[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] Confusing bridge signs...



I do not use any scripts to start tor, I just type tor to start the process on debian. And yes the datacenter I run in has an external firewall which requires setting up port forwarding.

The result of running ls -A /var/log/tor

root@instance-1:/home/keifer_bly# ls -A /var/log/tor
notices.log  notices.log.1  notices.log.2.gz  notices.log.3.gz  notices.log.4.gz  notices.log.5.gz
root@instance-1:/home/keifer_bly#

So it's creating separate .gz files for some reason. I don't know why that is or what to do from here. Thanks.



 
--Keifer


On Fri, Mar 10, 2023 at 8:15 AM <lists@xxxxxxxxxxxxxxx> wrote:
On Mittwoch, 8. März 2023 18:13:01 CET Keifer Bly wrote:

> Strangely, nothing whatsoever is being written to the notices.log file,
> upon checking it it is completely empty, nothing there.
That can't be, please post:
~# ls -A /var/log/tor

In general, everything is always written to /var/log/syslog & systemd-journald
to /var/log/journal (binaries).
~$ man journalctl

> I wonder why that
Read what _logrotate_ does. Every tor restart creates a new empty log file.

> would happen and how else to tell what's going on? Tor is running as root
Why do you change security-related default settings? Default tor user is:
debian-tor. (On Debian and Ubuntu systems)

> so it's not a permission issue, and I also set up a port forwarding rule
Why? You have a server in the data center. You only need forwarding on a
router! Packet forwarding is also disabled in /etc/sysctl.conf per default.

Your iptables must start like this.
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
...
-A INPUT -p tcp --dport  <Your-Tor-ORPort> -j ACCEPT
...

No FORWARD, no  OUTPUT rules.

--
╰_╯ Ciao Marco!

Debian GNU/Linux

It's free software and it gives you freedom!_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays