[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-relays] Re: DDoS solution for Tor nodes - nftables variant implemented
- To: tor-relays@xxxxxxxxxxxxxxxxxxxx
- Subject: [tor-relays] Re: DDoS solution for Tor nodes - nftables variant implemented
- From: Toralf Förster via tor-relays <tor-relays@xxxxxxxxxxxxxxxxxxxx>
- Date: Sun, 13 Sep 2026 21:22:25 +0200
- Cc: Toralf Förster <toralf.foerster@xxxxxx>
- In-reply-to: <a981f28ee72487d41fe03dff158ea930@riseup.net>
- List-id: "support and questions about running Tor relays (exit, non-exit, bridge)" <tor-relays.lists.torproject.org>
- References: <a791b13b-32ad-4203-bf0c-7aeb21dea2eb@gmx.de> <a981f28ee72487d41fe03dff158ea930@riseup.net>
- Reply-to: "support and questions about running Tor relays (exit, non-exit, bridge)" <tor-relays@xxxxxxxxxxxxxxxxxxxx>
- Ui-outboundreport: notjunk:1;M01:P0:xzKoOlTbjTU=;DC59bJpzM9zbbsw1eGZYi4W035c BB40J52KxKHEx5KpRgolb2wTXzKOtiHWPrNWDZ8o6IRRpNbJqh/t1FdK3Z+etK0g/Gd66cfa2 l0w8vTPRBF9iDd1h74Zu2BZlisS4s40Q8sYNwdndPs88Hoe3KaL8FIdz9ca0qBJFPRD7z2Z5b R/fkofu9yYeAmVHttGrG1NZVSWitcQaFAox44z3ye63o2gGYo/z45w1v94luTBWCxU/ibEZnT 3pmBduhbUcBzDFDv6Yt9AsqpvyfMbYa1UVTI8+qbCRLkJ77a6Kkvje2YqEeuy2jzgxM8LpuFE oLPqa3nP1J1ow/T30+wlvyF73D8vlalez1WaGjZuRvMmRcfF2mVEEIygAeVJjZG3xJFSCIsAv bntCAROvQuc5C1AMUurKD4uCNPh+NqMYhko6P9WxRshbG5g2ttXV4HBCKrrdLwiwENtYQYwNj 5r+bqhzL7EXibU9xoFQcT8PNPLQYz+o6XYmTBgVSJZm5Jih+3JXgSEaWCWVeIklZiUFPOQ+iP 498fVfRRJg+s+n3R6JP9Y/r6R2FGa4BhtbzxsdDnU6hyli7Hu7WSGGoi6j0HfL4ozUx2dgT/A 05IG63tI77iVeoriG0jyVWyZfMS44Bq3Fcz26IKy0AtWXcan+ecRndvz42Z/SFaE80MMwENy+ K/czm5c85CZKRoquVSW/HkwWr/HrybTHAm0PaIlRAKJlBW6/4xe60Jl38hIKemuN8TiD1/0AY aEqX8jQWHPe3QsPXriX4dDJ1ZEe0KOt6JqO5Y+r5UKFpC0Mc3uIcz3PLcDZnTOCvkEg1rnqP5 CLhyIdBEJjY9QTusW4Ni4bgq8ZUNAOKz1/BVH6nwIXfsWR5uwuUcMz8ZtVvjEteNA5xYr95le NFX4GF1Ey07YBAB7HJAOXsVJogbB9CE7hB7Ux5FyFKGzHsZ80RtFV/WvR7uWkxe6Qak6znZvr 5D9RNkoiZlmGvw4LT4nHzou2Btum0cKx6L0rmJbbIFtWoaNXm9vG8D6VWj+E5D4k1ZkK7KApf L/UYNH6ow6OhAOwhLvWCf6ZfnttwHDiPMa2MUlu0nsTxVN5KpPLDTU2j75LY4opfH2EFu6SN8 Y6+I4+dpsOockCouNJXK2yCSaXYE00C7mWkaqYaVFD7yrSchjvlljidXaXlVY7IO0vv/hrn8k AfAVkWB+ihZPljtODJfHrB6lLUeGfy7NovTW7UETzISLpYIcfIEl4vSIktoqY3RUcyGCE5taI 9lMS1tFGM3BWOw+xOb2yr5FgJJBWSElYEQkWtnOYpqqY2Ua29eBJjhjYoRzsvda+mb56vAvak QmW7hLNA+2O4FqBub3eYW0aK4a4oHjiorDCNDItjn6BQk0Www0uEV7rxFVelVGjDwa/+1+Cy2 cgdYejs3OxqUYl34rhNHMJBtP5I36Ld8A6z+LVPyb1Fh7T7kaGrxepBhuFTvopA8SGeyBLokb qKeuCSq+nw6SsvI2+MfZresClaOzvBmid2YInFOkot55VKewLd6+ATC7mOc0u3uLTDjI0t7YT 16yjWtYTGiOXwXtbL9yAXsndn20RHQGPbGmNmvQh377D1mq7+v9CN2RPGjQJM+FCi9YXvihOl zeVWy5fra7b5u/5vf1abrV6a3cd/l8uETiD999gu7FAjPFF+DR2+Yc80jC/quAcV2LUAj9xCS Hex83FraafuqwxHjydBPX1OXw/6DLh00Sw+hkHRWaFhOhnVbo1HUGiOl1vNWOqRqw2NfBdVqJ /JsGG6d85El4NLSFJLfSsWBl1tUH9uCD1tmlTd6nr5eFDbEcVySl2URM7l+O21/fRGZF0zG6U e2jTVD8X7QSbEfpC6haBr6fD9eyIWN+ZfZnUOjijcNj4nF3raWG/kGB0dAHva+oRs7Jl/2+v9 UDs+tTV5ZCUBVZ0Iv3oCW+KngnQM+d0BlSuFRlQd2p7bgUZFs9AArDHgTO6o50F1egjpdnfRa jHQG3+m/n18+bxcTot4BFEV9PjS7o+vZpG0BXmPB6hwBm7EtKkiUzURM4T0tkhkbs0GdmjMyY mNO43JKdX5eTAjr1MOHNEVttkBPhwlrUaxMOw2wWedOF3dsB0AGX0/ZaVXrR3fK9GFHLJ1qbo uHeVQUybI0AJM+IgOTPTPTU1eQoV+uwLBMhU+MVNMrSdedBGc2NblG2F9ID0byzfQCggA41es zGWEHfsUkjTv6ZGlzaQ6uqjtFucBcwNxU1r7F9UF2ept/fxgQhZUulJ19vNLzCRBKhMBOTKPG YboTPEeMSGJ03cCGVz7r0UnlzG+EhtQdFXkpXJtXcSh9OKiwm/bvuRMEQThrUtHXXEIRRq+KG I/gnATnf6KkwGtZXkEyH7cJckqhTGPYGig6fU6Tqo0yyQnT0fp5BwZuoKolKXdg0UsTeOM5o/ QvDxS0If3EGcDn87087LUBFGOajkAgW93b+bVIAMr9QXfQiQadKGTnazxl27bIko4+AB3Tx1V e+RrVGIHs7KS0IZ2tSJC8skoZE68J14O2U3yR+3cI/xyS1hQ47Xl+3WhwhpriJT4nc51+mZsW E4xQw+lRAmgGCbXjnS5hkEsn1NdOoBxr4NqFuPi8gwa746BpRRJAb6CwiXROSVp0F5tiSffwC FrsXn8dZzLE+Y4j2kDAR1l3VQoSDP+4AXoB03IMYY7OYmptAFyirP1felgoq4SvRttVxhsxav NOMbWbePB4n30L8fkJ4NOkObdZx5P5MFcprR5zLM4rKsMqgbgiMH7Xc9h78hiPX3Y0vNCDCXX a6ErtmkFrZiPVWZpuxZvyiTCZivugjBM9rc35tUa5QRQLMMkvSOBSN1hZbQX25aElm44GUZkL y2k5CxbTKmWZ/4P06yvgMSTFrWZD9zF8Ozf38/GLBMB5BihKMp1UGPl69rYsRil8s0weSDqUo Y9cb96LNtqrX6ax6dJ3kPaHsALD+jywrWfBpK7/mCiJjV9X2WNJtiMufbskQ1vLTD1EVVj0Zi abZr4u4R/XkS4SlyoIHehhIZ0s/gkvLu+4Wq87vdLKUeX+JlMWN1B2kvBBC0IHitElEVF5dS7 L9lssPMOHsRAqntUzswhe31/goRDvmq8YFjTM8reh0gSttcWuTsk9i9C/oNSPJ0Fw8N2copkE RWvAY6PaYEVnLjaRVCB45jFoaYDrUgS0jzl9yd1PRv84B56STsE36Ww3rYe0zCwZM09K4b9dk nCWyT4SSY3Cx5EIawUQXinW8MQHz7EPor09IAG/PhgYCZjWu2PGK6Odu1mD3N8Dbg+1+LLBAd 5yKgeShaIp4jN5fDesyvQrjH6oFkoAb5eLAXiLFIulRHCEzNeVdLgcekgM+cUVfV1+j+zixmK 6mXp69VdJEre3LWgQ2hbmOktjlq2W0+iK7ngYPTj2IMbpqVKEZBP0AUUpKrKFhZSNos9lr6W6 X8yfLCUu9pUDPaHYEw53rPAc+BNEy/Jw0/P9YVqjtqElXB3Ola6ng/qGuZV/c7amr3p3ixPOf eoS/10RiqczEpoiBezM4B/1/wsSKBG2Xd27QdwTJA9hBumeZW/UnFZv9LIZc1R860ml5FEWco nNwvpstlfXYcMXzhLcNK/r4mLHjlUHYaYQXRBoZRjc3e0Vg+BAVL3ke2abdO5NNoipa6SnNkf cFZHQD+RQ3yKfm0JXEbH4QJEg5zYpV45vCvVQY2NGY836Q48PbhvmTj1Dfj2FJndWxm6Qq9Rn /6DNRHRu4JMTsE02IGY+g3m+2SImKd74ou0aceronv8KVlIN5SBqAF5lQJGCIsDa9a9mfiNsB EcFXT5g4vWT5A97PlZAnov/aYb9plaTqs+4nL29NXpqvudENzxi4wd6IZRs4SF7t0oyvNHpn/ v7YemU82ub+OmNQXOhsR3K/uNM8FeUbHJfXgBC5YNDxJQaQpnm/8gk+L74ZVPNPfWk4zCZNyn E/4wYaLI5N4T9VqW8ipjHy2MOUZeuPxqB9bmFKOwU0ZuYaV5Iw1n19BseNBtzQOKUJTnwlEQc l5U6Skv/NgCsxSTYz+0q9xS1h2dDigYQl4sJS5LxC2YvlXPlxy23hRAykR8W3ZGgYGO4Z15FO x4eTeWZhvCo+gHrUNSi67muSjFPJgWTQTsbT0TH/kyCrMEIFSfuKLGtDSlCeNhLOzs9G3pWRA AqfjogistpOvHPcTU2m4HfzuegmtjeLTFhp0IXamlT90bX2VRXOUE8ukFkmDHEH3Ja2XWFOBa B2TM2Ig+gX+asYO0M2bk/ie24vVGg7GT1u2TpLttmpSAbynB9GbgpDIsL6GdKYOOQ/qi45hNB bUJjV3CJ8OCNCfTNtwW9fWDSlzSEZUnwpv/1nyPPbwp8zOegPrfm+8P3kzh7FDOQB2K8w6mA5 K7BDC3F3zco6sWCceiwlls6UO/qSgqsvm8N8OpwhzBjwZX6NTKM3FOBp/UAiywmDAu8AfJbpp R5/2RsZTrVN39bc0W96CWlrHD7bvdg9lyHpoFcyhmBkSWHvWn8hNx8iFJZB/XDBW9Q4yWTDR6 7o5rk/tX0ExGfLGUfj7x1OhcSYZD2BzBfFMT7NrAQjR2zfcUCx1cMsAzniDRowbKcn+v8pnWo PqZ10hNzWU3DTS4FOUYw01ONdMolqiwy0LK8TkfC9YTmVm6IRy9NNN5ZDDw18Gjk5dFzn7/ni jPw9nVP8rZE6MVe7OnlpiV0yWLwppZJ8TvFLcCGhBDdy9PcEoVYgVubGPPKtOfArbXbt9b1C7 expsLE6Gle9xLCH5YxhFqXG0og70A0BK15I9+zXYH7tDsRveXOkb3QejKx5HTtpO1+faN3RqB /me5waf6qmRo2LJnVU+FPsCOG+r0Z1pVrjLoXe45FBKv7cnHErhxK6C8TC6u2j8O6k9mA1yZa CLdRBYw46MkXoPjrnwh7qtaRyAPFQZnt0GdapsP1/53wK+Hw0rPQAd8pjbTXLOjjUVMawmFSR 06EHrK0YYgcPLcb16HyIz5lCz8DiQMXTXd6QjbHAf3WBwvgOPJpcCN1ZwMY05tXYm0WHFXngg DjCGLC7N3mtGK/zFQL4Ts/zy+oi9dAhzigsZvF5nLstV7R+Ifb4+t/Fa2cFLBw4YKyREARka/ PVGfu0n+LO0PESkPwRv6GhkZAcxAYqHKfpp19lGW3hqcIDHaXVknqwZ84gYOqw83pz3lLio0f HS/BjvtB7O4nxXI+xQyPTEkQrMZ4o1r4y31mjsCHYgebFxRbHJEYhsCdND+vcIQ/4fRqbbvMA q9+rCS7IIJo8vgatRxMOhrbe0Nye7eypU/zcgN1fZcFzLuqHqNIdrBVlARXLz/BMSKIM156GV tsH1uJeHw4H9PIUw2zx36oLQSebr/3qMwO0/4YCbDvxHyUCbT7UMCZb7854nguzlMrDb6Pa/x 5+ketjLgigMT3DUxOLue7UNeoQjdHYYwlF1Vdd3D6lC9MMW4lJZUNdNii80+Q6pAPRg+e8im9 qZ5cCVoXxjcJ0YuNzDbg1Kc/KLUkO0bW4NSd/dudLBF1QHs6Uy8T3JWpYC/puNhTkX46nReqj WptMUj+ZAge8UGkJ3WFUxdGUIU3Lx9n7/BGyFSLlUsZWyb1KITscB0H5EN8NxmE7dA7desrKO v5nuvUjc4JQJnplJsMruFVOvEsoVKuWes3PPdbBkfpXPXa3GQj4D2YplnSXKJA3XPw8rxqtjR 6MHj4EtX7vlFBnkrTThYfxPm1vKWF721VhdTnsI1CuyulhoHg7VsyUtGDSqoR0KYatD20H/FA mz9dnbFImEbfhzcJnV00jGCt5Zu57G14lWCYBgc1GzcKczcYjSv9mw7s6kRWv9bIx2POOXAvS T6HL3szhuKiEzpgAf9RetxMoSK83TUR+WbqlMvs5e10IFzhbTfJHBsxCsLaiwO1aRKM4sQ3FK j0BXZxNcD0wPBZe1u3ARNe84xZn2/2rk0FKIBz8vfH6tf9kt8mYFJvLetbiSQCCoFM+UtZ62A KOOhO/W7utgtfwDYewY8oOMGKX5+QrtECyBy8blLx+xqgXaXQZmi0Fqp8Ul2aMhfEeUUEnMvf u6MD8hkLINaK6O2xue201I8E1OoszQmEulawO0qTTLM8kDycFLtC98vb2gLe8h9wOh6Ogo0u5 pVl66n6je7Ic1/VJtTr4eZ8LoItm1NokmVWNI6aqrH02aim9uTC1lmHKJ3bMVSMcAntdXkyZE XuZoa3PSxYq+nJy+oOaXANeFF3HfXnKp1UtVsalWc/NbZlcsJT0MkgtCFz8W2aDF11/hoYfEZ m5EBYDuwrg=
- User-agent: Mozilla Thunderbird
On 13/09/2026 11:22, forest via tor-relays wrote:
It relies on
populating an nftables set with the list of known relays (overriding the
Yeah, but I do prefer the "do not trust an ip except the authorities"
approach.
--
Toralf
_______________________________________________
tor-relays mailing list -- tor-relays@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-relays-leave@xxxxxxxxxxxxxxxxxxxx