[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] TCP: drop open request

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-relays] TCP: drop open request
From: grarpamp <grarpamp@xxxxxxxxx>
Date: Fri, 25 Oct 2013 01:13:57 -0400
Delivered-to: archiver@xxxxxxxx
Delivery-date: Fri, 25 Oct 2013 01:14:07 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=a5RkwHbHv4dF+r37JAG1FLu8/1jOKnx0zqGKD12jMQo=; b=D3gJWz5l7B+FvLNIb0EToYuQKobUjgQuyy1gvbXlPzeSUSTOg2FoezMsJ2Bna6d20J 52IPUq43oFYhh7HxDGObxuFi9K3pHrA1OshX8ZuzzQLTDsYmP/5U2psYiuvOtjAPr4SZ cX+dqRI2ctGHeNnOMXQ/Ae2NnB6r0iZFJ2Kk9DsUgo4bc5plaw0AIRkuCGwlNjw3BpM/ q0dLN8DS4RUDjk27qxtgVtYKYuj1NNU201zcA4ftuVFcbihs78ltycoQYlJXi5xgPGHZ Ev8dMED8hyo0f2UxRa2ZXYTHMetdYYo7G5qPzc7YI0AFPkCv7pAekxWRyiTVfBM5HpEL d3cA==
In-reply-to: <20131025041023.GI31806@xxxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
References: <20131025124342.2c754add@xxxxxxxxxxx> <20131025041023.GI31806@xxxxxxxxxxxxxx>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

On Fri, Oct 25, 2013 at 12:10 AM, Roger Dingledine <arma@xxxxxxx> wrote:
> On Fri, Oct 25, 2013 at 12:43:42PM +0900, mett wrote:
>> Since yesterday, the kern.log of the relay I'm running is flooded with
>> "TCP: drop open request from".
>>
>> I first thought it was a kind of DDOS on our servers but it seems to
>> be related to Tor (When I stop Tor, kernel doesn't
>> complain anymore).
>
> if you're in BSD-land.

It's a Linux message. Feed it to a search engine and you'll find
several things to try depending on what the cause is. It shuts
off either because Tor is attracting the syn's or the overall count
is lower with Tor off, you'll have to tcpdump to see. Look into
syn cookies, packet filter rules, and stack tuning.
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Follow-Ups:
- Re: [tor-relays] TCP: drop open request
  - From: mett

References:
- [tor-relays] TCP: drop open request
  - From: mett
- Re: [tor-relays] TCP: drop open request
  - From: Roger Dingledine

Prev by Author: Re: [tor-relays] Advice on dealing with ISP's response to DMCA takedown notice.
Next by Author: Re: [tor-relays] [tor-talk] A new check
Previous by thread: Re: [tor-relays] TCP: drop open request
Next by thread: Re: [tor-relays] TCP: drop open request
Index(es):
- Author
- Thread