Re: [tor-relays] Relay uptime after restarting Tor service

2016-10-08 Thread teor
> On 8 Oct 2016, at 06:15, I wrote: > > Nothing you do actually gets you a tshirt. > The knowledge that you qualified for a tshirt is your only badge of honour. Contacting Jon has got a few people t-shirts, although he was working hard on the Tor meeting for the past month. We're working on re

Re: [tor-relays] Relay uptime after restarting Tor service

2016-10-08 Thread Tristan
I can't believe people are still whining about t-shirts. It's a freaking t-shirt. On Sat, Oct 8, 2016 at 6:16 PM, teor wrote: > > > On 8 Oct 2016, at 06:15, I wrote: > > > > Nothing you do actually gets you a tshirt. > > The knowledge that you qualified for a tshirt is your only badge of > hono

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-08 Thread teor
> On 7 Oct 2016, at 05:07, Green Dream wrote: > > If we're going to change anything I think it needs to happen within > Tor software. Operators could leverage the existing "Exitpolicy > reject" rules, or Tor could add functionality there if it's missing. > Whatever we do, I think it needs to be

Re: [tor-relays] Relay uptime after restarting Tor service

2016-10-08 Thread I
Thanks, but it is the sending of the shirts which has stalled. And thank you for your concise and clear answers here which advance my knowledge, at least. Robert > ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.o

Re: [tor-relays] Relay uptime after restarting Tor service

2016-10-08 Thread Michael Armbruster
On 2016-10-09 at 01:56, Tristan wrote: > I can't believe people are still whining about t-shirts. It's a freaking > t-shirt. > But it's a good looking t-shirt and it is an honor to be able to wear one that officially is from Tor. Furthermore, most of us aren't whining but patiently waiting. Take

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-08 Thread Markus Koch
Would not help. These are bots, you can slow them down but this will not stop them at all. Markus 2016-10-09 1:57 GMT+02:00 teor : > >> On 7 Oct 2016, at 05:07, Green Dream wrote: >> >> If we're going to change anything I think it needs to happen within >> Tor software. Operators could leverage

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-08 Thread Tristan
True, but slowing them down could still be useful. At any rate, Suricata is a no-go for low-end relays that only have 500MB of RAM. It just hammers the pagefile. On Sat, Oct 8, 2016 at 7:00 PM, Markus Koch wrote: > Would not help. These are bots, you can slow them down but this will > not stop

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-08 Thread teor
> On 9 Oct 2016, at 11:00, Markus Koch wrote: > > Would not help. These are bots, you can slow them down but this will > not stop them at all. Ah, but the point isn't to stop the bots, it's to stop the abuse complaints by coming in under the abuse report automated thresholds. In my experience,

Re: [tor-relays] Intrusion Prevention System Software - Snort or Suricata

2016-10-08 Thread Markus Koch
I am more of a fan of closing certain URL paths. So we could at least stop these very old Apache directory bug attacks. Or forbid accessing whatever.com/admin/ Markus 2016-10-09 2:03 GMT+02:00 teor : > >> On 9 Oct 2016, at 11:00, Markus Koch wrote: >> >> Would not help. These are bots, you can