Re: [scrubbed].onion and log level

[Robert Ransom]

On Thu, 3 Feb 2011 23:39:40 -0500
cmeclax-sazri  wrote:

> I have a friend here and we're trying to debug a TorChat connection. We had 
> it 
> working once, then I'm trying to talk him through editing his config. He 
> doesn't show up on my TorChat, and I show up as a blue ball on his. So I 
> looked at the log file to see what's happening. It says "Tried for 120 
> seconds to get a connection to [scrubbed]:11009." The problem with that is, I 
> have other people in my buddy list, at least one of whom isn't on line, and I 
> have no way of knowing when it's my friend that I'm having trouble connecting 
> to. So I changed the log level to info, then to debug, reloaded Tor, then 
> restarted it. I still get "[scrubbed]", even in the info messages, and the 
> debug messages are way too much to wade through. How can I (temporarily) tell 
> Tor not to scrub the hidden services?

Add:

SafeLogging 0

to your torrc.


Robert Ransom


signature.asc
Description: PGP signature

[scrubbed].onion and log level

[cmeclax-sazri]

I have a friend here and we're trying to debug a TorChat connection. We had it 
working once, then I'm trying to talk him through editing his config. He 
doesn't show up on my TorChat, and I show up as a blue ball on his. So I 
looked at the log file to see what's happening. It says "Tried for 120 
seconds to get a connection to [scrubbed]:11009." The problem with that is, I 
have other people in my buddy list, at least one of whom isn't on line, and I 
have no way of knowing when it's my friend that I'm having trouble connecting 
to. So I changed the log level to info, then to debug, reloaded Tor, then 
restarted it. I still get "[scrubbed]", even in the info messages, and the 
debug messages are way too much to wade through. How can I (temporarily) tell 
Tor not to scrub the hidden services?

cmeclax
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/

Re: IP address blocked on certain site

[Aplin, Justin M]

On 2/3/2011 10:23 PM, Robert Ransom wrote:

On Thu, 03 Feb 2011 22:21:34 -0500
"Aplin, Justin M"  wrote:


On 2/3/2011 8:28 PM, Joe Btfsplk wrote:

I am using Torbutton.  It is supposed to Torrify Firefox - yes?

In a roundabout way, yes. Torbutton forwards Firefox traffic to Polipo,
which in turn sends the traffic to the SOCKS port of Tor. Disabling
Torbutton and entering the Tor SOCKS information into Firefox's network
configuration would skip the Polipo part, and eliminate any problems you
might be having with some hidden Polipo cache.

Turning off 'Use Polipo' in the Torbutton Preferences dialog would be
easier and much safer.


Robert Ransom


Do this. I haven't used Tor as a client in months, I'd completely 
forgotten this was an option. My bad.


~Justin Aplin

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/

Re: IP address blocked on certain site

[Robert Ransom]

On Thu, 03 Feb 2011 22:21:34 -0500
"Aplin, Justin M"  wrote:

> On 2/3/2011 8:28 PM, Joe Btfsplk wrote:
> > I am using Torbutton.  It is supposed to Torrify Firefox - yes?
> 
> In a roundabout way, yes. Torbutton forwards Firefox traffic to Polipo, 
> which in turn sends the traffic to the SOCKS port of Tor. Disabling 
> Torbutton and entering the Tor SOCKS information into Firefox's network 
> configuration would skip the Polipo part, and eliminate any problems you 
> might be having with some hidden Polipo cache.

Turning off 'Use Polipo' in the Torbutton Preferences dialog would be
easier and much safer.


Robert Ransom


signature.asc
Description: PGP signature

Re: IP address blocked on certain site

[Aplin, Justin M]

On 2/3/2011 8:28 PM, Joe Btfsplk wrote:

I am using Torbutton.  It is supposed to Torrify Firefox - yes?


In a roundabout way, yes. Torbutton forwards Firefox traffic to Polipo, 
which in turn sends the traffic to the SOCKS port of Tor. Disabling 
Torbutton and entering the Tor SOCKS information into Firefox's network 
configuration would skip the Polipo part, and eliminate any problems you 
might be having with some hidden Polipo cache.


Everything else you mentioned points to you using Firefox and Tor 
properly, I'd try either skipping Polipo (really only a testing 
solution, as by not using Torbutton, you lose all the other goodies it 
gives you (beyond simple SOCKS configuration), and would have to change 
Firefox's network config every time you wanted to use or stop using 
Tor). If it's indeed a Polipo problem and that fixes it, Geoff's 
solution seems like it would make a rather nice permanent solution for 
you. You could skip right to that if it sounds easier than screwing 
around with Firefox's network configuration.


On 2/3/2011 8:35 PM, Joe Btfsplk wrote:
Don't know what would have to do to clear mem cache from Fx activity - 
shut down computer?  (assuming memory caching was enabled)


Simply close the process. The memory cache disappears along with the 
rest of the rest of the process. No fenangling necessary.


~Justin Aplin

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/

Re: IP address blocked on certain site

[Joe Btfsplk]

The 2nd option of Torbutton under Prefs>Security>Cache, "Block disk and 
memory cache access during Tor," may be the answer.


see http://kb.mozillazine.org/Browser.cache.memory.enable

Don't know what would have to do to clear mem cache from Fx activity - 
shut down computer?  (assuming memory caching was enabled)


***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/

Re: IP address blocked on certain site

[Joe Btfsplk]

On 2/3/2011 5:09 PM, Aplin, Justin M wrote:

On 2/3/2011 5:53 PM, Geoff Down wrote:

...
Neither could I. It may be entirely in memory. Nevertheless that was the
conclusion I came to. It's not the IP address being cached, it's the
response from the site I would say. Your new request is never being sent
(via your new IP) because Polipo is returning the cached version of the
page IMO.
Anyone have other ideas?
GD


Before he goes through all that trouble, wouldn't it be worth just 
SOCKSifying Firefox to use Tor directly, rather than Polipo? If it's 
some hidden cache issue with Polipo, the issue would disappear then, 
no? Also he mentions opening a new tab, but never says he cleared the 
Firefox cache; could Firefox itself simply be fishing the page up from 
memory? A simple tools > clear everything would be a decent test.




I am using Torbutton.  It is supposed to Torrify Firefox - yes?

1) Sorry, should've mentioned clearing cache.  It couldn't have been (in 
this case) Firefox cache, because on one 'test,' I closed the site's tab 
AND _cleared Fx cache_.  Were no cookies involved.  Still same denial.


2) Using Torbutton, in Preferences>Security Settings>Cache, "_block Tor 
disk cache & clear all cache on Tor toggle_" is checked by default.  
Implies Tor is ?? using memory cache?

There is a 2nd setting, "block disk and memory cache during Tor"
The Torbutton Design Documentation says Opt. 1 - above,
This option causes Torbutton to call nsICacheService.evictEntries(0) 
 
on Tor toggle to remove all entries from the cache. In addition, this 
setting causes Torbutton to set browser.cache.disk.enable 
 to false. 
I confirmed Torbutton enabled does set "browser.cache.disk.enable" to 
false.  So when Torbutton is enabled, no cache in Fx.  Therefore, the 
"clear all cache on Tor toggle" must be talking about Tor mem cache (I 
assume).


Torbutton Preferences description (for the 2 above ):


* Block Tor disk cache and clear all cache on Tor Toggle

  Since the browser cache can be leveraged to store unique
  identifiers, cache must not persist across Tor sessions. This
  option keeps the memory cache active during Tor usage for
  performance, but blocks disk access for caching.

* Block disk and memory cache during Tor

  This setting entirely blocks the cache during Tor, but preserves
  it for Non-Tor usage.



3) I'm sure I closed Fx, so that would've closed Torbutton & (since mine 
is set to default) cleared all cache.  Even though don't have 
Torbutton's "Block disk & mem cache during Tor" check, when I closed Fx 
& manually cleared it's cache, all disk & mem cache should ? have been 
cleared.  At the time, was trying to clear every cache I could think of 
/ find, so clicking my "Clear Cache" addon's icon would've been 1st step.


Why, after getting all new nodes & especially new exit node IP address 
(I confirmed was a new address), would Tor send an _old IP address_ (? 
from memory) to the site?  Doesn't make sense.  If Tor WAS sending an 
old address (to any site) after getting new exit address, something's 
really wrong.  Doubt that's the case.


Further, for Torbutton FAQs:
*Which Firefox extensions do you recommend? 
* 



   1. RefControl 

  Mentioned above, this extension allows more fine-grained
  referrer spoofing than Torbutton currently provides. It should
  break less sites than Torbutton's referrer spoofing option.

   2. SafeCache 

  If you use Tor excessively, and rarely disable it, you probably
  want to install this extension to minimize the ability of sites
  to store long term identifiers in your cache. This extension
  applies same origin policy to the cache, so that elements are
  retrieved from the cache only if they are fetched from a
  document in the same origin domain as the cached element.

Not sure about the referrer spoofing - don't think it's relevant here.  
Torbutton default is to disable sending referrer header - has nothing to 
do w/ an "old" IP address.
SafeCache:  Don't know what this Torbutton FAQ is implying.  If 
Torbutton disables Fx from disk caching, & if Torbutton "block Tor disk 
cache..." option is checked - what's left -memory?
I don't know that SafeCache does anything w/ memory cache in any 
manner.  So, I'm confused why Torbutton page is recommending it.  Is the 
_Torbutton_ page assuming _only_ using Tor w/o Torbutton (which, by 
default, disables disk caching)?

Re: IP address blocked on certain site

[Aplin, Justin M]

On 2/3/2011 5:53 PM, Geoff Down wrote:

...
Neither could I. It may be entirely in memory. Nevertheless that was the
conclusion I came to. It's not the IP address being cached, it's the
response from the site I would say. Your new request is never being sent
(via your new IP) because Polipo is returning the cached version of the
page IMO.
Anyone have other ideas?
GD


Before he goes through all that trouble, wouldn't it be worth just 
SOCKSifying Firefox to use Tor directly, rather than Polipo? If it's 
some hidden cache issue with Polipo, the issue would disappear then, no? 
Also he mentions opening a new tab, but never says he cleared the 
Firefox cache; could Firefox itself simply be fishing the page up from 
memory? A simple tools > clear everything would be a decent test.


~Justin Aplin

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/

Re: IP address blocked on certain site

[Geoff Down]

On Thu, 03 Feb 2011 15:30 -0600, "Joe Btfsplk" 
wrote:
> On 2/2/2011 5:54 PM, Geoff Down wrote:
> >   I came to the conclusion that it
> > was Polipo cacheing. You can try inserting a 'Pragma: No-cache' header
> > using Modify Headers or a similar addon, though that does make you stand
> > out.
> >
> Not sure what you mean by "pragma:  No-cache" header.  How to go about 
> it, & will it (negatively) affect access to, or speed of other site, or 
> other issues?  Or can this header be targeted to a specific target site?
> 
> Is Modify Headers a Firefox addon, or vidalia / Tor addon?
 It's a Firefox Addon and it modifies/filters/inserts HTTP headers into
 the requests Firefox makes. Alterations can be enabled and disabled
 with a click, so you can disable them when not needed.
Headers sent by the browser control which pages are cached. See
http://www.faqs.org/rfcs/rfc2068.html
Section 14.9 Cache-Control
and http://en.wikipedia.org/wiki/Web_cache#Cache_control

> If didn't use your suggestion (don't know what exactly is involved, or 
> ramifications), which folder / file contains Polipo's cacheing of IP 
> addresses?
> I don't find a Polipo cache file.
> 

Neither could I. It may be entirely in memory. Nevertheless that was the
conclusion I came to. It's not the IP address being cached, it's the
response from the site I would say. Your new request is never being sent
(via your new IP) because Polipo is returning the cached version of the
page IMO.
Anyone have other ideas?
GD 

-- 
http://www.fastmail.fm - Access all of your messages and folders
  wherever you are

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/

Re: torr file question...

[Aplin, Justin M]

Simply edit the torrc while both Tor and Vidalia are closed. Vidalia 
edits the torrc file when changes are made using its interface; upon 
starting up, however, I believe it gathers its parameters directly from 
the torrc. In my experience when I write a custom torrc with Tor and 
Vidalia closed, and then start Vidalia (which in turns starts Tor), my 
custom torrc is overwritten, but upon careful observation of the new 
file, it can be seen that each of my settings remains the same, although 
reordered and with added header comments.


I do wish there was a "do not edit torrc" or "confirm before editing 
torrc" option in Vidalia, but generally the changes it makes are 
harmless. C'est la vie.


~Justin Aplin



On 2/3/2011 4:56 PM, Zaher F. wrote:

i am usingVidalia Bundle 0.2.1.29-0.2.10


and i found in my torcc file this :



This file was generated by Tor; if you edit it, comments will not be 
preserved
# The old torrc file was renamed to torrc.orig.1 or similar, and Tor 
will ignore it


# If set, Tor will accept connections from the same machine (localhost 
only)
# on this port, and allow those connections to control the Tor process 
using

# the Tor Control Protocol (described in control-spec.txt).
ControlPort 9051
# Where to send logging messages. Format is minSeverity[-maxSeverity]
# (stderr|stdout|syslog|file FILENAME).
Log notice stdout
# Bind to this address to listen to connections from SOCKS-speaking
# applications.
SocksListenAddress 127.0.0.1




so how i can control and  fix or define my exitnode


thx

torr file question...

[Zaher F .]

i am using Vidalia Bundle 0.2.1.29-0.2.10 


and i found in my torcc file this :



This file was generated by Tor; if you edit it, comments will not be preserved

# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will 
ignore it



# If set, Tor will accept connections from the same machine (localhost only)

# on this port, and allow those connections to control the Tor process using

# the Tor Control Protocol (described in control-spec.txt).

ControlPort 9051

# Where to send logging messages.  Format is minSeverity[-maxSeverity]

# (stderr|stdout|syslog|file FILENAME).

Log notice stdout

# Bind to this address to listen to connections from SOCKS-speaking

# applications.

SocksListenAddress 127.0.0.1




so how i can control and  fix or define my exitnode


thx
  

Re: IP address blocked on certain site

[Joe Btfsplk]

On 2/2/2011 5:54 PM, Geoff Down wrote:

  I came to the conclusion that it
was Polipo cacheing. You can try inserting a 'Pragma: No-cache' header
using Modify Headers or a similar addon, though that does make you stand
out.

Not sure what you mean by "pragma:  No-cache" header.  How to go about 
it, & will it (negatively) affect access to, or speed of other site, or 
other issues?  Or can this header be targeted to a specific target site?


Is Modify Headers a Firefox addon, or vidalia / Tor addon?

If didn't use your suggestion (don't know what exactly is involved, or 
ramifications), which folder / file contains Polipo's cacheing of IP 
addresses?

I don't find a Polipo cache file.

Another question along that line:
Because of Vista UAC, I had to install Vidalia bundle under admin acct 
(I believe).  (may / may not be relevant)

When I del file(s) from User\app data\roaming\Tor ... or \Vidalia,
the del files don't show up in recycle bin, as do all other deleted (not 
wiped) files.  Any idea why?

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/

Re: "cease and desist" from my vps provider...

[Jan Weiher]

> Interesting. Hetzner is officially down on anything which causes
> them trouble (benji said so himself, repeatedly), so they're 
> effectively accepting of a Tor middleman, but Tor exits are 
> probably going to be pretty short-lived in Hetzner space.
> 

If you got your own IP space with own ripe contact, all the abuse mails
will go to you, so it does not cause trouble to them at all. Maybe this
is what is meant with "you are responsible".

best regards,
Jan
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/

Re: "cease and desist" from my vps provider...

[Andrea Trentini]

On 02/03/2011 06:36 PM, krishna e bera wrote:
> i added seflow.it to this page
> https://trac.torproject.org/projects/tor/wiki/TheOnionRouter/GoodBadISPs

I didn't even know about the page :(
Thank you for editing/posting it, I will use the info...


--

/\___
   /--\ndrea |rentini

http://atrent.it
 Laboratorio Software Libero @
  Dipartimento di Informatica e Comunicazione @
   Universita' degli Studi di Milano

http://netlamps.it
   http://motocivismo.it   [Freedom]
   /:\   |   |
  / :  v_@_   \  |   |
 /  :   _H_\   \
/   :  [-#-]\
   /:   °U   \

Food for thought => http://tecnocivismo.criticalminds.eu

se hai problemi col "quoting" leggi il seguente:
http://it.wikipedia.org/wiki/Top-posting
if you have problems with "quoting", please read:
http://en.wikipedia.org/wiki/Posting_style

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/

Re: "cease and desist" from my vps provider...

[krishna e bera]

On Thu, Feb 03, 2011 at 05:59:03PM +0100, Eugen Leitl wrote:
> On Thu, Feb 03, 2011 at 05:36:09PM +0100, Andrea Trentini wrote:
> 
> > self suggestion: I asked hetzner if they accept a tor node, they
> > told me "yes, but you're responsible" (of course)
> 
> Interesting. Hetzner is officially down on anything which causes
> them trouble (benji said so himself, repeatedly), so they're 
> effectively accepting of a Tor middleman, but Tor exits are 
> probably going to be pretty short-lived in Hetzner space.

i added seflow.it to this page
https://trac.torproject.org/projects/tor/wiki/TheOnionRouter/GoodBadISPs

please feel free to change it when you have updates 
or wish to modify the hetzner entry as well.
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/

Re: "cease and desist" from my vps provider...

[Eugen Leitl]

On Thu, Feb 03, 2011 at 05:36:09PM +0100, Andrea Trentini wrote:

> self suggestion: I asked hetzner if they accept a tor node, they
> told me "yes, but you're responsible" (of course)

Interesting. Hetzner is officially down on anything which causes
them trouble (benji said so himself, repeatedly), so they're 
effectively accepting of a Tor middleman, but Tor exits are 
probably going to be pretty short-lived in Hetzner space.

-- 
Eugen* Leitl http://leitl.org";>leitl http://leitl.org
__
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/

Re: "cease and desist" from my vps provider...

[Andrea Trentini]

On 02/03/2011 04:05 PM, Marco Predicatori wrote:
> Afaik, there's no such law in Italy. Ask them which law it is.

asked, they told me to contact a lawyer (sic!)

I told them that if they are telling me that they cannot keep my
service up for some legal reason they should provide (I just asked
for a weblink) the specific reason/law, no answer from them until
now (and I don't think I'll ever get one)

>> Anyway I was about to switch to another provider, can someone
>> suggest me one that allows tor nodes?

self suggestion: I asked hetzner if they accept a tor node, they
told me "yes, but you're responsible" (of course)

> I've been running an exit node for a few years on ngi.it. Never
> heard from them. My node has been down for a few weeks for hardware
> problems, but I plan to put it back on line soon.
> According with http://torstatus.blutmagie.de/, almost any major ISP
> in Italy connects some exit node. Kiss Seflow goodbye and be happy. :-)

that will be my next step ;)

italian tor (would-be) admins beware: avoid SEFLOW.it!
--



--

/\___
   /--\ndrea |rentini

http://atrent.it
 Laboratorio Software Libero @
  Dipartimento di Informatica e Comunicazione @
   Universita' degli Studi di Milano

http://netlamps.it
   http://motocivismo.it   [Freedom]
   /:\   |   |
  / :  v_@_   \  |   |
 /  :   _H_\   \
/   :  [-#-]\
   /:   °U   \

Food for thought => http://tecnocivismo.criticalminds.eu

se hai problemi col "quoting" leggi il seguente:
http://it.wikipedia.org/wiki/Top-posting
if you have problems with "quoting", please read:
http://en.wikipedia.org/wiki/Posting_style

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/

Re: "cease and desist" from my vps provider...

[Marco Predicatori]

Andrea Trentini, on 02/03/2011 02:18 PM, wrote:
> Hi,
> just to let you know, I had a tor node up and running for about two
> years (http://atrent.it/atrentwiki/doku.php?id=tunneled), today my
> vps provider sent me a "cease and desist" email to tear down my
> node, I complied of course but I asked why.
> They told me it's against italian law to have a tor relay, anyone
> has more info?

Afaik, there's no such law in Italy. Ask them which law it is.

> Anyway I was about to switch to another provider, can someone
> suggest me one that allows tor nodes?

I've been running an exit node for a few years on ngi.it. Never
heard from them. My node has been down for a few weeks for hardware
problems, but I plan to put it back on line soon.
According with http://torstatus.blutmagie.de/, almost any major ISP
in Italy connects some exit node. Kiss Seflow goodbye and be happy. :-)

-- 
http://www.predicatori.it/marco/
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/

"cease and desist" from my vps provider...

[Andrea Trentini]

Hi,
just to let you know, I had a tor node up and running for about two
years (http://atrent.it/atrentwiki/doku.php?id=tunneled), today my
vps provider sent me a "cease and desist" email to tear down my
node, I complied of course but I asked why.
They told me it's against italian law to have a tor relay, anyone
has more info?
Anyway I was about to switch to another provider, can someone
suggest me one that allows tor nodes?

Thank you

--

/\___
   /--\ndrea |rentini

http://atrent.it
 Laboratorio Software Libero @
  Dipartimento di Informatica e Comunicazione @
   Universita' degli Studi di Milano

http://netlamps.it
   http://motocivismo.it   [Freedom]
   /:\   |   |
  / :  v_@_   \  |   |
 /  :   _H_\   \
/   :  [-#-]\
   /:   °U   \

Food for thought => http://tecnocivismo.criticalminds.eu

se hai problemi col "quoting" leggi il seguente:
http://it.wikipedia.org/wiki/Top-posting
if you have problems with "quoting", please read:
http://en.wikipedia.org/wiki/Posting_style

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/