Re: Snail Mail Onion Routing

2007-12-19 Thread coderman
On Dec 19, 2007 2:53 PM, Martin Fick <[EMAIL PROTECTED]> wrote: > Anyone interested in designing a Snail Mail Onion > Routing protocol to be used to build a strong real > world (non-computer) anonymous package receiving > network? :) what you want is a zero knowledge mix, not a "snail mail onion r

Snail Mail Onion Routing

2007-12-19 Thread Martin Fick
Anyone interested in designing a Snail Mail Onion Routing protocol to be used to build a strong real world (non-computer) anonymous package receiving network? :) Yes, this is probably crazy, but I think that it can be done. I have started a project to design the protocols that could be used to cr

Re: another seeming attack on my server's DirPort

2007-12-19 Thread Kyle Williams
On Dec 19, 2007 12:46 AM, Scott Bennett <[EMAIL PROTECTED]> wrote: > A little while ago, I added another filter rule to the router here to > stop an apparently endless, rapid-fire series of directory requests > hitting > my tor server's DirPort from 125.35.9.66, which appears to be in China. >

Re: Tor gives "resolve failed" errors even when IP address is supplied

2007-12-19 Thread F. Fox
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Roger Dingledine wrote: > On Mon, Dec 17, 2007 at 02:09:59PM -0800, Jared Hansen wrote: >> Anyway, I seem to be unable to get any webpages through Tor. I am >> using privoxy as a SOCK4a proxy to send traffic through Tor, and Tor > > Hopefully you m

Re: another seeming attack on my server's DirPort

2007-12-19 Thread F. Fox
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Roger Dingledine wrote: (snip) > My first guess is that it's a runaway Tor client, or a runaway cache > between the Tor client and you, rather than any intentionally abusive > behavior. (It's amazing what can go wrong on the Internet when you have >

[Part OT] Traffic shaping [Was: another seeming attack on my server's DirPort]

2007-12-19 Thread F. Fox
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I know on HyperWRT/Thibor, it has QoS functions for port ranges and Ethernet ports. I recently moved "kitsune" to an older machine (still enough for the small amount of bandwidth I'm relaying anyway - and at least it's a dedicated Linux box now!).

Re: Tor gives "resolve failed" errors even when IP address is supplied

2007-12-19 Thread Roger Dingledine
On Mon, Dec 17, 2007 at 02:09:59PM -0800, Jared Hansen wrote: > Anyway, I seem to be unable to get any webpages through Tor. I am > using privoxy as a SOCK4a proxy to send traffic through Tor, and Tor Hopefully you mean using privoxy as an http proxy. > is receiving the requests (that much is ap

Re: another seeming attack on my server's DirPort

2007-12-19 Thread Roger Dingledine
On Wed, Dec 19, 2007 at 02:46:04AM -0600, Scott Bennett wrote: > A little while ago, I added another filter rule to the router here to > stop an apparently endless, rapid-fire series of directory requests hitting > my tor server's DirPort from 125.35.9.66, which appears to be in China. The >

Re: Suspicious Circuits

2007-12-19 Thread Roger Dingledine
On Wed, Dec 19, 2007 at 03:35:02PM +0100, Karsten Loesing wrote: > Subsequently, at 16:07:12 you restarted Tor and made it establish new > introduction points at "otherator2", "crelm", "bytebutlerfive" and > publish a new descriptor containing these introduction points at > 16:07:53. Again, the del

Re: Suspicious Circuits

2007-12-19 Thread Karsten Loesing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Roger Dingledine wrote: > On Sun, Dec 09, 2007 at 09:19:53PM -0800, Kyle Williams wrote: >> I've been having problems getting to hidden services the last couple of >> days. >> I noticed something odd in Vidalia the other day, but it was gone before I >

Re: another seeming attack on my server's DirPort

2007-12-19 Thread Michael Holstein
The symptom, like the last time, was that output rate on my machine's main Ethernet interface was running steadily around the transmit rate limit imposed by my ADSL line. tweak as desired ... this would permit 1 connection per minute from a given IP. Replace (torDirPort) with whatever TCP port

Re: another seeming attack on my server's DirPort

2007-12-19 Thread Marco Bonetti
Sorry, I've just realize I unintentionally drove the conversation off-list: looks like this morning caffeine didn't do its job :-/ Just for reference and future googlers, this thread and its follow-ups are a good starting point about bandwidth limiting possibilities: http://archives.seul.org/or/tal

Re: another seeming attack on my server's DirPort

2007-12-19 Thread Scott Bennett
On Wed, 19 Dec 2007 09:55:41 +0100 (CET) "Marco Bonetti" <[EMAIL PROTECTED]> wrote: >On Wed, December 19, 2007 09:46, Scott Bennett wrote: >> we need to think up an automated way to deny directory service to >> abusers in order to put a stop to such activity. >you could try rate limiting the c

Re: another seeming attack on my server's DirPort

2007-12-19 Thread Marco Bonetti
On Wed, December 19, 2007 09:46, Scott Bennett wrote: > we need to think up an automated way to deny directory service to > abusers in order to put a stop to such activity. you could try rate limiting the connections or adapting mine or perry's script to your needs. -- Marco Bonetti Slackintosh L

another seeming attack on my server's DirPort

2007-12-19 Thread Scott Bennett
A little while ago, I added another filter rule to the router here to stop an apparently endless, rapid-fire series of directory requests hitting my tor server's DirPort from 125.35.9.66, which appears to be in China. The last time I reported this type of thing, you may recall, it came from a