| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144 | <?xml version="1.0"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8" /><title>This is a Tor Exit Router</title><!--This notice is intended to be placed on a virtual host for a domain thatyour Tor exit node IP reverse resolves to so that people who may be aboutto file an abuse complaint would check it first before bothering you oryour ISP. Ex:http://tor-exit.yourdomain.org or http://tor-readme.yourdomain.org.This type of setup has proven very effective at reducing abuse complaintsfor exit node operators.There are a few places in this document that you may want to customize.They are marked with FIXME.--></head><body><p style="text-align:center; font-size:xx-large; font-weight:bold">This is aTor Exit Router</p><p>Most likely you are accessing this website because you had some issue withthe traffic coming from this IP. This router is part of the <ahref="https://www.torproject.org/">Tor Anonymity Network</a>, which isdedicated to <a href="https://www.torproject.org/about/overview">providingprivacy</a> to people who need it most: average computer users. Thisrouter IP should be generating no other traffic, unless it has beencompromised.</p><!-- FIXME: you should probably grab your own copy of how_tor_works_thumb.png     and serve it locally --><p style="text-align:center"><a href="https://www.torproject.org/about/overview"><img src="https://www.torproject.org/images/how_tor_works_thumb.png" alt="How Tor works" style="border-style:none"/></a></p><p>Tor sees use by <a href="https://www.torproject.org/about/torusers">manyimportant segments of the population</a>, including whistle blowers,journalists, Chinese dissidents skirting the Great Firewall and oppressivecensorship, abuse victims, stalker targets, the US military, and lawenforcement, just to name a few.  While Tor is not designed for maliciouscomputer users, it is true that they can use the network for malicious ends.In reality however, the actual amount of <ahref="https://www.torproject.org/docs/faq-abuse">abuse</a> is quite low. Thisis largely because criminals and hackers have significantly better access toprivacy and anonymity than do the regular users whom they prey upon. Criminalscan and do <ahref="http://voices.washingtonpost.com/securityfix/2008/08/web_fraud_20_tools.html">build,sell, and trade</a> far larger and <ahref="http://voices.washingtonpost.com/securityfix/2008/08/web_fraud_20_distributing_your.html">morepowerful networks</a> than Tor on a daily basis. Thus, in the mind of thisoperator, the social need for easily accessible censorship-resistant private,anonymous communication trumps the risk of unskilled bad actors, who arealmost always more easily uncovered by traditional police work than byextensive monitoring and surveillance anyway.</p><p>In terms of applicable law, the best way to understand Tor is to consider it anetwork of routers operating as common carriers, much like the Internetbackbone. However, unlike the Internet backbone routers, Tor routersexplicitly do not contain identifiable routing information about the source ofa packet, and no single Tor node can determine both the origin and destinationof a given transmission.</p><p>As such, there is little the operator of this router can do to help you trackthe connection further. This router maintains no logs of any of the Tortraffic, so there is little that can be done to trace either legitimate orillegitimate traffic (or to filter one from the other).  Attempts toseize this router will accomplish nothing.</p><!-- FIXME: US-Only section. Remove if you are a non-US operator --><p>Furthermore, this machine also serves as a carrier of email, which means thatits contents are further protected under the ECPA. <ahref="http://www.law.cornell.edu/uscode/text/18/2707">18USC 2707</a> explicitly allows for civil remedies ($1000/account<i><b>plus</b></i>  legal fees)in the event of a seizure executed without good faith or probable cause (itshould be clear at this point that traffic with an originating IP address ofFIXME_DNS_NAME should not constitute probable cause to seize themachine). Similar considerations exist for 1st amendment content on thismachine.</p><!-- FIXME: May or may not be US-only. Some non-US tor nodes have in     fact reported DMCA harassment... --><p>If you are a representative of a company who feels that this router is beingused to violate the DMCA, please be aware that this machine does not host orcontain any illegal content. Also be aware that network infrastructuremaintainers are not liable for the type of content that passes over theirequipment, in accordance with <ahref="http://www.law.cornell.edu/uscode/text/17/512">DMCA"safe harbor" provisions</a>. In other words, you will have just as much lucksending a takedown notice to the Internet backbone providers. Please consult<a href="https://www.torproject.org/eff/tor-dmca-response">EFF's preparedresponse</a> for more information on this matter.</p><p>For more information, please consult the following documentation:</p><ol><li><a href="https://www.torproject.org/about/overview">Tor Overview</a></li><li><a href="https://www.torproject.org/docs/faq-abuse">Tor Abuse FAQ</a></li><li><a href="https://www.torproject.org/eff/tor-legal-faq">Tor Legal FAQ</a></li></ol><p>That being said, if you still have a complaint about the router,  you mayemail the <a href="mailto:FIXME_YOUR_EMAIL_ADDRESS">maintainer</a>. Ifcomplaints are related to a particular service that is being abused, I willconsider removing that service from my exit policy, which would prevent myrouter from allowing that traffic to exit through it. I can only do this on anIP+destination port basis, however. Common P2P ports arealready blocked.</p><p>You also have the option of blocking this IP address and others onthe Tor network if you so desire. The Tor project provides a <ahref="https://check.torproject.org/cgi-bin/TorBulkExitList.py">web service</a>to fetch a list of all IP addresses of Tor exit nodes that allow exiting to aspecified IP:port combination, and an official <ahref="https://www.torproject.org/tordnsel/dist/">DNSRBL</a> is also available todetermine if a given IP address is actually a Tor exit server. Pleasebe consideratewhen using these options. It would be unfortunate to deny all Tor users accessto your site indefinitely simply because of a few bad apples.</p></body></html>
 |