Delivery-Date: Mon, 01 Dec 2014 02:55:32 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-3.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	PLING_QUERY,RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID,
	UNPARSEABLE_RELAY autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 72FD51E0C3D;
	Mon,  1 Dec 2014 02:55:31 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 9D74631933;
	Mon,  1 Dec 2014 07:55:27 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 6247031641
 for <tor-talk@lists.torproject.org>; Mon,  1 Dec 2014 07:55:24 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id QPXeZQOwAtoG for <tor-talk@lists.torproject.org>;
 Mon,  1 Dec 2014 07:55:24 +0000 (UTC)
Received: from mx1.riseup.net (mx1.riseup.net [198.252.153.129])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "*.riseup.net",
 Issuer "COMODO RSA Domain Validation Secure Server CA" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 3AB2A2EBDD
 for <tor-talk@lists.torproject.org>; Mon,  1 Dec 2014 07:55:24 +0000 (UTC)
Received: from plantcutter.riseup.net (plantcutter-pn.riseup.net [10.0.1.121])
 (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
 (Client CN "*.riseup.net",
 Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK))
 by mx1.riseup.net (Postfix) with ESMTPS id 8DDFA40E4A
 for <tor-talk@lists.torproject.org>; Mon,  1 Dec 2014 07:55:21 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak;
 t=1417420521; bh=8azdKq0bp/vWYoOxnDprPBtA98AXW38EAoYHNQY4o0w=;
 h=Date:From:To:Subject:References:In-Reply-To:From;
 b=gUIX5CkwNzgNip2R2vA/M1NtfQ9uQsa8hHcNCYITLgGDm/WC97K7r8+ATtaXo/jLv
 hlpRDmjy7UHhDBp+fgtzxStNcpJGp4C6ppnaYSRmctnh71kKkXqlp8iKBnL6P++SWg
 zhFsoPLHW7XkRR7/YtZZ6h4KtdyY+L0NRBWzgfNE=
Received: from [127.0.0.1] (localhost [127.0.0.1])
 (Authenticated sender: mirimir) with ESMTPSA id AF13F22D6E
Message-ID: <547C1EE3.7010604@riseup.net>
Date: Mon, 01 Dec 2014 00:55:15 -0700
From: Mirimir <mirimir@riseup.net>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
 rv:31.0) Gecko/20100101 Thunderbird/31.2.0
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <d44c9fb94badc9743f9491dc11db52c0@ruggedinbox.com>
 <547BD14E.3060902@gna.org> <ae0862eb6ac3ff7fa2798255b2676645@ruggedinbox.com>
In-Reply-To: <ae0862eb6ac3ff7fa2798255b2676645@ruggedinbox.com>
X-Virus-Scanned: clamav-milter 0.98.4 at mx1
X-Virus-Status: Clean
Subject: Re: [tor-talk] (D)DOS over Tor network ? Help !
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

On 12/01/2014 12:13 AM, fuckyouhosting@ruggedinbox.com wrote:
> On 2014-12-01 02:24, Christian Gagneraud wrote:
>> On 01/12/14 14:46, fuckyouhosting@ruggedinbox.com wrote:
>>> Hi List! We (try to) maintain a free hosting platform for hidden service
>>> websites, here: http://fuckyouhotwkd3xh.onion
>>> but recently all the hosted hidden services became unreachable.
>> [...]
>>> So .. question: is there a way to understand which hidden service is
>>> causing all this ?
>>>
>>> Suggestions are welcome!
>>
>> This might help:
>> https://lists.torproject.org/pipermail/tor-talk/2014-November/035787.html
>>
>> Chris
>>
>>>
>>> Thank you.
> 
> Hi again, ok we followed the advise and captured a number of sessions,
> while starting Tor and while reloading it, several times to be sure.
> 
> We splitted and sorted the results with this command:
> grep "PURPOSE=HS" dbg3.txt|awk '{ print $9 }'| sort |less
> (which print just the hidden service name, for example
> REND_QUERY=fuckyouhotwkd3xh)
> but are unable to find an address repeated more than around 30 times,
> example:
> 
> REND_QUERY=fuckyouhotwkd3xh
> REND_QUERY=fuckyouhotwkd3xh
> REND_QUERY=fuckyouhotwkd3xh
> REND_QUERY=fuckyouhotwkd3xh
> REND_QUERY=fuckyouhotwkd3xh
> REND_QUERY=fuckyouhotwkd3xh
> REND_QUERY=fuckyouhotwkd3xh
> REND_QUERY=fuckyouhotwkd3xh
> REND_QUERY=fuckyouhotwkd3xh
> REND_QUERY=fuckyouhotwkd3xh
> REND_QUERY=fuckyouhotwkd3xh
> REND_QUERY=fuckyouhotwkd3xh
> REND_QUERY=fuckyouhotwkd3xh
> REND_QUERY=fuckyouhotwkd3xh
> REND_QUERY=fuckyouhotwkd3xh
> 
> in short, the addresses are balanced among all the files, still unable
> to find the 'black sheep'.

In your torrc, create a new test hidden service, and comment out all of
the rest. The new hidden service should be accessible. If it's not, you
have other problems. If the new hidden service is accessible, add back
the old ones, one at a time, and check accessibility of the test hidden
service after each addition. That should reveal the black sheep.
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

