Anonymous Servers - Attn: Zax ; it's herehere

Author

Attn: Zax ; it's herehere

Thrasher Remailer

2005-05-19, 2:45 am

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Hello Zax,

I am herehere (newly transformed); I will use this nym from now
on.

I have made major updates to my Tor and TLS Remaling wiki; most
notable is that my How-To now has it's own page:
"RemailingAndTor".

Thanks for the great info on HTTPS echolot Stats Updates and the
idea about QS FTP Downloads. I think you will really like the
new section I added on Updating Stats via. Hidden Services.

Here is my updated RemailingAndTor wiki page:

<http://wiki.noreply.org/noreply/The...RemailingAndTor>

I was hoping you would have a free minute or two to error check
my How-To and critque it as needed.

I have added many new sections and changed the presentation of
some info.

Here is a sample of my updates to my RemailingAndTor wiki page:

1. QS FTP Component Downloads
2. QS HTTPS Remailer Statistics & Keyring Updates
3. Type I & Type II Remailer Security Issues
4. Type II Exit Remailer
5. Reply Block, ESUB and A.A.M. Issues
6. Barring Type I Remailers
7. DSS and RSA
8. Tor Hidden Services: SMTP, M2N, HHTP Stats & NNTP
9. QS Hidden Services HTTP Remailer Statistics & Keyring Updates
10. QS New Message Window Hidden Services Settings
11. Onion Route and Hidden Services Security & Anonymity Issues
12. Multiple Calls

Thanks alot,

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQA/AwUBQov2nceAaJ6NbaCwEQNMswCbBHQs/jZCZ688sXglQlp4J3YNCVkAoPeV
KIgXfXM/OE0R4LiE0rEFkHRs
=beKW
-----END PGP SIGNATURE-----

BiKiKii Admin

2005-05-19, 5:46 pm

-----BEGIN PGP SIGNED MESSAGE-----

On 19 May 2005, herehere(or ?? 0xC780689E8D6DA0B0) wrote:
>Here is my updated RemailingAndTor wiki page:
>
><http://wiki.noreply.org/noreply/The...RemailingAndTor>
>

>6. Barring Type I Remailers

Hello!

Why do you want to do this? The information is not wholly accurate.
[vbcol=seagreen]

Whether this is true I don't know, however you should realize that
most CPunk remailers afford the Mixmaster protocol.

For example a high percentage (+90% ?) of BiKiKii's traffic is Mixmaster messages.
[vbcol=seagreen]

Type II <> DSS Keys
Quite a few Mixmaster remailers provide RSA Keys.

Oh, and why no middleman remailers?
BiKiKii quite happily sends messages to newsgroups.

Note: I did not read "everything" written at the WiKi.

Ciao!

BiKiKii

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQEVAwUBQo0XBfRwi/QFFzi5AQH73Qf+JRtfuuaGP/yvY74Ccdjs1bZzOnBEg1rb
e/f3E5/ g6NNQOTwl2poQ5IhE2cWZ9g26ALqjShI6osHhjDB
D4zKShI6QmGnYv9vT
VBOg2VYR/rodCEFwTPPLTAmbCkbDOPnF7WHtXu/kPPfPSD7I7hvOn09sdq2KrXF4
3SDxNtxvSh4YMkXTYiHYroJNxKNgdH003msjTIpn
p6KQG/BiGFOBXRy9Mh8PH9DD
sWlkWdLAgw9vATfTEUgy/ CL9fIDtRr4JR4DxWWqbXpZxBg0RoiS1QVw+KMzVe
Z03
KfeL1esbEvzs7TQzFGWRQu44cHXOa5ollfiLbm5B
VVK3dU+yyfkhFQ==
=qLvP
-----END PGP SIGNATURE-----

Thrasher Remailer

2005-05-20, 2:45 am

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

On 19 May 2005 22:45:37 -0000, you wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
>
> On 19 May 2005, herehere(or ?? 0xC780689E8D6DA0B0) wrote:
>
>
> Hello!

Hi BiKiKii, how are you?

Thanks for reading some of my wiki, critquing it and letting me
know of issues. I really want to make my wiki as high-qualtiy
and accurate as possible.

> Why do you want to do this?

As I understand it MixMaster is more secure than CypherPunk.

> The information is not wholly accurate.

Sorry, I was unaware of that.

>
> Whether this is true I don't know, however you should realize that
> most CPunk remailers afford the Mixmaster protocol.

> CPunk remailers afford the Mixmaster protocol.

To be truefull I don't fully understand what you mean in the
above sentence ^^^; could you please elaborate?

I am not an expert in these matters; I just *love* to learn, to
be challanged and to teach when it's appropiate.

>
> Whether this is true I don't know, however you should realize that
> most CPunk remailers afford the Mixmaster protocol.

How does the Cpunk remailer know to use the Mixmaster protocol?

Do the Cpunk remailers automatically use the Mixmaster protocol?

How could I use Type I remailers with the Mixmaster protocol?

>
> Whether this is true I don't know...

I read all the messages in the entire 'qslist' and I believe I
found a message by Richard where he mentioned this is possible.
I will try to find Richard's qlist message in regards to barring
Type I remailers for you.

On second thought, I may have found this info in the QS help
file; I'll check it out soon and post what I find.

> For example a high percentage (+90% ?) of BiKiKii's traffic is Mixmaster messages.

Is this traffic on your Mixmaster (mlist) or Cpunk (rlist)
remailer's; or both?

>
> Type II <> DSS Keys
> Quite a few Mixmaster remailers provide RSA Keys.

That sentence (among others) is rather ambiguos; I wasn't trying
to imply Mixmaster only offers DSS. I wanted to note that you
don't have to choose which Type II remailer key to use; as all
MixMaster remailers support DSS.

> Oh, and why no middleman remailers?

I have 2 random middleman remailers in my header 'Chian:'

Host: 127.0.0.1:2525
From: your nym here <your nym here@nym.panta-rhei.eu.org>
Chain: banana,*,*,italy; copies=6
To:
Subject:

By disabling all unneccessary Cpunk remailers and keys in the
Cpunk Keyring QS should automatically choose 2 random Mixmaster
remailers in the 'Chain:'. QS could possbily use the ESUB Type
I remailer as a random middleman remailer; I am not sure on this.

> BiKiKii quite happily sends messages to newsgroups.

Great, that good to know.

To ensure I understand you correctly:

I can use your BiKiKii Cpunk DSS remailer to send NNTP messages
though a M2N gateway?

> Note: I did not read "everything" written at the WiKi.

