Re: [tor-relays] MY IP adress on blacklist and then in exit relay policy

[Cmar433 <cmar433@xxxxxxxxxx>]

Thanks for answer. But main question was not about provider .. (is TOR friendly).
I was surprised, that my IP is stored  in Exit policy as "reject".
I was afraid .. that all trafic is droped, but now seems all is OK. (IP is still in exit policy, but chart showing traffic)

Thanks
cmar




30.03.2015, 17:02, "Zack Weinberg" <zackw@xxxxxxx>:
> This *will* happen again.  You need to have a conversation with your
> provider and convince them to ignore reports of this form for your
> exit node, or else you need to get a new provider.  I would open the
> conversation with something like this:
>
> | This machine is a Tor exit node, which, as part of its normal operation,
> | proxies traffic for other hosts on the Internet.  By design, it is impossible
> | for me to identify those other hosts or communicate with their operators.
> | It is one of those other hosts that was infected with s_downloaderbot-mxb.
> |
> | Because Tor users are very diverse, I can't guarantee that this will never
> | happen again.  You should expect ongoing false positives for this machine
> | on all checks for malware infection, outdated operating system, etc.
> |
> | I have the ability to disable proxying to specific IP address ranges and
> | specific TCP ports, but this should be considered a last resort tactic.  It
> | does not actually prevent anyone from using Tor to send spam or whatever;
> | the traffic will just move to some other exit node.  I also have the
> ability to
> | limit the total bandwidth consumed by Tor.
> |
> | I'm happy to work with you to minimize the impact of this service on your
> | network.  I hope you will consider allowing it to remain in operation, as it
> | is extremely valuable for people who need to conceal their official
> | identities online, especially in countries where access to the Internet
> | is restricted.  For more information please see
> | https://www.torproject.org/about/overview.html#overview
>
> zw
>
> On Mon, Mar 30, 2015 at 9:04 AM, Cmar433 <cmar433@xxxxxxxxxx> wrote:
>>  https://globe.torproject.org/#/relay/9DCF76179FCF47224D235ECD4A6165FED22ECE7B
>>
>>  So, i am running exit node. My provider send me an email .. "This IP is infected with, or is NATting for a machine infected with s_downloaderbot-mxb"
>>  Any idea what can i do with this problem ?
>>
>>  Now i can see my IP in my server exit policy ...
>>
>>  After my "delist action" is clean ..
>>
>>  http://www.senderbase.org/lookup/ip/?search_string=37.157.192.208
>>
>>  I need just wait ? And all outgoing packet from my server still droped ?
>>
>>  Thanks ..
>>  _______________________________________________
>>  tor-relays mailing list
>>  tor-relays@xxxxxxxxxxxxxxxxxxxx
>>  https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
> _______________________________________________
> tor-relays mailing list
> tor-relays@xxxxxxxxxxxxxxxxxxxx
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays