Skip to content

Changes

Page history
Apply conversion script to all *.md files. authored by Alexander Hansen Færøy's avatar Alexander Hansen Færøy
Hide whitespace changes
Inline Side-by-side
doc/TorExitGuidelines.md
View page @ a1a4b621
= Tor Exit Guidelines =
# Tor Exit Guidelines
These guidelines are meant to give you a quick introduction into the business of running your own exit relay. Additional resources can be found at the end of this article.
NOTE: ''This FAQ is for informational purposes only and does not constitute legal advice. Our aim is to provide a general description of the legal issues surrounding Tor exit relaying. Different factual situations and different legal jurisdictions will result in different answers to a number of questions. Therefore, please do not act on this information alone; if you have any specific legal problems, issues, or questions, seek a complete review of your situation with a lawyer licensed to practice in your jurisdiction.''
NOTE: _This FAQ is for informational purposes only and does not constitute legal advice. Our aim is to provide a general description of the legal issues surrounding Tor exit relaying. Different factual situations and different legal jurisdictions will result in different answers to a number of questions. Therefore, please do not act on this information alone; if you have any specific legal problems, issues, or questions, seek a complete review of your situation with a lawyer licensed to practice in your jurisdiction._
== Support ==
* If you are running an exit, or are thinking about it, you should subscribe to the [https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays/ Tor-Relays list].
## Support
* If you are running an exit, or are thinking about it, you should subscribe to the [Tor-Relays list](https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays/).
* For specific questions, email tor-team at torproject.org or support@torservers.net.
* TorServers.net also a Jabber/XMPP service. You can reach us at chat@conference.torservers.net
* If you use IRC, you can ask for help at #torservers at irc.oftc.net.
== Hosting ==
## Hosting
* Tor at Universities: Find allies.
Find some professors (or deans!) who like the idea of supporting and/or researching anonymity on the Internet. If possible, use an extra IP range whose abuse contact doesn't go through the main university abuse team. Ideally, use addresses that are not trusted by the IP-based authentication many library-related services use -- if the university's entire IP address space is "trusted" to access these library resources, the university is forced to maintain an iron grip on all its addresses. Also read [wiki:doc/TorGuideUniversities How do I make my University / ISP / etc happy with my exit node?]
Find some professors (or deans!) who like the idea of supporting and/or researching anonymity on the Internet. If possible, use an extra IP range whose abuse contact doesn't go through the main university abuse team. Ideally, use addresses that are not trusted by the IP-based authentication many library-related services use -- if the university's entire IP address space is "trusted" to access these library resources, the university is forced to maintain an iron grip on all its addresses. Also read [How do I make my University / ISP / etc happy with my exit node?](./doc/TorGuideUniversities)
* Find Tor-friendly ISPs.
A good ISP is one that offers cheap bandwidth and is not being used by other members of the Tor community. Before you continue, you may ask the Tor community if your choice is a good one. We very much need diversity, and it does not help if we pool too many exits at one friendly ISP.
In any case, add the ISP to the [wiki:doc/GoodBadISPs GoodBadISPs] wiki page.
In any case, add the ISP to the [GoodBadISPs](./doc/GoodBadISPs) wiki page.
To find an ISP, go through forums and sites where ISPs posts their latest deals, and contact them about Tor hosting. Once you identified your ISP, you can follow the two-step advice of TorServers.net.
......@@ -27,21 +27,21 @@ NOTE: ''This FAQ is for informational purposes only and does not constitute lega
The two-step process usually helps in elevating your request to higher levels of support staff without scaring them off too early, even if you don't end up with your own IP range. Here is template you can use: https://www.torservers.net/wiki/hoster/inquiry
== Legal ==
## Legal
* Make sure you know the relevant legal paragraphs for common-carrier like communication services in your country (and the country of your hosting provider!).
At least most western countries should have regulations that exclude communication service providers from liability. Please add your country's regulations to this list.
* USA: [http://www.law.cornell.edu/uscode/text/17/512 DMCA §512] ; see [https://www.torproject.org/eff/tor-legal-faq EFF's Legal FAQ for Tor Operators] (a very good and relevant read for other countries as well)
* Germany: [http://www.gesetze-im-internet.de/tmg/__8.html TMG §8] and [http://www.gesetze-im-internet.de/tmg/__15.html §15] .