If you have time I would really like it like your read my whole
wiki. There are many interesting sections I think you'll like;
and hopfull you'll learn some new info (although I doubt it ;-) )

Here are some interesting sections you might want to read:

remailing/Stats/NG Dl's with Tor and Hidden Services
remailing/Stats/NG Dl's with Tor and TLS
Anonymity and Secuirty Issues

If you have time and an inclination, would you please read my
whole wiki; ensuring I posted accurate info.

I have tested everything on my wiki many, many times; I forgot
how many times I read it...all of these methods work as
detailed. I tried my best to insure all info is 100 percent
accurate; but nothing is perfect.

If you would be kind enough to let me know of other errors and
such I would love to update my wiki.

BTW, what did you think of the wiki overall?

>
> Ciao!
>
> BiKiKii
>
> -----BEGIN PGP SIGNATURE-----
> Version: N/A
>
> iQEVAwUBQo0XBfRwi/QFFzi5AQH73Qf+JRtfuuaGP/yvY74Ccdjs1bZzOnBEg1rb
> e/f3E5/ g6NNQOTwl2poQ5IhE2cWZ9g26ALqjShI6osHhjDB
D4zKShI6QmGnYv9vT
> VBOg2VYR/rodCEFwTPPLTAmbCkbDOPnF7WHtXu/kPPfPSD7I7hvOn09sdq2KrXF4
> 3SDxNtxvSh4YMkXTYiHYroJNxKNgdH003msjTIpn
p6KQG/BiGFOBXRy9Mh8PH9DD
> sWlkWdLAgw9vATfTEUgy/ CL9fIDtRr4JR4DxWWqbXpZxBg0RoiS1QVw+KMzVe
Z03
> KfeL1esbEvzs7TQzFGWRQu44cHXOa5ollfiLbm5B
VVK3dU+yyfkhFQ==
> =qLvP
> -----END PGP SIGNATURE-----

Thanks very much,

- ---

Question Everything...Stay Safe...herehere

Contact Info (finger-key enabled):
herehere@nym.panta-rhei.eu.org

- ---

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQA/ AwUBQo1OnseAaJ6NbaCwEQO4RwCePFcIL1rlopcd
GvYmJ5u6pYbVuf4An3pS
PKJUjF5ULKEPN2IaPcAARdc9
=Beru
-----END PGP SIGNATURE-----

Thrasher Remailer

2005-05-20, 2:45 am

In <D610344A58@bikikii.ath.cx>, Use-Author-Address-Header@[127.1] wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>
>On 19 May 2005, herehere(or ?? 0xC780689E8D6DA0B0) wrote:
>
>
>Hello!
>
>Why do you want to do this? The information is not wholly accurate.
>
>
>Whether this is true I don't know, however you should realize that
>most CPunk remailers afford the Mixmaster protocol.

He's operating on a wrong idea.. QS *ONLY* uses mixmaster remailers.. it
creates the message and hands it off to mixmaster.exe to create and encrypt
the message chain. QS then takes the result and pumps it into the user's
specified smtp

The only thing QS uses cypherpunk remailers for is Nyms and Nym reply
blocks and there is really no choice in the matter for that use. Nym's are
Cypherpunk (Type I), QS simply takes the msgs to the nymserver and wraps
them up in mixmaster packets for security.

