Re: [tor-relays] DoS attack on Tor exit relay

[Larry Brandt <lbrandt@xxxxxxx>]

Yes, I have fail2ban installed but the attack is focused on my ORPort 9001.  Similarly, I have an external firewall but it permits 9001 port passage.

Thanks for the thoughts, though,  --potlatch

On 7/31/2019 2:40 AM, TorGate wrote:

You can install failtoban, have you a extern firewall ?

Am 31.07.2019 um 05:14 schrieb potlatch <potlatch@xxxxxxxxxxxxxx>:

Hello Tor users,

Help me with a problem please.  I have a small exit/backup & directory VPS in Finland [1].  This last week the server (and Tor) have been overwhelmed with non-Tor IP addresses.  This may be a small version of a DoS attack.  I took the server down for a few days but when I restarted it the attack was there before Tor users.  Eventually, the load caused kernal crash.

I noticed this last week, that my Consensus Weight had dropped from 5500 to 68. 

Does anyone have an efficient way to defeat this ongoing attack?

--potlatch

[1]   9B31F1F1C1554F9FFB3455911F82E818EF7C7883     TorExitFinland

Sent with ProtonMail Secure Email.

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

--
1. When a distinguished but elderly scientist states that something is possible, he is almost certainly right. When he states that something is impossible, he is very probably wrong. 2. The only way of discovering the limits of the possible is to venture a little way past them into the impossible. 3. Any sufficiently advanced technology is indistinguishable from magic. - Arthur C. Clarke

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays