Red bulbs aside

Torpille_DNS

What is Torpille ?

Torpille is a start of a Tor exit node scanner. It's a work in progress…

What is Torpille_DNS ?

Torpille_DNS comes as a first step as explained here. This scanner tests every exit node weekly with a DNS test. We assumed that any exit node should be able to resolve check.torproject.org so we test it. Errors are not immediately reported because it can be temporary and it is often quickly solved. Only relays with persistent (one week) DNS error will be reported as Bad Relays.

What are the results ?

Full logs are publicly available here.

Here are the error types you can find :

• URL failed but IP OK for check.torproject.org (DNS misconfiguration)
• URL and IP failed for check.torproject.org. IP OK for secondary test (DNS misconfiguration)
• Unable to reach anything (URL or IP) This case is still included in DNS misconfiguration detection because manual confirmations often lead to success with IP query and not with URL.

Why reporting to bad-relays@ ?

Yet 10 relays have been reported:

• 0A7F10EFEA3204E7DA9B9F61E2A00D53D4953C08 PRIVACYFIRST4
• 31243ACD67789C4E5F9C1A8BB8E471DCD7D50E78 PRIVACYFIRST7
• 3A6E7B4BB415408B255F479979D34BE63211CD07 PRIVACYFIRST3
• 83C85E142DBAA2B02770EFE79E5AD676F699C589 PRIVACYFIRST5
• CD6F3B972D890E39277C448BAD2C74DFC7EEB964 PRIVACYFIRST8
• E4E519081A819772BDF9BC7AA1492B763E62D863 PRIVACYFIRST6
• 842D5F5215C6FCDCB104EE717E9531727B45C31D PRIVACYFIRST2
• D1293A6DBB3A99518FFD0859ACC51B8A0C4D742A PRIVACYFIRST1
• 6608B2BC21AFF84BA85E0C014C87821B260E2DEF MLaBnetTOREXIT02
• D78D1B4489CF4FFB0FD74014BDF2D600D8EE5B05 TorExitAlbania2

It is reported with the objective of contact with the Tor exit node's administrator, hoping that will solve the problem for the benefits of all Tor users. It is not done to push relays in the BadRelay category that would be a loss of ressource for everyone, but it could happen if the Tor Project team decide so.

What to do if my relay appears ?

If you appear once. You can check your DNS configuration and / or test it.

If you appear twice or more in the most recent part of the logs, please go deeper in your DNS configuration because it seems that you have a persistent DNS error and users connected with your exit node will not be able to reach their destinations.

If you think the scanner give a false positive result, just tell me !

If your relay appeared but does not anymore :

• Your DNS problem is solved (great !),
• Your exit node has been marked as BadRelay, or is not running as an exit anymore.

Comment ?

Should you have any comment on this page, get in touch !