[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-relays] Re: DDoS solution for Tor nodes - nftables variant implemented
- To: tor-relays@xxxxxxxxxxxxxxxxxxxx
- Subject: [tor-relays] Re: DDoS solution for Tor nodes - nftables variant implemented
- From: Toralf Förster via tor-relays <tor-relays@xxxxxxxxxxxxxxxxxxxx>
- Date: Sun, 13 Sep 2026 21:16:34 +0200
- Cc: Toralf Förster <toralf.foerster@xxxxxx>
- In-reply-to: <6911230.G0QQBjFxQf@t520>
- List-id: "support and questions about running Tor relays (exit, non-exit, bridge)" <tor-relays.lists.torproject.org>
- References: <a791b13b-32ad-4203-bf0c-7aeb21dea2eb@gmx.de> <6911230.G0QQBjFxQf@t520>
- Reply-to: "support and questions about running Tor relays (exit, non-exit, bridge)" <tor-relays@xxxxxxxxxxxxxxxxxxxx>
- Ui-outboundreport: notjunk:1;M01:P0:Cfd6bSdHdrM=;HL3wne9FkMEmRSXZAGZ58XUDUoH yCO3dQxbipMxfI0ZcgffsaFmhw99nHiPAZpUhHEMhz1crVYf7MwE1zoi6kJp34TqQ0bW4oqN4 d60c5/2GkxV3rSLHli/tt7Aylk7M0Ebq0zRgPNVo60KxM2jsE1p13QcJtVDGgwB2hs2UBYCKe MiggzAx3VTa8D20raobkEoFetAdsR7ZnDcIQs3i0YR2L3jTSoMg0DpKcEpgqTeJxDHv4szkJK BZIVIwmYMSW8AI8gE7tXIF/EI6yPLBoN6iOruV9lu4ZXWzTsFc2r9F2iFmarrePFFRtDSvD2E mg5AOXT7G/8EUwKWy1unW9QB8fs5L+MGGe3ECP+peDg89tx2kMW7mvKwCrGNeDs5iZq+T2c+8 st70/bUzC0effaEZrAnaIW7lzwCCJiazDjdlGpwbwuKqZCijWNGPSoAYuZSpkmqVOHhYByuuT rn5fTesYyiImxnSNUFJb56F0kzinSVCOr6M/4oG+cMHo7yklUFBa68ZRoEbVbXXQDaQJ1k1Rd Bt5UBx//MrVpcg5SKFnW25krnjHutXiZiCv45vNiJvSc/IUeOQWsMzPJVBvX/8j/0mFP1N3q7 6Qc4dkDDot2xz8DEWk3NgznWn1/JY+yu+g3bchzGW2jVp9YvnrNt3HNMNzt8mWb/k/+qbVL5o 9qycvwcJ439TiakFClK0l64uBvfn2flGGCxHTp6+RV1Vh6XCzYkP3D7ccxpPe7l4Pu2O1iE3O P1aq86Xh/iiufOEbJVo5kJsSJyyRhVih//EI1KzcG63eqUKVwAZKyweQF5ig+tfWp0CO9yr7u D+t0dV0/FsmqPUqBCOhN0pJj1l7WrYlAI18LfvoE7eIUHDRTq29XXZFNJpwoWj8hTyWuhfqze Cn8l3WJyqy7Zd05ey3IoXirTHfWB2EpgjWP7KYc9AOYd4kIh/X6GG8uTgWxWO9tfFI3aKOkYe DlWJ4A/I7qIWR+0nNogRabJ06lIR37C51T4tjzuO2fawz+MWER8BP0Ubi0cGAm4WX9XZVi4hH 10ghnaKewg5FS/EaLA8wgq6S0xmn7a1Jd+mEMii3hrbeqQ6bSL1zToFZ9RvhqrahZOCfbDIOz V1Ugj8+MvWtEk8sr+fU0rgkRlaf4FesRsjZ/2LLsLR7eVkodmZK+73szH036eFdByNwKI3WnK sPNSD3yfmyjDOalJDe3HIhmLLsaXM4GnxWrzQFdEQGFsCbf5tv2AOhr5EM3bnD7gXj03N9mRJ Zb5PbhsXeQdZXTYJtz+h00RhoDsHy/DQlxwTQcU+xAv7fQVdVmbJkJKzlNbsEC47tsS6Otmkn DDjvhIjGfBTdwlmGtDcIm0SUmYd+nm2maJNkoIBdBf9eELjnIE8y00XlJfOzd99eA8/EvtzqK 7balwHLJmSdxTkixSLEBIuuP8XErBqi0o4FAYFaFq+IGd1kK0mpev2NNsjAQ6Gek7M8kOGgpw KHe0uu9lMIiSDUtLRx4yMV2QDO+iVOPQPF7FpBHbdCgzoIpPx4oWrN8LHK9Up7wmDIUxvX6cu 6QKgQJvd0z1pDt8T0kly5auHBTLX2et7Bfmn/2kfp+/oPh77UOe8I86WP7IVCx/cRqNRZOymZ y3HXlI9+LQBwTWiMhE055Is0395Fu1S4rziYQiWA6c3n8yUw+3cckwtj0SWAP8sJUYGvfzEh1 k72BxwdeSsqDL6qpsWn0ZfKex4PtMV2OH7DQ4AV6fo3Rjg7JCKMnEgy6PzydOGa9W0SpYd3oD sMldBHeezfKMffJD0FlNDfpktVG7FMrKG40bDimGKeBabPZksB1FTAlwSKxTUXGyuauP6sLTG WSycEqo71lRNCR5OZWOKscIxFKQ+N+FfvV3EdvA8BhRgVs6GDxFUZX3eV9zlAtG3ovSo14fPA 4F21j2P9xtn+KnEjdtj5hO6IKO8qdXAaVwrs/rtzREszvxCP1UOUdr7tUziPO8c9FI7A/fQJg tn0Pc1y0XemtQ6LXOOSDSA2o3nLQPAt66Of7qxIK2HFXE4PgBcaL4yEOjzfsnvX8Vto5vV+Vc YZm0Qd8lFqeLeoqJHzXST5TLBIe45sp4XETQec58hnyseVa+lq5dHe9uQElj94o2BTSkiGVjl BQIiElEzAYvVn5RzlIuEn0RC86ggGBAnaqmOEtDCzQu0iSt07L2KS+FTz+8i1+sjjmD18s1HF MFdAm2QEHWEPnhdl0+/EsjVjSKFMdbfMaol938FWC/09Dg4cDgEK/QGbXDpbA6YJkvdBODwiS 0VrPYgP4amBgVvCDD4Z5oAo+o+QeVnVM0X788n3whwNcrlTkylzr3itucBzJenTSAuILeZdco 8ES/+f/jqkO0scyEpMVQyrsBOYU3he7GUNpXMJrObd9l2r2NFao02K0fg9wkmEiVXUJCdENhR QCIg1beg3TlaaiPfJKM2uWAiB62UAPHTqC65uM95w74CfBtf8X7GsHmzKub9/mKiKA2W4m+cg DrLDqGydA8AcsYLLyiqad3Hk0S7yPoAn2Cjsjts/PSZTKsVaMleNagyO82JU01DV67VeuFSfC KlMRn6RNjmVU5AHrOqMv0QDrT/GQ3VMuJCtWUUEaW0jiCYtReCMHCB1Pz8VqmV+B2nLzVx8q1 ROvqhi2vUd1PhwqwUiyu4b+GYItln9S6SLc/atBa3njzvjsHMx70Qf+5z5m9CEwzsFtbiaqvN VjSMkjtEYca2/F3a2Jzw+JFoykKpSjoEbusYPjLYOgm3/SqWRHRY5YxuqD+5ercKUgLmv3o2o hTRYm3o5IzelnijTeh9EFdkL1C6fYwC31hx9LiTvemb5KF1vu5Lpc+rdg3l7G+sHDMQazmF+8 HGsUtyExWaYRQGYIrM1N06EMRyV6jNzPzTAKotpWi8crCmTdLNZTvU+roEoYym8J6fKFtMlVB 3AJVbZHzHTEJJ17scj/dpIAV/KHfykwrEPDM4ZpDcpISet/FhEVggORlRU0b4bIMws61ZFq/x QetJ1IcyZ1rv/ibSHMIOe2u/y5BdN9lh4s5RoqpjXFdeSmJolMDdtfPmLVBikirONXF+iBa1v yprfNnXq49lrroGqE4G8C54WUtHijtV3noIjIByQRzg2S/IAnKdYXfXSdPi20ynWWzIXI8apy pg9O2g/w6JJSf1moJfudeyM/jJX8RygLq/1WXSTrYq5XJO4PsG4tWrTKtQAq841Wbl6iVZpQF HkHOMefCjcUM/yvurFkAAnIelK2Fb+/rJJqNANwqTZqCvUnYr2Hox31+6A1YaQyXeGBoMndZF /0UKWy8Qn/UAnurYzJJXWmD5Dfhs2OOUXtUHFEnT+mbI49ajg06UC+ktgx5qekmH75eDvNk4D TF3b3YEIPNfTIw6wffFXbHPmxLXOIPwbB4crg9JG/NxghLqn9boNJP652izUZIitJPReqlNVS iqb+qjeZBQ0injxsJJnNoLrnIyEPsYaVcStWgyS9fSpuaNDQDfvlGmrl2oFke5v3Ls3L3dczB UztAe5ECVA6iQdam0k9cB+UP9UqUSX1pFJxuPSkFhmg7+CIaKJ+ngLxIsVr4+uhqk04MT3YeR 1N8QSncQbkzIwW5mrPQmGmwyYuPaLLpyD++ACIgasEhwQ1by9v2HUvIrJBU3KlZQ2KEC8CeEi vKqQEMABdiLB2hyVU7Bw9mSnCXrMGKqa2KVXsBXKHvLpM2YnpVrVOnecdrDYoZQbfZ9xHAePm J2yeNq9AxzIbcwZyxS3YtwmX2VLPgh4jAvUwELCvXCCANU9fMfeoUerqoatSip5/TE9p2MxtV IiUn5dfFxxnUjo/41a6MMWYmxDNnfgcUHJfoH594c4qMl0O1SBRlAEjnTVvHr6DtITnB37Mex TQc0lYYV9rVqZZjRHSLIKloEGlZqZFpyS/yQ7ouiIG/pti0wifeKBQ/0EZ7rSv7GXXRUno1tN SW4oXp0cCs24F5WPpILawEKayfgQNpW1KitNHAwNM3USNeX6uyt1U5iTUtSgE/QGe0sY0DH1X cDwgBH0RDof71S3h4sJw1TIQSJ18BzRQ6SLcoUChYIQKURQAqFJkl8pr8z96rHX2mlXIRilhI AuA3hYxiM2VUHm5vg5S6RDwHbPLITFxLumNHPTE2waYlNHWER5cTmPBCXwMzKooOFUH3/UQpv ALUnbav29H/bOh2OGhxq7F8hLxZBCL2Orlb4Q1RdO2Xhs8X0y6lE3TabLZD4jA0N/2IMNNhms ln2yj3nbdhRtTkHrsp6dIMgkOrFk+UOvh187hpGqevazzG70Ska7vlKM63oEgw9KCYdkf3A+Q rSpm/JEsQ5fTGIBHW7IljEYGnJahenfGxbBVwnOOKAxcIfqPt21MQ3RrSiLdtYuwqMMO3nGF5 +8jhPnnh34uz9toKtrNQlUsR7E8dJXDbfqesitp3AE3bECDYQ9wfFcGywPCagUaPHS1J/ARIR n5Ss+0fR2pTnq9xxq5Jw2J7UsirDaj/cht3DKgP+R9T8maleDFYqOjM2Qu0hzQD6qcr9C1K6g UDTK618uImgx5lRUofyGEPZTqMBbRotKlbxNtTEhEDihMhHa63wttrpvJcwCAQUrr4Uxw/uG6 Txs1quqrBp4UTsVGSouX0Ow04becJeQf0NVr0qb3EzBJwrWGyKJcTlx/KP9M+bS9FaTz1xX1/ 3ozS8XvunbxbqmCcr8e7OdYwkAehJavqERZyvvJOScINZc9OrzBionPzuZ3jg2eyyLy6jKk9b DT7Tzy4C+DGqG9VjXvF3hvq4aEUGrXZIbFshQEuKmKY9g9mRb+MBrRQ8F/5nWL4SZVD+YOTY4 M2293bSiJYhvTZ4mzTNt+UUVFDSqeph0yGB7iLnrQiCXNIzB/bNZeqEd0om4EUgRCpg0KyZX5 XS4ZoB1jLlSyQNSXfQQ1QZFWMvdOGtvVeAfRm1PgDqGHEFRTV8xLospATkOd+QM7mMAqWW704 x3ll2f0w1/e+ixaa+/QMfUIAeXdum2eTVQFD5GgYxldNaCeHtjniKHKq+1ypRsQLHgo4QaTg6 7a/EefOKfR7KoFQVtdI+ebkUV8dtt363iZ0rdRUyG5NNkfAEAlYOMwW5NQVD9wgEncb+ezTOB PInI9WoqgX8EuG5EDKQUhlWuKK/A5dAOVzQXyxugfc8ZpR4mXpxS7nSl7NmUr+h0Yq7YbrIJH YKNDPg2zFeKn1hPNT5vqj0rPS2644hVXvtut4HShAuKYPSmxNzTiqqmZ0Acd8LFaSGSLcdfnp 9ZXXlLBZvU3fDm/5kAN2sPAYxLbCGlWUszKi0xU2B3wdyxmkv5mJxOxGeOpI4xyIgBvG7OUlW u9nHjh4fsXntZmF2SWvOWPkCqVoSSuHDwIJdlt5vTgkMbNaCYh50iOflR8gGmJL98ERxMRX08 ik0I7OCPDz9606MvD49fMFUUxLWYwwSjktdn1KkshKfjDVKsU31SwuGH/KPsXM0BqfJB7wWBr EnkmLJO53TvSrr4pt5/Le0g+xtBpzQb2OL0WWLA26EHhEw9g83R+c4whYmfIt8QqX4jCdkhkl UoZl0Y2/bSe74n9dpPa/DJFa5BQO3frxY93n8fUbcNGhaG+G7JP2meDhuwRaluPGPJiLfLo1Y 5bsFc6kxx4jtg059LVsKuMIx4LR0TT5SPXjg6lpum1yOYdN7vHqNasl3pGVQUMYHSnUH24Z43 pFtjZYfQ20otussWZ6FajqXrU4TSC3Jf84iEpo6pse3b+aDfu+H7ARILSUs53WvXQFvYi8wm/ 8zbHWFc36c822dKXB5M8KIUGI4Jtx2lt7sQbkMqoV70dF2c91AqDgIzu8e3twmCSeeQdfkV2t fzcmD+wSNNUN8BnEfXyga/A6C2waxlopKinDBzuGwHkXdLBLThQ7tvWcDo4fif0YppMmXc9U6 AAl1k0FCEUhCp0RPbA6BtEVKDsEv4iAkqmrAEUiyb4JU7QeuR65jglXWoxyMBfWWk8RrgAzAy bUHO+Z80ReXKzOlpalvh+GV6l0UWxOPKSLEKvzx2I7R0vZ5IU+ZAp2F1N8tmPFyk0Jz8tTPD+ SIdUlG2aV7ho7K0uURhfQI9maK75h3lq6pDTD3hBXZYv7UMOsWjsSLDgDzX2ns3FuZ4kW5z/l b8l3f3nqqngUb6U/1ISsYoeXKDmhlzXFwSaFhx3hzh3kHaorVMAE9SoP7TJCYkOttitewYkLo nRTeQgQF4IxG+ZMgBVHctVG1uq60zJDjfxwzAfD1Af4qDPvkCbz2sp2v3dBw4UFL6AshfnXEu MGvDw7DNOo=
- User-agent: Mozilla Thunderbird
On 13/09/2026 12:42, boldsuck via tor-relays wrote:
Thanks for the reply
- Use `auto-merge` and `interval` flag in dynamic sets.
This gives "(Operation not supported)" here, likely due to the dynamic flag.
> - Block crazy packets like this in line 172, in chain 'ingress'
before conntrack:
This would be a larger task, for the future. For now I like to stabilize
the current setup. Since today I was proven (again) that without the
ruleset my tiny relays are walking deads. With the ruleset they do all
perform.
--
Toralf
_______________________________________________
tor-relays mailing list -- tor-relays@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-relays-leave@xxxxxxxxxxxxxxxxxxxx