Re: [tor-relays] AS diversity for exits

2018-08-02 Thread nusenu
con...@rockenhaus.com: > I did want to note one thing about these big ASes... sure, they may > be big ASes, but they are still lacking in one major area - Exits. we where talking about AS awareness in the context of traffic accounting for relay operators, feels like you jumped to another topic -

Re: [tor-relays] AS awareness

2018-08-02 Thread nusenu
Tobias Sachs: > How about trying it with /8 and if that fails falling back to /16. > > Is it possible to set the limit to /14 /12 or maybe /10? can you elaborate what you mean? and what you are trying to solve? thanks, nusenu -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

Re: [tor-relays] Question regarding variables in torrc

2018-08-02 Thread nusenu
> I haven't had a chance to experiment with it yet, but can I source a > variable from the tor startup script, let's say the IPv6 address of an > instance, and define that within torrc as follows > > ORPort [$Instance_IPv6_ADDR]:443 > > I'm sure if it's possible it would of already been done. I j

Re: [tor-relays] AS awareness

2018-08-02 Thread Isaac Grover, Aileron I.T.
Hi Conrad, Back in 2017 I used atlas to find lowly represented ASs and countries with regards to exits, sought out hosting providers in those areas, contacted each of them to determine if Tor exits were allowed per their TOS, and based on those responses, set up four exits with a restrictive po

Re: [tor-relays] ExtOrPort settings for obsf4, obfs3 and firewall

2018-08-02 Thread Cristian Consonni
Hi, On 01/08/2018 15:24, Cristian Consonni wrote: > One question, I can make the ORPort and obfs4 PT port listen on port 80 > or 443, which I assume are less filtered by company firewalls. In the end I set up the obfs4 PT to listen on port 443 and ORport on port 80. These two tickets may be of he

Re: [tor-relays] Question regarding variables in torrc

2018-08-02 Thread Michael Brodhead
I found this templating tool really easy to use for my torrc: https://github.com/tests-always-included/mo Invocation is like so: NICKNAME=$NICKNAME mo /tmp/host-config/torrc.mo > /tor/etc/torrc And the corresponding torrc line is: Nickname {{NICKN

[tor-relays] dir port on non exit

2018-08-02 Thread TorGate
Hi again, is the dir port on a nonexit node a god ide ? TorGate torgate(at)linux-hus.dk signature.asc Description: Message signed with OpenPGP using GPGMail ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/c

Re: [tor-relays] dir port on non exit

2018-08-02 Thread Roger Dingledine
On Thu, Aug 02, 2018 at 08:53:44PM +0200, TorGate wrote: > Hi again, > is the dir port on a nonexit node a god ide ? Having a separate DirPort open matters less and less these days. In the past it used to be the signal for clients about whether you are providing cached directory information. Now

Re: [tor-relays] dir port on non exit

2018-08-02 Thread Matt Traudt
On 8/2/18 15:02, Roger Dingledine wrote: > On Thu, Aug 02, 2018 at 08:53:44PM +0200, TorGate wrote: >> Hi again, >> is the dir port on a nonexit node a god ide ? > > Having a separate DirPort open matters less and less these days. > > In the past it used to be the signal for clients about whether

Re: [tor-relays] dir port on non exit

2018-08-02 Thread TorGate
i have one exit and two nonexit. TorGate torgate(at)linux-hus.dk > Am 02.08.2018 um 21:04 schrieb Matt Traudt : > > On 8/2/18 15:02, Roger Dingledine wrote: >> On Thu, Aug 02, 2018 at 08:53:44PM +0200, TorGate wrote: >>> Hi again, >>> is the dir port on a nonexit node a god ide ? >> >> Havi

Re: [tor-relays] dir port on non exit

2018-08-02 Thread TorGate
is a blank page enoth. or is this a god ide to use the exit page and change it to non exit TorGate torgate(at)linux-hus.dk > Am 02.08.2018 um 21:08 schrieb TorGate : > > i have one exit and two nonexit. > > > TorGate > torgate(at)linux-hus.dk > > > > >> Am 02.08.2

Re: [tor-relays] dir port on non exit

2018-08-02 Thread Matthew Glennon
I have an exit page set on my nonexit guard just for easy identification by sysadmins investigating why their users are connecting to it. I don't have a specifically identifiable reverse hostname. On Thu, Aug 2, 2018, 15:11 TorGate wrote: > is a blank page enoth. > or is this a god ide to use th

Re: [tor-relays] dir port on non exit

2018-08-02 Thread TorGate
hm ok, i think its fine with a simple page with informations. regards Steffen TorGate torgate(at)linux-hus.dk OpenGPG 7FD5 65EF A4EF EEF3 7A13 4372 8409 49D6 01A2 0890 > Am 02.08.2018 um 21:29 schrieb Matthew Glennon : > > I have an exit page set on my nonexit guard just for easy identific

Re: [tor-relays] AS awareness

2018-08-02 Thread Tony Peck
This is my public keyfile. I know this doesn't relate to this message but I couldn't find an actual email address to send it to. I want to run a bridge relay but am having trouble setting it up. On 8/2/2018 at 6:05 AM, con...@rockenhaus.com wrote:I did want to note one thing about these big ASe

Re: [tor-relays] NTP and tor

2018-08-02 Thread Vinícius Zavam
2018-08-01 1:19 GMT+00:00 grarpamp : > > > Which of these do you use on your relays? > > Some people may or may not consider relays > (in general, overlay network nodes) to be > a separate class of unix box subject to whatever > various concerns, differential administration, etc. > > Let's call it

Re: [tor-relays] NTP and tor

2018-08-02 Thread grarpamp
> if you can, setup a stratum 1, but... regarding openntpd@freebsd; > https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-openntpd-on-freebsd-10-2 The stratum isn't much relavant to tor relay nodes since they're tolerant by design of more offset than any sane sync would p