Re: [tor-relays] Abuse messages from IPs marked as rejected in the exit policy

Subject: Re: [tor-relays] Abuse messages from IPs marked as rejected in the exit policy

From: Tim Wilson-Brown - teor <teor2345@xxxxxxxxx>

Date: Thu, 19 Nov 2015 10:28:59 +1100

Delivery-date: Wed, 18 Nov 2015 18:29:19 -0500

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:message-id :references:to; bh=LT15sRRkjetbdx+nLqIHhehYaQacCUx8eFX7HWepNBE=; b=z+C33TYCmLb0r9FvLIBjZAN9cde3pBhJuNrwE8ppAYeTMNiOBHmW/Ev0jRABg6XR8S H1iscPTDxMzkx4Mo1XPRbG5SbCeBAsUFOrhSQA2SbqhVt91la2tnMopfcgcIVBhV1Xjf Xa4JbM9vKOn/dGQuzV2hKsFHZ/rfSL1b9M4javQHJgB3Fzu3+dpanCktlt0Nce9KjPd+ 8Ld6tmfOXRwTjZ8gi/Z3JjF25uD6HL6XPo7D2ADM9nzwexeMaN8DWassrnmjPKF1rpcb LphpjoVlXJnfA7V9TV7c+Bvpd62IAyMaLMeGTKN5iXBefymsLa3cJJqKp24DgRnnTB25 90JQ==

In-reply-to: <1903360.iKfA7DnIjj@mvnjuthzeh>

List-archive: <http://lists.torproject.org/pipermail/tor-relays/>

List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>

List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>

List-post: <mailto:tor-relays@lists.torproject.org>

List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>

List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>

References: <1903360.iKfA7DnIjj@mvnjuthzeh>

Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx

Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

On 19 Nov 2015, at 07:32, tor-admin@xxxxxxxxxx wrote:

Hi all,

I am receiving abuse messages for the Torland1 relay for IPs that are
blacklisted in the exit policy. For example as
https://atlas.torproject.org/#details/E1E922A20AF608728824A620BADC6EFC8CB8C2B8
shows, 62.67.194.0/24 is blocked. But I am getting abuse messages out of this
IP range. Can someone explain me how this can happen?

False positives?

Incorrect source addresses?

Multihomed destinations? (For example, they're reporting an IPv4 address, but the Exit used another IPv4 address, or an IPv6 address to contact them.)

A non-tor process on the relay?

Can you post the ExitPolicy from your torrc?

I can only see the one on globe, and I'd like to make sure they match.

(But it's well structured: reject â; accept â; reject *:*; so I don't force any issues.)

Tim

Tim Wilson-Brown (teor)

teor2345 at gmail dot com
PGP 968F094B

teor at blah dot im
OTR CAD08081 9755866D 89E2A06F E3558B7F B5A9D14F

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

_______________________________________________ tor-relays mailing list tor-relays@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays