[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
From: Luther Blissett <lblissett@xxxxxxxxxxxxx>
Date: Tue, 05 Nov 2013 12:46:05 -0200
Delivered-to: archiver@xxxxxxxx
Delivery-date: Tue, 05 Nov 2013 09:46:25 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paranoici.org; s=stigmate; t=1383662773; bh=AoibQxkrID+bMqgJML7bWYKPiaN1+Qz17b7qJ6j1jwY=; h=Subject:From:To:Date:In-Reply-To:References; b=SQLBp088HUskoATCEdbEyX6OzxS1Y82G5dVFmLfsAQoSR1AnZegCXYleQZrmJwy2N B0Zt34HMQv7+YZAYYoXboYgRmlZXQxFVei8+GiYoj118pN2gj3qxVBf2UPRuBDDwUq RWKGuPfkvFaMuBQ5Y3kzalu2YyT0UZ5vHxLfGUrc=
In-reply-to: <CAGT8D4Nfmw_fTqABcZT_fS28v6vT7awV+1t0xwvsFgs5RMV0dQ@xxxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
References: <CAGT8D4PJXzsTzcn9qPCPYmWiXoZ2C3xbZpLhEOHHnCvZLOnz+A@xxxxxxxxxxxxxx> <2826286.SjnxGMFDgD@vostok> <CAGT8D4Nfmw_fTqABcZT_fS28v6vT7awV+1t0xwvsFgs5RMV0dQ@xxxxxxxxxxxxxx>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

On Tue, 2013-11-05 at 09:36 +0100, jj tor wrote:
> Sorry for the confusiÃn, the exact line in my torrc is "Socksport 0", so,
> SOCKS port is closed. Moreover, I haven't got any exit rule towards port
> 9050
> 
> Even if I block this traffic using iptables, I am very curious about  why
> the server is receiving that huge amount
> 
> Maybe, because my relay's exit policy? (exit policy-->
> doc/ReducedExitPolicy â Tor Bug Tracker & Wiki :
> https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy)
> 

Sorry but I could not understand, which way are you seeing this traffic
pass by? The port is open, closed or filtered?

If it's from outside and you don't want it to be open, just close the
door and filter it with iptables. You can also use iptables to log the
traffic and maybe study it?

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

References:
- [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
  - From: jj tor
- Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
  - From: Paritesh Boyeyoko
- Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
  - From: jj tor

Prev by Author: Re: [tor-relays] Proper bandwidth units [was: Exit nodes on Gandi]
Next by Author: Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
Previous by thread: Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
Next by thread: Re: [tor-relays] Traffic in port 9050 in a relay (denial of service attack?)
Index(es):
- Author
- Thread