[prev in list] [next in list] [prev in thread] [next in thread] 

List:       tor-talk
Subject:    Re: Tor (started by Vidalia) ignores StrictEntryNodes + EntryNodes
From:       "Fran Litterio" <flitterio () gmail ! com>
Date:       2008-12-25 5:17:43
Message-ID: a5b589a70812242117ra039424l78d963d8593315f0 () mail ! gmail ! com
[Download RAW message or body]

Am I correct to assume that your message below means that when
UseEntryGuards is set to 1 it causes Tor to ignore the value of
StrictEntryNodes?

The manual doesn't state that UseEntryGuards takes precedence over
StrictEntryNodes. Which is unfortunate because UseEntryGuards defaults to 1,
which means that StrictEntryNodes is, by default, ignored.
--
Fran

On Mon, Dec 22, 2008 at 4:27 AM, zmj <zangmj@gmail.com> wrote:

> Tor has 3 default EntryGuards. They are different from EntryNodes which are
> defined by users.
> Tor picks EntryGuards by itself.
> *UseEntryGuards **0*|*1* If this option is set to 1, we pick a few
> long-term entry servers, and try to stick with them. This is desirable
> because constantly changing servers increases the odds that an adversary who
> owns some servers will observe a fraction of your paths. (Defaults to 1.)
> 
> *NumEntryGuards **NUM* If UseEntryGuards is set to 1, we will try to pick
> a total of NUM routers as long-term entries for our circuits. (Defaults to
> 3.)
> look here: https://www.torproject.org/tor-manual-dev.html.en
> 
> 
> On Wed, Dec 17, 2008 at 2:02 AM, Fran Litterio <flitterio@gmail.com>wrote:
> 
> > On Tue, Dec 16, 2008 at 12:32 PM, I wrote:
> > 
> > > I'm running Vidalia 0.1.10 and Tor 0.2.0.32 (r17346) on Windows XP.
> > > 
> > > I stopped Tor from the Vidalia GUI, and manually edited Vidalia's
> > > "torrc" file, adding these two lines at the bottom:
> > > 
> > > StrictEntryNodes 1
> > > EntryNodes
> > > BostonUCompSci,FSF,moria1,SelfEvident,superbad,fuga,augrime,askatasuna,VSvTZGO7UPj4yh8,conf555nick,desync,phobos
> > >  
> > > After re-starting Tor from the Vidalia GUI, I see circuits that have
> > > entry nodes that are _not_ from the above list. In fact, nearly all
> > > circuits have entry nodes that are not from the above list.
> > 
> > 
> > Update: If I add the following four lines to the bottom of Vidalia's
> > "torrc" file, then Tor honors the StrictExitNodes + ExitNodes options, but
> > it ignores the StrictEntryNodes + EntryNodes options:
> > 
> > StrictEntryNodes 1
> > EntryNodes BostonUCompSci,FSF,moria1,SelfEvident
> > StrictExitNodes 1
> > ExitNodes BostonUCompSci,FSF,moria1,SelfEvident
> > 
> > Although, Tor seems to only use the first of the specified ExitNodes.
> > Shouldn't it round-robin between them?
> > --
> > Fran
> > 
> > 
> 


[Attachment #3 (text/html)]

Am I correct to assume that your message below means that when
UseEntryGuards is set to 1 it causes Tor to ignore the value of StrictEntryNodes?<br \
clear="all"><br>The manual doesn&#39;t state that UseEntryGuards takes precedence \
over StrictEntryNodes. Which is unfortunate because UseEntryGuards defaults to 1, \
                which means that StrictEntryNodes is, by default, ignored.<br>
--<br>Fran<br><br><div class="gmail_quote">On Mon, Dec 22, 2008 at 4:27 AM, zmj <span \
dir="ltr">&lt;<a href="mailto:zangmj@gmail.com">zangmj@gmail.com</a>&gt;</span> \
wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, \
204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Tor has 3 default EntryGuards. \
They are different from EntryNodes which are defined by users.<br>Tor picks \
EntryGuards by itself.<br><dl compact><dt><b>UseEntryGuards </b><b>0</b>|<b>1</b> \
</dt><dd>If this option is set to 1, we pick a few long-term entry servers, and try  \
to stick with them. This is desirable because constantly changing servers  increases \
the odds that an adversary who owns some servers will observe a  fraction of your \
paths. (Defaults to 1.) </dd></dl> <p>
</p><dl compact><dt><b>NumEntryGuards </b><i>NUM</i>
</dt><dd>If UseEntryGuards is set to 1, we will try to pick a total of NUM routers as \
 long-term entries for our circuits. (Defaults to 3.) </dd><dt><br></dt></dl>look \
here: <a href="https://www.torproject.org/tor-manual-dev.html.en" \
target="_blank">https://www.torproject.org/tor-manual-dev.html.en</a><div> \
<div></div><div class="Wj3C7c"><br><br><div class="gmail_quote"> On Wed, Dec 17, 2008 \
at 2:02 AM, Fran Litterio <span dir="ltr">&lt;<a href="mailto:flitterio@gmail.com" \
target="_blank">flitterio@gmail.com</a>&gt;</span> wrote:<br><blockquote \
class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt \
0pt 0.8ex; padding-left: 1ex;">

<div><div></div><div>On Tue, Dec 16, 2008 at 12:32 PM, I wrote:<br></div></div><div \
class="gmail_quote"><div><div></div><div><blockquote class="gmail_quote" \
style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; \
padding-left: 1ex;">

I&#39;m running Vidalia 0.1.10 and Tor 0.2.0.32 (r17346) on Windows XP.<br>

<br>
I stopped Tor from the Vidalia GUI, and manually edited Vidalia&#39;s<br>
&quot;torrc&quot; file, adding these two lines at the bottom:<br>
<br>
 &nbsp;StrictEntryNodes 1<br>
 &nbsp;EntryNodes BostonUCompSci,FSF,moria1,SelfEvident,superbad,fuga,augrime,askatasuna,VSvTZGO7UPj4yh8,conf555nick,desync,phobos<br>
 <br>
After re-starting Tor from the Vidalia GUI, I see circuits that have<br>
entry nodes that are _not_ from the above list. In fact, nearly all<br>
circuits have entry nodes that are not from the above \
list.</blockquote></div></div><div><br>Update: If I add the following four lines to \
the bottom of Vidalia&#39;s &quot;torrc&quot; file, then Tor honors the \
StrictExitNodes + ExitNodes options, but it ignores the StrictEntryNodes + EntryNodes \
options:<div>

<br>
<br>&nbsp; StrictEntryNodes 1<br>&nbsp; EntryNodes \
BostonUCompSci,FSF,moria1,SelfEvident<br></div>&nbsp; StrictExitNodes 1<br>&nbsp; \
ExitNodes BostonUCompSci,FSF,moria1,SelfEvident<br><br>Although, Tor seems to only \
use the first of the specified ExitNodes. Shouldn&#39;t it round-robin between \
them?<br>


--<br>Fran<br><br></div></div>
</blockquote></div><br>
</div></div></blockquote></div><br>



[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic