October 2012 - tor-commits - lists.torproject.org

[translation/liveusb-creator] Update translations for liveusb-creator
by translation＠torproject.org 09 Oct '12

09 Oct '12

commit 93028d2d46f7238bb9c9d989f13d51e7ca64e8e7 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Oct 9 12:15:34 2012 +0000 Update translations for liveusb-creator --- it/it.po | 12 ++++++------ 1 files changed, 6 insertions(+), 6 deletions(-) diff --git a/it/it.po b/it/it.po index b123ac0..3963531 100644 --- a/it/it.po +++ b/it/it.po @@ -13,7 +13,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2012-04-13 14:16+0200\n" -"PO-Revision-Date: 2012-10-09 11:45+0000\n" +"PO-Revision-Date: 2012-10-09 11:51+0000\n" "Last-Translator: spawned76 <fswitch20(a)hotmail.com>\n" "Language-Team: Italian (http://www.transifex.com/projects/p/torproject/language/it/)\n" "MIME-Version: 1.0\n" @@ -276,7 +276,7 @@ msgstr "Impossibile scrivere su %(device)s, operazione ignorata." msgid "" "Some partitions of USB device %(device)s are mounted. They will be unmounted" " before starting the installation process." -msgstr "" +msgstr "Il mount di alcune partizioni sul dispositivo USB %(device)s è avvenuto correttamente. L'operazione di unmount verrà effettuata prima di iniziare il processo di installazione" #: ../liveusb/creator.py:786 ../liveusb/creator.py:886 msgid "Unknown filesystem. Your device may need to be reformatted." @@ -316,7 +316,7 @@ msgstr "Unmounting %(device)s" #: ../liveusb/creator.py:846 #, python-format msgid "Mount %s exists after unmounting" -msgstr "" +msgstr "Mount %s esiste dopo l'operazione di unmount" #: ../liveusb/creator.py:883 ../liveusb/creator.py:1203 msgid "Verifying filesystem..." @@ -325,7 +325,7 @@ msgstr "Verifica del filesystem in corso..." #: ../liveusb/creator.py:907 #, python-format msgid "Unable to change volume label: %(message)s" -msgstr "" +msgstr "Impossibile cambiare l'etichetta di volume: %(message)s" #: ../liveusb/creator.py:912 ../liveusb/creator.py:1236 msgid "Installing bootloader..." @@ -353,7 +353,7 @@ msgstr "Formattazione %(device)s con filesystem FAT32" #: ../liveusb/creator.py:1109 #, python-format msgid "Resetting Master Boot Record of %s" -msgstr "" +msgstr "Reset del Master Boot Record di %s in corso" #: ../liveusb/creator.py:1112 msgid "" @@ -362,7 +362,7 @@ msgstr "Impossibile effettuare il reset dell'MBR. Probabilmente non hai il packa #: ../liveusb/creator.py:1115 msgid "Drive is a loopback, skipping MBR reset" -msgstr "" +msgstr "Il drive è una unità di loopback, operazione reset MBR ignorata" #: ../liveusb/creator.py:1119 ../liveusb/creator.py:1382 #, python-format

1 0

[translation/liveusb-creator] Update translations for liveusb-creator
by translation＠torproject.org 09 Oct '12

09 Oct '12

commit 5548e7ad8f7795e50048ab63456381985244ab3d Author: Translation commit bot <translation(a)torproject.org> Date: Tue Oct 9 11:45:35 2012 +0000 Update translations for liveusb-creator --- it/it.po | 16 ++++++++-------- 1 files changed, 8 insertions(+), 8 deletions(-) diff --git a/it/it.po b/it/it.po index 0e7e6bc..b123ac0 100644 --- a/it/it.po +++ b/it/it.po @@ -13,7 +13,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2012-04-13 14:16+0200\n" -"PO-Revision-Date: 2012-10-09 11:14+0000\n" +"PO-Revision-Date: 2012-10-09 11:45+0000\n" "Last-Translator: spawned76 <fswitch20(a)hotmail.com>\n" "Language-Team: Italian (http://www.transifex.com/projects/p/torproject/language/it/)\n" "MIME-Version: 1.0\n" @@ -269,7 +269,7 @@ msgstr "La versione di syslinux-extlinux in uso non supporta il filesystem ext4" #: ../liveusb/creator.py:718 #, python-format msgid "Unable to write on %(device)s, skipping." -msgstr "" +msgstr "Impossibile scrivere su %(device)s, operazione ignorata." #: ../liveusb/creator.py:737 #, python-format @@ -287,7 +287,7 @@ msgstr "Filesystem sconosciuto. Potrebbe essere necessario formattare il disco d msgid "" "Unsupported filesystem: %s\n" "In case you are trying to upgrade a manually installed Tails system (that is, if it was installed without this installer), this option is not supported: you need to install it anew to start with, e.g. by choosing the \"Clone Tails\" action instead." -msgstr "" +msgstr "Filesystem non supportato: %s\nSe si sta provando ad aggiornare manualmente una installazione Tails ( installata senza programma di installazione), \nl'operazione non è supportata: reinstallare nuovamente Tails scegliendo l'opzione \"Clone Tails\"." #: ../liveusb/creator.py:791 ../liveusb/creator.py:889 #, python-format @@ -297,12 +297,12 @@ msgstr "Filesystem non supportato: %s" #: ../liveusb/creator.py:807 #, python-format msgid "Unknown dbus exception while trying to mount device: %(message)s" -msgstr "" +msgstr "Eccezione dbus sconosciuta mentre veniva eseguito il mount del dispositivo: %(message)s" #: ../liveusb/creator.py:811 #, python-format msgid "Unable to mount device: %(message)s" -msgstr "" +msgstr "Impossibile eseguire il mount del dispositivo: %(message)s" #: ../liveusb/creator.py:823 msgid "No mount points found" @@ -311,7 +311,7 @@ msgstr "Nessun punto di mount definito" #: ../liveusb/creator.py:834 #, python-format msgid "Unmounting %(device)s" -msgstr "" +msgstr "Unmounting %(device)s" #: ../liveusb/creator.py:846 #, python-format @@ -334,7 +334,7 @@ msgstr "Installazione bootloader..." #: ../liveusb/creator.py:935 ../liveusb/creator.py:1254 #, python-format msgid "Removing %(file)s" -msgstr "" +msgstr "Cancellazione %(file)s in corso" #: ../liveusb/creator.py:1017 #, python-format @@ -348,7 +348,7 @@ msgstr "Impossibile trovare la partizione" #: ../liveusb/creator.py:1060 #, python-format msgid "Formatting %(device)s as FAT32" -msgstr "" +msgstr "Formattazione %(device)s con filesystem FAT32" #: ../liveusb/creator.py:1109 #, python-format

1 0

[translation/liveusb-creator] Update translations for liveusb-creator
by translation＠torproject.org 09 Oct '12

09 Oct '12

commit 2ef122ebdc617492093dc948f3784644473ead7e Author: Translation commit bot <translation(a)torproject.org> Date: Tue Oct 9 11:15:35 2012 +0000 Update translations for liveusb-creator --- it/it.po | 66 +++++++++++++++++++++++++++++++------------------------------- 1 files changed, 33 insertions(+), 33 deletions(-) diff --git a/it/it.po b/it/it.po index 31f8cc2..0e7e6bc 100644 --- a/it/it.po +++ b/it/it.po @@ -13,7 +13,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2012-04-13 14:16+0200\n" -"PO-Revision-Date: 2012-10-09 10:45+0000\n" +"PO-Revision-Date: 2012-10-09 11:14+0000\n" "Last-Translator: spawned76 <fswitch20(a)hotmail.com>\n" "Language-Team: Italian (http://www.transifex.com/projects/p/torproject/language/it/)\n" "MIME-Version: 1.0\n" @@ -61,7 +61,7 @@ msgstr "Attenzione: questo programma necessita dei permessi di amministratore. P #: ../liveusb/gui.py:413 msgid "Unable to find any USB drive" -msgstr "" +msgstr "Nessuna periferica USB trovata" #: ../liveusb/gui.py:521 msgid "" @@ -94,14 +94,14 @@ msgstr "L'installazione è stata completata. Premere OK per chiudere il programm msgid "" "The Master Boot Record on your device is blank. Pressing 'Create Live USB' " "again will reset the MBR on this device." -msgstr "" +msgstr "Il Master Boot Record del disco è vuoto. Premendo nuovamente il tasto 'Create Live USB' l'MBR verrà resettato." #: ../liveusb/gui.py:624 msgid "" "Warning: The Master Boot Record on your device does not match your system's " "syslinux MBR. If you have trouble booting this stick, try running the " "liveusb-creator with the --reset-mbr option." -msgstr "" +msgstr "Attenzione: il Master Boot Record del disco non corrisponde all'MBR del tuo sistema. Se il problema persiste, provare ad eseguire il boot da liveusb-creator specificando l'opzione --reset-mbr." #: ../liveusb/gui.py:638 msgid "Unable to mount device" @@ -117,7 +117,7 @@ msgstr "Premere 'Avanti' per continuare" #: ../liveusb/gui.py:648 ../liveusb/gui.py:665 msgid "Next" -msgstr "" +msgstr "Avanti" #: ../liveusb/gui.py:658 msgid "" @@ -150,18 +150,18 @@ msgstr "Selezionare Live ISO" msgid "" "The selected file is unreadable.Please fix its permissions or select another" " file." -msgstr "" +msgstr "Il file selezionato è illegibile. Impostare correttamente i permessi oppure selezionare un altro file" #: ../liveusb/gui.py:737 msgid "" "Unable to use the selected file. You may have better luck if you move your " "ISO to the root of your drive (ie: C:\\)" -msgstr "" +msgstr "Impossibile aprire il file selezionato. Provare a spostare il file ISO sulla root del disco (ie: C:\\)" #: ../liveusb/gui.py:743 #, python-format msgid "%(filename)s selected" -msgstr "" +msgstr "%(filename)s selezionato/i" #: ../liveusb/creator.py:91 msgid "You must run this application as root" @@ -170,7 +170,7 @@ msgstr "Occorre avere i privilegi di root per eseguire questa applicazione" #: ../liveusb/creator.py:130 msgid "" "Source type does not support verification of ISO MD5 checksum, skipping" -msgstr "" +msgstr "La verifica MD5 sul file ISO selezionato non è supportato. L'operazione verrà ignorata." #: ../liveusb/creator.py:132 msgid "Verifying ISO MD5 checksum" @@ -178,11 +178,11 @@ msgstr "Verifica del checksum MD5 del file ISO" #: ../liveusb/creator.py:137 msgid "ISO MD5 checksum verification failed" -msgstr "" +msgstr "Verifica ISO MD5 fallita" #: ../liveusb/creator.py:139 msgid "ISO MD5 checksum passed" -msgstr "" +msgstr "Verifica ISO MD5 completata correttamente" #: ../liveusb/creator.py:144 msgid "Extracting live image to USB device..." @@ -191,7 +191,7 @@ msgstr "Estrazione dell'immagine nel dispositivo..." #: ../liveusb/creator.py:151 #, python-format msgid "Wrote to device at %(speed)d MB/sec" -msgstr "" +msgstr "Scrittura eseguita a %(speed)d MB/sec" #: ../liveusb/creator.py:181 msgid "Setting up OLPC boot file..." @@ -202,15 +202,15 @@ msgstr "Configurazione del file di boot OLPC..." msgid "" "There was a problem executing the following command: `%(command)s`.\n" "A more detailed error log has been written to '%(filename)s'." -msgstr "" +msgstr "Si è verificato un problema durante l'esecuzione del comando: `%(command)s`.\nPer visualizzare ulteriori dettagli aprire il file '%(filename)s'." #: ../liveusb/creator.py:384 msgid "Verifying SHA1 checksum of LiveCD image..." -msgstr "" +msgstr "Verifica SHA1 dell'immagine LiveCD in corso..." #: ../liveusb/creator.py:388 msgid "Verifying SHA256 checksum of LiveCD image..." -msgstr "" +msgstr "Verifica SHA256 dell'immagine LiveCD in corso..." #: ../liveusb/creator.py:404 msgid "" @@ -234,26 +234,26 @@ msgstr "Creazione overlay persistente %s MB..." #: ../liveusb/creator.py:487 #, python-format msgid "Unable to copy %(infile)s to %(outfile)s: %(message)s" -msgstr "" +msgstr "Impossibile effettuar la copia da %(infile)s a %(outfile)s: %(message)s" #: ../liveusb/creator.py:497 msgid "Removing existing Live OS" -msgstr "" +msgstr "Il Live OS esistente è in fase di cancellazione" #: ../liveusb/creator.py:506 ../liveusb/creator.py:517 #, python-format msgid "Unable to chmod %(file)s: %(message)s" -msgstr "" +msgstr "Impossibile completare il comando chmod %(file)s: %(message)s" #: ../liveusb/creator.py:510 #, python-format msgid "Unable to remove file from previous LiveOS: %(message)s" -msgstr "" +msgstr "Impossibile rimuovere il file della precedente LiveOS: %(message)s" #: ../liveusb/creator.py:522 #, python-format msgid "Unable to remove directory from previous LiveOS: %(message)s" -msgstr "" +msgstr "Impossibile rimuovere la directory della precendente LiveOS: %(message)s" #: ../liveusb/creator.py:573 #, python-format @@ -264,7 +264,7 @@ msgstr "Impossibile trovare il dispositivo %s" msgid "" "You are using an old version of syslinux-extlinux that does not support the " "ext4 filesystem" -msgstr "" +msgstr "La versione di syslinux-extlinux in uso non supporta il filesystem ext4" #: ../liveusb/creator.py:718 #, python-format @@ -280,7 +280,7 @@ msgstr "" #: ../liveusb/creator.py:786 ../liveusb/creator.py:886 msgid "Unknown filesystem. Your device may need to be reformatted." -msgstr "" +msgstr "Filesystem sconosciuto. Potrebbe essere necessario formattare il disco di nuovo." #: ../liveusb/creator.py:789 #, python-format @@ -306,7 +306,7 @@ msgstr "" #: ../liveusb/creator.py:823 msgid "No mount points found" -msgstr "" +msgstr "Nessun punto di mount definito" #: ../liveusb/creator.py:834 #, python-format @@ -329,7 +329,7 @@ msgstr "" #: ../liveusb/creator.py:912 ../liveusb/creator.py:1236 msgid "Installing bootloader..." -msgstr "" +msgstr "Installazione bootloader..." #: ../liveusb/creator.py:935 ../liveusb/creator.py:1254 #, python-format @@ -339,11 +339,11 @@ msgstr "" #: ../liveusb/creator.py:1017 #, python-format msgid "%s already bootable" -msgstr "" +msgstr "%s è già avviabile" #: ../liveusb/creator.py:1037 msgid "Unable to find partition" -msgstr "" +msgstr "Impossibile trovare la partizione" #: ../liveusb/creator.py:1060 #, python-format @@ -358,7 +358,7 @@ msgstr "" #: ../liveusb/creator.py:1112 msgid "" "Unable to reset MBR. You may not have the `syslinux` package installed." -msgstr "" +msgstr "Impossibile effettuare il reset dell'MBR. Probabilmente non hai il package `syslinux` installato." #: ../liveusb/creator.py:1115 msgid "Drive is a loopback, skipping MBR reset" @@ -367,19 +367,19 @@ msgstr "" #: ../liveusb/creator.py:1119 ../liveusb/creator.py:1382 #, python-format msgid "Calculating the SHA1 of %s" -msgstr "" +msgstr "Calcolo SHA1 di %s" #: ../liveusb/creator.py:1143 msgid "Synchronizing data on disk..." -msgstr "" +msgstr "Sincronizzazione dati sul disco..." #: ../liveusb/creator.py:1195 msgid "Error probing device" -msgstr "" +msgstr "Errore durante la rilevazione periferica" #: ../liveusb/creator.py:1197 msgid "Unable to find any removable device" -msgstr "" +msgstr "Impossibile trovare periferiche removibili" #: ../liveusb/creator.py:1207 msgid "" @@ -396,7 +396,7 @@ msgstr "Filesystem non supportato: %s\nEseguire un backup e formattare il pendri #: ../liveusb/creator.py:1277 msgid "" "Unable to get Win32_LogicalDisk; win32com query did not return any results" -msgstr "" +msgstr "Impossibile trovare Win32_LogicalDisk; win32com non ha restituito nessun risultato" #: ../liveusb/creator.py:1330 msgid "Cannot find" @@ -406,4 +406,4 @@ msgstr "Impossibile trovare" msgid "" "Make sure to extract the entire liveusb-creator zip file before running this" " program." -msgstr "" +msgstr "Accertarsi di aver estratto il file zip liveusb-creator prima di eseguire il programma"

