[tor-relays] Selecting Exit Addresses

Mailing Lists tor-relays
1

Hi,

I just activated my first exit relay. ( Relay Search ) I had the following in my torrc (plus some other things):

SocksPort 0
ControlPort 9052
ORPort 209.141.39.157:443

I have 2 IPs on my server and I wanted Tor to use 209.141.39.157. I thought setting it with ORPort would suffice. But under "Exit Addresses" in the metrics it was my other IP. So I added the following in my torrc:

Address 209.141.39.157
OutboundBindAddress 209.141.39.157

And now I have both IPs in the "Exit Addresses". How can I prevent my exit relay from using the other IP? Note that I have also another instance of Tor running a hidden service that I intended to run on the other IP.

Denny

2

Hi,

I just activated my first exit relay. (
Relay Search
5881B7D4C97C ) I had the following in my torrc (plus some other things):

Don't forget to write Francisco a ticket. So he knows abuse mails come from a
tor exit. BuyVM - Acceptable Use Policy

SocksPort 0
ControlPort 9052
ORPort 209.141.39.157:443

I have 2 IPs on my server and I wanted Tor to use 209.141.39.157. I thought
setting it with ORPort would suffice. But under "Exit Addresses" in the
metrics it was my other IP. So I added the following in my torrc:

Address 209.141.39.157
OutboundBindAddress 209.141.39.157

And now I have both IPs in the "Exit Addresses". How can I prevent my exit
relay from using the other IP? Note that I have also another instance of
Tor running a hidden service that I intended to run on the other IP.

For IPv4 only a flag is missing at the ORPort
See [NEW FEATURE] Relay IPv6 Address Discovery
https://www.mail-archive.com/tor-relays@lists.torproject.org/msg17760.html

Dual stack config:
Address 185.220.101.33
Address [2a0b:f4c2:2::33]

OutboundBindAddress 185.220.101.33
OutboundBindAddress [2a0b:f4c2:2::33]

ORPort 185.220.101.33:9001
ORPort [2a0b:f4c2:2::33]:9001

IPv4 only:
Address 185.220.101.33
OutboundBindAddress 185.220.101.33
ORPort 9001 IPv4Only

Then restart the relay, a reload is not enough.

···

On Freitag, 31. März 2023 01:26:42 CEST denny.obreham@a-n-o-n-y-m-e.net wrote:

--
╰_╯ Ciao Marco!

Debian GNU/Linux

It's free software and it gives you freedom!

3

Hi denny,

Hi,

I just activated my first exit relay. (
Relay Search
5881B7D4C97C ) I had the following in my torrc (plus some other things):

I've answered the rest to the list.
If you want to enable IPv6 at Frantech/BuyVM:

First create one in Stallion from your given subnet.
This is what my /etc/network/interfaces looks like at Frantech

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

source /etc/network/interfaces.d/*

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
allow-hotplug eth0
iface eth0 inet static
  address 104.244.73.43/24
  gateway 104.244.73.1
        # dns-* options are implemented by the resolvconf package, if installed
        dns-nameservers 127.0.0.1 107.189.0.68 107.189.0.69
        dns-search for-privacy.net

iface eth0 inet6 static
        address 2605:6400:0030:f78b::2/64
        up ip -6 route add 2605:6400:0030::1 dev eth0
        up ip -6 route add default via 2605:6400:0030::1
        down ip -6 route del default via 2605:6400:0030::1
        down ip -6 route del 2605:6400:0030::1 dev eth0
        dns-nameservers ::1 IPv6ns1 IPv6ns2

···

--
╰_╯ Ciao Marco!

Debian GNU/Linux

It's free software and it gives you freedom!