* Netherlands: [http://wetten.overheid.nl/BWBR0005289/Boek6/Titel3/Afdeling4A/Artikel196c/ Artikel 6:196c BW]
* Austria: [http://www.ris.bka.gv.at/Dokument.wxe?Abfrage=Bundesnormen&Dokumentnummer=NOR40025809 ECG §13]
* France: [http://www.legifrance.gouv.fr/affichCodeArticle.do?idArticle=LEGIARTI000006465735&cidTexte=LEGITEXT000006070987 L32-3-3 du CPCE], [http://www.legifrance.gouv.fr/affichCodeArticle.do?idArticle=LEGIARTI000024506070&cidTexte=LEGITEXT000006070987 L32-4 du CPCE], [http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:32000L0031:Fr:HTML article 12 de la directive européenne du 8 juin 2000]
* Sweden: [https://lagen.nu/2002:562#P16S1 16-19 §§ 2002:562]
* USA: [DMCA §512](http://www.law.cornell.edu/uscode/text/17/512) ; see [EFF's Legal FAQ for Tor Operators](https://www.torproject.org/eff/tor-legal-faq) (a very good and relevant read for other countries as well)
* Germany: [TMG §8](http://www.gesetze-im-internet.de/tmg/__8.html) and [§15](http://www.gesetze-im-internet.de/tmg/__15.html) .
* Netherlands: [Artikel 6:196c BW](http://wetten.overheid.nl/BWBR0005289/Boek6/Titel3/Afdeling4A/Artikel196c/)
* Austria: [ECG §13](http://www.ris.bka.gv.at/Dokument.wxe?Abfrage=Bundesnormen&Dokumentnummer=NOR40025809)
* France: [L32-3-3 du CPCE](http://www.legifrance.gouv.fr/affichCodeArticle.do?idArticle=LEGIARTI000006465735&cidTexte=LEGITEXT000006070987), [L32-4 du CPCE](http://www.legifrance.gouv.fr/affichCodeArticle.do?idArticle=LEGIARTI000024506070&cidTexte=LEGITEXT000006070987), [article 12 de la directive européenne du 8 juin 2000](http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:32000L0031:Fr:HTML)
* Sweden: [16-19 §§ 2002:562](https://lagen.nu/2002:562#P16S1)
If you country is missing here and you know a lawyer who can provide a legal opinion, please get in contact with TorServers.net. We can support you.
* If you're part of an organization that will be running the exit relay (ISP, university etc), consider teaching your legal people about Tor.
It's way better for them to hear about Tor from you, in a relaxed environment, than to hear about it from a stranger over the phone. Make them aware of [https://www.torproject.org/eff/tor-legal-faq EFF's Legal FAQ for Tor Operators] . EFF has also offered to talk to other lawyers to explain the legal aspects of Tor; contact us at support@torservers.net and we'll make the connections for you.
It's way better for them to hear about Tor from you, in a relaxed environment, than to hear about it from a stranger over the phone. Make them aware of [EFF's Legal FAQ for Tor Operators](https://www.torproject.org/eff/tor-legal-faq) . EFF has also offered to talk to other lawyers to explain the legal aspects of Tor; contact us at support@torservers.net and we'll make the connections for you.
* If you're not part of an organization, think about starting one!
......@@ -49,30 +49,30 @@ NOTE: ''This FAQ is for informational purposes only and does not constitute lega
* Consider preemptively teaching your local law enforcement about Tor.
"Cybercrime" people actually love it when you offer to [https://blog.torproject.org/blog/talking-german-police-stuttgart teach them about Tor and the Internet] -- they're typically overwhelmed by their jobs and don't have enough background to know where to start. Contacting them gives you a chance to teach them why Tor is useful to the world (and why it's [https://www.torproject.org/docs/faq-abuse#WhatAboutCriminals not particularly helpful to criminals] ). Also, if they do get a report about your relay, they'll think of you as a helpful expert rather than a potential criminal.
"Cybercrime" people actually love it when you offer to [teach them about Tor and the Internet](https://blog.torproject.org/blog/talking-german-police-stuttgart) -- they're typically overwhelmed by their jobs and don't have enough background to know where to start. Contacting them gives you a chance to teach them why Tor is useful to the world (and why it's [not particularly helpful to criminals](https://www.torproject.org/docs/faq-abuse#WhatAboutCriminals) ). Also, if they do get a report about your relay, they'll think of you as a helpful expert rather than a potential criminal.
== Handling abuse complaints ==
=== Answering complaints ===
## Handling abuse complaints
### Answering complaints
If you receive an abuse complaint, don't freak out! Here is some advice for you:
* Answer to abuse complaints in a professional manner within a reasonable time span.
TorServers.net is a fairly large Tor exit operator and we receive only a very small number of complaints, especially compared to the amount of traffic we push. Roughly 80% are automated reports, and the rest is usually satisfied with [https://www.torservers.net/wiki/abuse/templates our default reply] . We have not needed the input of a lawyer in many years of operation following the advice on this page.
