[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] Compression bomb from dizum

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-relays] Compression bomb from dizum
From: Toralf Förster <toralf.foerster@xxxxxx>
Date: Sun, 7 Nov 2021 18:54:28 +0100
Delivered-to: archiver@xxxxxxxx
Delivery-date: Sun, 07 Nov 2021 12:54:45 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1636307669; bh=uqfoeVPCVPn/WlikjJLx9rYq/E+3aHRQMr22m2Digs0=; h=X-UI-Sender-Class:Subject:To:References:From:Date:In-Reply-To; b=jbwd9hFG+dENfZB24twYLIbsqf3UyFjsw+VC632O/3vbJgvAojPlADj9xmP4XylEq CRW3/RVN5nTPr4Usat0fmCV2HrjvCikjEcbuxZWBeW08QReJWbAUN3hRvYGi87IPBy ZvJx/jv8CZppyNGviwuQiG77W0I52Ms5fjPp7AYk=
In-reply-to: <em3f91fed1-42c4-4d3c-b1ec-3865338eb928@mats-win7>
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
References: <em3f91fed1-42c4-4d3c-b1ec-3865338eb928@mats-win7>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.13.0

On 11/6/21 10:39 PM, Logforme wrote:

Got the following in my log today:
Nov 06 18:19:01.000 [warn] Possible compression bomb; abandoning stream.
Nov 06 18:19:01.000 [warn] Unable to decompress HTTP body (triedZstandard compressed, on Directory connection (client reading) with45.66.33.45:80).
45.66.33.45 is tor.dizum.com, a Tor directory authority.

False positive or a problem generating directory info at dizum?


I got the same at 2 relays at 18:02:56.000
--
Toralf

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

References:
- [tor-relays] Compression bomb from dizum
  - From: Logforme

Prev by Author: Re: [tor-relays] [Looking for feedback] An easier way to declare families
Next by Author: Re: [tor-relays] General overload -> DNS timeouts
Previous by thread: [tor-relays] Compression bomb from dizum
Next by thread: Re: [tor-relays] Compression bomb from dizum
Index(es):
- Author
- Thread