Why don't you acczept TOR connections ?

Proxy: 9150
Hosts available:
krautrelay.kraut.space

Connecting to krautrelay.kraut.space:25
Connection closed!
ERROR: 20016 Not a Winsocket error
Error at Request Done
Failed

On 2022-08-10 18:33, Nomen Nescio wrote:
> Why don't you acczept TOR connections ?
>
> Proxy: 9150
> Hosts available:
> krautrelay.kraut.space
>
> Connecting to krautrelay.kraut.space:25
> Connection closed!
> ERROR: 20016 Not a Winsocket error
> Error at Request Done
> Failed
>

krautrelay.kraut.space is not a Tor address.
Tor addresses end in .onion. Example :

b42o7yhesx3fon7bzak4rkq7ax2yoanzapykqpzyznil6obcybe3zlyd.onion:25

Only a few remailer operators offer onion servers. To be more precise
they are Tor SMTP hidden services. Connecting to them allows remailer
users to anonymously inject their messages into the remailer network.
You can find these Tor services listed here:

<https://www.sec3.net/misc/mail-relays.txt>

--
SEC3

YAMN Tutorials - https://sec3.net/yamnhelp

Nomen Nescio <nobody@dizum.com> wrote:

>Why don't you acczept TOR connections ?
>
>Proxy: 9150
>Hosts available:
> krautrelay.kraut.space
>
>Connecting to krautrelay.kraut.space:25
>Connection closed!
> ERROR: 20016 Not a Winsocket error
> Error at Request Done
>Failed

Works from here, it just looks as if the server certificate has expired.

| 08:39:50.963 0 SMTP State: Trying server 'krautrelay.kraut.space', port 25 for 'mix@krautrelay.kraut.space' ...
| 08:39:50.963 0 SMTP State: 'From:' header set to 'Anonymous <anonymous@hotmail.co.uk>', EHLO 'hotmail.co.uk'
| 08:39:50.963 0 SMTP State: Connecting with mail host (krautrelay.kraut.space:25 - 60000:40000 - TLS required - EHLO 'hotmail.co.uk' - SOCKS5 - no authentication) ...
| 08:39:50.963 > SMTP State: Connecting to 127.0.0.1.
| 08:40:05.613 > SMTP State: Connected.
| 08:40:06.953 0 SMTP State: Connected with 'krautrelay.kraut.space', port 25
| 08:40:06.953 0 SMTP Greeting:
| 08:40:06.953 0 SMTP Protocol Capabilities: PIPELINING|SIZE 10240000|VRFY|ETRN|STARTTLS|ENHANCEDSTATUSCODES|8BITMIME|DSN|SMTPUTF8|CHUNKING
| 08:40:06.953 0 SMTP Encryption: TLS supported
| 08:40:06.953 0 SMTP State: Sending chunk 1 of 1 from 'Anonymous <anonymous@hotmail.co.uk>' to 'mix@krautrelay.kraut.space', server 'krautrelay.kraut.space', port 25 ...
| 08:40:07.843 > SMTP SSL Status Info: SSL status: "before/connect initialization"
| 08:40:07.843 > SMTP SSL Status Info: SSL status: "before/connect initialization"
| 08:40:07.843 > SMTP SSL Status Info: SSL status: "SSLv2/v3 write client hello A"
| 08:40:09.123 > SMTP SSL Status Info: SSL status: "SSLv3 read server hello A"
| 08:40:09.363 > SMTP TLA Certificate (Depth 0, REJECTED_NOT_ACTIVE - Connection not refused (Filter deactivated)):
| 08:40:09.363 Fprint : 619C63673408AFE82B217413CE13D941
| 08:40:09.363 Subject: /CN=krautrelay.kraut.space
| 08:40:09.363 Issuer : /C=US/O=Let's Encrypt/CN=R3
| 08:40:09.363 Valid : 2021-09-23 10:47:15 ... 2021-12-22 10:47:14
| 08:40:09.373 > SMTP TLA Certificate (Depth 0, REJECTED_NOT_ACTIVE - Connection not refused (Filter deactivated)):
| 08:40:09.373 Fprint : 619C63673408AFE82B217413CE13D941
| 08:40:09.373 Subject: /CN=krautrelay.kraut.space
| 08:40:09.373 Issuer : /C=US/O=Let's Encrypt/CN=R3
| 08:40:09.373 Valid : 2021-09-23 10:47:15 ... 2021-12-22 10:47:14
| 08:40:09.373 > SMTP SSL Status Info: SSL status: "SSLv3 read server certificate A"
| 08:40:09.373 > SMTP SSL Status Info: SSL status: "SSLv3 read server key exchange A"
| 08:40:09.373 > SMTP SSL Status Info: SSL status: "SSLv3 read server done A"
| 08:40:09.443 > SMTP SSL Status Info: SSL status: "SSLv3 write client key exchange A"
| 08:40:09.443 > SMTP SSL Status Info: SSL status: "SSLv3 write change cipher spec A"
| 08:40:09.443 > SMTP SSL Status Info: SSL status: "SSLv3 write finished A"
| 08:40:09.443 > SMTP SSL Status Info: SSL status: "SSLv3 flush data"
| 08:40:10.303 > SMTP SSL Status Info: SSL status: "SSLv3 read server session ticket A"
| 08:40:10.303 > SMTP SSL Status Info: SSL status: "SSLv3 read finished A"
| 08:40:10.303 > SMTP SSL Status Info: SSL status: "SSL negotiation finished successfully"
| 08:40:10.303 > SMTP SSL Status Info: SSL status: "SSL negotiation finished successfully"
| 08:40:10.303 > SMTP SSL Status Info: Cipher: name = DHE-RSA-AES256-GCM-SHA384; description = DHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(256) Mac=AEAD|; bits = 256; version = TLSv1/SSLv3;
| 08:40:15.513 0 SMTP State: Mail was sent in 1 chunk.
| 08:40:16.193 > SMTP State: Disconnecting.
| 08:40:16.193 > SMTP Response: Bye
| 08:40:16.193 > SMTP State: Disconnected.
| 08:40:16.193 0 SMTP State: Mail to 'mix@krautrelay.kraut.space' with exchange server 'krautrelay.kraut.space' was sent

* SEC3 schrieb am 2022-08-10:
> Only a few remailer operators offer onion servers. To be more precise
> they are Tor SMTP hidden services. Connecting to them allows remailer
> users to anonymously inject their messages into the remailer network.
> You can find these Tor services listed here:

Is there somewhere a good description of how to set it up? Maybe I can
offer such a service too.

On 2022-08-23 09:35, Jens Kubieziel wrote:
> * SEC3 schrieb am 2022-08-10:
>> Only a few remailer operators offer onion servers. To be more precise
>> they are Tor SMTP hidden services. Connecting to them allows remailer
>> users to anonymously inject their messages into the remailer network.
>> You can find these Tor services listed here:
>
> Is there somewhere a good description of how to set it up? Maybe I can
> offer such a service too.

This is how I did it. I have Debian Buster Os and Postfix MTA.

1. Open up TCP port 2525 in your firewall.

2. Install tor:
apt install tor
https://www.torproject.org/docs/debian.html.en

3. In /etc/postfix/master.cf add a listening port for smtpd on port 10025:

10025 inet n - - - - smtpd

Then in /etc/tor/torrc create a hidden service that listens on
port 2525 and sends it to port 10025:

HiddenServiceDir /var/lib/tor/hidden_service/
HiddenServiceVersion 3
HiddenServicePort 2525 127.0.0.1:10025
[...]

4. Restart postfix and restart tor. Your hidden service should now be
operational. You can take a look at

/var/lib/tor/hidden_service/hostname

to see what your new onion address is.

5. Ensure you prevent being an open relay situation. In Postfix allow
delivery to only remailer addresses. In main.cf this is done under the
smtpd_relay_restrictions section:

check_recipient_access
hash:/etc/postfix/remailers_whitelist,

Here is my remailers whitelist file (This file will need to be updated
as new remailers arrive and old remailers depart):

## /etc/postfix/remailers_whitelist
# MIXMASTER REMAILERS
banana@mixmaster.mixmin.net OK
remailer@dizum.com OK
godot@remailer.frell.eu.org OK
godot2@remailer.frell.eu.org OK
hsub@mixmaster.mixmin.net OK
mix@krautrelay.kraut.space OK
mix@middleman.remailer.online OK
mixmaster@remailer.paranoici.org OK
senshiremailer@gmx.de OK
slowmix@mixmaster.mixmin.net OK
mixmaster@tnetconsulting.net OK
# YAMN REMAILERS
yamn@fragged.tearable.org OK
nyam@remailer.frell.eu.org OK
yamn@middleman.remailer.online OK
yamn@yamn.paranoici.org OK
yamn@sinless.space OK
yamn@tnetconsulting.net OK
yamn@virebent.art OK
yamn@mixmin.net OK
yamn2@mixmin.net OK
yamn3@mixmin.net OK
yamn4@mixmin.net OK
# NYM SERVERS
config@nym.mixmin.net OK
send@nym.mixmin.net OK
config@nymph.paranoici.org OK
send@nymph.paranoici.org OK

--
SEC3

YAMN Tutorials - https://sec3.net/yamnhelp