TorServers.net is a fairly large Tor exit operator and we receive only a very small number of complaints, especially compared to the amount of traffic we push. Roughly 80% are automated reports, and the rest is usually satisfied with [our default reply](https://www.torservers.net/wiki/abuse/templates) . We have not needed the input of a lawyer in many years of operation following the advice on this page.
In addition to the [https://www.torservers.net/wiki/abuse/templates templates at Torservers.net] , you can find many more templates for various scenarios on the [wiki:doc/TorAbuseTemplates Tor Abuse Template wiki page] . It is exceptionally rare to encounter a scenario where none of these templates apply.
In addition to the [templates at Torservers.net](https://www.torservers.net/wiki/abuse/templates) , you can find many more templates for various scenarios on the [Tor Abuse Template wiki page](./doc/TorAbuseTemplates) . It is exceptionally rare to encounter a scenario where none of these templates apply.
* If you receive a threatening letter from a lawyer about abusive use or a DMCA complaint, also don't freak out.
We are not aware of any case that made it near a court, and we will do everything in our power to support you if it does. You can look up if an IP address was listed as an exit relay at a given time at [https://exonerator.torproject.org/ ExoneraTor] . Point to that page in your reply to the complaint. If you feel it might be helpful, we can write you a signed letter confirming this information: Contact us at tor-assistants@torproject.org if you need one.
We are not aware of any case that made it near a court, and we will do everything in our power to support you if it does. You can look up if an IP address was listed as an exit relay at a given time at [ExoneraTor](https://exonerator.torproject.org/) . Point to that page in your reply to the complaint. If you feel it might be helpful, we can write you a signed letter confirming this information: Contact us at tor-assistants@torproject.org if you need one.
In your reply, state clearly that you are not liable for forwarded content passing through your machine, and include the relevant legal references for your country.
=== Things you can do preemptively ===
### Things you can do preemptively
* Make the WHOIS info point as close to you as possible.
One of the biggest reasons exit relays disappear is because the people answering the abuse address get nervous and ask you to stop. If you can get your own IP block, great. Even if not, many providers will still reassign subblocks to you if you ask. ARIN uses [https://www.arin.net/resources/request/reassignments.html SWIP] , and RIPE uses something similar. You can also add comments to your range, hinting at your usage as anonymization service ([https://apps.db.ripe.net/search/query.html?searchtext=ZWIEBELFREUNDE Example]). If you have questions about the process, please write an email to support@torservers.net and we will try to explain the process to you.
One of the biggest reasons exit relays disappear is because the people answering the abuse address get nervous and ask you to stop. If you can get your own IP block, great. Even if not, many providers will still reassign subblocks to you if you ask. ARIN uses [SWIP](https://www.arin.net/resources/request/reassignments.html) , and RIPE uses something similar. You can also add comments to your range, hinting at your usage as anonymization service ([Example](https://apps.db.ripe.net/search/query.html?searchtext=ZWIEBELFREUNDE)). If you have questions about the process, please write an email to support@torservers.net and we will try to explain the process to you.
* Register a phone number and a fax number as abuse contact.
......@@ -80,19 +80,19 @@ If you receive an abuse complaint, don't freak out! Here is some advice for you:
* Consider using the Reduced Exit Policy.
The [wiki:doc/ReducedExitPolicy Reduced Exit Policy] is an alternative to the default exit policy. It allows many Internet services while still blocking the majority of TCP ports. This drastically reduces the odds that a Bittorrent user will select your node and thus reduces or even eliminates the number of [https://www.torproject.org/eff/tor-dmca-response DMCA complaints] you will receive.
The [Reduced Exit Policy](./doc/ReducedExitPolicy) is an alternative to the default exit policy. It allows many Internet services while still blocking the majority of TCP ports. This drastically reduces the odds that a Bittorrent user will select your node and thus reduces or even eliminates the number of [DMCA complaints](https://www.torproject.org/eff/tor-dmca-response) you will receive.
If you have your own experience of abuse handling, just share it on our public mailing list or write us an email to tor-assistants@torproject.org.
== Technical ==
## Technical
Please read all the technical details before getting started. If you have any questions or need help, please contact us at support AT torservers.net
* [https://trac.torproject.org/projects/tor/wiki/TorRelayGuide TorRelayGuide]
* [TorRelayGuide](https://trac.torproject.org/projects/tor/wiki/TorRelayGuide)
* Software
Tor relays should work best on BSD and Linux. That said, you'll likely be happiest with the packages for Debian (or with Ubuntu but only if you [https://www.torproject.org/docs/debian.html.en#ubuntu use our debs] ). Torservers.net published a helpful setup guide at https://www.torservers.net/wiki/setup/server. It helps you with some improvements such as kernel settings and settings in your torrc, so you can have a super-fast relay. This is really helpful for the Tor network.
