Re: [tor-relays] my IP got blocked
On 11/14/17 07:38, Patrice wrote: > Hi everyone, > > > I`ve got an issue with my local IP address. I am running a relay about 1 > year and since 3 or 4 weeks I can`t reach some websites like: ebay or ikea. > > All I get is this message: > > * > * > > *Access Denied* > You don`t have permission to access "Http://www.ebay.com/" on this server. > > Reference # looong number__ > > > I think I am on some blacklists. After I change my IP address all worked > fine for only 2 days. > > Can I do something about this? > > Thank you for your help! > > Kind regards > Kalle > If you're running an exit, they probably saw abusive traffic, didn't like it, and blocked your IP. You could consider not running an exit relay from home. If you're running a non-exit, then they're being dumb for blocking your IP when it is impossible for abusive traffic to come from your relay. Some webmasters who don't understand Tor do that, but there's not really anything we can do. Best I can suggest is you try talking to them, which isn't a very satisfying suggestion, I know. Matt ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] my IP got blocked
Hi, It's not the first time I hear about Non-Exit IP blocked (but may be some people here are more familiar with the subject) : I don't really know what are the most used interfaces/websites from which those administrators are getting the list of IP addresses before blocking them (are they downloading the full consensus list like tor clients or from another website ?). May be websites proposing these lists should split them in 2 distinct lists, and normally show only exit nodes unless something very precise is asked by the user for seeing all tor relays including non exit. For lazy/angry administrators trying to definitely block all Tor IP addresses without considering giving any another time or second chance it would avoid some of these non exit relays blocked ? Of course ideally those administrators are doing some mistake and the problem is coming from them more than from anybody else (or may be bad users, too). But into the facts, when a mistake is repeatedly done, may be changing some things should be considered ? If possible of course (it's not always simple or quick). Best regards, Julien ROBIN Le 14/11/2017 à 13:45, Matt Traudt a écrit : On 11/14/17 07:38, Patrice wrote: Hi everyone, I`ve got an issue with my local IP address. I am running a relay about 1 year and since 3 or 4 weeks I can`t reach some websites like: ebay or ikea. All I get is this message: * * *Access Denied* You don`t have permission to access "Http://www.ebay.com/" on this server. Reference # looong number__ I think I am on some blacklists. After I change my IP address all worked fine for only 2 days. Can I do something about this? Thank you for your help! Kind regards Kalle If you're running an exit, they probably saw abusive traffic, didn't like it, and blocked your IP. You could consider not running an exit relay from home. If you're running a non-exit, then they're being dumb for blocking your IP when it is impossible for abusive traffic to come from your relay. Some webmasters who don't understand Tor do that, but there's not really anything we can do. Best I can suggest is you try talking to them, which isn't a very satisfying suggestion, I know. Matt ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] my IP got blocked
On Tue, Nov 14, 2017 at 2:26 PM, Julien ROBIN wrote: > Hi, > > It's not the first time I hear about Non-Exit IP blocked (but may be some > people here are more familiar with the subject) : I don't really know what > are the most used interfaces/websites from which those administrators are > getting the list of IP addresses before blocking them (are they downloading > the full consensus list like tor clients or from another website ?). > > May be websites proposing these lists should split them in 2 distinct lists, > and normally show only exit nodes unless something very precise is asked by > the user for seeing all tor relays including non exit. For lazy/angry > administrators trying to definitely block all Tor IP addresses without > considering giving any another time or second chance it would avoid some of > these non exit relays blocked ? Of course ideally those administrators are > doing some mistake and the problem is coming from them more than from > anybody else (or may be bad users, too). But into the facts, when a mistake > is repeatedly done, may be changing some things should be considered ? If > possible of course (it's not always simple or quick). > dnsbl.info used to provide two tor-related lists: (1) all nodes and (2) exits. Some webmasters could use the first one by mistake. Fortunately today they provide only the list of exits: http://www.dnsbl.info/dnsbl-list.php -- Best regards, Boris Nagaev ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] my IP got blocked
Sadly I run a only a relay therefore this is a troublesome action. So if more admins do this, I could be in trouble. After reading all the answers, there seem to be only two solutions: 1. hoping that my IP get unbanned 2. shutdown the relay (3. surf over a proxy or VPN) Kind regards Kalle Hi everyone, I`ve got an issue with my local IP address. I am running a relay about 1 year and since 3 or 4 weeks I can`t reach some websites like: ebay or ikea. All I get is this message: * * *Access Denied* You don`t have permission to access "Http://www.ebay.com/" on this server. Reference # looong number__ I think I am on some blacklists. After I change my IP address all worked fine for only 2 days. Can I do something about this? Thank you for your help! Kind regards Kalle If you're running an exit, they probably saw abusive traffic, didn't like it, and blocked your IP. You could consider not running an exit relay from home. If you're running a non-exit, then they're being dumb for blocking your IP when it is impossible for abusive traffic to come from your relay. Some webmasters who don't understand Tor do that, but there's not really anything we can do. Best I can suggest is you try talking to them, which isn't a very satisfying suggestion, I know. Matt ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] my IP got blocked
> On 15 Nov 2017, at 03:02, Patrice wrote: > > After reading all the answers, there seem to be only two solutions: > 1. hoping that my IP get unbanned > 2. shutdown the relay Use a separate IP address for the relay Run a bridge > (3. surf over a proxy or VPN) Use Tor Browser? :-) T ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] my IP got blocked
On November 14, 2017 4:38:54 AM PST, Patrice wrote: >Hi everyone, > > >I`ve got an issue with my local IP address. I am running a relay about >1 >year and since 3 or 4 weeks I can`t reach some websites like: ebay or >ikea. > >All I get is this message: > >* >* > >*Access Denied* >You don`t have permission to access "Http://www.ebay.com/" on this >server. > >Reference # looong number__ > > >I think I am on some blacklists. After I change my IP address all >worked >fine for only 2 days. > >Can I do something about this? That would be Akamai's wonderfully opaque IP reputation system. Unless you're an Akamai customer, there's no way to determine why your IP is blocked. I believe certain types of vulnerability scans / probes set it off, but I've never been able to figure it out for certain. In theory, it should drop off the blocklist if the bad behavior stops, but this takes weeks to happen. Concrete suggestions: If you're running an exit node, give it it's own IP. If you're not running an exit, check the devices on your network. One of them may have malware. I don't believe this block is a tor-specific block, it seems like actual malicious traffic needs to happen before it triggers. --Sean ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] my IP got blocked
That‘s a good point! And that’s something that I can investigate. I can do something. :-) I will look up all my divices and I hope I will find some pests. Kind regards Kalle >> Hi everyone, >> >> >> I`ve got an issue with my local IP address. I am running a relay about >> 1 >> year and since 3 or 4 weeks I can`t reach some websites like: ebay or >> ikea. >> >> All I get is this message: >> >> * >> * >> >> *Access Denied* >> You don`t have permission to access "Http://www.ebay.com/" on this >> server. >> >> Reference # looong number__ >> >> >> I think I am on some blacklists. After I change my IP address all >> worked >> fine for only 2 days. >> >> Can I do something about this? > > That would be Akamai's wonderfully opaque IP reputation system. Unless you're > an Akamai customer, there's no way to determine why your IP is blocked. I > believe certain types of vulnerability scans / probes set it off, but I've > never been able to figure it out for certain. > > In theory, it should drop off the blocklist if the bad behavior stops, but > this takes weeks to happen. > > Concrete suggestions: > > If you're running an exit node, give it it's own IP. > > If you're not running an exit, check the devices on your network. One of them > may have malware. I don't believe this block is a tor-specific block, it > seems like actual malicious traffic needs to happen before it triggers. > > --Sean > > ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] my IP got blocked
On Tue, 14 Nov 2017 14:45:44 + Nagaev Boris wrote: > dnsbl.info used to provide two tor-related lists: (1) all nodes and (2) exits. > Some webmasters could use the first one by mistake. https://www.dan.me.uk/dnsbl still does, and some webmasters do use the first one. -- With respect, Roman ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] my IP got blocked
>> dnsbl.info used to provide two tor-related lists: (1) all nodes and (2) >> exits. >> Some webmasters could use the first one by mistake. > > https://www.dan.me.uk/dnsbl still does, and some webmasters do use the first > one. Link related to this thread characterizing some blocking... https://trac.torproject.org/projects/tor/wiki/org/doc/ListOfServicesBlockingTor https://trac.torproject.org/projects/tor/wiki/org/projects/DontBlockMe ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] my IP got blocked -> closed
Hi, I want to tell that the issue is no longer exists. I can now visit ebay, ikea, ect. without a problem. It was like grarpamp said, there was a bunch of malicious software on one of my Computers. Very shameful, there was no virus detection installed. Therefore my tor relay was not the problem but my windows pc. ;-) Thank you for your help! Kind regards Kalle 2. Re: my IP got blocked (grarpamp) Detecting exit nodes is error prone, as you point out. Some exit nodes have their traffic exit a different address than their listening port. Hey does Exonerator handle these? Right. It's not trivial for tor to figure out what exit relays are multi-homed -- at least not without actually establishing circuits and fetching content over each exit relay. I just finished an exitmap scan and found 17 exit relays that exit from an IP address that is different from what's listed in the consensus: This mode of operation, regardless of how it happens, is not in itself a problem, nor cause for alarm. In fact, the nature of these "exit IP different than ORPort" relays can and often does assist users in circumventing censorship... a fundamental use case of Tor. For instance, the arbitrary automated and blind blocking via dumb blocklists that prevent even such most basic user activity and human right to knowledge as simply reading websites via Tor. Such blocking examples can often be found here: https://trac.torproject.org/projects/tor/wiki/org/doc/ListOfServicesBlockingTor It's also entirely up to the exit operator to determine if the third party non contractual / SLA exonerator service is of any particular use or benefit to them or not... perhaps they have other notary means, or are immune or not subject to any such legal or jurisdictional issues, for which it becomes moot. Similarly, realtime TorDNSEL and the like could be considered to be censorship enabling tools. ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