1 0

[translation/liveusb-creator] Update translations for liveusb-creator
by translation＠torproject.org 09 Oct '12

09 Oct '12

commit 26f876cd29e6334042c58df68087c698ca307231 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Oct 9 10:45:36 2012 +0000 Update translations for liveusb-creator --- it/it.po | 15 ++++++++------- 1 files changed, 8 insertions(+), 7 deletions(-) diff --git a/it/it.po b/it/it.po index 669f22e..31f8cc2 100644 --- a/it/it.po +++ b/it/it.po @@ -5,6 +5,7 @@ # Translators: # Daniele Catanesi <translate(a)ccielogs.com>, 2009. # Francesco Tombolini <tombo(a)adamantio.net>, 2009. +# <fswitch20(a)hotmail.com>, 2012. # mario_santagiuliana <mario(a)marionline.it>, 2009. # Michele Orrù <maker.py(a)gmail.com>, 2012. msgid "" @@ -12,8 +13,8 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2012-04-13 14:16+0200\n" -"PO-Revision-Date: 2012-10-04 05:52+0000\n" -"Last-Translator: Michele Orrù <maker.py(a)gmail.com>\n" +"PO-Revision-Date: 2012-10-09 10:45+0000\n" +"Last-Translator: spawned76 <fswitch20(a)hotmail.com>\n" "Language-Team: Italian (http://www.transifex.com/projects/p/torproject/language/it/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -71,7 +72,7 @@ msgstr "Il dispositivo non e' ancora stato montato, quindi non e' stato possibil #: ../liveusb/gui.py:528 #, python-format msgid "No free space on device %(device)s" -msgstr "" +msgstr "Spazio insufficiente sulla periferica %(device)s" #: ../liveusb/gui.py:533 msgid "Partition is FAT16; Restricting overlay size to 2G" @@ -83,11 +84,11 @@ msgstr "Persistenza Dati" #: ../liveusb/gui.py:586 msgid "Installation complete!" -msgstr "" +msgstr "Installazione completata!" #: ../liveusb/gui.py:587 msgid "Installation was completed. Press OK to close this program." -msgstr "" +msgstr "L'installazione è stata completata. Premere OK per chiudere il programma." #: ../liveusb/gui.py:610 msgid "" @@ -108,11 +109,11 @@ msgstr "Impossibile montare il dispositivo" #: ../liveusb/gui.py:644 msgid "Warning: All data on the selected drive will be lost." -msgstr "" +msgstr "Attenzione: Tutti i dati sull'unità selezionata saranno persi." #: ../liveusb/gui.py:646 ../liveusb/gui.py:663 msgid "Press 'Next' if you wish to continue." -msgstr "" +msgstr "Premere 'Avanti' per continuare" #: ../liveusb/gui.py:648 ../liveusb/gui.py:665 msgid "Next"

1 0

[brdgrd/master] Updated e-mail address.
by phw＠torproject.org 08 Oct '12

08 Oct '12

commit 157d9b0c538ad49e7be291f9b7783024a2bd4b8e Author: Philipp Winter <identity.function(a)gmail.com> Date: Tue Oct 9 00:14:04 2012 +0200 Updated e-mail address. --- brdgrd.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/brdgrd.c b/brdgrd.c index f71d9ba..29bb1bf 100644 --- a/brdgrd.c +++ b/brdgrd.c @@ -1,4 +1,4 @@ -/* Copyright (C) 2012 Philipp Winter (philipp.winter(a)kau.se) +/* Copyright (C) 2012 Philipp Winter (phw(a)torproject.org) * * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by

1 0

[brdgrd/master] Renamed file since it's no longer in markdown format.
by phw＠torproject.org 08 Oct '12

08 Oct '12

commit d8e94583ef616357c8917ae32d418254ea88cdc8 Author: Philipp Winter <identity.function(a)gmail.com> Date: Tue Oct 9 00:11:53 2012 +0200 Renamed file since it's no longer in markdown format. --- README | 39 +++++++++++++++++++++++++++++++++++++++ README.md | 39 --------------------------------------- 2 files changed, 39 insertions(+), 39 deletions(-) diff --git a/README b/README new file mode 100644 index 0000000..67c64e6 --- /dev/null +++ b/README @@ -0,0 +1,39 @@ +brdgrd (Bridge Guard) + +brdgrd is short for ``bridge guard'': A program which is meant to protect Tor +bridges from being scanned (and as a result blocked) by the Great Firewall of +China [1,2]. + +The program runs in user space and makes use of libnetfilter_queue (and hence +only runs on Linux) to get packets passed from kernel to user space. Only TCP +SYN/ACK segments have to be passed to user space. Brdgrd is only interested in +TCP handshakes and not in established TCP connections. Once a TCP connection is +established, brdgrd does not interfere with it. Hence, there are virtually no +performance implications. + +Brdgrd basically intercepts the SYN/ACK sent by the bridge to the client and +rewrites the TCP window size which is announced by the bridge. The window size +is rewritten to a smaller, randomly chosen value. That way, the client +``fragments'' the cipher list inside the TLS client hello. The GFC will not +recognize the cipher list (it does not seem to conduct TCP stream reassembly at +this point) and as a result will not scan the bridge. + +Brdgrd needs iptables rules to feed it with data. The following script passes +all Tor-related SYN/ACKs to brdgrd: + +iptables -A OUTPUT -p tcp --tcp-flags SYN,ACK SYN,ACK --sport $TORPORT -j NFQUEUE --queue-num 0 + +Afterwards, you can compile brdgrd by typing ``make'' and start it by typing +``sudo ./brdgrd''. Keep in mind that the above iptables rule tries to push +SYN/ACKs to userspace. If brdgrd is not running, new connections can not be +handled by Tor since there is no userspace program to process the data. + +It is possible to set the CAP_NET_ADMIN capability for the brdgrd executable so +that you do not need root privileges to run the binary: +``sudo setcap cap_net_admin=ep ./brdgrd''. + +Please send patches, suggestions and comments to phw(a)torproject.org. +My OpenPGP fingerprint is: B369 E7A2 18FE CEAD EB96 8C73 CF70 89E3 D7FD C0D0 + +[1] https://gist.github.com/da3c7a9af01d74cd7de7 +[2] http://www.cs.kau.se/philwint/static/gfc/ diff --git a/README.md b/README.md deleted file mode 100644 index 67c64e6..0000000 --- a/README.md +++ /dev/null @@ -1,39 +0,0 @@ -brdgrd (Bridge Guard) - -brdgrd is short for ``bridge guard'': A program which is meant to protect Tor -bridges from being scanned (and as a result blocked) by the Great Firewall of -China [1,2]. - -The program runs in user space and makes use of libnetfilter_queue (and hence -only runs on Linux) to get packets passed from kernel to user space. Only TCP -SYN/ACK segments have to be passed to user space. Brdgrd is only interested in -TCP handshakes and not in established TCP connections. Once a TCP connection is -established, brdgrd does not interfere with it. Hence, there are virtually no -performance implications. - -Brdgrd basically intercepts the SYN/ACK sent by the bridge to the client and -rewrites the TCP window size which is announced by the bridge. The window size -is rewritten to a smaller, randomly chosen value. That way, the client -``fragments'' the cipher list inside the TLS client hello. The GFC will not -recognize the cipher list (it does not seem to conduct TCP stream reassembly at -this point) and as a result will not scan the bridge. - -Brdgrd needs iptables rules to feed it with data. The following script passes -all Tor-related SYN/ACKs to brdgrd: - -iptables -A OUTPUT -p tcp --tcp-flags SYN,ACK SYN,ACK --sport $TORPORT -j NFQUEUE --queue-num 0 - -Afterwards, you can compile brdgrd by typing ``make'' and start it by typing -``sudo ./brdgrd''. Keep in mind that the above iptables rule tries to push -SYN/ACKs to userspace. If brdgrd is not running, new connections can not be -handled by Tor since there is no userspace program to process the data. - -It is possible to set the CAP_NET_ADMIN capability for the brdgrd executable so -that you do not need root privileges to run the binary: -``sudo setcap cap_net_admin=ep ./brdgrd''. - -Please send patches, suggestions and comments to phw(a)torproject.org. -My OpenPGP fingerprint is: B369 E7A2 18FE CEAD EB96 8C73 CF70 89E3 D7FD C0D0 - -[1] https://gist.github.com/da3c7a9af01d74cd7de7 -[2] http://www.cs.kau.se/philwint/static/gfc/

1 0

[brdgrd/master] Removed markdown format and lengthy iptables script and updated OpenPGP fingerprint.
by phw＠torproject.org 08 Oct '12

08 Oct '12

commit 19dbaa3dded6233f1e224f03c24c463fbcb253f6 Author: Philipp Winter <identity.function(a)gmail.com> Date: Tue Oct 9 00:11:32 2012 +0200 Removed markdown format and lengthy iptables script and updated OpenPGP fingerprint. --- README.md | 74 ++++++++++++++++++------------------------------------------ 1 files changed, 22 insertions(+), 52 deletions(-) diff --git a/README.md b/README.md index 1e5cbf7..67c64e6 100644 --- a/README.md +++ b/README.md @@ -1,20 +1,18 @@ brdgrd (Bridge Guard) -=== -brdgrd is short for ``bridge guard'': A program which is meant to protect -[Tor](https://www.torproject.org) bridges from being *scanned* (and as a result -*blocked*) by the Great Firewall of China [1,2]. +brdgrd is short for ``bridge guard'': A program which is meant to protect Tor +bridges from being scanned (and as a result blocked) by the Great Firewall of +China [1,2]. -The program runs in user space and makes use of -[libnetfilter_queue](http://www.netfilter.org/projects/libnetfilter_queue/index.html) -(and hence only runs on Linux) to get packets passed from kernel to user space. -Only TCP *SYN/ACK* segments have to be passed to user space. Brdgrd is only -interested in TCP handshakes and not in established TCP connections. Once a TCP -connection is established, brdgrd does not interfere with it. Hence, there are -virtually no performance implications. +The program runs in user space and makes use of libnetfilter_queue (and hence +only runs on Linux) to get packets passed from kernel to user space. Only TCP +SYN/ACK segments have to be passed to user space. Brdgrd is only interested in +TCP handshakes and not in established TCP connections. Once a TCP connection is +established, brdgrd does not interfere with it. Hence, there are virtually no +performance implications. Brdgrd basically intercepts the SYN/ACK sent by the bridge to the client and -*rewrites* the TCP window size which is announced by the bridge. The window size +rewrites the TCP window size which is announced by the bridge. The window size is rewritten to a smaller, randomly chosen value. That way, the client ``fragments'' the cipher list inside the TLS client hello. The GFC will not recognize the cipher list (it does not seem to conduct TCP stream reassembly at @@ -23,47 +21,19 @@ this point) and as a result will not scan the bridge. Brdgrd needs iptables rules to feed it with data. The following script passes all Tor-related SYN/ACKs to brdgrd: - iptables -A OUTPUT -p tcp --tcp-flags SYN,ACK SYN,ACK --sport $TORPORT -j NFQUEUE --queue-num 0 +iptables -A OUTPUT -p tcp --tcp-flags SYN,ACK SYN,ACK --sport $TORPORT -j NFQUEUE --queue-num 0 -If you only want to deal with connections coming from Chinese networks, you can -use the following script which makes use of ipset (thanks to murb): +Afterwards, you can compile brdgrd by typing ``make'' and start it by typing +``sudo ./brdgrd''. Keep in mind that the above iptables rule tries to push +SYN/ACKs to userspace. If brdgrd is not running, new connections can not be +handled by Tor since there is no userspace program to process the data. - #!/bin/bash - # set the port to your needs - TORPORT=443 - - # download latest APNIC data for Chinese networks - if [ ! -e delegated-apnic-latest ]; then - wget http://ftp.apnic.net/stats/apnic/delegated-apnic-latest - fi - # parse data (the tool 'aggregate' is needed) - CN=`cat delegated-apnic-latest | - awk -F\| '/^apnic\|CN\|ipv4\|/ { print $4"/" 32-log($5)/log(2) }' | - aggregate -q -` - RETVAL=$? - [ $RETVAL -eq 0 ] && echo "Successfully parsed chinese network list." - [ $RETVAL -ne 0 ] && (echo "Failure in parsing chinese network list." ; exit) - - ipset create china hash:net hashsize 4096 - - for NET in $CN; do - ipset add china $NET - done - iptables -N CHINA - iptables -A CHINA -p tcp --tcp-flags SYN,ACK SYN,ACK --sport $TORPORT -j NFQUEUE --queue-num 1 - iptables -A OUTPUT -m set --match-set china dst -j CHINA +It is possible to set the CAP_NET_ADMIN capability for the brdgrd executable so +that you do not need root privileges to run the binary: +``sudo setcap cap_net_admin=ep ./brdgrd''. -Afterwards, you can compile brdgrd by typing `make` and start it by typing -`sudo ./brdgrd`. Keep in mind that the above iptables rules try to push -SYN/ACKs to userspace. If brdgrd is not running, new (Chinese) connections can -not be handled by Tor since there is no userspace program to process the data. +Please send patches, suggestions and comments to phw(a)torproject.org. +My OpenPGP fingerprint is: B369 E7A2 18FE CEAD EB96 8C73 CF70 89E3 D7FD C0D0 -It is possible to set the *CAP_NET_ADMIN* capability for the brdgrd executable -so that you do not need root privileges to run the binary: `sudo setcap -cap_net_admin=ep ./brdgrd`. - -Please send patches, suggestions and comments to philipp.winter(a)kau.se -My GnuPG fingerprint is: `2A9F 5FBF 714D 42A9 F82C 0FEB 268C D15D 2D08 1E16` - -[1] [https://gist.github.com/da3c7a9af01d74cd7de7](https://gist.github.com/da3c7… -[2] [http://www.cs.kau.se/philwint/static/gfc/](http://www.cs.kau.se/philwint/st… +[1] https://gist.github.com/da3c7a9af01d74cd7de7 +[2] http://www.cs.kau.se/philwint/static/gfc/