>For example a high percentage (+90% ?) of BiKiKii's traffic is Mixmaster
>messages.
>
>
>Type II <> DSS Keys
>Quite a few Mixmaster remailers provide RSA Keys.
>
>Oh, and why no middleman remailers?
>BiKiKii quite happily sends messages to newsgroups.
>
>Note: I did not read "everything" written at the WiKi.
>
>
>Ciao!
>
>BiKiKii
>
>-----BEGIN PGP SIGNATURE-----
>Version: N/A
>
>iQEVAwUBQo0XBfRwi/QFFzi5AQH73Qf+JRtfuuaGP/yvY74Ccdjs1bZzOnBEg1rb
>e/f3E5/ g6NNQOTwl2poQ5IhE2cWZ9g26ALqjShI6osHhjDB
D4zKShI6QmGnYv9vT
>VBOg2VYR/rodCEFwTPPLTAmbCkbDOPnF7WHtXu/kPPfPSD7I7hvOn09sdq2KrXF4
> 3SDxNtxvSh4YMkXTYiHYroJNxKNgdH003msjTIpn
p6KQG/BiGFOBXRy9Mh8PH9DD
>sWlkWdLAgw9vATfTEUgy/ CL9fIDtRr4JR4DxWWqbXpZxBg0RoiS1QVw+KMzVe
Z03
> KfeL1esbEvzs7TQzFGWRQu44cHXOa5ollfiLbm5B
VVK3dU+yyfkhFQ==
>=qLvP
>-----END PGP SIGNATURE-----

~~~~~~~~~~~~~~~~~~~~~
This message was posted via one or more anonymous remailing services.
The original sender is unknown. Any address shown in the From header
is unverified. You need a valid hashcash token to post to groups other
than alt.test and alt.anonymous.messages. Visit www.panta-rhei.dyndns.org
for abuse and hashcash info.

A.Melon

2005-05-20, 7:46 am

On 19 May 2005 22:45:37 -0000, BiKiKii Admin <Use-Author-Supplied-
Address-Header@[127.1]> wrote:

>
>Oh, and why no middleman remailers?
>BiKiKii quite happily sends messages to newsgroups.
>
>
I also thought middleman remailers aren't able to be the last hop.
Am I wrong?

Thrasher Remailer

2005-05-21, 2:49 am

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

On 20 May 2005 07:00:00 -0000, you wrote:
>
> In <D610344A58@bikikii.ath.cx>, Use-Author-Address-Header@[127.1] wrote:
>
> He's operating on a wrong idea.. QS *ONLY* uses mixmaster remailers.. it
> creates the message and hands it off to mixmaster.exe to create and encrypt
> the message chain. QS then takes the result and pumps it into the user's
> specified smtp
>
> The only thing QS uses cypherpunk remailers for is Nyms and Nym reply
> blocks and there is really no choice in the matter for that use. Nym's are
> Cypherpunk (Type I), QS simply takes the msgs to the nymserver and wraps
> them up in mixmaster packets for security.

Great! Thanks for the info; I will update my wiki to reflect
this.

A few questions:

In the QS Cpunk keyring there is an option to 'bar remailer as
last hop' in remailer 'Chain:'.

This seems to mean that QS does use Cpunk remailers in it's
'Chain:'. Maybe QS only uses Cpunk remailers in the 'Chain:' if
MixMaster is not installed; I'm not sure though. What do you
think about the 'bar remailer as last hop' option in QS Cpunk
keyring?

Did you read my entire wiki? If so what do you think?

Thanks for your help, and please point out any inconsistincies
you may find.

- ---

Question Everything...Stay Safe...herehere

Contact Info (finger-key enabled)
herehere@nym.panta-rhei.eu.org

- ---

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQA/AwUBQo6cDMeAaJ6NbaCwEQOS1wCfVal/9SQsYCRdlCUSnvWJYIEBAwoAoJ5N
0dD3LUJG+eLDkTTSltU2OcVq
=lD6B
-----END PGP SIGNATURE-----

Thrasher Admin

2005-05-21, 2:49 am

-----BEGIN PGP SIGNED MESSAGE-----

On 21 May 2005 03:10:07 -0000, Thrasher Remailer
<thrasher@reece.net.au> wrote:

>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: RIPEMD160
>
>On 20 May 2005 07:00:00 -0000, you wrote:
>
>
>Great! Thanks for the info; I will update my wiki to reflect
>this.
>
>
>A few questions:
>
>In the QS Cpunk keyring there is an option to 'bar remailer as
>last hop' in remailer 'Chain:'.
>
>This seems to mean that QS does use Cpunk remailers in it's
>'Chain:'. Maybe QS only uses Cpunk remailers in the 'Chain:' if
>MixMaster is not installed; I'm not sure though. What do you
>think about the 'bar remailer as last hop' option in QS Cpunk
>keyring?

Barring a remailer as last hop is an option introduced some time ago
to prevent QS sending a message without a hashcash header to a
remailer that requires it.

- --
Cheers,
Thrasher.

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQEVAwUBQo4/ q2e9vBuCUlx7AQEQQwgAnFdBf9AeEk+3E0Hs7ICB
DVBGEh1nwMUc
vPV1nD5+pP0lKKJzrucbAMEIFswvFjj45WFtzSLD
ElfrTJVJmsbYxLsU2ijILehL
MWjynmTo9kPR8vvGWO5CROKTuoKL+ZrfyxEBMS/mwf3dVBUbsJP34HUR6RHYdx+O
fzs7Afxzg19zEe0oOw9uCRUvOZWy/Pewl0QFmiMhCDrde4j7SCSua0hteLilCHW/
BTQVRRTZxoqS9Lk0hDjiqvB54WsUsa0h1jmPaG/uGUCp5A7aRmhnUWBnIQkdEsOM
66WrQSC1Y7tdS8DhLEK8S06MQrjk3ZX2ufGrsDYr
twEBQex8h7c0pA==
=d/kL
-----END PGP SIGNATURE-----

A.Melon

2005-05-21, 7:45 am

In <VQ3DKOK938493.4653587963@reece.net.au>, thrasher@reece.net.au wrote:
>=====BEGIN PGP SIGNED MESSAGE=====
>Signature: 0x8D6DA0B0
>Date:
>Status: INVALID (Unknown)
>
>On 20 May 2005 07:00:00 -0000, you wrote:
>
>
>Great! Thanks for the info; I will update my wiki to reflect
>this.
>
>
>A few questions:
>
>In the QS Cpunk keyring there is an option to 'bar remailer as
>last hop' in remailer 'Chain:'.
>
>This seems to mean that QS does use Cpunk remailers in it's
>'Chain:'. Maybe QS only uses Cpunk remailers in the 'Chain:' if
>MixMaster is not installed; I'm not sure though. What do you
>think about the 'bar remailer as last hop' option in QS Cpunk
>keyring?

Ask Richard, QS is strictly a Mixmaster client.
The 'Chain:' pesudoheader is all about passing the users preferences about
chain selection to mixmaster. Cypherpunk remailers have nothing to do with
it.

examples:

Chain: panta,*,*,*
tells mixmaster to use a chain of 4 remailers starting with panta and then
choose the next three at random

Chain: *,*,*,*,*
tells mixmaster to choose 5 remailers at random

Chain: *,*,*,bigapple
choose 3 random and then exit from bigapple

Chain: *,*,*,dizum; Copies=3
sends 3 copies of message, each chooses 3 random, exit from dizum.
(note, dupe detection insures that only one copy is delivered to final
address. the multiple copies is to increase the msg's chance of getting to
the exit remailer... usefull if you're not sure of your stats or are
sending something that has to be broken into more than one mix packet for
each copy of the message.)

Also, check with QS docs and Richard. QS can do very nicely with only the
mixmaster modules. The only thing it needs cpunk remailers for is Nym
reply blocks. If you're not using nym's, you could not even bother with
anything but QS and it's mixmaster modules. (though I would recommend the
Qspgp module to have pgp sign / encrypt and decrypt / verify functions
available)

>
>Did you read my entire wiki? If so what do you think?
>

I personaly haven't read it yet but I'll get round to it eventually.

~~~~~~~~~~~~~~~~~~~~~
This message was posted via one or more anonymous remailing services.
The original sender is unknown. Any address shown in the From header
is unverified. You need a valid hashcash token to post to groups other
than alt.test and alt.anonymous.messages. Visit www.panta-rhei.dyndns.org
for abuse and hashcash info.

BiKiKii Admin

2005-05-21, 5:46 pm

-----BEGIN PGP SIGNED MESSAGE-----

On Fri, 20 May 2005, A.Melon wrote:
>On 19 May 2005 22:45:37 -0000, BiKiKii Admin <Use-Author-Supplied-
>Address-Header@[127.1]> wrote:
>
>I also thought middleman remailers aren't able to be the last hop.
>Am I wrong?
>

Both Reliable and Mixmaster remailers have a "Destination Allow" file.
For Mixmaster remailers the information may be gleaned from the
remailer-conf information.

See this section:

In addition to other remailers, this remailer also sends mail
to these addresses directly:

More information may be found in this message and thread:

Subject: Re: New Remailer tek1
From: Zax
Date: Tue 10 May 2005 15:15:15
Newsgroups: alt.privacy.anon-server
Message-ID: <d5r4oj$m7i$1@snorky.bananasplit.info>

Reliable remailers do not make that information publicly available.

I can only comment on BiKiKii's configuration, although other Reliable
operators may do similar...

BiKiKii will "exit" to mail2news gateways, nymserver conf@ and send@,
known pinger, and other "trusted" addresses.

Ciao!

