[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
From: Lars Noodén <lars.nooden@xxxxxxxxx>
Date: Wed, 06 Nov 2013 14:00:09 +0200
Delivered-to: archiver@xxxxxxxx
Delivery-date: Wed, 06 Nov 2013 07:00:27 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=CHy5ojNsmxB1AMxbFW5D+BgQMiVzgmQ6tG/oGT9JfRY=; b=PG5qbdaLwW0Y8y1n2ntZ5Qa0Wso3SorSJ+StOVaMnyQZj4so9HvaBZVRWDoBzV4UZD yRd+9+czl6Dj7Bdo9tCc67YoBuVW4ECbSUu6YeTmP0c0nQXl/JDX9rJJNhENY+C+0Cuo 4FC+eEQXJ1V6JB/JbGBGMOqFaa90YR7UngupjcqUR1zU/Kr2BFOEE5agO6ie2LZyBarU oF+NvaQ96aj2ukBhAuXfhreReakrxxzYF7XQ0MY7ofdoSidhJ4VOTvnRN7HDVQxUK/jA qevd3kgAmd48qT48reRgUV76HvfVK3srryUHaasDtbs18sXJIMzjmKiWU4G5ax1q5y4r QGXg==
In-reply-to: <20131106112606.3517878e@xxxxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
References: <CAGT8D4PJXzsTzcn9qPCPYmWiXoZ2C3xbZpLhEOHHnCvZLOnz+A@xxxxxxxxxxxxxx> <2826286.SjnxGMFDgD@vostok> <CAGT8D4Nfmw_fTqABcZT_fS28v6vT7awV+1t0xwvsFgs5RMV0dQ@xxxxxxxxxxxxxx> <CAKqc3T4V+M12xgwwde_P6DDo3dN+1RxRy58MmTZCxyTL9R6FLw@xxxxxxxxxxxxxx> <20131106060949.GA24476@xxxxxxxxxxxxxx> <527A1A46.6090903@xxxxxxxxxxxxxx> <20131106112606.3517878e@xxxxxxxxxxxxxxx>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.1.0

On 11/06/2013 01:26 PM, mick wrote:
> I disagree. Dropping all traffic other than that which is
> explicitly required is IMHO a better practice. (And how do you know
> in advance which ports get attacked?)

Using reject instead of drop simplifies troubleshooting.

http://www.chiark.greenend.org.uk/~peterb/network/drop-vs-reject

Drop tends to get in the way.

Regards,
/Lars
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Follow-Ups:
- Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
  - From: Gordon Morehouse
- Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
  - From: mick

References:
- [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
  - From: jj tor
- Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
  - From: Paritesh Boyeyoko
- Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
  - From: jj tor
- Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
  - From: Thomas Hand
- Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
  - From: Andreas Krey
- Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
  - From: Kevin Steen
- Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
  - From: mick

Prev by Author: Re: [tor-relays] exit and skype
Next by Author: [tor-relays] Relay-Bandwith
Previous by thread: Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
Next by thread: Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
Index(es):
- Author
- Thread