Tor relays should work best on BSD and Linux. That said, you'll likely be happiest with the packages for Debian (or with Ubuntu but only if you [use our debs](https://www.torproject.org/docs/debian.html.en#ubuntu) ). Torservers.net published a helpful setup guide at https://www.torservers.net/wiki/setup/server. It helps you with some improvements such as kernel settings and settings in your torrc, so you can have a super-fast relay. This is really helpful for the Tor network.
* Set up an informative website on the exit IP(s) on port 80.
......@@ -102,22 +102,22 @@ Please read all the technical details before getting started. If you have any qu
* Disk encryption might be useful to protect your node keys, but on the other hand unencrypted machines are easier to "audit" if required. We feel it's best to be able to easily show that you do Tor exiting, and nothing else (on that IP or server).
* Set reverse DNS to something that signals its use, e.g. 'anonymous-relay', 'proxy', 'tor-proxy'. so when other people see the address in their web logs, they will more quickly understand what's going on. If you do, and if SMTP is allowed in your exit policy, consider configuring [https://en.wikipedia.org/wiki/Sender_Policy_Framework SPF] on your domain: this will protect you from users using your exit node to forge e-mails which look like they come from you.
* Set reverse DNS to something that signals its use, e.g. 'anonymous-relay', 'proxy', 'tor-proxy'. so when other people see the address in their web logs, they will more quickly understand what's going on. If you do, and if SMTP is allowed in your exit policy, consider configuring [SPF](https://en.wikipedia.org/wiki/Sender_Policy_Framework) on your domain: this will protect you from users using your exit node to forge e-mails which look like they come from you.
== Support ==
* If you are running an exit, or are thinking about it, you should subscribe to the [https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays/ Tor-Relays list].
## Support
* If you are running an exit, or are thinking about it, you should subscribe to the [Tor-Relays list](https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays/).
* For specific questions, email tor-assistants at torproject.org or support AT torservers.net.
* TorServers.net also a Jabber/XMPP service. You can reach us at chat AT conference.torservers.net
* If you use IRC, you can ask for help at #torservers at irc.oftc.net.
== Helpful Links ==
* [https://trac.torproject.org/projects/tor/wiki/doc/TorAbuseTemplates Tor Abuse Templates]
* [https://www.torproject.org/eff/tor-legal-faq Legal FAQ for Tor Operators]
* [https://blog.torproject.org/blog/start-tor-legal-support-directory Tor Legal Support Directory]
* [https://blog.torproject.org/running-exit-node Tips for Running an Exit Node with Minimal Harassment]
* [https://www.torproject.org/docs/faq-abuse Abuse FAQ]
* [https://trac.torproject.org/projects/tor/wiki/doc/TorRelaySecurity Tor Relay Security And Best Practices]
* [https://lists.torproject.org/pipermail/tor-relays/2012-July/001433.html Call for discussion: turning funding into more exit relays]
* [https://metrics.torproject.org/fast-exits.html Tor Metrics: Fast Exits]
* [wiki:doc/GoodBadISPs GoodBadISPs] is a wiki page that lists ISPs. You probably want to avoid all of them, because the Tor-friendly ones are likely already in use.
\ No newline at end of file
## Helpful Links
* [Tor Abuse Templates](https://trac.torproject.org/projects/tor/wiki/doc/TorAbuseTemplates)
* [Legal FAQ for Tor Operators](https://www.torproject.org/eff/tor-legal-faq)
* [Tor Legal Support Directory](https://blog.torproject.org/blog/start-tor-legal-support-directory)
* [Tips for Running an Exit Node with Minimal Harassment](https://blog.torproject.org/running-exit-node)
* [Abuse FAQ](https://www.torproject.org/docs/faq-abuse)
* [Tor Relay Security And Best Practices](https://trac.torproject.org/projects/tor/wiki/doc/TorRelaySecurity)
* [Call for discussion: turning funding into more exit relays](https://lists.torproject.org/pipermail/tor-relays/2012-July/001433.html)
* [Tor Metrics: Fast Exits](https://metrics.torproject.org/fast-exits.html)
* [GoodBadISPs](./doc/GoodBadISPs) is a wiki page that lists ISPs. You probably want to avoid all of them, because the Tor-friendly ones are likely already in use.
\ No newline at end of file