[tor-relays] Tor RPM packages now come with multi-instance support (since v0.2.6.4-rc) -- please test them

2015-03-11 Thread Nusenu
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi,

Tor RPM packages (starting with version 0.2.6.4-rc) now come with
multi-instance support [1].

This makes it easier for everyone running more than one tor instance
on a system.

A short mini how-to for relay ops that would like to use this:

service tor stop

1) create the folder: /etc/tor/enabled
2) move all your *.torrc files in this folder (they have to have the
.torrc file suffix)
3) create the file '/etc/default/tor' and place the following line in it:
MULTI_INSTANCE=yes
4) make sure you have tor RPM packages v0.2.6.4-rc or higher

finally:
service tor start
will start one tor instance per exiting /etc/tor/*.torrc file (each
file is checked using --verify-config first).

Note: /etc/tor/torrc will be ignored in multi-instance mode.

Maybe we can add documentation to comments in /etc/default/tor..

The init.d script supports selective commands:
Lets say you only want to restart the instances that are defined in
the following two torrc files:
/etc/tor/enabled/tor22.torrc
/etc/tor/enabled/tor443.torrc

you can do that with:
service tor restart tor22 tor443


Please consider testing the new packages if you run already multiple
instances today.
If your instances do not start for unknown reasons please run 'tail -f
/var/log/audit/audit.log' while staring them and file a bug (include
the log lines and whether it works in SELinux permissive mode).

Thanks to Ondrej for merging this!

now lets hope for the debian packages [1] before 0.2.6.x is released,
Nusenu


[1] https://trac.torproject.org/projects/tor/ticket/14996
[2] https://trac.torproject.org/projects/tor/ticket/14995
-BEGIN PGP SIGNATURE-
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=kzZi
-END PGP SIGNATURE-
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Tor RPM packages now come with multi-instance support (since v0.2.6.4-rc) -- please test them

2015-03-11 Thread David Stainton
Excellent! Do you plan to do this for the debian package as well?

On Wed, Mar 11, 2015 at 9:51 PM, Nusenu nus...@openmailbox.org wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 Hi,

 Tor RPM packages (starting with version 0.2.6.4-rc) now come with
 multi-instance support [1].

 This makes it easier for everyone running more than one tor instance
 on a system.

 A short mini how-to for relay ops that would like to use this:

 service tor stop

 1) create the folder: /etc/tor/enabled
 2) move all your *.torrc files in this folder (they have to have the
 .torrc file suffix)
 3) create the file '/etc/default/tor' and place the following line in it:
 MULTI_INSTANCE=yes
 4) make sure you have tor RPM packages v0.2.6.4-rc or higher

 finally:
 service tor start
 will start one tor instance per exiting /etc/tor/*.torrc file (each
 file is checked using --verify-config first).

 Note: /etc/tor/torrc will be ignored in multi-instance mode.

 Maybe we can add documentation to comments in /etc/default/tor..

 The init.d script supports selective commands:
 Lets say you only want to restart the instances that are defined in
 the following two torrc files:
 /etc/tor/enabled/tor22.torrc
 /etc/tor/enabled/tor443.torrc

 you can do that with:
 service tor restart tor22 tor443


 Please consider testing the new packages if you run already multiple
 instances today.
 If your instances do not start for unknown reasons please run 'tail -f
 /var/log/audit/audit.log' while staring them and file a bug (include
 the log lines and whether it works in SELinux permissive mode).

 Thanks to Ondrej for merging this!

 now lets hope for the debian packages [1] before 0.2.6.x is released,
 Nusenu


 [1] https://trac.torproject.org/projects/tor/ticket/14996
 [2] https://trac.torproject.org/projects/tor/ticket/14995
 -BEGIN PGP SIGNATURE-

 iQIcBAEBCgAGBQJVALjtAAoJEFv7XvVCELh0Z5EP/1707hburFFHAFlls3KIY0t8
 O3g7MDSgB+D0cgTOgwLCow+8+vtvLi4aUIH+ajCVeTRipQCHKtW/yczLVKDrGfnP
 GDicf7RzQbVwmgYyuKx2aL5d+1euybklWB49Wsq+t0A7Um5VC93BXIY6v3Psx8wS
 qHGLOEJVmpWP5/hOT4yJ9rjpjnMxUyQFfavD6Tj0+dJhkDRfK3dCmV2bUU7gUjb/
 EaQoGbJPsG90OcW2Wel0HRAFQFnRNjPjOVc5E26FD2MKyTXr/d0Em4bR9uJJpHEn
 z79+I31zcaQu+lluKwkBfqoXOpotgA5uzXjBbstMXQd1LAoBTXdWWEg2dUkMK456
 OCJ9KmHo7qXyanHThoSq0wHDDwHu3UCu4g6lOPZNFaCVDaVHGsyF/VbtqyvnzrYz
 815wV8Kd/mv/yXumlJ3lSaNjAunAN/ocDTXxhGmDuTBYGiElw9KUlec8As0B8Dfe
 eo5d25rzTfsbOFcSo+vWj3wFP4D5IqvGoTR/jdVXVl2JgzM9eqD44CuZ3x12xXKS
 DbMCIdWogvuxNfaFd02JKQbAO9ZUZZvyT7hy5LKGZ1gXgi/eH/tyiBrKPGYDky14
 2X87gQ3W3zaAwW0k2bX23WHBhvM0djFBRPDlldxZUdPmUzPh/bwPYRdwLk0Tj5mQ
 4EC7l5KB9Sj3nrrkjXAw
 =kzZi
 -END PGP SIGNATURE-
 ___
 tor-relays mailing list
 tor-relays@lists.torproject.org
 https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Legal situation of tor in Europe

2015-03-11 Thread yl
Am 09.03.2015 um 23:39 schrieb Markus Hitter:
 I mean the only reason, why there is more Tor-Exit-IPs
  in the abuse log than any other single unique IP is that there is tens
  of thousand of users using each Tor-Exit.
 If this claim could be substantiated by some numbers it'd certainly help.

I fully agree to that, it would be helpful to get some more analytic
data like this. Not necessarily on my exit, but some general numbers,
some facts.
I just assumed that number above, but actually have no idea.

I got to list more carefully to Roger and Jacob next Winter in Hamburg.

Greetings
yl
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Many inbound and outbound connections but no circuits

2015-03-11 Thread Roger Dingledine
On Wed, Mar 04, 2015 at 04:30:58PM +0100, mattia wrote:
 Hello, I've been running a relay for some weeks.
 It has now earned the stable flag.
 Despite this I always have more than 500 inbound and outbound
 connections but no circuits at all. Is this normal? 

It depends what you're using to learn how many circuits you have.

For example, it is quite reasonable that you have a bunch of circuits
open for other people, but your relay has no client circuits because
your Tor hasn't received any client-side application requests lately so
it stopped building preemptive circuits.

--Roger

___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Legal situation of tor in Europe

2015-03-11 Thread Aaron Gibson

On 2015-03-09 18:40, Markus Hitter wrote:

Am 09.03.2015 um 16:08 schrieb Steve Snyder:

Being able to separate webmail from the parent web presence (e.g.
gmail from google.com, Yahoo Mail from yahoo.com, etc.) would be a
big step forward in curbing spam.  This would allow the exit
operation to refuse traffic to the webmail service while stilling
allowing access to the parent presence.


Good point!


Markus


Ouch, what about people who use Tor to access webmail (due to 
censorship, or desire for location anonymity?)

___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Tor RPM packages now come with multi-instance support (since v0.2.6.4-rc) -- please test them

2015-03-11 Thread David Stainton
ah that's great! also your continuing the ansible development is great.
keep up the good work!

On Wed, Mar 11, 2015 at 10:10 PM, Nusenu nus...@openmailbox.org wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 Hi David,

 Excellent! Do you plan to do this for the debian package as well?

 yes the debian init script was actually done before the one for the
 RPM packages.

 See my initial email:

 now lets hope for the debian packages before 0.2.6.x is released

 https://trac.torproject.org/projects/tor/ticket/14995

 I'll try to reach the deb package maintainer.
 -BEGIN PGP SIGNATURE-

 iQIbBAEBCgAGBQJVAL1WAAoJEFv7XvVCELh0XM8P+JND6UeC6o/bpE21NIOHPufc
 3CKTqpLVpHnuUVkVwROr0v+D9Rk2vxZgBQSzbrR3frlkCMycMiE0kwaHhEDlr0U0
 dlu7JX/O3oQw5U5tSKVi7TixXCoJkXwmzYxPd8mj7vzxjg7BTuw2l3ia1y/QnHwE
 Or7R8/hh/5G8oL3P2xuqYzZS+7FiCaydmzZtqdQ9iOKI9+/FgVZYQlLHf3FE31lR
 wURhovgKcwqF7wRuCiKPFdQS2ak4KciOBEOui9EchBge2jQ1NhStcsJkabECaOHf
 K6nX6rVLqGl+5no3eFMXY9U80GVh04ztfOXyEid9yvKMsC2/lXoLThr+jk2eXKVL
 H4EKKpGNsklpft+5SqMUs9KGwt5Sw8GH3qwaQ1J29eGIdXfWdutxr7cYX1YqPyUP
 x34y60Jd/jcrBEKa2jBghoEsNdN2XgYFNSqJ+dd+GRkRi6drbwX7+w/aGBMlLj6/
 k0lNMZiiqTlp6kuzy2AkTqWJqp51YjBez55/t+Xp2rTKlKBsbvMiwtPm20vO/hrB
 9XU0MyhhO6/XlU8SHPQyEGudHjxeGlpm83vE0km7kvgAJ7gQLj5Aaq7EjbDbLJtd
 Ivlh0oMZ2xXfvlKTAkOTiEhcspjIyBA7nfPQ5BZcJsgfc5ukil7+MdoMI96QUFbC
 w1nLT7dN4J6agPdORFs=
 =UogI
 -END PGP SIGNATURE-
 ___
 tor-relays mailing list
 tor-relays@lists.torproject.org
 https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays