Received: from forum-01.torproject.org (unknown [172.17.0.1]) by forum-01-mail-receiver.localdomain (Postfix) with ESMTP id 718E28039E for ; Sat, 03 Jan 2026 07:03:04 +0000 Received: from lists-01.torproject.org (lists-01.torproject.org [IPv6:2a01:4f8:fff0:4f:266:37ff:feb9:3ea9]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bit raw public key) server-digest SHA256) (No client certificate requested) by forum-01.torproject.org (Postfix) with ESMTPS id 19FBC80235 for ; Sat, 03 Jan 2026 07:03:01 +0000 Received: from lists-01.torproject.org (localhost [IPv6:::1]) by lists-01.torproject.org (Postfix) with ESMTP id 6EA82223D9 for ; Sat, 03 Jan 2026 07:02:54 +0000 Received: from srv1.dorfdsl.de (srv1.dorfdsl.de [IPv6:2a01:170:118f:3::22]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by lists-01.torproject.org (Postfix) with ESMTPS id 631C921E49 for ; Sat, 03 Jan 2026 07:00:41 +0000 Received: from localhost ([IPv6:2a01:170:118f:5:3e52:82ff:fe12:1692]) (authenticated bits=0) by srv1.dorfdsl.de (8.18.1/8.18.1/Debian-6) with ESMTPSA id 60370c9e412463 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for ; Sat, 03 Jan 2026 08:00:39 +0100 Date: Sat, 03 Jan 2026 08:00:33 +0100 From: Marco Moock via tor-relays Reply-To: Marco Moock To: tor-relays@lists.torproject.org Message-ID: <20260103080033.5f6d8f90@dorfdsl.de> In-Reply-To: <4APUSG7eTFSdy0Xnwg3O-ddO3eXCeTuNhG3nPrn3lkRj3IyZOhcoIZ8C4TMnKbWtpwUjCBDT8kebN7dmu6xLq76c8q7QljcxBvu2vuiT5xA=@jonproulx.com> References: <4APUSG7eTFSdy0Xnwg3O-ddO3eXCeTuNhG3nPrn3lkRj3IyZOhcoIZ8C4TMnKbWtpwUjCBDT8kebN7dmu6xLq76c8q7QljcxBvu2vuiT5xA=@jonproulx.com> Subject: [tor-relays] Re: Questions about running an exit relay Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============1054999577987011863=="; charset=UTF-8 Content-Transfer-Encoding: 7bit DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lists.torproject.org; s=dkim_lists-01.torproject.org; t=1767423774; h=from:from:reply-to:reply-to:date:date:message-id:message-id:to:to:cc: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-owner:list-unsubscribe: list-subscribe:list-post; bh=mdH8Lc9BSHvfx5WVzl4I+7Y8dorkUJ8Atpz5ypif77I=; b=Mb47+fCpzjR8824PPi0QZWUYDi9Xu4/6LJEd3ZoKi6NDyISrogHxW1uCB6wdYJXd6RlMa+ UhPfbl9v1i6AsWjeDQbd8OTn3IMbvgN1dcteHdSewVW5AFy2G7boLm8U3gpTjoNnHaGjH+ gunfRgv6XVWlxMlzLfUlesaGL8Z+xaV0O13IjqdADfEniizcUJkJ29ZSPcRb+e2dbHlI19 U5wC1g+4dSmOMKFK+BDQtC+MLy0pIUafFjkuL/T6rrnLpUd015NK9/yo2oi1qZqhf0HTLg s0QRbWTsnBbqVZhME0LJ+9bsasz5jMSn8Y7Ql2DvMNvnK9MsKYUiEzFrIq9wiw== Authentication-Results: lists-01.torproject.org; dkim=pass header.d=dorfdsl.de header.s=default header.b=GqscZbzE; spf=pass (lists-01.torproject.org: domain of mm@dorfdsl.de designates 2a01:170:118f:3::22 as permitted sender) smtp.mailfrom=mm@dorfdsl.de; dmarc=pass (policy=none) header.from=dorfdsl.