Replying to Avatar sommerfeld

I use clouldflare as a proxy for my public webservers and found out the proxy is hostile to Tor traffic but ONLY without the Tor Browser User Agent.

When proxying any other app through tor (i.e. orbot + amethyst) I would get 403 timeouts. When querying the same page with the official Tor Browser, everything was fine.

Fortunately there's a solution: I created a custom cloudflare WAF firewall rule to allow all tor traffic unconditionally. Seems to work!
Avatar
sommerfeld 2y ago

Just try to use nostr over Tor and you will realize most relays, CDNs, NIP05 webservers are tor hostile.

Come on people do better! If you're using cloudflare or any other proxy firewall service for your web servers, take some time to make it tor friendly.

Next step is posting screenshots to shame some well known accounts.

nostr:nevent1qqszmhsnlvegwuj5p70jhlswd26g3yg7mm033nl8dyadztf5af4yawspz9mhxue69uhkummnw3ezuamfdejj7q3q6r0tl8a39hhcrapa03559xahsjqj4s0y6t2n5gpdk64v06jtgekqxpqqqqqqz354wgl

Reply to this note

Please Login to reply.

Discussion

Avatar
0xtr 2y ago

wss://nostr.oxtr.dev does not block connections from TOR relays. I'm also working on making an onion URL available.

Avatar
sommerfeld 2y ago

Your NIP05 verification is giving me a 403 timeout when using amethyst with orbot.

Avatar
0xtr 2y ago

weird.. I haven't set up any special rules blacklisting certain traffic. I'll take a look at it.

Avatar
Lockesmith 2y ago

I'll keep an eye out for those 👀

Shame on anyone claiming "freedom tech" that isn't truly supporting it.

Avatar
Love&Thunder 2y ago

Why would u trust cloudflare they're evil

Avatar
sommerfeld 2y ago

They are as evil as any other big tech company.

Their builtin proxy alllows you to not dox IPs in your public DNS records. I only use them because of that.

Avatar
Mazin 2y ago

I’ve done some testing in the past and generally speaking found nostr.wine to work smoothly with tor. Are you seeing any issues?

Avatar
sommerfeld 2y ago

The relay works fine, thanks! But your NIP05 verification does not:

Avatar
Mazin 2y ago

Story checks out :) I’ll fix that now.

Avatar
Mazin 2y ago

How about now?

Avatar
sommerfeld 2y ago

All gucci 👌