Re: [tor-talk] Tor in Russia, blocked from Nov 1st?

2017-10-25 Thread Jacki M
Using a obfs4 pluggable transport bridge from https://bridges.torproject.org/options should work. As Jim said its a “arms race between the Tor developers and censors” to keep governments from blocking all the bridges. > On Oct 25, 2017, at 9:49 PM, Moses

Re: [tor-talk] Tor in Russia, blocked from Nov 1st?

2017-10-25 Thread Moses
In recently Tor bridges do not work in China, AFAIK. Best Regards. -- M. On Mon, Oct 16, 2017 at 8:25 PM, InterN0T wrote: > If you can use Tor bridges in China, then you can probably use Tor bridges > in Russia :-) > > Best regards, > MaXe > > > Original Message > > Subject:

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread Roger Dingledine
On Wed, Oct 25, 2017 at 07:22:18PM +0200, Rob van der Hoeven wrote: > > Keep in mind the false positives caused by crappy networks that just > > resolve _all_ domains and then serve ads, a captive portal, etc. on > > whatever IP address. Checking the https://check.torproject.org/api/ip > > response

Re: [tor-talk] Does the Tor DNS transparent proxy code use clients nameservers?

2017-10-25 Thread Allen
> This looks OK. When I check with Wireshark I see no DNS queries leaving > my system. Must think about what this means. Or better, get some sleep. > It's been a long day... the DNS query should be tunneled over a tor connection, so if it's working right, you would see no DNS query leaving your sy

Re: [tor-talk] Does the Tor DNS transparent proxy code use clients nameservers?

2017-10-25 Thread Rob van der Hoeven
On Wed, 2017-10-25 at 22:32 +0100, Geoff Down wrote: > > On Wed, Oct 25, 2017, at 10:01 PM, Rob van der Hoeven wrote: > > On Wed, 2017-10-25 at 16:50 -0400, Allen wrote: > > > and what happens if you use dig alone to talk directly to tor? > > > something like "dig -p torport hostname +tcp" (see ma

Re: [tor-talk] Does the Tor DNS transparent proxy code use clients nameservers?

2017-10-25 Thread Geoff Down
On Wed, Oct 25, 2017, at 10:01 PM, Rob van der Hoeven wrote: > On Wed, 2017-10-25 at 16:50 -0400, Allen wrote: > > and what happens if you use dig alone to talk directly to tor? > > something like "dig -p torport hostname +tcp" (see man dig) > > > > A good idea, but the Tor daemon expects that

Re: [tor-talk] Does the Tor DNS transparent proxy code use clients nameservers?

2017-10-25 Thread Rob van der Hoeven
On Wed, 2017-10-25 at 16:54 -0400, Allen wrote: > or maybe better "dig @localhost:torport hostname +tcp" > > On Wed, Oct 25, 2017 at 4:50 PM, Allen wrote: > > and what happens if you use dig alone to talk directly to tor? > > something like "dig -p torport hostname +tcp" (see man dig) > > Hmmm,

Re: [tor-talk] Does the Tor DNS transparent proxy code use clients nameservers?

2017-10-25 Thread Allen
I don't know what this thing is that you're referring to as a "torport" and what kind of behavior you expect from it. But maybe you could try what the tor documentation refers to as the DNSPort from https://www.torproject.org/docs/tor-manual.html.en DNSPort [address:]port|auto [isolation flags]

Re: [tor-talk] Does the Tor DNS transparent proxy code use clients nameservers?

2017-10-25 Thread Rob van der Hoeven
On Wed, 2017-10-25 at 16:50 -0400, Allen wrote: > and what happens if you use dig alone to talk directly to tor? > something like "dig -p torport hostname +tcp" (see man dig) > A good idea, but the Tor daemon expects that all traffic arriving on torport has been redirected by iptables. It asks IP

Re: [tor-talk] Does the Tor DNS transparent proxy code use clients nameservers?

2017-10-25 Thread Allen
or maybe better "dig @localhost:torport hostname +tcp" On Wed, Oct 25, 2017 at 4:50 PM, Allen wrote: > and what happens if you use dig alone to talk directly to tor? > something like "dig -p torport hostname +tcp" (see man dig) > > On Wed, Oct 25, 2017 at 4:42 PM, Rob van der Hoeven > wrote: >>

Re: [tor-talk] Does the Tor DNS transparent proxy code use clients nameservers?

2017-10-25 Thread Allen
and what happens if you use dig alone to talk directly to tor? something like "dig -p torport hostname +tcp" (see man dig) On Wed, Oct 25, 2017 at 4:42 PM, Rob van der Hoeven wrote: > Hi Folks, > > I'm testing a small single-program transproxy program that I wrote (not > released yet). This progr

[tor-talk] Does the Tor DNS transparent proxy code use clients nameservers?

2017-10-25 Thread Rob van der Hoeven
Hi Folks, I'm testing a small single-program transproxy program that I wrote (not released yet). This program forwards DNS requests to the DNSPort of the Tor daemon. During my tests I noticed something that worries me.  With my program I can basically redirect network traffic from any program to

Re: [tor-talk] a security and stability update

2017-10-25 Thread x9p
On 2017-10-25 15:43, Lara wrote: Well, the spam banner was not showing, so that is a security and stability update. ??? Could you explain more? cheers. x9p -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi

[tor-talk] a security and stability update

2017-10-25 Thread Lara
Well, the spam banner was not showing, so that is a security and stability update. -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread Rob van der Hoeven
> > That's a good question. I want to know if the Tor network handles > > all TCP and DNS traffic. Only the Tor network can resolve an .onion > > address, and only the Tor network can reach an .onion address. So, > > if both resolve and requesting work, I am quite confident that Tor > > handles al

[tor-talk] ANN: Orbot v15.5 RC 1

2017-10-25 Thread Nathan Freitas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 A new release of Orbot has been tagged: https://gitweb.torproject.org/orbot.git/tag/?h=15.5.0-RC-1-multi-SDK16 CHANGELOG is here: https://gitweb.torproject.org/orbot.git/tree/CHANGELOG?h=15.5.0-RC-1-multi-SDK16 Highlights * Update to Tor 0.3.1.

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread x9p
Hm. That's not really true. An onion service should work regardless of where it's hosted and that's the whole point (to provide location-anonymity). If you had to use a different onion address based on where it's hosted, then better stick to good ol' regular TCP/IP load-balancing. "Latency probl

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread Rusty Bird
Rob van der Hoeven: > On Wed, 2017-10-25 at 13:27 +, nusenu wrote: > > Rob van der Hoeven: > > > I'm currently working on a small Linux utility that does single-program  > > > transparent proxying. My utility tests if Tor handles all Internet > > > traffic by requesting an .onion address. If th

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread Rob van der Hoeven
On Wed, 2017-10-25 at 13:27 +, nusenu wrote: > > Rob van der Hoeven: > > I'm currently working on a small Linux utility that does single- > > program  > > transparent proxying. My utility tests if Tor handles all Internet > > traffic by requesting an .onion address. If the address gets > > res

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread Rob van der Hoeven
On Wed, 2017-10-25 at 09:19 -0400, Allen wrote: > sounds like a useful program. I have no idea what you're looking for > though. A fast onion server to ping? As you correctly pointed out, > the facebook onion address would work for that. Yep, Facebook is fine for speed, but can block my requests.

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread Matthew Finkel
On Wed, Oct 25, 2017 at 02:36:25PM +0200, Rob van der Hoeven wrote: > Some extra info... > > > I use expyuzz4wqqyqhjn.onion (www.torproject.org) as test .onion > > address but this address does not seem very stable to me. Getting a > > response will frequently take several minutes. Is there an .on

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread Rob van der Hoeven
On Wed, 2017-10-25 at 13:18 +, nusenu wrote: > > Some examples: > > > > myprogram firefox https://check.torproject.org > > myprogram chromium expyuzz4wqqyqhjn.onion > > myprogram -t w3m expyuzz4wqqyqhjn.onion > > myprogram -t git clone http://dccbbv6cooddgcrq.onion/tor.git > >

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread nusenu
Rob van der Hoeven: > I'm currently working on a small Linux utility that does single-program > transparent proxying. My utility tests if Tor handles all Internet > traffic by requesting an .onion address. If the address gets resolved, > and if a HTTP HEAD request to the resolved address gets a

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread Allen
sounds like a useful program. I have no idea what you're looking for though. A fast onion server to ping? As you correctly pointed out, the facebook onion address would work for that. On Wed, Oct 25, 2017 at 9:07 AM, Rob van der Hoeven wrote: > On Wed, 2017-10-25 at 08:50 -0400, Allen wrote: >> A

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread nusenu
> Some examples: > > myprogram firefox https://check.torproject.org > myprogram chromium expyuzz4wqqyqhjn.onion > myprogram -t w3m expyuzz4wqqyqhjn.onion > myprogram -t git clone http://dccbbv6cooddgcrq.onion/tor.git > myprogram bash sounds like what torsocks does -- https:

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread Rob van der Hoeven
On Wed, 2017-10-25 at 08:50 -0400, Allen wrote: > As long as you keep the tor processing running on your web server, > the > response should be relatively quick. If you shutdown the tor process > on your web server and then restart it, it might take a few minutes > for machines on the tor network t

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread Allen
As long as you keep the tor processing running on your web server, the response should be relatively quick. If you shutdown the tor process on your web server and then restart it, it might take a few minutes for machines on the tor network to find your server again. You can restart the http server,

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread Rob van der Hoeven
Some extra info... > I use expyuzz4wqqyqhjn.onion (www.torproject.org) as test .onion > address but this address does not seem very stable to me. Getting a > response will frequently take several minutes. Is there an .onion > address available with better (and more stable) response times? I have

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread George Kadianakis
x9p writes: > Hi, > > I believe you should not trust just 1 .onion address, there are latency > problems, AS problems, circuit congestion, I believe much more. > > You should compile a list of different public .onion addresses hosted in > different AS/countries and try them in a round robin way

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread x9p
Hi, I believe you should not trust just 1 .onion address, there are latency problems, AS problems, circuit congestion, I believe much more. You should compile a list of different public .onion addresses hosted in different AS/countries and try them in a round robin way. cheers. x9p On 201

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread Rob van der Hoeven
On Wed, 2017-10-25 at 10:34 +, nusenu wrote: > maybe any of the others are more suitable for your needs? > https://onion.torproject.org/ > I came across that list, but I really had no idea which of the entries were stable. My best bet was the Tor project onion, but this onion turned out to be

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread nusenu
maybe any of the others are more suitable for your needs? https://onion.torproject.org/ -- https://mastodon.social/@nusenu twitter: @nusenu_ signature.asc Description: OpenPGP digital signature -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings

[tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread Rob van der Hoeven
Hi Folks,  I'm currently working on a small Linux utility that does single-program transparent proxying. My utility tests if Tor handles all Internet traffic by requesting an .onion address. If the address gets resolved, and if a HTTP HEAD request to the resolved address gets a response, it's ass