[tor-talk] FreeBSD PF (firewall) ruleset

2013-11-11 Thread M C J
I'm unable to connect to Tor with PF enabled. Without PF, Tor connects and
runs fine (with Privoxy). Soon as PF is enabled, Tor will either disconnect
if already running, or fail to connect if I try.

I've used a very basic pf.conf ruleset:

###
block in all
pass out all keep state
###

And had no success. I, assume, I need a redirect rule, maybe something like:


ext_if="ath0"
int_if="lo1"
pass in on lo1 proto tcp from lo1 to ath0 port any \
rdr-to 127.0.0.1 port 8118


I really don't know. Maybe some allowances for Privoxy need to be made too?

Tor and Privoxy run perfectly with PF disabled, but I would like an active
firewall.

Thanks
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] More and more websites block Tor, which will eventually become useless!

2013-11-11 Thread Öyvind Saether
> The only solution would be recommending people to run exit nodes from
> home.
> 
> Actually I wonder why tor users seem to be convinced it's a bad idea.
> I used to think this IS the point of Tor. If you run exit node from


Yes. 

Finding out that websites do not work is great.
Finding out that programs like Skype don't work is great.
Getting your door knocked down by law enforcement is great.

The first two is the reason I don't allow any exiting from my home
anymore, I just run a normal Relay now and I'm seriously considering
just being a bridge instead (there are those who don't care what you
are doing with Tor and block you even if you don't allow exits).

Yes, yes, it would be great if everyone ran a Tor exit node from home.
But that's not going  to happen.
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Are project change logs online?

2013-11-11 Thread gq
I'd suggest a simple link on each of the main site download pages for 
the current respective change log.


On 11/11/2013 12:13 PM, Joe Btfsplk wrote:


On 11/11/2013 9:53 AM, Nick Mathewson wrote:
On Mon, Nov 11, 2013 at 10:32 AM, Joe Btfsplk  
wrote:

On 11/10/2013 9:05 PM, Roger Dingledine wrote:

On Sun, Nov 10, 2013 at 07:58:09PM -0500, gq wrote:

I know change logs are included in packages but are they viewable
online anywhere? Or do you have to download and extract/install the
full package to see them?

Go to https://www.torproject.org/download/download
and click "Source code"

https://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=ReleaseNotes 



https://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=ChangeLog


Further question about that.  On
https://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=ChangeLog 
(or

any page), change logs for some releases seem omitted?
One example:  For a good while - 2.4.17b2 was the latest of 2.4 
series.  But
changes for it or *b1  aren't there (I assume was a "b1"). That's 
just one.


Is it just oversight or lack of time to list changes for some 
releases, or

am I still looking in the wrong spot?

Wrong spot; you're looking at changelogs for the Tor program itself,
but there has never been a Tor release called "2.4.17b2" -- that looks
like a TBB version number.


Thanks.  Correct.  Knew I should've waited till more awake.
BUT... same general principle.  Seems harder to find links / 
directions, STRAIGHT to TBB changes.


This page gets you there - if you know what to click. 
https://gitweb.torproject.org/torbrowser.git/
The line at top of that page, "description Scripts to build the Tor 
Browser Bundles" - confusing for users?


Don't remember a link to TBB changes page, on any main Tor / TBB info 
pages.  May be wrong (happens).
On that page, under "Tags" have to click the TBB version, then 
"shortlog" or "log."


Info there is useful, but not same format as for Tor, on 
https://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=ChangeLog
- - if that's what users are looking for.  Some will have trouble 
finding concise change logs for TBB.


Shouldn't there be quite visible link(s) for all TBB versions changes 
/ change logs, right on several MAIN pages - main download, main Help, 
etc?
Here:  https://www.torproject.org/download/download - has link to 
"source code," but none for changes.
Wouldn't that be most logical place for link(s) *directly* to TBB 
change logs, like most software sites?


Lot of info available, but some is scattered.



--
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Am I running an exit node?

2013-11-11 Thread Leon Johnson
Yes to grossly oversimplify bridges are "semi-visible" entrance ramps to
Tor. The limitation of bridges is directly tied to how many ISPs filter
your traffic.

Case in point: If one small ISP blocks the IP of your relay, you probably
won't notice. If 3-4 "major" ISPs block your relay, you'll likely see a
drop in Tor traffic.

As far a which relay types are in demand, that's a different:
If I had to guess I'd say:

Exit
Directory
Bridge
Stock Relay

Someone else may be better suited to answer that inquiry however :)


On Mon, Nov 11, 2013 at 8:05 AM, Anthony Papillion wrote:

>
> On 11/10/2013 06:46 PM, Leon Johnson wrote:
> > If you don't want to run as an exit node, your torrc file is correctly
> > configured. You can always check one of the TorStatus websites:
> > http://torstatus.blutmagie.de/ (usually updated after an hour or so).
> Do a
> > search for your IP or Nickname. In your case, you should *not* see an
> image
> > of a small door.
> >
> >
> > On a side note, have you considered running as a bridge?
> > https://www.torproject.org/docs/faq.html.en#RelayOrBridge
>
> Thank you for the feedback! Good to know I'm configured the right way
> and not exposing myself as an exit node.
>
> On the topic of running as a bridge, I considered that. The reason I
> didn't go with it was because of my (perceived?) limitation to the time
> bridges are useful. Once a blocking authority finds out your bridges
> address, it's blocked and that's that. However, I'm not opposed to
> running a bridge. Are they more needed or useful than inter-network relays?
>
> Anthony
> --
> tor-talk mailing list - tor-talk@lists.torproject.org
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


[tor-talk] Reach mail server from client over TOR Hidden service

2013-11-11 Thread Ahmed Hassan
Hello

I build a Zentyal server to use it as a mail and web server plus a
hidden service, everything is OK when connecting in a normal way to the
web server and to mail server using Thunderbird, however when trying to
connect throw the hidden service I am able to connect to the web server
but connection is not successful when trying to connect to the mail
server using Thunderbird.

So I need you help to tell me what to be done to make the connection
between Thunderbird and the mail over or hidden service.


Zentyal is using postfix and dovecot for mail

Regards

Ahmed
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Are project change logs online?

2013-11-11 Thread Joe Btfsplk


On 11/11/2013 9:53 AM, Nick Mathewson wrote:

On Mon, Nov 11, 2013 at 10:32 AM, Joe Btfsplk  wrote:

On 11/10/2013 9:05 PM, Roger Dingledine wrote:

On Sun, Nov 10, 2013 at 07:58:09PM -0500, gq wrote:

I know change logs are included in packages but are they viewable
online anywhere? Or do you have to download and extract/install the
full package to see them?

Go to https://www.torproject.org/download/download
and click "Source code"

https://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=ReleaseNotes

https://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=ChangeLog


Further question about that.  On
https://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=ChangeLog (or
any page), change logs for some releases seem omitted?
One example:  For a good while - 2.4.17b2 was the latest of 2.4 series.  But
changes for it or *b1  aren't there (I assume was a "b1").  That's just one.

Is it just oversight or lack of time to list changes for some releases, or
am I still looking in the wrong spot?

Wrong spot; you're looking at changelogs for the Tor program itself,
but there has never been a Tor release called "2.4.17b2" -- that looks
like a TBB version number.


Thanks.  Correct.  Knew I should've waited till more awake.
BUT... same general principle.  Seems harder to find links / directions, 
STRAIGHT to TBB changes.


This page gets you there - if you know what to click. 
https://gitweb.torproject.org/torbrowser.git/
The line at top of that page, "description Scripts to build the Tor 
Browser Bundles" - confusing for users?


Don't remember a link to TBB changes page, on any main Tor / TBB info 
pages.  May be wrong (happens).
On that page, under "Tags" have to click the TBB version, then 
"shortlog" or "log."


Info there is useful, but not same format as for Tor, on 
https://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=ChangeLog
- - if that's what users are looking for.  Some will have trouble 
finding concise change logs for TBB.


Shouldn't there be quite visible link(s) for all TBB versions changes / 
change logs, right on several MAIN pages - main download, main Help, etc?
Here:  https://www.torproject.org/download/download - has link to 
"source code," but none for changes.
Wouldn't that be most logical place for link(s) *directly* to TBB change 
logs, like most software sites?


Lot of info available, but some is scattered.

--
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Are project change logs online?

2013-11-11 Thread Nick Mathewson
On Mon, Nov 11, 2013 at 10:32 AM, Joe Btfsplk  wrote:
> On 11/10/2013 9:05 PM, Roger Dingledine wrote:
>>
>> On Sun, Nov 10, 2013 at 07:58:09PM -0500, gq wrote:
>>>
>>> I know change logs are included in packages but are they viewable
>>> online anywhere? Or do you have to download and extract/install the
>>> full package to see them?
>>
>> Go to https://www.torproject.org/download/download
>> and click "Source code"
>>
>> https://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=ReleaseNotes
>>
>> https://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=ChangeLog
>>
> Further question about that.  On
> https://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=ChangeLog (or
> any page), change logs for some releases seem omitted?
> One example:  For a good while - 2.4.17b2 was the latest of 2.4 series.  But
> changes for it or *b1  aren't there (I assume was a "b1").  That's just one.
>
> Is it just oversight or lack of time to list changes for some releases, or
> am I still looking in the wrong spot?

Wrong spot; you're looking at changelogs for the Tor program itself,
but there has never been a Tor release called "2.4.17b2" -- that looks
like a TBB version number.

yrs,
-- 
Nick
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Are project change logs online?

2013-11-11 Thread Joe Btfsplk

On 11/10/2013 9:05 PM, Roger Dingledine wrote:

On Sun, Nov 10, 2013 at 07:58:09PM -0500, gq wrote:

I know change logs are included in packages but are they viewable
online anywhere? Or do you have to download and extract/install the
full package to see them?

Go to https://www.torproject.org/download/download
and click "Source code"

https://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=ReleaseNotes

https://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=ChangeLog

Further question about that.  On 
https://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=ChangeLog 
(or any page), change logs for some releases seem omitted?
One example:  For a good while - 2.4.17b2 was the latest of 2.4 series.  
But changes for it or *b1  aren't there (I assume was a "b1").  That's 
just one.


Is it just oversight or lack of time to list changes for some releases, 
or am I still looking in the wrong spot?


--
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Am I running an exit node?

2013-11-11 Thread Anthony Papillion

On 11/10/2013 06:46 PM, Leon Johnson wrote:
> If you don't want to run as an exit node, your torrc file is correctly
> configured. You can always check one of the TorStatus websites:
> http://torstatus.blutmagie.de/ (usually updated after an hour or so). Do a
> search for your IP or Nickname. In your case, you should *not* see an image
> of a small door.
> 
> 
> On a side note, have you considered running as a bridge?
> https://www.torproject.org/docs/faq.html.en#RelayOrBridge

Thank you for the feedback! Good to know I'm configured the right way
and not exposing myself as an exit node.

On the topic of running as a bridge, I considered that. The reason I
didn't go with it was because of my (perceived?) limitation to the time
bridges are useful. Once a blocking authority finds out your bridges
address, it's blocked and that's that. However, I'm not opposed to
running a bridge. Are they more needed or useful than inter-network relays?

Anthony
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] More and more websites block Tor, which will eventually become useless!

2013-11-11 Thread Martin Kepplinger
Akater:
> …what I'm saying is: Tor could be much more than just a proxy tool, it 
> could be a public campaign—with all the “dirty work” your generic 
> public campaign has. (Well, it's not /that/ dirty, actually; it's funny 
> once you get involved.) Activism, PR, fundraising, education, etc. The 
> only reason this isn't done yet, I suppose, is that people who enjoy 
> programming web servers probably do not usually enjoy running campaigns 
> like the one I describe. Well, it could be a good idea then to find 
> human rights activists, all around the world, who know how to do it, 
> and collaborate. Support those harrassed for providing Tor access, make 
> it a matter of public debate, find sponsors, make journalists write 
> about it, engage volunteers. I feel a bit stupid saying this. Why don't 
> people work on it already? Maybe they do, and I'm just showing my 
> ignorance now?
> 
> I run exit from home publicly and encourage others to do the same. I'm 
> convinced this is the only way Tor can survive in the long run: 
> together we stand, divided we fall. If someone reads this with “my 
> thoughts exactly” in their heads, please email me, we'll cook something 
> up soon. Or make a special topic in *tor-talk*. [Mailing lists make an 
> awful communication medium, though—I don't even understand who will see 
> this message and how to provide a discussion link for outsider. :-(]
> 

I would love if we were at a point where running an exit from home is
seamless. I really think you're right and only one thing is missing to
get there: a critical mass doing it.

Unfortunately until then we have a chicken and egg problem for those
(like me) who don't want to waste too much time and effort but still
want to run an exit node. I don't like it but the only way is to buy a
seperate internet connection for it. Only that way I really know my exit
node is protected by law.

It doesn't help to get to a critical mass of people running an exit
because most people don't even know what server housing and that stuff
actually is.

Selling Routers with OpenWRT and Tor inside would maybe help.
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk