Re: [tor-relays] DoS attacks on multiple relays

[Scott Bennett <bennett@xxxxxxx>]

"x9p" <tor@xxxxxxx> wrote:

> > Furthermore, nodes that think they're being smart
> > and protecting their nodes and the network by filtering
> > out who can access their OR ports... aren't... because
>
> I strongly agree with grarpamp.

     Sorry to read that.
>
> Relay operators, do NOT block the IP addresses of the following guards in
> your firewall:
>
>   [list deleted  --SB]
>
     They have been added to a file that gets included into a list of relay
addresses (i.e., protected addresses) and will get the "free pass".  This,
BTW, is basically a temporary hack.  If a frequently generated, automatically
downloadable-by-relays list of otherwise unpublished relay source addresses
becomes available, I'll axe this file because I'd much rather have a file
that is kept up to date automatically.
     Note, however, that if a facility existed in tor for a relay to fetch
a list from the tor project, there would have been no reason to publish
them on any email list.  Also, FWIW, they were not in my block list anyway,
but now they won't be blocked from my relay's ORPort or DirPort by the block
list even if they do get onto it.


                                  Scott Bennett, Comm. ASMELG, CFIAG
**********************************************************************
* Internet:   bennett at sdf.org   *xor*   bennett at freeshell.org  *
*--------------------------------------------------------------------*
* "A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army."                                               *
*    -- Gov. John Hancock, New York Journal, 28 January 1790         *
**********************************************************************
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays