discuss...@pfsense.com discuss...@pfsense.com Subject: RE: [pfSense-discussion] filling network with meaningful traffic From discussion-return-3659-eugen=leitl@pfsense.com Thu Mar 11 19:36:00 2010 Reply-To: discuss...@pfsense.com Tor will bind to one inside address hung on a firewall leg. Portforward ingress traffic hitting the entire public range to the inside +ToR host and pool nat egress traffic. http://forum.pfsense.org/index.php/topic,8929.0.html http://www.openbsd.org/faq/pf/pools.html No guarantee that it'll work. But it should generate traffic over the entire assigned block. Greg -- Eugen* Leitl a href=http://leitl.org;leitl/a http://leitl.org __ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: filling a network with Tor traffic
On Fri, Mar 12, 2010 at 12:24:33PM +0100, eu...@leitl.org wrote 3.8K bytes in 49 lines about: : I've received below suggestion. Does it make sense/ : will it break anything with Tor? Only one way to find out, try it. If one user can break the entire tor network this easily, we're in deeper trouble than we realize. At worst, you'll be like the 149.9.x.x servers that were misconfigured and re-routed all traffic out of one IP address (and freaked out a lot of people in the process). -- Andrew Lewman The Tor Project pgp 0x31B0974B Website: https://www.torproject.org/ Blog: https://blog.torproject.org/ Identi.ca: torproject *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: [RFC] Campaign »Buy/S ponsor a relay.«
On Thu, Mar 11, 2010 at 11:30:27PM -0600, benn...@cs.niu.edu wrote 4.3K bytes in 78 lines about: : The everyone as a relay thing has been discussed here in the past : ad nauseam and has ended up opposed every time for very good reasons. The : everyone as a bridge idea ought to fail for the same reasons, but would : have the additional complication of requiring that tor *not* run as a bridge : if it is already running as a relay with a published descriptor. The difference is we're not looking to do it automatically without asking. Prompting the user you appear reachable, would you like to help censored users around the world? y/n? is a first step. Steven or Roger can talk more about this in detail. : In the U.S., at least, that effort would be furthered, I think, by : a publicity campaign identifying ISPs that provide *full* Internet access : to residential accounts, as opposed to ISPs that provide only *partial* : Internet access to residential accounts (e.g., Comcast). That would help : to provide a marketing advantage to ISPs offering full service over ISPs : that don't. It might also be worthwhile to start a complaint-to-the-FCC : campaign to report misleading advertising by ISPs that offer only partial : access but market it as Internet access as if it were full access. This is a fine page to start on the wiki. However, most users in the US don't have more than one or two options for broadband. Hopefully one of the two options will be more full access than the other. -- Andrew Lewman The Tor Project pgp 0x31B0974B Website: https://www.torproject.org/ Blog: https://blog.torproject.org/ Identi.ca: torproject *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: filling a network with Tor traffic
On Fri, Mar 12, 2010 at 6:24 AM, Eugen Leitl eu...@leitl.org wrote: On Thu, Mar 11, 2010 at 01:39:26PM -0500, Andrew Lewman wrote: On Thu, 11 Mar 2010 17:38:25 +0100, Eugen Leitl eu...@leitl.org wrote: :Any suggestions for making Tor filling up 2-3 /24 networks, :so that it doesn't break anything for the users? Do you mean traffic from every IP in a 2-3 /24's? Run a few VMs, set Yes. the Family option, and let lots of traffic flow. I do not currently have the resources for 700+ VMs with a Tor instance each. I can can fire up some 10, and rotate them through the address space. What is the minimum useful time for a Tor node? Hours, days? I don't want to hurt the Tor network through pointless churn through address space but to help it. Why bother with the VMs? Bind all IPs to the host. Start up 700 instances of tor, each bound to a separate IP. Bind them do a variety of ports if you like. If you have a lot of ram, this should work. :) *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Switching from windows to linux - config problems
I am in the process now of wanting to move up to linux for my main relay OS. I have been running windows xp and 7. I have tried on 3 different distros with the config for TOR and keep coming up with the same problem. a) on the page forDebian Unbuntu Instructions under Option #2, after the deb line is put into the /etc/apt/sources.list file b) it then says to run the lines to get the gpg key ie: gpg --keyserver keys.gnupg.net --recv 886DDD89 and then c)gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add - this is where my problem lies. I can not get the 2nd line to work. I keep getting an error say no keys available or this is not a public key. It is the same, no matter which distro I tried on. Obviously, I am unable to go any further to install Tor. I got on IRC and asked in the Tor channel and tried to get help. They tried several different things to check it out and see if they could get it to work. In following there checks, it checked out and they could not understand either why it would not work. Any ideas and/or help appreciated. Thanks. *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Switching from windows to linux - config problems
What distro are you running? Please show what you added to your sources.list. Is your Internet connection configured? What is the output of: gpg --keyserver keys.gnupg.net --recv 886DDD89 After gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add - you should see that: OK I tested it right now with Ubuntu and there is no problem. Regards, Michael 2010/3/12 Jon torance...@gmail.com I am in the process now of wanting to move up to linux for my main relay OS. I have been running windows xp and 7. I have tried on 3 different distros with the config for TOR and keep coming up with the same problem. a) on the page forDebian Unbuntu Instructions under Option #2, after the deb line is put into the /etc/apt/sources.list file b) it then says to run the lines to get the gpg key ie: gpg --keyserver keys.gnupg.net --recv 886DDD89 and then c)gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add - this is where my problem lies. I can not get the 2nd line to work. I keep getting an error say no keys available or this is not a public key. It is the same, no matter which distro I tried on. Obviously, I am unable to go any further to install Tor. I got on IRC and asked in the Tor channel and tried to get help. They tried several different things to check it out and see if they could get it to work. In following there checks, it checked out and they could not understand either why it would not work. Any ideas and/or help appreciated. Thanks. *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/ -- Michael Gomboc www.viajando.at pgp-id: 0x5D41FDF8
Re: Switching from windows to linux - config problems
I followed the instructions on the Debian/Ubuntu web page. Please show what you added to your sources.list. deb http://deb.torproject.org/torproject.org lenny main What distro are you running? Debian 5.03 and 5.04, Unbuntu server 9.10 and desktop Unbuntu 9.10 Is your Internet connection configured? yes, I can get out with no problems What is the output of: gpg --keyserver keys.gnupg.net --recv 886DDD89 After gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add - everything works fine except when the export line is put in. I end up with an error saying something to the effect that the public key is invalid. ( i dont have a c/p of it, I am trying to remember from memory ) Just like you did, getting it right, the guys on IRC channel went thru it with me also and did some little tricks and they all came out exactly. But when I still added the last line, same thing happened. The only thing I can think of is I am using a Virtual drive, and that last line breaks. But my gut tells me that is not the problem. I may have to dig in the celler and bring out some old box's and trying it in a Hard Drive straight and see if the same issue happens. I am hoping to be able to use it thru a Virtual Drive if I can. Thanks On Fri, Mar 12, 2010 at 4:10 PM, Michael Gomboc michael.gom...@gmail.com wrote: What distro are you running? Please show what you added to your sources.list. Is your Internet connection configured? What is the output of: gpg --keyserver keys.gnupg.net --recv 886DDD89 After gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add - you should see that: OK I tested it right now with Ubuntu and there is no problem. Regards, Michael 2010/3/12 Jon torance...@gmail.com I am in the process now of wanting to move up to linux for my main relay OS. I have been running windows xp and 7. I have tried on 3 different distros with the config for TOR and keep coming up with the same problem. a) on the page for Debian Unbuntu Instructions under Option #2, after the deb line is put into the /etc/apt/sources.list file b) it then says to run the lines to get the gpg key ie: gpg --keyserver keys.gnupg.net --recv 886DDD89 and then c)gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add - this is where my problem lies. I can not get the 2nd line to work. I keep getting an error say no keys available or this is not a public key. It is the same, no matter which distro I tried on. Obviously, I am unable to go any further to install Tor. I got on IRC and asked in the Tor channel and tried to get help. They tried several different things to check it out and see if they could get it to work. In following there checks, it checked out and they could not understand either why it would not work. Any ideas and/or help appreciated. Thanks. *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talk in the body. http://archives.seul.org/or/talk/ -- Michael Gomboc www.viajando.at pgp-id: 0x5D41FDF8 *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
All routers are down or won't exit -- choosing a doomed exit at random.
Hi! the vidalia bundle (or polipo to be exact) stopped working for me on 2 computers. a few days ago tor started to build circuits like crazy and using up all cpu time. the message log is full of the following message: Notice: All routers are down or won't exit -- choosing a doomed exit at random. I have tried using the default configuration, deleting the configuration files, as well as uninstalling and reinstalling the newest (stable and alpha) versions, but to no avail. i am running the vidalia bundle on windows 7 x64. i havent changed any settings on my 2 computers before this problem started. after a lot of trial and error i found out that as long as only tor an vidalia are running everything is fine and tor only opens a few circuits, but as soon as i start polipo (using the configuration that comes with the vidalia bundle) tors message log starts to fill up with the above mentioned notice, and it essentially stops working. any suggestions on what i could try to fix this? *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Full bandwidth is not used.
On Fri, 12 Mar 2010 11:40:29 +0100 Paul Menzel paulepan...@users.sourceforge.net wrote: Am Dienstag, den 09.03.2010, 14:01 +0100 schrieb Paul Menzel:=20 Am Dienstag, den 09.03.2010, 07:40 -0500 schrieb and...@torproject.org: On Mon, Mar 08, 2010 at 10:21:29AM +0100, paulepan...@users.sourceforge= .net wrote 1.6K bytes in 52 lines about: : I now increased the RAM too and restarted the server to no avail. It = is : still below 100 KB/s. =20 What is the network configuration? =20 $ more /etc/tor/torrc SocksPort 0 # what port to open for local application connections ControlPort 9051 ORPort 443 ORListenAddress 0.0.0.0:9090 Address 62.141.42.186 ContactInfo 1024D/6C0E1D58 Paul Menzel p...@gw90.de DirPort 80 # what port to advertise for directory connections DirListenAddress 0.0.0.0:9091 I implemented the changes suggested by arma on IRC (due to Exit and Guard flag [1]) to configure my server as non-exit relay, so I added the following line. ExitPolicy reject *:* It is a virtual machine and connections to port 80 and 443 are forwarded by an IPtables entry in the nat table with DNAT to the virtual host. On the virtual host using IPtables ports 80 and 443 are forwarded to 9090 and 9091. =20 Sebastian on IRC helped me to gather more data. In `cached-descriptors` I have the following. =20 bandwidth 5242880 10485760 155910 =20 There are more entries for my IP address when I restarted and upgraded Tor. =20 In `cached-consensus` (from 12:28 UTC) there is =20 r anonymisierungsdien s+wb9df31yS6Y02Rvl0i0tenAWA vyRDgH2XTP6Tn1M= PiJkWE0Yk9e8 2010-03-08 18:05:07 62.141.42.186 443 80 s Exit Fast HSDir Running Stable V2Dir Valid v Tor 0.2.1.23 w Bandwidth=3D61 p reject 25,119,135-139,445,563,1214,4661-4666,6346-6429,6699,688= 1-6999 =20 and Bandwidth even decreased by 1 (from 62) compared to the value before the update (11:14 UTC). Unfortunately changing the server to a non-exit relay on 2010-03-10 09:28:25 UTC did not change anything. Although looking at my logs and the data on [2] I would say it differs a bit. According to my logs I would say, that traffic even decreased. $ grep -A 6 62.141.42.186 cached-descriptors | grep -E 'published= |bandwidth' published 2010-03-07 17:51:12 bandwidth 5242880 10485760 55006 published 2010-03-08 00:05:02 bandwidth 5242880 10485760 155910 $ grep -A 6 62.141.42.186 cached-descriptors | grep bandwidth bandwidth 5242880 10485760 214272 bandwidth 5242880 10485760 141962 $ LANG=3DC date grep -A 6 62.141.42.186 cached-descriptors | g= rep bandwidth Thu Mar 11 10:30:02 UTC 2010 bandwidth 5242880 10485760 181555 $ LANG=3DC date grep -A 6 62.141.42.186 cached-descriptors | g= rep -E 'published|bandwidth' Fri Mar 12 09:46:43 UTC 2010 published 2010-03-10 09:28:24 bandwidth 5242880 10485760 181555 published 2010-03-11 03:28:50 bandwidth 5242880 10485760 178964 published 2010-03-11 21:29:37 bandwidth 5242880 10485760 143546 The value