Hacker News new | ask | show | jobs
by icelancer 2446 days ago
My IP got blacklisted from various sites for simply running a non-exit relay. People say it's totally safe to run a relay/bridge; it is not.
4 comments

Hosting a bridge from home is safe. They're not in the global relay list so nobody knows which IP to block. Middle relays should be safe to host from home but unfortunately some overzealous 3rd party lists of "evil IPs" include them.
Perhaps Tor should become an integral part of the TCP/IP stack. That way, exit nodes would simply be the destination nodes for every connection. (?)
I'm finding it difficult to understand what you're saying. You can already funnel all your traffic using a Tor SOCK proxy. So you don't need any changes to the TCP/IP stack to do what you seem to want. However, forwarding all your traffic increases the risk of fingerprinting, so you should give it careful consideration.
Let me clarify, because you are talking about something else. One of Tor's weaknesses is that you always need exit nodes, and running an exit node comes with certain risks. Now, what I'm saying is that if Tor was an integral part of the internet, then everybody would effectively be running exit nodes. The exit node and the destination node would be same thing. Government agencies wouldn't be able to take down exit nodes because that would mean they would have to take down the entire internet.
Maybe they used to. Tor Project does not recommend running even middle relays from home.
Which sites?
Not op, but it's my understanding that they can blacklist pretty much the same sites as for exit relays. So your email client may stop working, Also search sites, social media, etc.
Obviously, anyone can blacklist anyone for any reason on the Internet and relay nodes' IPs are public. But do they?

I run a relay node on my personal server and never had any issues. But 1) I rarely browse the Internet from that IP and 2) it's in OVH so if it were blacklisted, it could be because of that.

Banks, Amazon, etc. Ended up on a blacklist for serving a relay from my personal home IP.
EVERYTHING behind cloudflare will captcha you on every page load. Have a dynamic IP from your ISP, they'll know about the new one with 30 minutes.