[tor-relays] Confusing bridge signs...

[Keifer Bly]

I do not use any scripts to start tor, I just type tor to start the process
on debian. And yes the datacenter I run in has an external firewall which
requires setting up port forwarding.

The result of running ls -A /var/log/tor

root at instance-1:/home/keifer_bly# ls -A /var/log/tor
notices.log  notices.log.1  notices.log.2.gz  notices.log.3.gz
 notices.log.4.gz  notices.log.5.gz
root at instance-1:/home/keifer_bly#

So it's creating separate .gz files for some reason. I don't know why that
is or what to do from here. Thanks.




--Keifer


On Fri, Mar 10, 2023 at 8:15 AM <lists at for-privacy.net> wrote:

> On Mittwoch, 8. März 2023 18:13:01 CET Keifer Bly wrote:
>
> > Strangely, nothing whatsoever is being written to the notices.log file,
> > upon checking it it is completely empty, nothing there.
> That can't be, please post:
> ~# ls -A /var/log/tor
>
> In general, everything is always written to /var/log/syslog &
> systemd-journald
> to /var/log/journal (binaries).
> ~$ man journalctl
>
> > I wonder why that
> Read what _logrotate_ does. Every tor restart creates a new empty log file.
>
> > would happen and how else to tell what's going on? Tor is running as root
> Why do you change security-related default settings? Default tor user is:
> debian-tor. (On Debian and Ubuntu systems)
>
> > so it's not a permission issue, and I also set up a port forwarding rule
> Why? You have a server in the data center. You only need forwarding on a
> router! Packet forwarding is also disabled in /etc/sysctl.conf per default.
>
> Your iptables must start like this.
> *filter
> :INPUT DROP [0:0]
> :FORWARD DROP [0:0]
> :OUTPUT ACCEPT [0:0]
> ...
> -A INPUT -p tcp --dport  <Your-Tor-ORPort> -j ACCEPT
> ...
>
> No FORWARD, no  OUTPUT rules.
>
> --
> ╰_╯ Ciao Marco!
>
> Debian GNU/Linux
>
> It's free software and it gives you
> freedom!_______________________________________________
> tor-relays mailing list
> tor-relays at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20230311/3dd26d50/attachment.htm>