May 2012 - tor-commits - lists.torproject.org

[tor/master] Fix desc stats on bridge authorities that didn't serve anything.
by nickm＠torproject.org 15 May '12

15 May '12

commit 57359b533673961fe15184b69bcedeb219c9dd90 Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Tue May 15 12:39:08 2012 +0200 Fix desc stats on bridge authorities that didn't serve anything. --- changes/task-5891 | 5 +++++ src/or/rephist.c | 42 +++++++++++++++++++++--------------------- 2 files changed, 26 insertions(+), 21 deletions(-) diff --git a/changes/task-5891 b/changes/task-5891 new file mode 100644 index 0000000..79ee002 --- /dev/null +++ b/changes/task-5891 @@ -0,0 +1,5 @@ + o Minor bugfixes: + - Fix a bug where a bridge authority crashes if it has seen no + directory requests when it's time to write statistics to disk. + Fixes #5508 and #5891. + diff --git a/src/or/rephist.c b/src/or/rephist.c index 0cd60ee..173a770 100644 --- a/src/or/rephist.c +++ b/src/or/rephist.c @@ -2650,24 +2650,30 @@ rep_hist_format_desc_stats(time_t now) const char *key; void *val; unsigned size; - int *vals; + int *vals, max = 0, q3 = 0, md = 0, q1 = 0, min = 0; int n = 0; if (!start_of_served_descs_stats_interval) return NULL; - size = digestmap_size(served_descs); - if (size == 0) - return NULL; - vals = tor_malloc(size * sizeof(int)); - - for (iter = digestmap_iter_init(served_descs); !digestmap_iter_done(iter); - iter = digestmap_iter_next(served_descs, iter) ) { - uintptr_t count; - digestmap_iter_get(iter, &key, &val); - count = (uintptr_t)val; - vals[n++] = (int)count; - (void)key; + size = digestmap_size(served_descs); + if (size > 0) { + vals = tor_malloc(size * sizeof(int)); + for (iter = digestmap_iter_init(served_descs); + !digestmap_iter_done(iter); + iter = digestmap_iter_next(served_descs, iter)) { + uintptr_t count; + digestmap_iter_get(iter, &key, &val); + count = (uintptr_t)val; + vals[n++] = (int)count; + (void)key; + } + max = find_nth_int(vals, size, size-1); + q3 = find_nth_int(vals, size, (3*size-1)/4); + md = find_nth_int(vals, size, (size-1)/2); + q1 = find_nth_int(vals, size, (size-1)/4); + min = find_nth_int(vals, size, 0); + tor_free(vals); } format_iso_time(t, now); @@ -2678,14 +2684,8 @@ rep_hist_format_desc_stats(time_t now) t, (unsigned) (now - start_of_served_descs_stats_interval), total_descriptor_downloads, - size, - find_nth_int(vals, size, size-1), - find_nth_int(vals, size, (3*size-1)/4), - find_nth_int(vals, size, (size-1)/2), - find_nth_int(vals, size, (size-1)/4), - find_nth_int(vals, size, 0)); - - tor_free(vals); + size, max, q3, md, q1, min); + return result; }

1 0

[tor/master] Merge remote-tracking branch 'linus/task-5891'
by nickm＠torproject.org 15 May '12

15 May '12

commit 009453f919825c40ad12b2b89c8754bcb53fa8f9 Merge: ee1b819 ad61282 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue May 15 08:33:08 2012 -0400 Merge remote-tracking branch 'linus/task-5891' changes/bug5891 | 5 +++++ src/or/rephist.c | 43 ++++++++++++++++++++++--------------------- 2 files changed, 27 insertions(+), 21 deletions(-)

1 0

[tor/master] Clarify changes file regarding which bugs get fixed.
by nickm＠torproject.org 15 May '12

15 May '12

commit ad61282f0c46e4b19b92e0a7ab2e2beec75acf97 Author: Linus Nordberg <linus(a)nordberg.se> Date: Tue May 15 11:07:01 2012 +0200 Clarify changes file regarding which bugs get fixed. --- changes/bug5891 | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/changes/bug5891 b/changes/bug5891 index 79ee002..1539df3 100644 --- a/changes/bug5891 +++ b/changes/bug5891 @@ -1,5 +1,5 @@ o Minor bugfixes: - Fix a bug where a bridge authority crashes if it has seen no directory requests when it's time to write statistics to disk. - Fixes #5508 and #5891. + Fixes bug 5891. Also fixes bug 5508 in a better way.

1 0

[tor/master] MSVC build issue: make 'const' in declaration match 'const' in definition
by nickm＠torproject.org 14 May '12

14 May '12

commit 43e15300bad6dd2618f331d51a1b3f83c2326d4e Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon May 14 13:05:00 2012 -0400 MSVC build issue: make 'const' in declaration match 'const' in definition MSVC warns if you declare a function as having a "int foo" argument and then implement it with a "const int foo" argument, even though the latter "const" is not a part of the function's interface. --- src/or/connection_edge.h | 3 ++- src/or/rephist.h | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/src/or/connection_edge.h b/src/or/connection_edge.h index 47c9c45..f6db4b4 100644 --- a/src/or/connection_edge.h +++ b/src/or/connection_edge.h @@ -79,7 +79,8 @@ int addressmap_have_mapping(const char *address, int update_timeout); void addressmap_register(const char *address, char *new_address, time_t expires, addressmap_entry_source_t source, - int address_wildcard, int new_address_wildcard); + const int address_wildcard, + const int new_address_wildcard); int parse_virtual_addr_network(const char *val, int validate_only, char **msg); int client_dns_incr_failures(const char *address); diff --git a/src/or/rephist.h b/src/or/rephist.h index 0a3e46a..6b05fe9 100644 --- a/src/or/rephist.h +++ b/src/or/rephist.h @@ -34,7 +34,7 @@ int rep_hist_load_state(or_state_t *state, char **err); void rep_history_clean(time_t before); void rep_hist_note_router_reachable(const char *id, const tor_addr_t *at_addr, - uint16_t at_port, time_t when); + const uint16_t at_port, time_t when); void rep_hist_note_router_unreachable(const char *id, time_t when); int rep_hist_record_mtbf_data(time_t now, int missing_means_down); int rep_hist_load_mtbf_data(time_t now);

1 0

[tor/master] MSVC build issue: we use INLINE as the one that will magically work
by nickm＠torproject.org 14 May '12

14 May '12

commit 757725ffdef0aa64a5a4a642eb08c10ec8f0ae4d Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon May 14 13:04:37 2012 -0400 MSVC build issue: we use INLINE as the one that will magically work --- src/or/buffers.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/src/or/buffers.c b/src/or/buffers.c index d60e54e..aa3e01f 100644 --- a/src/or/buffers.c +++ b/src/or/buffers.c @@ -1011,7 +1011,7 @@ fetch_from_buf(char *string, size_t string_len, buf_t *buf) /** True iff the cell command <b>command</b> is one that implies a * variable-length cell in Tor link protocol <b>linkproto</b>. */ -static inline int +static INLINE int cell_command_is_var_length(uint8_t command, int linkproto) { /* If linkproto is v2 (2), CELL_VERSIONS is the only variable-length cells

1 0

[tor/master] MSVC build issue: add magic to make openssl headers in aes.c work
by nickm＠torproject.org 14 May '12

14 May '12

commit 7134be06379f2a964c0a84ecb7ac002f59ea3214 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon May 14 13:04:13 2012 -0400 MSVC build issue: add magic to make openssl headers in aes.c work --- src/common/aes.c | 17 +++++++++++++++++ 1 files changed, 17 insertions(+), 0 deletions(-) diff --git a/src/common/aes.c b/src/common/aes.c index c6bc2a8..a9a0188 100644 --- a/src/common/aes.c +++ b/src/common/aes.c @@ -10,6 +10,23 @@ **/ #include "orconfig.h" + +#ifdef _WIN32 /*wrkard for dtls1.h >= 0.9.8m of "#include <winsock.h>"*/ + #ifndef WIN32_WINNT + #define WIN32_WINNT 0x400 + #endif + #ifndef _WIN32_WINNT + #define _WIN32_WINNT 0x400 + #endif + #define WIN32_LEAN_AND_MEAN + #if defined(_MSC_VER) && (_MSC_VER < 1300) + #include <winsock.h> + #else + #include <winsock2.h> + #include <ws2tcpip.h> + #endif +#endif + #include <openssl/opensslv.h> #include <assert.h> #include <stdlib.h>

1 0

[tor/master] Add a changes file for the misc bug5859 build issues
by nickm＠torproject.org 14 May '12

14 May '12

commit ee1b8196d372a1a407b3e4bd23e9860376330e69 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon May 14 13:07:47 2012 -0400 Add a changes file for the misc bug5859 build issues --- changes/bug5859 | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-) diff --git a/changes/bug5859 b/changes/bug5859 new file mode 100644 index 0000000..1720175 --- /dev/null +++ b/changes/bug5859 @@ -0,0 +1,3 @@ + o Minor bugfixes: + - Resolve numerous small warnings and build issues with MSVC. Resolves + bug 5859.

1 0

[tor/master] MSVC build issue: it can't tell that tor_assert(0) aborts.
by nickm＠torproject.org 14 May '12

14 May '12

commit d8de831932cefe2fe7196609b855892ee7188b4b Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon May 14 13:07:27 2012 -0400 MSVC build issue: it can't tell that tor_assert(0) aborts. --- src/or/connection.c | 3 ++- src/or/networkstatus.c | 4 +++- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/src/or/connection.c b/src/or/connection.c index d379533..0c970cc 100644 --- a/src/or/connection.c +++ b/src/or/connection.c @@ -778,7 +778,8 @@ create_unix_sockaddr(const char *listenaddress, char **readable_address, "Unix domain sockets not supported, yet we tried to create one."); *len_out = 0; tor_assert(0); -}; + return NULL; +} #endif /* HAVE_SYS_UN_H */ /** Warn that an accept or a connect has failed because we're running up diff --git a/src/or/networkstatus.c b/src/or/networkstatus.c index 910b99c..3646ee6 100644 --- a/src/or/networkstatus.c +++ b/src/or/networkstatus.c @@ -1463,8 +1463,10 @@ networkstatus_get_latest_consensus_by_flavor(consensus_flavor_t f) return current_ns_consensus; else if (f == FLAV_MICRODESC) return current_md_consensus; - else + else { tor_assert(0); + return NULL; + } } /** Return the most recent consensus that we have downloaded, or NULL if it is

1 0

[tor/master] Be a good git person: store nmakefiles in correct text fmt
by nickm＠torproject.org 14 May '12

