Re: [tor-relays] tor relay + sslh

2021-06-14 Thread tor-relay
Hi, if you run sslh on small vps you should use sslh-select which has
less overhead when many connections are handled.

see https://www.rutschle.net/tech/sslh/README.html

Am 12.06.21 um 10:26 schrieb Casper:
> Hello,
> 
> I recently discovered an SSL multiplexer called "sslh":
> 
> """
> sslh accepts connections on specified ports, and forwards them further
> based on tests performed on the first data packet sent by the remote
> client.
> 
> Probes for HTTP, SSL, SSH, OpenVPN, tinc, XMPP are implemented, and
> any other protocol that can be tested using a regular expression, can
> be recognized. A typical use case is to allow serving several services
> on port 443 (e.g. to connect to ssh from inside a corporate firewall,
> which almost never block port 443) while still serving HTTPS on that port.
> 
> Hence sslh acts as a protocol multiplexer, or a switchboard. Its name
> comes from its original function to serve SSH and HTTPS on the same port.
> """
> 
> Since many of my network services claims to listen on 433 (to bypass
> mobile network limitations), I'm thinking to configure and deploy
> sslh on large scale.
> 
> If tor handshake can be handled by sslh, could the process (of the tor
> relay) be listening on 127.0.0.1:12345 and publish good relay
> descriptor as well ?
> 
> Currently, in my relay config, I have the following:
> 
> """
> ORPort 26719
> ORPort [{{ ansible_default_ipv6.address }}]:26719
> DirPort 26720
> 
> and
> 
> Address 
> """
> 
> Tor will accept to be listening on the localhost interface only?
> 
> """
> ORPort 127.0.0.1:26719
> Address 
> """
> 
> Best regards,
> 
> 
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> 
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


[tor-relays] Can't compile 0.4.6.5 on Ubuntu 18.04

2021-06-14 Thread William Denton
I went to upgrade a relay running on Ubuntu 18.04 to the new release (0.4.6.5) 
and to my surprise it didn't compile.  Every other version has built without any 
trouble.  Wading into the Gitlab site was rather confusing, so I thought I'd 
send this here, in the hopes it reaches the right people and someone else might 
be interested.


I ran ./configure, then make, and pretty soon this happened:

  CC   src/feature/dirclient/dirclient.o
In file included from ./src/core/or/or.h:50:0,
 from src/feature/dirclient/dirclient.c:13:
src/feature/dirclient/dirclient.c: In function 
‘dir_client_decompress_response_body’:
./src/lib/log/ratelim.h:55:27: error: initializer element is not constant
 #define RATELIM_INIT(r) { (r), 0, 0, 0 }
   ^
src/feature/dirclient/dirclient.c:1877:38: note: in expansion of macro 
‘RATELIM_INIT’
 static ratelim_t warning_limit = RATELIM_INIT(LOG_INTERVAL);
  ^~~~
./src/lib/log/ratelim.h:55:27: note: (near initialization for 
‘warning_limit.rate’)
 #define RATELIM_INIT(r) { (r), 0, 0, 0 }
   ^
src/feature/dirclient/dirclient.c:1877:38: note: in expansion of macro 
‘RATELIM_INIT’
 static ratelim_t warning_limit = RATELIM_INIT(LOG_INTERVAL);
  ^~~~
Makefile:12141: recipe for target 'src/feature/dirclient/dirclient.o' failed
make[1]: *** [src/feature/dirclient/dirclient.o] Error 1
make[1]: Leaving directory '/usr/local/src/tor/tor-0.4.6.5'


Thanks,

Bill

--
William Denton
https://www.miskatonic.org/
Librarian, artist and licensed private investigator.___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Can't compile 0.4.6.5 on Ubuntu 18.04

2021-06-14 Thread Georg Koppen
William Denton:
> I went to upgrade a relay running on Ubuntu 18.04 to the new release
> (0.4.6.5) and to my surprise it didn't compile.  Every other version has
> built without any trouble.  Wading into the Gitlab site was rather
> confusing, so I thought I'd send this here, in the hopes it reaches the
> right people and someone else might be interested.
> 
> I ran ./configure, then make, and pretty soon this happened:
> 
>   CC   src/feature/dirclient/dirclient.o
> In file included from ./src/core/or/or.h:50:0,
>  from src/feature/dirclient/dirclient.c:13:
> src/feature/dirclient/dirclient.c: In function
> ‘dir_client_decompress_response_body’:
> ./src/lib/log/ratelim.h:55:27: error: initializer element is not constant
>  #define RATELIM_INIT(r) { (r), 0, 0, 0 }
>    ^
> src/feature/dirclient/dirclient.c:1877:38: note: in expansion of macro
> ‘RATELIM_INIT’
>  static ratelim_t warning_limit = RATELIM_INIT(LOG_INTERVAL);
>   ^~~~
> ./src/lib/log/ratelim.h:55:27: note: (near initialization for
> ‘warning_limit.rate’)
>  #define RATELIM_INIT(r) { (r), 0, 0, 0 }
>    ^
> src/feature/dirclient/dirclient.c:1877:38: note: in expansion of macro
> ‘RATELIM_INIT’
>  static ratelim_t warning_limit = RATELIM_INIT(LOG_INTERVAL);
>   ^~~~
> Makefile:12141: recipe for target 'src/feature/dirclient/dirclient.o'
> failed
> make[1]: *** [src/feature/dirclient/dirclient.o] Error 1
> make[1]: Leaving directory '/usr/local/src/tor/tor-0.4.6.5'

Looks like a known issue:

https://gitlab.torproject.org/tpo/core/tor/-/issues/40410

Georg

> 
> Thanks,
> 
> Bill
> 
> -- 
> William Denton
> https://www.miskatonic.org/
> Librarian, artist and licensed private investigator.
> 
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> 




OpenPGP_signature
Description: OpenPGP digital signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays