Re: [tor-relays] BadExit

[Georg Koppen <gk@xxxxxxxxxxxxxx>]

Hi!

gerard@xxxxxxxxxxxx:
> Oh the shame!   Never had that tag on my exit before.

Sorry to hear. :(

>  
> 
> I assume it was due to a bad boy attacking an IP, pointed out by my ISP, and
> the ISP put my server "under mitigation".    I assume some filtering, which
> of course would have looked bad to TOR users.
> 
>  
> 
> I did not spot the ISP's email for 30 minutes, but then I was able to block
> the offended IP.  Within minutes of doing that the ISP said attack stop and
> my server was removed from mitigation.  However the next day badexit tag on
> my exit and remains there
> 
>  
> 
> How long does the tag last?

So long as the Directory Authorities assign it.

>  
> 
> I go to my other, overseas exit, a family member, to see the tag is aslo
> applied there to.    Do family members get tarred with the same brush?  

It depends on the reason for badexiting.

>  
> 
> I have turned both into relays for the time being.     
> 
>  
> 
>  
> 
> Or have I got this wrong.   Is it a  DNS thing?  Are no some DNS providers
> causing issues forcing the tag?   I am not using opendns.

It could be a DNS thing, I am not sure. I recently pushed a commit that
leads to some exits getting that flag. I tried to contact all the relay
operators beforehand (some did not have any ContactInfo set) but I got
almost no reply back. For details see [1].

What's the fingerprint of your relay that got the badexit flag?

Georg

[1] https://trac.torproject.org/projects/tor/ticket/32864

>  
> 
> Gerry
> 
>  
> 
>  
> 
> 
> 
> _______________________________________________
> tor-relays mailing list
> tor-relays@xxxxxxxxxxxxxxxxxxxx
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays