Re: Someone manipulating Tor routing?

[Peter Palfrader <peter@xxxxxxxxxxxxx>]

On Sat, 18 Feb 2006, Dave Korn wrote:

> >From: Peter Palfrader Date: Fri, 17 Feb 2006 16:28:10 +0100
> 
> >On Fri, 17 Feb 2006, Mike Zanker wrote:
> >
> >> On 17/02/2006 09:06, Sebastian Wiesinger wrote:
> >>
> >> > 200.222.72.146 is also a real POP3 server.
> >>
> >> Yes - that was the same IP address mine connected to.
> >
> >That's a Tor server, or at least tries to be.
> >
> >[..]
> >Feb 17 15:19:55.308 [info] connection_read_to_buf(): tls error. breaking 
> >(nickname $3AE0FCB8B1A8C9AB66B149C15EEED0EEC6EED262, address 
> >200.222.72.146).
> 
>  No, it _really_ is a POP server:

I didn't contradict that.  I just said that it also is running Tor.

> But if it isn't listed in the directory, how come someone's trying to route 
> to it?

Because somebody, probably the Tor server trying to confirm it is
reachable, asks your Tor server to extend a circuit to the tor server at
ip,port with identity digest foo.

Peter
-- 
 PGP signed and encrypted  |  .''`.  ** Debian GNU/Linux **
    messages preferred.    | : :' :      The  universal
                           | `. `'      Operating System
 http://www.palfrader.org/ |   `-    http://www.debian.org/