1 0

r25842: {website} update mirror status. (website/trunk/include)
by Andrew Lewman 08 Oct '12

08 Oct '12

Author: phobos Date: 2012-10-08 18:30:12 +0000 (Mon, 08 Oct 2012) New Revision: 25842 Modified: website/trunk/include/mirrors-table.wmi Log: update mirror status. Modified: website/trunk/include/mirrors-table.wmi =================================================================== --- website/trunk/include/mirrors-table.wmi 2012-10-07 19:38:25 UTC (rev 25841) +++ website/trunk/include/mirrors-table.wmi 2012-10-08 18:30:12 UTC (rev 25842) @@ -35,23 +35,6 @@ <tr> - <td>NL</td> - - <td>Amorphis</td> - - <td>Up to date</td> - - <td> - </td> - <td><a href="http://tor.amorphis.eu/dist/">http</a></td> - <td><a href="http://tor.amorphis.eu/">http</a></td> - <td> - </td> - <td> - </td> - <td> - </td> - <td> - </td> -</tr> - -<tr> - <td>US</td> <td>Quintex</td> @@ -103,23 +86,6 @@ <tr> - <td>DK</td> - - <td>Zentrum der Gesundheit</td> - - <td>Up to date</td> - - <td> - </td> - <td><a href="http://tor.idnr.ws/dist/">http</a></td> - <td><a href="http://tor.idnr.ws/">http</a></td> - <td> - </td> - <td> - </td> - <td> - </td> - <td> - </td> -</tr> - -<tr> - <td>EE</td> <td>CyberSIDE</td> @@ -290,19 +256,19 @@ <tr> - <td>DE</td> + <td>US</td> - <td>crazyhaze.de</td> + <td>hessmo</td> <td>Up to date</td> <td> - </td> - <td><a href="http://tor.crazyhaze.de/dist/">http</a></td> - <td><a href="http://tor.crazyhaze.de/">http</a></td> - <td><a href="https://tor.crazyhaze.de/dist/">https</a></td> - <td><a href="https://tor.crazyhaze.de/">https</a></td> + <td><a href="http://mirror.hessmo.com/tor/dist/">http</a></td> + <td><a href="http://mirror.hessmo.com/tor/">http</a></td> <td> - </td> <td> - </td> + <td> - </td> + <td> - </td> </tr> <tr> @@ -443,23 +409,6 @@ <tr> - <td>DE</td> - - <td>factor.cc</td> - - <td>Up to date</td> - - <td> - </td> - <td><a href="http://tor.factor.cc/dist/">http</a></td> - <td><a href="http://tor.factor.cc/">http</a></td> - <td><a href="https://factor.cc/tor/dist/">https</a></td> - <td><a href="https://factor.cc/tor/">https</a></td> - <td> - </td> - <td> - </td> -</tr> - -<tr> - <td>FR</td> <td></td> @@ -647,23 +596,6 @@ <tr> - <td>FR</td> - - <td>LazyTiger</td> - - <td>Up to date</td> - - <td> - </td> - <td><a href="http://tor.taiga-san.net/dist/">http</a></td> - <td><a href="http://tor.taiga-san.net/">http</a></td> - <td> - </td> - <td> - </td> - <td> - </td> - <td> - </td> -</tr> - -<tr> - <td>DE</td> <td>spline</td> @@ -715,36 +647,36 @@ <tr> - <td>SE</td> + <td>DE</td> - <td>homosu</td> + <td>[[:bbs:]]</td> <td>Up to date</td> <td> - </td> - <td><a href="http://tor.homosu.net/dist/">http</a></td> - <td><a href="http://tor.homosu.net/">http</a></td> + <td><a href="http://tor.blingblingsquad.net/dist/">http</a></td> + <td><a href="http://tor.blingblingsquad.net/">http</a></td> + <td><a href="https://tor.blingblingsquad.net/dist/">https</a></td> + <td><a href="https://tor.blingblingsquad.net/">https</a></td> <td> - </td> <td> - </td> - <td> - </td> - <td> - </td> </tr> <tr> - <td>DE</td> + <td>INT</td> - <td>[[:bbs:]]</td> + <td>CoralCDN</td> <td>Up to date</td> <td> - </td> - <td><a href="http://tor.blingblingsquad.net/dist/">http</a></td> - <td><a href="http://tor.blingblingsquad.net/">http</a></td> - <td><a href="https://tor.blingblingsquad.net/dist/">https</a></td> - <td><a href="https://tor.blingblingsquad.net/">https</a></td> + <td><a href="http://www.torproject.org.nyud.net/dist/">http</a></td> + <td><a href="http://www.torproject.org.nyud.net/">http</a></td> <td> - </td> <td> - </td> + <td> - </td> + <td> - </td> </tr> <tr> @@ -766,15 +698,15 @@ <tr> - <td>US</td> + <td>NL</td> - <td>hessmo</td> + <td>Amorphis</td> <td>Up to date</td> <td> - </td> - <td><a href="http://mirror.hessmo.com/tor/dist/">http</a></td> - <td><a href="http://mirror.hessmo.com/tor/">http</a></td> + <td><a href="http://tor.amorphis.eu/dist/">http</a></td> + <td><a href="http://tor.amorphis.eu/">http</a></td> <td> - </td> <td> - </td> <td> - </td> @@ -783,11 +715,62 @@ <tr> + <td>DK</td> + + <td>Zentrum der Gesundheit</td> + + <td>Up to date</td> + + <td> - </td> + <td><a href="http://tor.idnr.ws/dist/">http</a></td> + <td><a href="http://tor.idnr.ws/">http</a></td> + <td> - </td> + <td> - </td> + <td> - </td> + <td> - </td> +</tr> + +<tr> + + <td>SE</td> + + <td>homosu</td> + + <td>Up to date</td> + + <td> - </td> + <td><a href="http://tor.homosu.net/dist/">http</a></td> + <td><a href="http://tor.homosu.net/">http</a></td> + <td> - </td> + <td> - </td> + <td> - </td> + <td> - </td> +</tr> + +<tr> + + <td>DE</td> + + <td>crazyhaze.de</td> + + <td>Out of date</td> + + <td> - </td> + <td><a href="http://tor.crazyhaze.de/dist/">http</a></td> + <td><a href="http://tor.crazyhaze.de/">http</a></td> + <td><a href="https://tor.crazyhaze.de/dist/">https</a></td> + <td><a href="https://tor.crazyhaze.de/">https</a></td> + <td> - </td> + <td> - </td> +</tr> + +<tr> + <td>US</td> <td>searchprivate</td> - <td>Up to date</td> + <td>Out of date</td> <td> - </td> <td><a href="http://tor.searchprivate.com/dist/">http</a></td> @@ -804,7 +787,7 @@ <td>India Tor Fans</td> - <td>Up to date</td> + <td>Out of date</td> <td> - </td> <td><a href="http://www.torproject.org.in/dist/">http</a></td> @@ -821,7 +804,7 @@ <td></td> - <td>Up to date</td> + <td>Out of date</td> <td> - </td> <td><a href="http://tor.freie-re.de/dist/">http</a></td> @@ -834,15 +817,15 @@ <tr> - <td>US</td> + <td>NL</td> - <td></td> + <td>BIT BV</td> - <td>Up to date</td> + <td>Unknown</td> + <td><a href="ftp://ftp.bit.nl/mirror/tor/">ftp</a></td> + <td><a href="http://ftp.bit.nl/mirror/tor/">http</a></td> <td> - </td> - <td><a href="http://tor.loritsu.com/dist/">http</a></td> - <td><a href="http://tor.loritsu.com/">http</a></td> <td> - </td> <td> - </td> <td> - </td> @@ -851,15 +834,15 @@ <tr> - <td>NL</td> + <td>UA</td> - <td>BIT BV</td> + <td></td> <td>Unknown</td> - <td><a href="ftp://ftp.bit.nl/mirror/tor/">ftp</a></td> - <td><a href="http://ftp.bit.nl/mirror/tor/">http</a></td> <td> - </td> + <td><a href="http://torua.reactor-xg.kiev.ua/dist/">http</a></td> + <td><a href="http://torua.reactor-xg.kiev.ua/">http</a></td> <td> - </td> <td> - </td> <td> - </td> @@ -868,15 +851,15 @@ <tr> - <td>UA</td> + <td>US</td> <td></td> <td>Unknown</td> <td> - </td> - <td><a href="http://torua.reactor-xg.kiev.ua/dist/">http</a></td> - <td><a href="http://torua.reactor-xg.kiev.ua/">http</a></td> + <td><a href="http://tor.loritsu.com/dist/">http</a></td> + <td><a href="http://tor.loritsu.com/">http</a></td> <td> - </td> <td> - </td> <td> - </td> @@ -885,11 +868,28 @@ <tr> + <td>DE</td> + + <td>factor.cc</td> + + <td>Unknown</td> + + <td> - </td> + <td><a href="http://tor.factor.cc/dist/">http</a></td> + <td><a href="http://tor.factor.cc/">http</a></td> + <td><a href="https://factor.cc/tor/dist/">https</a></td> + <td><a href="https://factor.cc/tor/">https</a></td> + <td> - </td> + <td> - </td> +</tr> + +<tr> + <td>NL</td> <td></td> - <td>Up to date</td> + <td>Out of date</td> <td> - </td> <td> - </td> @@ -902,15 +902,15 @@ <tr> - <td>US</td> + <td>FR</td> - <td></td> + <td>LazyTiger</td> <td>Unknown</td> <td> - </td> - <td><a href="http://torproject.umbrellacorporation.org.uk/dist/">http</a></td> - <td><a href="http://torproject.umbrellacorporation.org.uk/">http</a></td> + <td><a href="http://tor.taiga-san.net/dist/">http</a></td> + <td><a href="http://tor.taiga-san.net/">http</a></td> <td> - </td> <td> - </td> <td> - </td> @@ -919,15 +919,15 @@ <tr> - <td>INT</td> + <td>US</td> - <td>CoralCDN</td> + <td></td> <td>Unknown</td> <td> - </td> - <td><a href="http://www.torproject.org.nyud.net/dist/">http</a></td> - <td><a href="http://www.torproject.org.nyud.net/">http</a></td> + <td><a href="http://torproject.umbrellacorporation.org.uk/dist/">http</a></td> + <td><a href="http://torproject.umbrellacorporation.org.uk/">http</a></td> <td> - </td> <td> - </td> <td> - </td>

1 0

[torbrowser/maint-2.3] bump changelogs for 2.2.39-2
by erinn＠torproject.org 08 Oct '12

08 Oct '12

commit ddb8796f7364286d1ec2626a0b2dec95b8c1f875 Author: Erinn Clark <erinn(a)torproject.org> Date: Mon Oct 8 10:03:04 2012 +0100 bump changelogs for 2.2.39-2 --- README.LINUX-2.2 | 8 ++++---- README.OSX-2.2 | 8 ++++---- README.WIN-2.2 | 8 ++++---- build-scripts/linux.mk | 2 +- build-scripts/osx.mk | 2 +- build-scripts/windows.mk | 2 +- changelog.linux-2.2 | 10 ++++++++++ changelog.osx-2.2 | 9 +++++++++ changelog.windows-2.2 | 9 +++++++++ 9 files changed, 43 insertions(+), 15 deletions(-) diff --git a/README.LINUX-2.2 b/README.LINUX-2.2 index cd4e9b6..ff86a60 100644 --- a/README.LINUX-2.2 +++ b/README.LINUX-2.2 @@ -6,10 +6,10 @@ Included applications Vidalia 0.2.20 (with Qt 4.8.1) Tor 0.2.2.39 (with libevent-2.0.20-stable, zlib-1.2.7 and openssl-1.0.1c) -Firefox 10.0.7esr - \_ Torbutton 1.4.6 - |_ NoScript 2.5.4 - |_ HTTPS-Everywhere 2.2.1 +Firefox 10.0.8esr + \_ Torbutton 1.4.6.1 + |_ NoScript 2.5.6 + |_ HTTPS-Everywhere 2.2.2 Usage ----- diff --git a/README.OSX-2.2 b/README.OSX-2.2 index b317861..8cd51e8 100644 --- a/README.OSX-2.2 +++ b/README.OSX-2.2 @@ -6,10 +6,10 @@ Included applications Vidalia 0.2.20 (with Qt 4.8.1) Tor 0.2.2.39 (with libevent-2.0.20-stable, zlib-1.2.7 and openssl-1.0.1c) -Firefox 10.0.7esr - \_ Torbutton 1.4.6 - |_ NoScript 2.5.4 - |_ HTTPS-Everywhere 2.2.1 +Firefox 10.0.8esr + \_ Torbutton 1.4.6.1 + |_ NoScript 2.5.6 + |_ HTTPS-Everywhere 2.2.2 Usage ----- diff --git a/README.WIN-2.2 b/README.WIN-2.2 index bf3ee84..bfb0d00 100644 --- a/README.WIN-2.2 +++ b/README.WIN-2.2 @@ -6,10 +6,10 @@ Included applications Vidalia 0.2.20 (with Qt 4.8.1) Tor 0.2.2.39 (with libevent-2.0.20-stable, zlib-1.2.7 and openssl-1.0.1c) -Firefox 10.0.7esr - \_ Torbutton 1.4.6 - |_ NoScript 2.5.4 - |_ HTTPS-Everywhere 2.2.1 +Firefox 10.0.8esr + \_ Torbutton 1.4.6.1 + |_ NoScript 2.5.6 + |_ HTTPS-Everywhere 2.2.2 Usage ----- diff --git a/build-scripts/linux.mk b/build-scripts/linux.mk index 137591b..7e9a20f 100644 --- a/build-scripts/linux.mk +++ b/build-scripts/linux.mk @@ -15,7 +15,7 @@ ## Architecture ARCH_TYPE=$(shell uname -m) -BUILD_NUM=1 +BUILD_NUM=2 PLATFORM=Linux ## Build machine specific settings diff --git a/build-scripts/osx.mk b/build-scripts/osx.mk index 6ceb3e7..f08b50c 100644 --- a/build-scripts/osx.mk +++ b/build-scripts/osx.mk @@ -15,7 +15,7 @@ ## Architecture ARCH_TYPE=x86_64 -BUILD_NUM=1 +BUILD_NUM=2 PLATFORM=MacOS ## Set OSX-specific backwards compatibility options diff --git a/build-scripts/windows.mk b/build-scripts/windows.mk index 0492f84..a871270 100644 --- a/build-scripts/windows.mk +++ b/build-scripts/windows.mk @@ -13,7 +13,7 @@ ### Configuration ### ##################### -BUILD_NUM=1 +BUILD_NUM=2 PLATFORM=Windows ## Location of required libraries diff --git a/changelog.linux-2.2 b/changelog.linux-2.2 index aee61e2..c71b960 100644 --- a/changelog.linux-2.2 +++ b/changelog.linux-2.2 @@ -1,3 +1,13 @@ +Tor Browser Bundle (2.2.39-2); suite=linux + + * Update Firefox to 10.0.8esr + * Update Torbutton to 1.4.6.1 + * Update NoScript to 2.5.6 + * Update HTTPS Everywhere to 2.2.2 + * Update libpng to 1.5.13 + + -- Erinn Clark <erinn(a)torproject.org> Mon Oct 8 09:54:32 BST 2012 + Tor Browser Bundle (2.2.39-1); suite=linux * Update Tor to 0.2.2.39 diff --git a/changelog.osx-2.2 b/changelog.osx-2.2 index a778ee7..11d2fee 100644 --- a/changelog.osx-2.2 +++ b/changelog.osx-2.2 @@ -1,3 +1,12 @@ +Tor Browser Bundle (2.2.39-2); suite=osx + + * Update Firefox to 10.0.8esr + * Update Torbutton to 1.4.6.1 + * Update NoScript to 2.5.6 + * Update HTTPS Everywhere to 2.2.2 + + -- Erinn Clark <erinn(a)torproject.org> Mon Oct 8 09:54:30 BST 2012 + Tor Browser Bundle (2.2.39-1); suite=osx * Update Tor to 0.2.2.39 diff --git a/changelog.windows-2.2 b/changelog.windows-2.2 index b431172..ba22fd9 100644 --- a/changelog.windows-2.2 +++ b/changelog.windows-2.2 @@ -1,3 +1,12 @@ +Tor Browser Bundle (2.2.39-2); suite=windows + + * Update Firefox to 10.0.8esr + * Update Torbutton to 1.4.6.1 + * Update NoScript to 2.5.6 + * Update HTTPS Everywhere to 2.2.2 + + -- Erinn Clark <erinn(a)torproject.org> Mon Oct 8 09:54:35 BST 2012 + Tor Browser Bundle (2.2.39-1); suite=windows * Update Tor to 0.2.2.39

1 0

[torbrowser/maint-2.3] Merge branch 'maint-2.2' into maint-2.3
by erinn＠torproject.org 08 Oct '12

08 Oct '12

commit 9a21a471e728b411f0fda7e8522a76204f9cda8d Merge: 6f2a09b ddb8796 Author: Erinn Clark <erinn(a)torproject.org> Date: Mon Oct 8 10:03:19 2012 +0100 Merge branch 'maint-2.2' into maint-2.3 README.LINUX-2.2 | 8 ++++---- README.OSX-2.2 | 8 ++++---- README.WIN-2.2 | 8 ++++---- build-scripts/linux.mk | 2 +- build-scripts/osx.mk | 2 +- build-scripts/windows.mk | 2 +- changelog.linux-2.2 | 10 ++++++++++ changelog.osx-2.2 | 9 +++++++++ changelog.windows-2.2 | 9 +++++++++ 9 files changed, 43 insertions(+), 15 deletions(-)

1 0