Re: [tor-relays] exit and skype

2013-11-06 Thread jason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 This would be an excellent time for me to suggest using Jitsi (https://jitsi.org), which is FOSS, cross platform and does encrypted voip and video. Biggest drawbacks are it's java based and doesn't support SMP or PSK OTR yet. - -Jason On 11/06/2013 11

Re: [tor-relays] exit and skype

2013-11-06 Thread gq
http://www.gnutelephony.org/index.php/GNU_Telephony ? On 11/5/2013 2:00 PM, Jan Hendrik den Besten wrote: ... she cannot use Skype anymore to chat with her mum. I understand Microsoft blocks all tor exits from accessing Skype. Is there anything I can do except converting the exit into a relay

[tor-relays] What is iptables?

2013-11-06 Thread I
Mick! Thank you. Iptables is a programme! I'm off and reading. It appears I need them on my VPSs. Robert >> Ip tables are a mystery to me. >> Can someone either explain them or point to a complete explanation, >> please? >> >> Robert >> >> "Also, use iptables! If it is a dedicated VPS then

Re: [tor-relays] exit and skype

2013-11-06 Thread Thomas Hand
If you want to continue using skype, you could invest in a VPN just to hide it from your ISP and make microshaft think you are coming from a different, non-tor related IP. Tom On 6 November 2013 15:12, Eugen Leitl wrote: > On Tue, Nov 05, 2013 at 09:59:11AM -1000, Ryan Winner wrote: > > > Use

Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)

2013-11-06 Thread Thomas Hand
I agree with mick that dropping packets is more secure, though probably bad practice. If everyone did this then, yes, the network would suffer on average but when securing a vital server, e.g a tor node, i think it is acceptable. It really doesnt make it any harder to troubleshoot since any service

Re: [tor-relays] exit and skype

2013-11-06 Thread Eugen Leitl
On Tue, Nov 05, 2013 at 09:59:11AM -1000, Ryan Winner wrote: > Use Google Hangouts. Which is different from Skype, how? ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)

2013-11-06 Thread mick
On Wed, 06 Nov 2013 14:00:15 +0100 Jeroen Massar allegedly wrote: > On 2013-11-06 13:47 , mick wrote: > > On Wed, 06 Nov 2013 14:00:09 +0200 > > Lars Noodén allegedly wrote: > > > >> On 11/06/2013 01:26 PM, mick wrote: > >>> I disagree. Dropping all traffic other than that which is > >>> explic

Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)

2013-11-06 Thread Jeroen Massar
On 2013-11-06 13:47 , mick wrote: > On Wed, 06 Nov 2013 14:00:09 +0200 > Lars Noodén allegedly wrote: > >> On 11/06/2013 01:26 PM, mick wrote: >>> I disagree. Dropping all traffic other than that which is >>> explicitly required is IMHO a better practice. (And how do you know >>> in advance which

Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)

2013-11-06 Thread mick
On Wed, 06 Nov 2013 14:00:09 +0200 Lars Noodén allegedly wrote: > On 11/06/2013 01:26 PM, mick wrote: > > I disagree. Dropping all traffic other than that which is > > explicitly required is IMHO a better practice. (And how do you know > > in advance which ports get attacked?) > > Using reject i

Re: [tor-relays] How to install Tor on Ubunt 12.10?

2013-11-06 Thread Lunar
The Maker: > I want to run a relay that starts every time I login to my machine. I > went to the page that discusses how to add the correct PPA to Ubuntu > but it stops at 11.10. Is this also the PPA I should use for 12.04 or > is there another one? What page are you talking about? The canonical

Re: [tor-relays] How to install Tor on Ubunt 12.10?

2013-11-06 Thread Martin Kepplinger
The Maker: > I want to run a relay that starts every time I login to my machine. I > went to the page that discusses how to add the correct PPA to Ubuntu but > it stops at 11.10. Is this also the PPA I should use for 12.04 or is > there another one? > > Many Thanks, > The Maker > > __

Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)

2013-11-06 Thread Lars Noodén
On 11/06/2013 01:26 PM, mick wrote: > I disagree. Dropping all traffic other than that which is > explicitly required is IMHO a better practice. (And how do you know > in advance which ports get attacked?) Using reject instead of drop simplifies troubleshooting. http://www.chiark.greenend.org.uk/

Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)

2013-11-06 Thread mick
On Tue, 5 Nov 2013 13:39:50 -0800 I allegedly wrote: > Ip tables are a mystery to me. > Can someone either explain them or point to a complete explanation, > please? > > Robert > > "Also, use iptables! If it is a dedicated VPS then drop anything you > dont recognize, "leaving only Tor ports (9

Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)

2013-11-06 Thread mick
On Wed, 06 Nov 2013 10:30:30 + Kevin Steen allegedly wrote: > On 06/11/13 06:09, Andreas Krey wrote: > > On Tue, 05 Nov 2013 14:09:40 +, Thomas Hand wrote: > > ... > >> Also, use iptables! If it is a dedicated VPS then drop anything > >> you dont recognize, > > > > What for? The ports th

[tor-relays] How to install Tor on Ubunt 12.10?

2013-11-06 Thread The Maker
I want to run a relay that starts every time I login to my machine. I went to the page that discusses how to add the correct PPA to Ubuntu but it stops at 11.10. Is this also the PPA I should use for 12.04 or is there another one? Many Thanks, The Maker ___

Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)

2013-11-06 Thread Kevin Steen
On 06/11/13 06:09, Andreas Krey wrote: > On Tue, 05 Nov 2013 14:09:40 +, Thomas Hand wrote: > ... >> Also, use iptables! If it is a dedicated VPS then drop anything you dont >> recognize, > > What for? The ports that you want to block are rejected by the kernel > anyway, as there is no one lis