displayed on [2] seems to be more up to date. Here are some compiled values from `cached-consensus`. $ grep -A4 62.141.42 cached-consensus # adapted the output. r anonymisierungsdien s+wb9df31yS6Y02Rvl0i0tenAWA QvLgYWR3HuX0DKMSP= BCwzjIVpCk 2010-03-09 12:05:55 62.141.42.186 443 80 s Exit Fast HSDir Running Stable V2Dir Valid w Bandwidth=3D63 $ ls -al (adapted) 384600 9. M=C3=A4r 21:27 cached-consensus w Bandwidth=3D102 362245 9. M=C3=A4r 23:15 cached-consensus w Bandwidth=3D90 342063 10. M=C3=A4r 07:32 cached-consensus w Bandwidth=3D88 # (configure as non-exit relay) 356455 10. M=C3=A4r 11:14 cached-consensus w Bandwidth=3D86 385656 10. M=C3=A4r 21:16 cached-consensus w Bandwidth=3D81 w Bandwidth=3D64 390325 11. M=C3=A4r 20:03 cached-consensus w Bandwidth=3D58 Thu Mar 11 20:21:07 UTC 2010 w Bandwidth=3D58 anonymisierungsdien s+wb9df31yS6Y02Rvl0i0tenAWA BfwbPy3Xd3P2smQnEdl= 3Tqp9E9I 2010-03-11 21:29:37 62.141.42.186 443 80 w Bandwidth=3D52 r anonymisierungsdien s+wb9df31yS6Y02Rvl0i0tenAWA BfwbPy3Xd3P2smQnE= dl3Tqp9E9I 2010-03-11 21:29:37 62.141.42.186 443 80 w Bandwidth=3D52 Do you have more ideas? Well, as I've pointed out in the past, the values in cached-consensus do *not* accurately reflect either the traffic load that your relay has carried or the traffic capacity of your relay. They are bogus a priori and should be ignored in attempting to ascertain your relay's actual loads. The sad thing is that recent versions of tor clients now use the consensus values for designing routes for circuits they will build, so the bogus values
Polipo automatic?
Hi. Just read a post made me think of this: On Mac 10.5.2, with the Vidalia/Bundle, does Polipo automatically run after starting Vidalia or do I have to start it separately? I think it's now Polipo rather than Privoxy for v 0.2.1.24-0.2.7? thanks
RE: Polipo automatic?
To: or-talk@freehaven.net Subject: Polipo automatic? Date: Fri, 12 Mar 2010 21:50:23 -0500 From: zzzjethro...@email2me.net Hi. Just read a post made me think of this: On Mac 10.5.2, with the Vidalia/Bundle, does Polipo automatically run after starting Vidalia or do I have to start it separately? I think it's now Polipo rather than Privoxy for v 0.2.1.24-0.2.7? thanks Certainly with the OSX Vidalia bundle I downloaded, it was enabled already: it's an option in Vidalia/Control Panle/Settings. downie _ Hotmail: Trusted email with Microsoft’s powerful SPAM protection. http://clk.atdmt.com/GBL/go/210850552/direct/01/
Tor for ubuntu 9.10 karmic koala
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 no repository yet? -BEGIN PGP SIGNATURE- iEYEAREIAAYFAkubDhgACgkQXhfCJNu98qBrvQCgrcTWwsMzS+0R0/WDAJLRnSPi yeMAni3nOcQI3pnPk/dQ4l42BGkzEDIM =kMhb -END PGP SIGNATURE- *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: All routers are down or won't exit -- choosing a doomed exit at random.
On Sat, Mar 13, 2010 at 01:03:18AM +0100, mister maniac wrote: the vidalia bundle (or polipo to be exact) stopped working for me on 2 computers. a few days ago tor started to build circuits like crazy and using up all cpu time. the message log is full of the following message: Notice: All routers are down or won't exit -- choosing a doomed exit at random. [snip] after a lot of trial and error i found out that as long as only tor an vidalia are running everything is fine and tor only opens a few circuits, but as soon as i start polipo (using the configuration that comes with the vidalia bundle) tors message log starts to fill up with the above mentioned notice, and it essentially stops working. Sounds like you have some application configured to use localhost:8118 as an http proxy, and that application is trying to launch lots of requests, many of which are to ports that Tor's default exit policy doesn't allow. In the past, people with this problem have found that they have a bittorrent client configured to use Tor that they forgot about. --Roger *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