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=dorfdsl.de; s=default; t=1767423639; bh=6Pj9eGovzX2zwSIO15B9U7im0whOdhhPZEZsvJ5LVhE=; h=Date:From:To:Subject:In-Reply-To:References:From; b=GqscZbzE06WdbvPbbBKXTEU7l7P1GcRmDscLtBfI6ZbsJoPbvgoij9GR3pfNSItYU urJpt64f/LcZ96vyN07Jbj9fvFQuCAYQAr0d9Jqg+73V1gqtcX3gUBXKuz9TbdLJ+w 6A3EbuW7nWLSYO+dt4YFDtw4kKgsFOJJrEsPLtpAlqR1WrFgb4tamIftS0l4WDgc6q Tr05K8LdX0zGJMw3EIvCAODAqJMuvLMoMdeZqFxGfhuf9FLX6sZnqYCliuTUfVa2tk 4U48PWYZ/tgQe2mQibGWhuQPiQnmOfqVVCkODrDTOAQiIHjeOP6qIUPYvEt3pBefVp RlVlEKzONbwPQ== X-Mailer: Claws Mail 4.3.1 (GTK 3.24.51; x86_64-suse-linux-gnu) X-Rspamd-Server: lists-01 X-Spam-Status: No, score=-2.91 X-Rspamd-Queue-Id: 631C921E49 X-Spamd-Result: default: False [-2.91 / 7.00]; SIGNED_PGP(-2.00)[]; DMARC_POLICY_ALLOW(-0.50)[dorfdsl.de,none]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; ONCE_RECEIVED(0.20)[]; R_SPF_ALLOW(-0.20)[+ip6:2a01:170:118f:3::22]; R_DKIM_ALLOW(-0.20)[dorfdsl.de:s=default]; MX_GOOD(-0.01)[]; RCVD_COUNT_ONE(0.00)[1]; FUZZY_RATELIMITED(0.00)[rspamd.com]; ARC_NA(0.00)[]; ASN(0.00)[asn:8820, ipnet:2a01:170:1000::/36, country:DE]; RCVD_VIA_SMTP_AUTH(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_ALL(0.00)[]; DBL_BLOCKED_OPENRESOLVER(0.00)[torproject.org:email]; RECEIVED_HELO_LOCALHOST(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[tor-relays@lists.torproject.org]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM(-0.00)[-0.911]; DKIM_TRACE(0.00)[dorfdsl.de:+] X-Rspamd-Action: no action Message-ID-Hash: OAX7EO72GLXS4KPKUG7QSG7EOAR2WYVA X-Message-ID-Hash: OAX7EO72GLXS4KPKUG7QSG7EOAR2WYVA X-MailFrom: mm@dorfdsl.de X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.10 Precedence: list List-Id: "support and questions about running Tor relays (exit, non-exit, bridge)" Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --===============1054999577987011863== Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Content-Disposition: inline Content-ID: <6958bf289b75c_b28a46298091029@forum-01-app.mail> _______________________________________________ tor-relays mailing list -- tor-relays@lists.torproject.org To unsubscribe send an email to tor-relays-leave@lists.torproject.org --===============1054999577987011863== Content-Type: multipart/signed; boundary="Sig_/gizYC_1dGsAzUHvksdaMIe2"; micalg=pgp-sha256; protocol="application/pgp-signature" Content-Transfer-Encoding: 7bit --Sig_/gizYC_1dGsAzUHvksdaMIe2 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On 02.01.2026 18:46 Jon via tor-relays wrote: > We received a court order to preserve the data on the system and were > forbidden from informing the system owner, which was awkward since > they had informed the system owner... Which data did they request? > Since then I've always run my exit on a separate system on it's own > IP so if there were a legal demand to turn over "the system" it would > really only be that system. I'm not a lawyer but I don't think docker > provides enough isolation for that. Can they deny you to turn the relay off? If so, you could then operate a new "system" on another IP. -- = kind regards Marco Send spam to abfall1767375998@stinkedores.dorfdsl.de --Sig_/gizYC_1dGsAzUHvksdaMIe2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit --Sig_/gizYC_1dGsAzUHvksdaMIe2 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On 02.01.2026 18:46 Jon via tor-relays wrote: > We received a court order to preserve the data on the system and were > forbidden from informing the system owner, which was awkward since > they had informed the system owner... Which data did they request? > Since then I've always run my exit on a separate system on it's own > IP so if there were a legal demand to turn over "the system" it would > really only be that system. I'm not a lawyer but I don't think docker > provides enough isolation for that. Can they deny you to turn the relay off? If so, you could then operate a new "system" on another IP. -- = kind regards Marco Send spam to abfall1767375998@stinkedores.dorfdsl.de --Sig_/gizYC_1dGsAzUHvksdaMIe2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit --Sig_/gizYC_1dGsAzUHvksdaMIe2 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On 02.01.2026 18:46 Jon via tor-relays wrote: > We received a court order to preserve the data on the system and were > forbidden from informing the system owner, which was awkward since > they had informed the system owner... Which data did they request? > Since then I've always run my exit on a separate system on it's own > IP so if there were a legal demand to turn over "the system" it would > really only be that system. I'm not a lawyer but I don't think docker > provides enough isolation for that. Can they deny you to turn the relay off? If so, you could then operate a new "system" on another IP. -- = kind regards Marco Send spam to abfall1767375998@stinkedores.dorfdsl.de --Sig_/gizYC_1dGsAzUHvksdaMIe2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit --Sig_/gizYC_1dGsAzUHvksdaMIe2 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On 02.01.2026 18:46 Jon via tor-relays wrote: > We received a court order to preserve the data on the system and were > forbidden from informing the system owner, which was awkward since > they had informed the system owner... Which data did they request? > Since then I've always run my exit on a separate system on it's own > IP so if there were a legal demand to turn over "the system" it would > really only be that system. I'm not a lawyer but I don't think docker > provides enough isolation for that. Can they deny you to turn the relay off? If so, you could then operate a new "system" on another IP. --=20 kind regards Marco Send spam to abfall1767375998@stinkedores.dorfdsl.de --Sig_/gizYC_1dGsAzUHvksdaMIe2 Content-Type: application/pgp-signature Content-Description: Digitale Signatur von OpenPGP -----BEGIN PGP SIGNATURE----- iQJPBAEBCAA5FiEEpXefSZn9R6zNZtTQE76RLz2tRfAFAmlYvpEbFIAAAAAABAAO bWFudTIsMi41KzEuMTEsMiwyAAoJEBO+kS89rUXw8kgP/2jkrwfSWHY6EY4WJjn6 EDEqT00pgpwEn9ZpUqLTreS3/ocfHC4g29HIsxpJcj/bH+hNAx96HEz9YmC4JfEt LDjYc6D+5NBBFQGy0vaJ/LXLQc63CRE/yySSOYxFBZK+uMytNHoZDTjhfRroICbQ guoO7A4/VuYrGAzCWQkBUmnBjj2LJhuLDW84ObMXhA/EuNy5FIAqyLZxoGmFEfvu We5d0Hr3+wihzyrgGiG4u8UGFOyL+/PC11CFQyQ0j03cBzhZ5PVdtkqPNHauAcjQ Gt/HQmaOSGKq0VODRjiHAe5TuRtV6jOfUNgS1Q2vB4FKYmeDQb82ooNfOiJWy3ey Jpwgg700ppqgZUclpMPlzxKwi2dT/PSO6yYuy+G5sfa0Hxmn5DsQaiSPMTiEP2WC NwAENYIuHeQOHWiS8B3oVSRW/naLzkmpfChFnTKGsrhLqKQc/iuvv639aHwg9BP7 YEbWbdpFpIU36czfxoTcDYDR1e4JLWryEFKIgo4TIaz4t17NmkxjXB6dHZKLLAdU AT6LmL6mOTaXe9ewD9pf9Vf2nG0RGVJyZRUDmFzfU0Rx2qi7KdcmmRpZg/2QtJeA Pmrv8NFuFEL0BrhTvo7C60m+gjLaXPNClgKEN0vkEzjLp/ZKjI9FslP61xUMg8lQ 3xT/HTkNt9uNH2ziBMXLK+5c =0Euf -----END PGP SIGNATURE----- --Sig_/gizYC_1dGsAzUHvksdaMIe2-- --Sig_/gizYC_1dGsAzUHvksdaMIe2 Content-Type: application/pgp-signature Content-Transfer-Encoding: 7bit Content-Description: Digitale Signatur von OpenPGP -----BEGIN PGP SIGNATURE----- iQJPBAEBCAA5FiEEpXefSZn9R6zNZtTQE76RLz2tRfAFAmlYvpEbFIAAAAAABAAO bWFudTIsMi41KzEuMTEsMiwyAAoJEBO+kS89rUXw8kgP/2jkrwfSWHY6EY4WJjn6 EDEqT00pgpwEn9ZpUqLTreS3/ocfHC4g29HIsxpJcj/bH+hNAx96HEz9YmC4JfEt LDjYc6D+5NBBFQGy0vaJ/LXLQc63CRE/yySSOYxFBZK+uMytNHoZDTjhfRroICbQ guoO7A4/VuYrGAzCWQkBUmnBjj2LJhuLDW84ObMXhA/EuNy5FIAqyLZxoGmFEfvu We5d0Hr3+wihzyrgGiG4u8UGFOyL+/PC11CFQyQ0j03cBzhZ5PVdtkqPNHauAcjQ Gt/HQmaOSGKq0VODRjiHAe5TuRtV6jOfUNgS1Q2vB4FKYmeDQb82ooNfOiJWy3ey Jpwgg700ppqgZUclpMPlzxKwi2dT/PSO6yYuy+G5sfa0Hxmn5DsQaiSPMTiEP2WC NwAENYIuHeQOHWiS8B3oVSRW/naLzkmpfChFnTKGsrhLqKQc/iuvv639aHwg9BP7 YEbWbdpFpIU36czfxoTcDYDR1e4JLWryEFKIgo4TIaz4t17NmkxjXB6dHZKLLAdU AT6LmL6mOTaXe9ewD9pf9Vf2nG0RGVJyZRUDmFzfU0Rx2qi7KdcmmRpZg/2QtJeA Pmrv8NFuFEL0BrhTvo7C60m+gjLaXPNClgKEN0vkEzjLp/ZKjI9FslP61xUMg8lQ 3xT/HTkNt9uNH2ziBMXLK+5c =0Euf -----END PGP SIGNATURE----- --Sig_/gizYC_1dGsAzUHvksdaMIe2-- --Sig_/gizYC_1dGsAzUHvksdaMIe2 Content-Type: application/pgp-signature Content-Transfer-Encoding: 7bit Content-Description: Digitale Signatur von OpenPGP -----BEGIN PGP SIGNATURE----- iQJPBAEBCAA5FiEEpXefSZn9R6zNZtTQE76RLz2tRfAFAmlYvpEbFIAAAAAABAAO bWFudTIsMi41KzEuMTEsMiwyAAoJEBO+kS89rUXw8kgP/2jkrwfSWHY6EY4WJjn6 EDEqT00pgpwEn9ZpUqLTreS3/ocfHC4g29HIsxpJcj/bH+hNAx96HEz9YmC4JfEt LDjYc6D+5NBBFQGy0vaJ/LXLQc63CRE/yySSOYxFBZK+uMytNHoZDTjhfRroICbQ guoO7A4/VuYrGAzCWQkBUmnBjj2LJhuLDW84ObMXhA/EuNy5FIAqyLZxoGmFEfvu We5d0Hr3+wihzyrgGiG4u8UGFOyL+/PC11CFQyQ0j03cBzhZ5PVdtkqPNHauAcjQ Gt/HQmaOSGKq0VODRjiHAe5TuRtV6jOfUNgS1Q2vB4FKYmeDQb82ooNfOiJWy3ey Jpwgg700ppqgZUclpMPlzxKwi2dT/PSO6yYuy+G5sfa0Hxmn5DsQaiSPMTiEP2WC NwAENYIuHeQOHWiS8B3oVSRW/naLzkmpfChFnTKGsrhLqKQc/iuvv639aHwg9BP7 YEbWbdpFpIU36czfxoTcDYDR1e4JLWryEFKIgo4TIaz4t17NmkxjXB6dHZKLLAdU AT6LmL6mOTaXe9ewD9pf9Vf2nG0RGVJyZRUDmFzfU0Rx2qi7KdcmmRpZg/2QtJeA Pmrv8NFuFEL0BrhTvo7C60m+gjLaXPNClgKEN0vkEzjLp/ZKjI9FslP61xUMg8lQ 3xT/HTkNt9uNH2ziBMXLK+5c =0Euf -----END PGP SIGNATURE----- --Sig_/gizYC_1dGsAzUHvksdaMIe2-- Content-Type: application/pgp-signature Content-Transfer-Encoding: 7bit Content-Description: Digitale Signatur von OpenPGP -----BEGIN PGP SIGNATURE----- iQJPBAEBCAA5FiEEpXefSZn9R6zNZtTQE76RLz2tRfAFAmlYvpEbFIAAAAAABAAO bWFudTIsMi41KzEuMTEsMiwyAAoJEBO+kS89rUXw8kgP/2jkrwfSWHY6EY4WJjn6 EDEqT00pgpwEn9ZpUqLTreS3/ocfHC4g29HIsxpJcj/bH+hNAx96HEz9YmC4JfEt LDjYc6D+5NBBFQGy0vaJ/LXLQc63CRE/yySSOYxFBZK+uMytNHoZDTjhfRroICbQ guoO7A4/VuYrGAzCWQkBUmnBjj2LJhuLDW84ObMXhA/EuNy5FIAqyLZxoGmFEfvu We5d0Hr3+wihzyrgGiG4u8UGFOyL+/PC11CFQyQ0j03cBzhZ5PVdtkqPNHauAcjQ Gt/HQmaOSGKq0VODRjiHAe5TuRtV6jOfUNgS1Q2vB4FKYmeDQb82ooNfOiJWy3ey Jpwgg700ppqgZUclpMPlzxKwi2dT/PSO6yYuy+G5sfa0Hxmn5DsQaiSPMTiEP2WC NwAENYIuHeQOHWiS8B3oVSRW/naLzkmpfChFnTKGsrhLqKQc/iuvv639aHwg9BP7 YEbWbdpFpIU36czfxoTcDYDR1e4JLWryEFKIgo4TIaz4t17NmkxjXB6dHZKLLAdU AT6LmL6mOTaXe9ewD9pf9Vf2nG0RGVJyZRUDmFzfU0Rx2qi7KdcmmRpZg/2QtJeA Pmrv8NFuFEL0BrhTvo7C60m+gjLaXPNClgKEN0vkEzjLp/ZKjI9FslP61xUMg8lQ 3xT/HTkNt9uNH2ziBMXLK+5c =0Euf -----END PGP SIGNATURE----- --===============1054999577987011863==--