Re: [tor-relays] Atlas / Globe backend appears to be down

2015-01-10 Thread Michal Zuber
Same for me. Thanks to Thomas White for his mirrors ;) https://atlas.thecthulhu.com/ https://globe.thecthulhu.com On 1/11/15 3:44 AM, Seth wrote: On Sat, 10 Jan 2015 18:09:46 -0800, wrote: Can't pull anything up on either Atlas or Globe. My searches have been failing there for an hour or s

Re: [tor-relays] Reminder: exit nodes probably shouldn't be using Google's DNS servers

2015-01-10 Thread Richard Johnson
On 2015-01-08 08:04, Nick Mathewson wrote: It's probably a better idea to have your own local cacheing DNS server. It is especially a good idea to have your own local DNS resolver if you run Tor exits at an institution that's required to otherwise log DNS queries. Tor needs a separate (and n

Re: [tor-relays] Atlas / Globe backend appears to be down

2015-01-10 Thread Seth
On Sat, 10 Jan 2015 18:09:46 -0800, wrote: Can't pull anything up on either Atlas or Globe. My searches have been failing there for an hour or so too. Have you mailed a...@torproject.org? ___ tor-relays mailing list tor-relays@lists.torproject.org

[tor-relays] Atlas / Globe backend appears to be down

2015-01-10 Thread starlight . 2015q1
Can't pull anything up on either Atlas or Globe. ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Secure secure Shell update protocols

2015-01-10 Thread 0x23
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Before anyone goes and implements the above, you should probably read the related thread on the Applied Crypto Hardening mailing list discussing the pros and cons of this particular write-up. http://lists.cert.at/pipermail/ach/2015-January/001684.htm

Re: [tor-relays] Secure secure Shell update protocols

2015-01-10 Thread Seth
On Fri, 09 Jan 2015 12:46:11 -0800, 0x23 wrote: wanna share some current insights regarding secure shell(ssh) on how to harden sys after the German 'Der Spiegel' disclosed documents.h https://stribika.github.io/2015/01/04/secure-secure-shell.html Before anyone goes and implements the above,

Re: [tor-relays] Reminder: don't run transparent proxies at exits

2015-01-10 Thread eric gisse
Yes :( 1) Blanket caching on port 80 is mostly fine, but not completely due to squid dropping/erroring on non-http traffic. Not acceptable. 2) I've been unable to find a way to pass non-http traffic in a reliable way. 3) netfilter inspection to determine protocol ends with the layer7 filter projec

[tor-relays] please put jego00X relays in a "family"

2015-01-10 Thread Nusenu
Dear Tor relay operator, thanks for running your relays with such a great diversity (not two relays in the same network). Please be so kind to put all your relays [1] into a so called family to tell Tor clients that these relays are managed by one entity and should not be used toghther in one cir

Re: [tor-relays] Reminder: don't run transparent proxies at exits

2015-01-10 Thread Nusenu
> On Fri, Jan 9, 2015 at 6:29 PM, Nusenu >> Are you saying you are routing exit traffic through a transparent >> squid http proxy? >> >> If that is the case, please do not interfere with exit traffic in >> any way. eric gisse: > Why? Is your exit breaking non-HTTP protocolls on destination por