Re: [tor-relays] DoS attack on Tor exit relay

Subject: Re: [tor-relays] DoS attack on Tor exit relay

Date: Wed, 31 Jul 2019 11:40:24 +0200

Delivery-date: Wed, 31 Jul 2019 05:40:40 -0400

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linux-hus.dk; s=20140924; h=to:in-reply-to:references:message-id:subject:date:mime-version: content-transfer-encoding:content-type:from:from; bh=gOOXOE0m7kZEswy9H6cHfQhtlnzzDywzpNQBsxejH64=; b=bEllWKB9cuJu7raiGC6v5++8RxwCGiKvPopHGbPCZK5NJsFwt9x6lpZk0KojFA5qtAW2N+JNTQVcs dSFJ5GRHSzUgC3kkD5TFepX26iauoep5jGHyzaagDDKyCQh5CS5NX6nTSXHhSUP/IXJxWSwoRvlJYs X7yAhmvN4iGNXaE4=

In-reply-to: <UCE2yOt3j5aVTKaJNFoM9zhqsvt93YoNeLjkIikW0wbIss4q3eZeMxooQ-GurcRxzXBfd9__N7zkVabJolStsSMtsJTGYhndBppvd-SmDog=@protonmail.com>

List-archive: <http://lists.torproject.org/pipermail/tor-relays/>

List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>

List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>

List-post: <mailto:tor-relays@lists.torproject.org>

List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>

List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>

References: <UCE2yOt3j5aVTKaJNFoM9zhqsvt93YoNeLjkIikW0wbIss4q3eZeMxooQ-GurcRxzXBfd9__N7zkVabJolStsSMtsJTGYhndBppvd-SmDog=@protonmail.com>

Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx

Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

You can install failtoban, have you a extern firewall ?

Am 31.07.2019 um 05:14 schrieb potlatch <potlatch@xxxxxxxxxxxxxx>:

Hello Tor users,
Help me with a problem please. I have a small exit/backup & directory VPS in Finland [1]. This last week the server (and Tor) have been overwhelmed with non-Tor IP addresses. This may be a small version of a DoS attack. I took the server down for a few days but when I restarted it the attack was there before Tor users. Eventually, the load caused kernal crash.
I noticed this last week, that my Consensus Weight had dropped from 5500 to 68.
Does anyone have an efficient way to defeat this ongoing attack?
--potlatch

[1] 9B31F1F1C1554F9FFB3455911F82E818EF7C7883 TorExitFinland

Sent with ProtonMail Secure Email.

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

_______________________________________________ tor-relays mailing list tor-relays@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays