Re: another seeming attack on my server's DirPort

2007-12-20 Thread Olaf Selke
Scott Bennett wrote: > I still don't understand the thinking of those people. I have no reason > to believe that the Chinese government is allowing the NSA to control IP > addresses allocated to, and served inside, China. It makes no sense at all, > and leads me to conclude that the whole l

Re: another seeming attack on my server's DirPort

2007-12-20 Thread Scott Bennett
On Thu, 20 Dec 2007 13:11:15 + Mike Cardwell <[EMAIL PROTECTED]> wrote: >Kyle Williams wrote: > >> This is just a theory, no hard facts to back it up. >> When I'm messing around with Tor's ControlPort, I've noticed that my Tor >> traffic just hangs until whatever I'm doing on the ControlP

Re: Snail Mail Onion Routing

2007-12-20 Thread Ringo Kamens
I'd be interested in participating. Comrade Ringo Kamens On Dec 20, 2007 11:34 PM, Andrew Del Vecchio <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Speaking of the devil, I've actually thought about this an came up with > an entire system about a year or so ago,

Re: Snail Mail Onion Routing

2007-12-20 Thread Andrew Del Vecchio
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Speaking of the devil, I've actually thought about this an came up with an entire system about a year or so ago, but I couldn't find anyone who seemed to find interest in it, so it's been in hibernation since then. Send me an e-mail and I'll dig it up

Re: another seeming attack on my server's DirPort

2007-12-20 Thread Scott Bennett
On Wed, 19 Dec 2007 13:44:09 -0800 "Kyle Williams" <[EMAIL PROTECTED]> wrote: >On Dec 19, 2007 12:46 AM, Scott Bennett <[EMAIL PROTECTED]> wrote: > >> A little while ago, I added another filter rule to the router here to >> stop an apparently endless, rapid-fire series of directory request

Re: [Part OT] Traffic shaping [Was: another seeming attack on my server's DirPort]

2007-12-20 Thread Scott Bennett
On Wed, 19 Dec 2007 10:17:08 -0800 "F. Fox" <[EMAIL PROTECTED]> wrote: >I know on HyperWRT/Thibor, it has QoS functions for port ranges and >Ethernet ports. > >I recently moved "kitsune" to an older machine (still enough for the >small amount of bandwidth I'm relaying anyway - and at least it'

Re: another seeming attack on my server's DirPort

2007-12-20 Thread Scott Bennett
On Wed, 19 Dec 2007 10:46:56 -0500 Roger Dingledine <[EMAIL PROTECTED]> wrote: >On Wed, Dec 19, 2007 at 02:46:04AM -0600, Scott Bennett wrote: >> A little while ago, I added another filter rule to the router here to >> stop an apparently endless, rapid-fire series of directory requests h

Re: another seeming attack on my server's DirPort

2007-12-20 Thread Scott Bennett
On Wed, 19 Dec 2007 09:11:02 -0500 Michael Holstein <[EMAIL PROTECTED]> wrote: >> The symptom, like the last time, was that output rate on my >> machine's main Ethernet interface was running steadily around the transmit >> rate limit imposed by my ADSL line. >tweak as desired ... this would pe

Re: another seeming attack on my server's DirPort

2007-12-20 Thread Robert Hogan
On Wednesday 19 December 2007 21:44:09 you wrote: > > > BTW, the SOA for your DIG request, ns.bta.net.cn (202.96.0.133), had a > direct match on http://cryptome.org/nsa-ip-update13.htm > Just thought you should know... Anyone know what 'NSA-Affiliated' actually means? I can't find a cryptome defi

Re: another seeming attack on my server's DirPort

2007-12-20 Thread Michael Holstein
I assume a correlation between these two events, although I wonder how (blocked) window shrinks could lead to this. My idea was to automatically search in syslog for window shrink events and then block the guilty IPs for 24 hours with iptables. But I hope that anybody understands what was the

Re: Kyle's controlport bug

2007-12-20 Thread Roger Dingledine
On Wed, Dec 19, 2007 at 01:44:09PM -0800, Kyle Williams wrote: > This is just a theory, no hard facts to back it up. > When I'm messing around with Tor's ControlPort, I've noticed that my Tor > traffic just hangs until whatever I'm doing on the ControlPort stops. There > have been a couple of time

Re: another seeming attack on my server's DirPort

2007-12-20 Thread Jan-Kaspar Münnich
Hello, On 19.12.2007, at 09:46, Scott Bennett wrote: Is anyone else having this kind of trouble, regardless of the apparent origin(s) of the attack(s)? This night I some TCP attacks (?) reported by syslog. About one half on TOR's Dir Port, the rest on port , approximately also opened by T

Re: Provider 1blu closed exit node torpaulianer

2007-12-20 Thread Thomas Hluchnik
Am Donnerstag, 20. Dezember 2007 15:08 schrieb kazaam: > Here's an answer from 1blu why they are closing the tor-servers: > > >Gern nutzen wir die Gelegenheit zur Stellungnahme. > >Als Dienstanbieter haftet die 1blu AG spätestens ab Kenntnis auch für fremde > >Inhalte. Isnt this is a bullshit?

Re: Provider 1blu closed exit node torpaulianer

2007-12-20 Thread kazaam
Here's an answer from 1blu why they are closing the tor-servers: >Gern nutzen wir die Gelegenheit zur Stellungnahme. >Als Dienstanbieter haftet die 1blu AG spätestens ab Kenntnis auch für fremde >Inhalte. Damit ist sie schon zur Vermeidung einer eigenen Haftung berechtigt >und verpflichtet, Kunde

Re: another seeming attack on my server's DirPort

2007-12-20 Thread Mike Cardwell
Kyle Williams wrote: This is just a theory, no hard facts to back it up. When I'm messing around with Tor's ControlPort, I've noticed that my Tor traffic just hangs until whatever I'm doing on the ControlPort stops. There have been a couple of times where I do something very wrong on the con

Re: Suspicious Circuits

2007-12-20 Thread Karsten Loesing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > A) This explains why it is trying the old introduction points, and it > explains why it's building a long circuit trying each one in turn. But > why is it trying the same introduction point more than once? Uhhhm, right. The problem is that introduct