BiKiKii

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQEVAwUBQo+E4PRwi/QFFzi5AQFC/Af/Ud4gY8jTv4G4rD2zcqMfHam7iY2nTwTu
CfqdwRZkxIt8/ S50sLITGDvCfj0CuN7kU6HaCAAaY1Fscga4eBzRt
USgWcFpHsNY
OzyQlQwritJYakeL6Wv6V1K+u/4Iy79A7cFpzMet/0bBOC34QMi6C0zslqZiksTH
tm7v9z3+r56hqbLVZ+K/MEAV4iDO6U/YGrBjHPX0nT+RZBSygVd+9Qp+Er5KQhi+
Xqrhq9iS6yTKt7fye4yqXBY7zZIiFHzg5JHEA9T/5WAavMId664zMLj+HKiPNNjg
Q0xQyzuCcGhZiCRpWwIlIm3AGgvQYA7uxV9MBj+V
a8vDr24WTdKdNg==
=Lnxq
-----END PGP SIGNATURE-----

BiKiKii Admin

2005-05-21, 5:46 pm

-----BEGIN PGP SIGNED MESSAGE-----

On 20 May 2005, herehere wrote:

>Signature: 0x8D6DA0B0 herehere
>Date: Thu May 19 21:42:38 2005
>Status: OK (Invalid)

>On 19 May 2005 22:45:37 -0000, you wrote:
>
>To be truefull I don't fully understand what you mean in the
>above sentence ^^^; could you please elaborate?
>

See that 32 of the remailers with cpunk in their capstring also have mix and remix.
The precedence of remailers is to transparently remix the message to
the next hop whenever possible.

>How does the Cpunk remailer know to use the Mixmaster protocol?
>

See "The precedence..." above.

>Do the Cpunk remailers automatically use the Mixmaster protocol?
>

Above...

>How could I use Type I remailers with the Mixmaster protocol?
>

By explicitly specifying remix; the Remix-To directive.

>

I don't use QS so...
The answer was given by a knowledgeable user in here:

>Subject: Re: Attn: Zax ; it's herehere
>From: Thrasher Remailer
>Date: Fri 20 May 2005 02:00:00
>Newsgroups: alt.privacy.anon-server
>Message-ID: <XJH6M8BQ38492.620474537@reece.net.au>

>
>Is this traffic on your Mixmaster (mlist) or Cpunk (rlist) remailer's; or both?
>

I just know that when I look in the inbound and outbound queues most are mixmaster messages.

Since BiKiKii supports both transparent and explicit remix, precedence dicatates that
others will remix to BiKiKii and she will also remix to others whenever possible.

>
>I have 2 random middleman remailers in my header 'Chian:'
>
>Chain: banana,*,*,italy; copies=6
>
>I remailer as a random middleman remailer; I am not sure on this.
>

Middleman remailers will/should remail to all known remailer addresses.

The Mixmaster client will not choose as the final remailer one with
the "M" capability flag in the remailer's key.

>
>Great, that good to know.
>To ensure I understand you correctly:
>
>I can use your BiKiKii Cpunk DSS remailer to send NNTP messages though a M2N gateway?
>

Absolutely provided the message is not to a "ANON-POST-TO - BLOCKED NEWSGROUPS"
and the number does not exceed the "Crosspost Maximum" limit.

That information is available in the remailer-conf reply.

>
>If you have time I would really like it like your read my whole
>wiki. There are many interesting sections I think you'll like;
>

I intend to do so when time allows...

>and hopfull you'll learn some new info (although I doubt it ;-) )
>

I'm sure there is information there which I will find new.
As an example from this thread is...
I did not know or recall that QS only uses the Mixmaster protocol for remailing of messages.

>Here are some interesting sections you might want to read:
>
>remailing/Stats/NG Dl's with Tor and Hidden Services
>remailing/Stats/NG Dl's with Tor and TLS
>Anonymity and Secuirty Issues
>

Will do...

>BTW, what did you think of the wiki overall?
>

Again...[vbcol=seagreen]

However I think it is of great value to make such information available.

Ciao!

BiKiKii

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQEVAwUBQo+EnvRwi/QFFzi5AQEMZQf/RqovNjzYsxQFdUmAYzku6pI2HtjVmYO7
I5OMdoZpBnOAFhQuht3+hQVCoZJugLPRCtoSkZlM
uWXK8KJz3hjn4+/GDfAfCJJ5
uMXxigPAjSr/ 96BarbEY6pk8lXPY3Bq603gcQu61V+2dQTy8XxR1
1JCZdlo3sZJ7
tbW3HJTudEH2nELiMh4VdERIunczbytGQHTezbOv
kPyKGlvY1DgbmmBh+10dqA20
TC89G7nb8w5dbwxZq7dEXUek6EA4P3GLEE8+nJwd
7NJhwCBKvIiaA5Man6wYqDj2
OtzF/pJGwS8jeh0m+gdVvUsYPMYSVyOsFjCBS/zWQ+7+QxjD6TR4lA==
=QzKC
-----END PGP SIGNATURE-----

J.Alfred Prufrock

2005-05-21, 5:46 pm

In article
< d4e8abf77a7f2c146cef15575b5d3afc@melontr
affickers.com>
A.Melon <juicy@melontraffickers.com> wrote:
>
> In <VQ3DKOK938493.4653587963@reece.net.au>, thrasher@reece.net.au wrote:
>
> Ask Richard, QS is strictly a Mixmaster client.
> The 'Chain:' pesudoheader is all about passing the users preferences about
> chain selection to mixmaster. Cypherpunk remailers have nothing to do with
> it.
>
> examples:
>
>
> Chain: panta,*,*,*
> tells mixmaster to use a chain of 4 remailers starting with panta and then
> choose the next three at random
>
> Chain: *,*,*,*,*
> tells mixmaster to choose 5 remailers at random
>
> Chain: *,*,*,bigapple
> choose 3 random and then exit from bigapple
>
> Chain: *,*,*,dizum; Copies=3
> sends 3 copies of message, each chooses 3 random, exit from dizum.
> (note, dupe detection insures that only one copy is delivered to final
> address. the multiple copies is to increase the msg's chance of getting to
> the exit remailer... usefull if you're not sure of your stats or are
> sending something that has to be broken into more than one mix packet for
> each copy of the message.)
>
> Also, check with QS docs and Richard. QS can do very nicely with only the
> mixmaster modules. The only thing it needs cpunk remailers for is Nym
> reply blocks. If you're not using nym's, you could not even bother with
> anything but QS and it's mixmaster modules. (though I would recommend the
> Qspgp module to have pgp sign / encrypt and decrypt / verify functions
> available)
>
>
>
>
> I personaly haven't read it yet but I'll get round to it eventually.
>
>
>
> ~~~~~~~~~~~~~~~~~~~~~
> This message was posted via one or more anonymous remailing services.
> The original sender is unknown. Any address shown in the From header
> is unverified. You need a valid hashcash token to post to groups other
> than alt.test and alt.anonymous.messages. Visit www.panta-rhei.dyndns.org
> for abuse and hashcash info.

I've noticed that QS always seems to choose a single remailer
for the
last hop regardless of the number of copies.

e.g.:
Chain: *,*,*;copies=3
will generate a chain that uses the same remailer as the exit
remailer for all three copies.

frell,italy,panta
italy,bigapple,panta
hastio,frell,panta

Always the same, even when it should be "random."

Is there anyway to ensure that a "*" is truly random and not
the same for every copy of the message?

J. A. Prufrock

Thomas J. Boschloo

2005-05-21, 5:46 pm

-----BEGIN PGP SIGNED MESSAGE-----

Thrasher Remailer wrote:
> On 19 May 2005 22:45:37 -0000, you wrote:
>

<snip>
[vbcol=seagreen]
>
>
>
> That sentence (among others) is rather ambiguos; I wasn't trying
> to imply Mixmaster only offers DSS. I wanted to note that you
> don't have to choose which Type II remailer key to use; as all
> MixMaster remailers support DSS.

PGP started out with RSA v3 keys then
PGP got DSS v4 keys (or DH keys). CPunk uses both depending on the
remailer. Now PGP supports RSA v4 keys also (with added features and
larger signing keys if you want those). RSA v3 keys are depreciated
because they use the patented IDEA algorithm and the broken MD5 hash.
Still, PGP 2.6.3i/2.6.2 are one of the most trusted PGP versions ever!
GnuPG doesn't have IDEA installed by default, so it does not work with
RSA v3 keys :-(

Mixmaster is altogether different and uses (non-PGP) RSA keys and 3DES
encryption and MD5 signatures (which seems to be totally broken these
days, but that doesn't matter much for mixmaster traffic I think).

I also believe that QS cannot send CPunk messages, but you would have to
ask Richard. QS only uses PGP for creating and using nyms AFAIK and you
can use QS + Mixmaster and no other plugins at all!

Thomas
- --
"I don't know, it just seems to be so incredibly beautiful. It's magic."
- - emmel, alt.games.creatures, may 2005
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iQB5AwUBQo+jGgEP2l8iXKAJAQE39wMdE+sE96eQ
W/a3enV8Yr8/qASPj49G7RxS
nZb9ca5JUQqEeyxUO/mACyWCZWKvxyL8b8i/+1eW3vhBysbE37jZTXBbQ0Js/mVV
DBWy5wZ2eFnnXWAzHfNMg+OOBi4RWC3sqxZCvg==

=2HbZ
-----END PGP SIGNATURE-----

Anonymous

2005-05-21, 5:46 pm

In article < f0ebdb16181bfa37190577495a00abef@melontr
affickers.com>
A.Melon <juicy@melontraffickers.com> wrote:
>
> On 19 May 2005 22:45:37 -0000, BiKiKii Admin <Use-Author-Supplied-
> Address-Header@[127.1]> wrote:
>
> I also thought middleman remailers aren't able to be the last hop.
> Am I wrong?

Certain middlemen have the capability of posting to Usenet only, or would
be if they were configured properly. Look for MCNm or MCNp, the important
bit being the "m" & "p", or "Post" in their capstrings. Several middles
have this apparent capability, but as far as I can determine only dingo and
bikikii actually do it.

Thrasher Admin

2005-05-21, 5:46 pm

-----BEGIN PGP SIGNED MESSAGE-----

On 21 May 2005 19:37:09 -0000, J.Alfred Prufrock <Poet@your.svc>
wrote:

>I've noticed that QS always seems to choose a single remailer
>for the
>last hop regardless of the number of copies.
>
>e.g.:
>Chain: *,*,*;copies=3
>will generate a chain that uses the same remailer as the exit
>remailer for all three copies.
>
>frell,italy,panta
>italy,bigapple,panta
>hastio,frell,panta
>
>Always the same, even when it should be "random."
>
>Is there anyway to ensure that a "*" is truly random and not
>the same for every copy of the message?

When sending multiple copies of the same message the last remailer in
the chain has to be the same to prevent multiple copies being sent to
the final destination. The first to arrive is processed, the rest are
dropped.

- --
Cheers,
Thrasher.

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQEVAwUBQo9G42e9vBuCUlx7AQHlYQgAvdwdh3l4
X9IEoL340+6gs4TcHC7MZ+qJ
oBEHFnpTJpNBJ6ASR1RxZ2L2/jvvLmvnM5X5bx/DHA6hpRAnvoXqUnZ7AwRS5QAm
EJEx9Sh8rubHjcqXG/ KfJNRoh4W3xaOm8iYoD+PjZEJXpNfE1y69tZA97I
rtZ9z0
xczNtRYvyzuLi22SoRm5dW7EtJYueA8QFIn1zn8E
+EvHSQuL4iBBrfZhZ9YPW3fz
ZL1nDB7t2AL2JeE5SF7a3r6pCoZk1knG9evYY0mH
nMDPgQrimjmHTeCgr1Un/zWu
6/ 9yjt4HzxGQDljHqTxPeBdovydrtIszTybckak6Yf
UhKC3bYXsytw==
=DlSz
-----END PGP SIGNATURE-----

Thrasher Remailer

2005-05-21, 8:45 pm

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Hello all,

Thanks for all of your input, help and time.

I have updated my wiki to reflect the information in this thread
about how QS chooses Type I & II remailers in the header
'Chain:'.

Thanks very much;

Also, I have added some new "Credits" to my wiki ;-)

- ---

Question Everything...Stay Safe...herehere

Contact Info (finger-key enabled)
herehere@nym.panta-rhei.eu.org

- ---

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQA/AwUBQo/O6seAaJ6NbaCwEQNR3gCffT1f9orrq/PmdxHyw132FoIHWFEAoOYi
tiA/FpJ5BW7OlJ5siFuyFggG
=hVUw
-----END PGP SIGNATURE-----

Nomen Nescio

2005-05-21, 8:45 pm

In <428fa3aa$0$773$3a628fcd@reader20.nntp.hccnet.nl>,
nospam@hccnet.nl.invalid wrote:
>=====BEGIN PGP SIGNED MESSAGE=====
>Signature: 0x225CA009
>Date:
>Status: INVALID (Unknown)
>
>Thrasher Remailer wrote:
>
><snip>
>
>
>PGP started out with RSA v3 keys then
>PGP got DSS v4 keys (or DH keys). CPunk uses both depending on the
>remailer. Now PGP supports RSA v4 keys also (with added features and
>larger signing keys if you want those). RSA v3 keys are depreciated
>because they use the patented IDEA algorithm and the broken MD5 hash.
>Still, PGP 2.6.3i/2.6.2 are one of the most trusted PGP versions ever!
>GnuPG doesn't have IDEA installed by default, so it does not work with
>RSA v3 keys :-(
>
>Mixmaster is altogether different and uses (non-PGP) RSA keys and 3DES
>encryption and MD5 signatures (which seems to be totally broken these
>days, but that doesn't matter much for mixmaster traffic I think).
>
>I also believe that QS cannot send CPunk messages, but you would have to
>ask Richard. QS only uses PGP for creating and using nyms AFAIK and you
>can use QS + Mixmaster and no other plugins at all!
>

Weeeeellllllll..

Quicksilver does send CPunk messages if you're willing to handroll them.
just address the message to the first remailer in your handrolled chain.

::
Anon-To: remailer@panta-rhei.dyndns.org

##
Subject: Re: Attn: Zax ; it's herehere
X-No-Archive: yes
Newsgroups: alt.privacy.anon-server

msg body here

OR you can paste in an already encrypted handroll such as

::
Anon-To: mix@mixmaster.it

::
Encrypted: PGP

-----BEGIN PGP MESSAGE-----
Version: 2.6.3

qANQR1DBwE4DALvN5Qya7l

~~~~~~~~~~~~~~~~~~~~~
This message was posted via one or more anonymous remailing services.
The original sender is unknown. Any address shown in the From header
is unverified. You need a valid hashcash token to post to groups other
than alt.test and alt.anonymous.messages. Visit www.panta-rhei.dyndns.org
for abuse and hashcash info.

Thrasher Remailer

2005-05-22, 2:45 am

In article <7638fbcef36fc385ce43cada50594546@dizum.com>
Nomen Nescio <nobody@dizum.com> wrote:

> Weeeeellllllll..
>
>
> Quicksilver does send CPunk messages if you're willing to handroll them.
> just address the message to the first remailer in your handrolled chain.
>
> ::
> Anon-To: remailer@panta-rhei.dyndns.org
>
> ##
> Subject: Re: Attn: Zax ; it's herehere
> X-No-Archive: yes
> Newsgroups: alt.privacy.anon-server
>
> msg body here
>
>
> OR you can paste in an already encrypted handroll such as
>
> ::
> Anon-To: mix@mixmaster.it
>
> ::
> Encrypted: PGP
>
> -----BEGIN PGP MESSAGE-----
> Version: 2.6.3
>
> qANQR1DBwE4DALvN5Qya7l

That has nothing to do with QS.
You are just pasting headers and directives in the message body as you
would with any e-mail client. QS doesn't do anything except email it as
it would any message.

Thrasher Remailer

2005-05-22, 2:45 am

Thomas J. Boschloo

2005-05-22, 7:45 am

-----BEGIN PGP SIGNED MESSAGE-----

Nomen Nescio wrote:
<snip>
> Weeeeellllllll..
>
>
> Quicksilver does send CPunk messages if you're willing to handroll them.
> just address the message to the first remailer in your handrolled chain.
>
> ::
> Anon-To: remailer@panta-rhei.dyndns.org
>
> ##
> Subject: Re: Attn: Zax ; it's herehere
> X-No-Archive: yes
> Newsgroups: alt.privacy.anon-server
>
> msg body here

Panta is not pgponly (as most remailer are). AFAIK QS does not do the
PGP encryption for you (JBN2 probably will however):
"$remailer{"panta"} = "<remailer@panta-rhei.dyndns.org> cpunk mix hybrid
hcnews pgp latent ek ekx esub cut hash post repgp remix reord ext max
test inflt75 rhop5 klen1000";"

I also think you would need a hashcash header under ## above:
"POSTING RULES
To avoid spamming and flooding of newsgroups the Panta Rhei Remailer
enforces a hashcash requirement for all postings via the remailer
and the mail2news gateway."

> OR you can paste in an already encrypted handroll such as
>
> ::
> Anon-To: mix@mixmaster.it
>
> ::
> Encrypted: PGP
>
> -----BEGIN PGP MESSAGE-----
> Version: 2.6.3
>
> qANQR1DBwE4DALvN5Qya7l

Why would you want to do that?

Thomas
- --
"I don't know, it just seems to be so incredibly beautiful. It's magic."
- - emmel, alt.games.creatures, may 2005
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iQB5AwUBQpB5bQEP2l8iXKAJAQHYiQMgjYojHCt+
0fMgBSItjo2nGXA8es0ietv6
Y+eYEsPkqjeiidM74xrINMCp194+zPdDM/uB2iZvTJu+G86LwHrURyiXC3LYPVDy
slmM1EVgudf0b/LnS/m8rcB5PrFSPeHwq5E3Dg==
=C68v
-----END PGP SIGNATURE-----

Thrasher Remailer

2005-05-22, 5:46 pm

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Hello all,

If any of you were trying to follow my directions on how to DL
NNTPS NG messages via. Tor and Stunnel from
fleegle.bananasplit.info:5563 you may have been unable to do so.

Zax just moved all his remaling services to
'fleegle.bananasplit.info'; his old address was
'mail.bananasplit.info' (SMTP) and 'news.bananasplit.info' (NNTP)

Also, I made a few typo's in regards to 'NNTPS NG DLing' that I
just noticed when I was re-checking my wiki.

The typo's are now fixed and you will be able to DL NNTPS NG
messages via. Tor and Stunnel if you follow my directions.

The typos:

1. I posted that you should set QS's NNTP Accounts Manager
Plugin "News Server" setting to 'fleegle.bananasplit.info'; it
should be "127.0.0.1".

2. I posted that you should set QS's NNTP Account Manager
"Socks Proxy" as so:

Proxy Server: 127.0.0.1
Proxy Port: 5563
Socks Level: 5

The Account Manager Socks Proxy should be set as so:

Proxy Server: 127.0.0.1
Proxy Port: No Port
Socks Level: 5

Tor default exit policy now allows for port 119 (NNTP) exits; if
the node admin chooses to allow 119 that is. Most admins allow
the use of port 119, so you shouln't have any problems
connecting.

3. I wrote the stunnel.conf file to accept NNTP traffic via.
"accept = 5563"; the 'accept' setting should be "accept = 119".

Sorry about these typo's and I hope they didn't cause many
problems; I'm trying make my wiki perfect...

Here is my wiki "RemailingAndTor":

< http://wiki.noreply.org/noreply/The...RemailingAndTor
>

Please read it and let me know of any issues or errors, thanks

- ---

Question Everything...Stay Safe...herehere

Contact Info (finger-key enabled)
herehere@nym.panta-rhei.eu.org

- ---

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQA/AwUBQpCfHseAaJ6NbaCwEQNFvQCg3rVLIfDwQj/KCrT/NTI9dazg2NIAn0Ig
MVBvFE8eeMLqmdJXiC4AtuKW
=92/e
-----END PGP SIGNATURE-----

Zax

2005-05-22, 5:46 pm

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 22 May 2005 15:21:19 -0000, Thrasher Remailer wrote in
Message-Id: <TUU7O6ES38494.9731365741@reece.net.au>:

> Zax just moved all his remaling services to
> 'fleegle.bananasplit.info'; his old address was
> 'mail.bananasplit.info' (SMTP) and 'news.bananasplit.info' (NNTP)

The names haven't changed. fleegle is the name of a physical server
with address 82.133.6.118. news and mail are aliases that are currently
pointed at that server. Most providers use DNS aliases like this so that
services can be moved transparently from one host to another.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iQEVAwUBQpDKmmoLu9HNUqmMAQpOgQf/WfQTDl5y2HMU8WrCOScTTtxPclmcEOa1
yMiyAMHEWbp684z5BL1oAkbGPhrVrXQdy90qyju2
C3xdnL5b4MdHra10NvZKWmrX
ELOMnh3aGGJRqrBoc9CUmOsKXBRy18FSJzcv/i9IDwOybbSqi84rlgro2HLA9LDO
3JGejR8RE1ad33rwyiBZrs9BL/V5MdTr2ZPAhpb24jBhq6e0K0Rb7M8eaF1B8HOW
GKhclIARB+kGWpsuMvWOfvkX3kooJWdLvzMJo9Qt
d6A3YyzGk6+iuo0z70m/YwKc
mhH16m3YzrZzNZv8gKTGXJ8vVEtD59oVbcDIh1an
JngTQpJtWIvUKw==
=SHxF
-----END PGP SIGNATURE-----

--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>

Zax

2005-05-22, 5:46 pm

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Sun, 22 May 2005 18:08:26 +0000 (UTC), Zax wrote in
Message-Id: <d6qhqq$99v$1@bananasplit.info>:

> The names haven't changed. fleegle is the name of a physical server
> with address 82.133.6.118. news and mail are aliases that are currently
> pointed at that server. Most providers use DNS aliases like this so that
> services can be moved transparently from one host to another.

I've updated your wiki page with the correct addresses. In addition to
the ones mentioned in my previous message, the entry for getting stats
from www.bananasplit.info:443 is now pinger.bananasplit.info:443

Nice page, there's some really useful stuff on there.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iQEVAwUBQpDQ02oLu9HNUqmMAQo99gf9Gq4tMfpx
4qr0t9q1qPSmwKkqgl3ftDXH
jKDyYZkBsfiWS5KBx29+Rvm2uMJRQ3CcLjdQxEfE
Ab5xCJ0b529R32rXmP3kFoqm
Rct9io8q97S2OGmu01IieLyjFkzLVE4AFouD/CnzmKoQYNgiJ5m+6hi3CB0CW+mz
Mah5wa09ilJEHUm81SdX7ZL2qyya5lrtbVRvd2Sv
pBdzIlIXIC9ZdRCPnZhErqDN
k6DfmdE/ yKKfuZO3b0wmM9+wW83oWtSlXtHjm6H8UUmTdfcp
its1UT2EzQtowV6+
yaLDfOu/ U1FsGE5mBlnAU5mjIumcZzBLWCghJXvTVRHe3M8U
NLwXjA==
=xYzb
-----END PGP SIGNATURE-----

--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>

Thrasher Remailer

2005-05-22, 5:46 pm

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

On Sun, 22 May 2005 18:34:59 +0000 (UTC), you wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> On Sun, 22 May 2005 18:08:26 +0000 (UTC), Zax wrote in
> Message-Id: <d6qhqq$99v$1@bananasplit.info>:
>
> I've updated your wiki page with the correct addresses. In addition to
> the ones mentioned in my previous message, the entry for getting stats
> from www.bananasplit.info:443 is now pinger.bananasplit.info:443

Great! Thanks for the help.

> Nice page, there's some really useful stuff on there.

I'm glad you like it; it wouldn't have been possible without
your help and services.

I really like having two options for the use of all remailing
services via. Tor and TLS or via. Tor and Hidden Services. If
one is down the other is up :-)

Thanks again Zax,

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQA/ AwUBQpDVB8eAaJ6NbaCwEQOqBQCdGBH4Erf4+xEq
ijy65yEvU8OqK4IAn1jE
8Qx/46MfXPFHugKuvhMdvIfM
=a6wE
-----END PGP SIGNATURE-----

Thrasher Remailer

2005-05-22, 5:46 pm

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

On Sun, 22 May 2005 18:08:26 +0000 (UTC), you wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> On 22 May 2005 15:21:19 -0000, Thrasher Remailer wrote in
> Message-Id: <TUU7O6ES38494.9731365741@reece.net.au>:
>
>
> The names haven't changed. fleegle is the name of a physical server
> with address 82.133.6.118. news and mail are aliases that are currently
> pointed at that server. Most providers use DNS aliases like this so that
> services can be moved transparently from one host to another.
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.0 (GNU/Linux)
>
> iQEVAwUBQpDKmmoLu9HNUqmMAQpOgQf/WfQTDl5y2HMU8WrCOScTTtxPclmcEOa1
> yMiyAMHEWbp684z5BL1oAkbGPhrVrXQdy90qyju2
C3xdnL5b4MdHra10NvZKWmrX
> ELOMnh3aGGJRqrBoc9CUmOsKXBRy18FSJzcv/i9IDwOybbSqi84rlgro2HLA9LDO
> 3JGejR8RE1ad33rwyiBZrs9BL/V5MdTr2ZPAhpb24jBhq6e0K0Rb7M8eaF1B8HOW
> GKhclIARB+kGWpsuMvWOfvkX3kooJWdLvzMJo9Qt
d6A3YyzGk6+iuo0z70m/YwKc
> mhH16m3YzrZzNZv8gKTGXJ8vVEtD59oVbcDIh1an
JngTQpJtWIvUKw==
> =SHxF
> -----END PGP SIGNATURE-----
>
> --
> pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
> Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
> uid Admin <admin.bananasplit.info>

Hey Zax,

Thanks for clearing that up for me; I am using fleegle address
and all SMTP/M2N seems to be working.

Am I correct in changing the stunnel.conf file from
news.bananasplit.info:5563 to fleegle.bananasplit.info:5563?

Am I correct in changing the stunnel.conf file from
mail.bananasplit.info:2525 to fleegle.bananasplit.info:2525?

Fleegle.bananasplit.info:5563 works for DLing NNTPS but
occasionally I get a "502 Permission Denied" error message.
When I get this error the only way I can again DL NNTPS from
fleegle is to run the banana.pem commands again.

BTW, when I compaire the MD5 and SHA1 fingerprints I get from
running stunnel "-fingerprint" commands (-sha1, etc) they are
different from the ones you have posted on your site. I am
using fleegle.bananasplit.info:5563 in the banana.pem commands.

Do you know my fingerprints are different then the ones on your
site?

Thanks alot Zax,

- ---

Question Everything...Stay Safe...hererhere

Contact Info (finger-key enabled)
herehere@nym.panta-rhei.eu.org

- ---

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQA/ AwUBQpDSQceAaJ6NbaCwEQOqrQCgmOupOdYHOf4C
X2xJ6zbIUb94uKsAoPZk
zp4G5k1JBzheVK8IrLtefRxf
=ZHvr
-----END PGP SIGNATURE-----

Zax

2005-05-22, 5:46 pm

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 22 May 2005 20:00:58 -0000, Thrasher Remailer wrote in
Message-Id: <FGNZG6LG38495.167337963@reece.net.au>:

> Am I correct in changing the stunnel.conf file from
> news.bananasplit.info:5563 to fleegle.bananasplit.info:5563?
No, you should leave it as news.bananasplit.info:5563. The alias 'news'
currently points to the server 'fleegle', but I might change it again
one day, if (for example) I had a hardware failure.

> Am I correct in changing the stunnel.conf file from
> mail.bananasplit.info:2525 to fleegle.bananasplit.info:2525?
As above, leave it as mail.bananasplit.info:2525

> Fleegle.bananasplit.info:5563 works for DLing NNTPS but
> occasionally I get a "502 Permission Denied" error message.
> When I get this error the only way I can again DL NNTPS from
> fleegle is to run the banana.pem commands again.
No idea why that is, I'll check the news logs and see if anything shows
up.

> Do you know my fingerprints are different then the ones on your
> site?
The ones on my website were out of date, I've corrected them now and
provided a new detached signature. For reference, the signatures are:

MD5 Fingerprint
0A:24:D2:1E:93:86:EA:E8:9B:82:15:5A:2C:7
B:95:10

SHA1 Fingerprint
9D:C9:97:A1:0E:8C:1F:85:4F:FE:53:DB:3C:7
5:38:41:10:1E:F0:FC

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iQEVAwUBQpEDp2oLu9HNUqmMAQprawf5AerWKFxZ
Z71fG5IO+6KUU6t54SfOOZAt
cFxdCZ9Dsi2UVb9EvN+Jmy0bK63h6/pPkvAkuw3leQ9q0ZzHcmFwYlQVE5jfa7T7
MddTsEy3s0WuO+Mr5VT2vOylLUD64vOZNS1AHPO7
tqOESV3fiRJwalf3BUe1ovYD
bIdNn8Woh08PhTD53zM8fim+2Wjw5GNm6slTiFwn
zkYWxm0rkXVIHat3kZi3d2K9
NaADYtRpl5cMkF242ktisrEE23LSMDh2k1vMA1yA
wTcNHdcpYjF6CuYIi1JNFptD
/ BchNNOLJKrnF4z+3gd2qjwnAoMj9EiUmctbXzAEf
JV9AIRFuuX1CQ==
=sdV3
-----END PGP SIGNATURE-----

--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>

Thrasher Remailer

2005-05-23, 5:49 pm

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

On Sun, 22 May 2005 22:11:51 +0000 (UTC), you wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> On 22 May 2005 20:00:58 -0000, Thrasher Remailer wrote in
> Message-Id: <FGNZG6LG38495.167337963@reece.net.au>:
> No idea why that is, I'll check the news logs and see if anything shows
> up.

The 502 error seems to have stoped, your NNTPS is working great;
maybe it was somthing on my side?

My Tor client or nodes may have had issues yesterday; I did not
reboot until today.

Also, I had my QS News Accounts Manager set to DL from a.t.a. on
your NNTPS server. I thought you carried a.t.a. but I see you
carry alt.testing.testing; this could have caused the 502 error
when I tried to DL from your a.a.m. NG.

I tried DLing from 'alt.test.a' on your NNTPS server and I
recieved the 502 error message. I tried a.t.a because you don't
carry it; I wanted to see what response I would get.

> The ones on my website were out of date, I've corrected them now and
> provided a new detached signature.

Thank you.

> For reference, the signatures are:
>
> MD5 Fingerprint
> 0A:24:D2:1E:93:86:EA:E8:9B:82:15:5A:2C:7
B:95:10
>
> SHA1 Fingerprint
> 9D:C9:97:A1:0E:8C:1F:85:4F:FE:53:DB:3C:7
5:38:41:10:1E:F0:FC
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.0 (GNU/Linux)
>
> iQEVAwUBQpEDp2oLu9HNUqmMAQprawf5AerWKFxZ
Z71fG5IO+6KUU6t54SfOOZAt
> cFxdCZ9Dsi2UVb9EvN+Jmy0bK63h6/pPkvAkuw3leQ9q0ZzHcmFwYlQVE5jfa7T7
> MddTsEy3s0WuO+Mr5VT2vOylLUD64vOZNS1AHPO7
tqOESV3fiRJwalf3BUe1ovYD
> bIdNn8Woh08PhTD53zM8fim+2Wjw5GNm6slTiFwn
zkYWxm0rkXVIHat3kZi3d2K9
> NaADYtRpl5cMkF242ktisrEE23LSMDh2k1vMA1yA
wTcNHdcpYjF6CuYIi1JNFptD
> / BchNNOLJKrnF4z+3gd2qjwnAoMj9EiUmctbXzAEf
JV9AIRFuuX1CQ==
> =sdV3
> -----END PGP SIGNATURE-----
>
> --
> pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
> Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
> uid Admin <admin.bananasplit.info>

Thanks very much Zax,

- ---

Question Everything...Stay Safe...herehere

Contact Info (finger-key enabled)
hereherer@nym.panta-rhei.eu.org

- ---

-----BEGIN PGP SIGNATURE-----
Version: N/A

iQA/AwUBQpIZyceAaJ6NbaCwEQMX/wCgjPjN0b2YYKdeMjhxFkOhyFPu0fkAn0vK
Ow33LsU/ZyqywdhlHiCO3SvK
=oVfB
-----END PGP SIGNATURE-----