14 May '12

commit 02d206a58b04fc783fe0fd79d063ad74193aac83 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon May 14 13:01:05 2012 -0400 Be a good git person: store nmakefiles in correct text fmt --- src/common/Makefile.nmake | 40 ++++++++++++++++---------------- src/or/Makefile.nmake | 56 ++++++++++++++++++++++---------------------- 2 files changed, 48 insertions(+), 48 deletions(-) diff --git a/src/common/Makefile.nmake b/src/common/Makefile.nmake index c8b5988..e548273 100644 --- a/src/common/Makefile.nmake +++ b/src/common/Makefile.nmake @@ -1,20 +1,20 @@ -all: libor.lib libor-crypto.lib libor-event.lib - -CFLAGS = /I ..\win32 /I ..\..\..\build-alpha\include - -LIBOR_OBJECTS = address.obj compat.obj container.obj di_ops.obj \ - log.obj memarea.obj mempool.obj procmon.obj util.obj \ - util_codedigest.obj - -LIBOR_CRYPTO_OBJECTS = aes.obj crypto.obj torgzip.obj tortls.obj - -LIBOR_EVENT_OBJECTS = compat_libevent.obj - -libor.lib: $(LIBOR_OBJECTS) - lib $(LIBOR_OBJECTS) /out:libor.lib - -libor-crypto.lib: $(LIBOR_CRYPTO_OBJECTS) - lib $(LIBOR_CRYPTO_OBJECTS) /out:libor-crypto.lib - -libor-event.lib: $(LIBOR_EVENT_OBJECTS) - lib $(LIBOR_EVENT_OBJECTS) /out:libor-event.lib +all: libor.lib libor-crypto.lib libor-event.lib + +CFLAGS = /I ..\win32 /I ..\..\..\build-alpha\include + +LIBOR_OBJECTS = address.obj compat.obj container.obj di_ops.obj \ + log.obj memarea.obj mempool.obj procmon.obj util.obj \ + util_codedigest.obj + +LIBOR_CRYPTO_OBJECTS = aes.obj crypto.obj torgzip.obj tortls.obj + +LIBOR_EVENT_OBJECTS = compat_libevent.obj + +libor.lib: $(LIBOR_OBJECTS) + lib $(LIBOR_OBJECTS) /out:libor.lib + +libor-crypto.lib: $(LIBOR_CRYPTO_OBJECTS) + lib $(LIBOR_CRYPTO_OBJECTS) /out:libor-crypto.lib + +libor-event.lib: $(LIBOR_EVENT_OBJECTS) + lib $(LIBOR_EVENT_OBJECTS) /out:libor-event.lib diff --git a/src/or/Makefile.nmake b/src/or/Makefile.nmake index 919edbb..3181e79 100644 --- a/src/or/Makefile.nmake +++ b/src/or/Makefile.nmake @@ -1,28 +1,28 @@ -all: tor.exe - -CFLAGS = /I ..\win32 /I ..\..\..\build-alpha\include /I ..\common - -LIBS = ..\..\..\build-alpha\lib\libevent.a \ - ..\..\..\build-alpha\lib\libcrypto.a \ - ..\..\..\build-alpha\lib\libssl.a \ - ..\..\..\build-alpha\lib\libz.a \ - ws2_32.lib advapi32.lib shell32.lib - -LIBTOR_OBJECTS = buffers.obj circuitbuild.obj circuitlist.obj circuituse.obj \ - command.obj config.obj connection.obj connection_edge.obj \ - connection_or.obj control.obj cpuworker.obj directory.obj \ - dirserv.obj dirvote.obj dns.obj dnsserv.obj geoip.obj \ - hibernate.obj main.obj microdesc.obj networkstatus.obj \ - nodelist.obj onion.obj policies.obj reasons.obj relay.obj \ - rendclient.obj rendcommon.obj rendmid.obj rendservice.obj \ - rephist.obj router.obj routerlist.obj routerparse.obj status.obj \ - config_codedigest.obj ntmain.obj - -libtor.lib: $(LIBTOR_OBJECTS) - lib $(LIBTOR_OBJECTS) /out:libtor.lib - -tor.exe: libtor.lib tor_main.obj - $(CC) $(CFLAGS) $(LIBS) libtor.lib ..\common\*.lib tor_main.obj - -clean: - del $(LIBTOR_OBJECTS) *.lib tor.exe +all: tor.exe + +CFLAGS = /I ..\win32 /I ..\..\..\build-alpha\include /I ..\common + +LIBS = ..\..\..\build-alpha\lib\libevent.a \ + ..\..\..\build-alpha\lib\libcrypto.a \ + ..\..\..\build-alpha\lib\libssl.a \ + ..\..\..\build-alpha\lib\libz.a \ + ws2_32.lib advapi32.lib shell32.lib + +LIBTOR_OBJECTS = buffers.obj circuitbuild.obj circuitlist.obj circuituse.obj \ + command.obj config.obj connection.obj connection_edge.obj \ + connection_or.obj control.obj cpuworker.obj directory.obj \ + dirserv.obj dirvote.obj dns.obj dnsserv.obj geoip.obj \ + hibernate.obj main.obj microdesc.obj networkstatus.obj \ + nodelist.obj onion.obj policies.obj reasons.obj relay.obj \ + rendclient.obj rendcommon.obj rendmid.obj rendservice.obj \ + rephist.obj router.obj routerlist.obj routerparse.obj status.obj \ + config_codedigest.obj ntmain.obj + +libtor.lib: $(LIBTOR_OBJECTS) + lib $(LIBTOR_OBJECTS) /out:libtor.lib + +tor.exe: libtor.lib tor_main.obj + $(CC) $(CFLAGS) $(LIBS) libtor.lib ..\common\*.lib tor_main.obj + +clean: + del $(LIBTOR_OBJECTS) *.lib tor.exe

1 0

[tor/master] Remove the unused torrc.bridge.in. Bug 5622.
by nickm＠torproject.org 14 May '12

14 May '12

commit f1fca8aa4d5fd62e6456a0cad6be613b37579583 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon May 14 12:37:39 2012 -0400 Remove the unused torrc.bridge.in. Bug 5622. --- changes/bug5622 | 4 + src/config/torrc.bridge.in | 175 -------------------------------------------- 2 files changed, 4 insertions(+), 175 deletions(-) diff --git a/changes/bug5622 b/changes/bug5622 new file mode 100644 index 0000000..82b8e76 --- /dev/null +++ b/changes/bug5622 @@ -0,0 +1,4 @@ + o Removed files: + - Remove the torrc.bridge file: we don't use it for anything, and + it had become badly desynchronized from torrc.sample. Resolves + bug 5622. \ No newline at end of file diff --git a/src/config/torrc.bridge.in b/src/config/torrc.bridge.in deleted file mode 100644 index b7b7e05..0000000 --- a/src/config/torrc.bridge.in +++ /dev/null @@ -1,175 +0,0 @@ -## Configuration file for a typical Tor user -## Last updated 16 July 2009 for Tor 0.2.2.1-alpha. -## (May or may not work for much older or much newer versions of Tor.) -## -## Lines that begin with "## " try to explain what's going on. Lines -## that begin with just "#" are disabled commands: you can enable them -## by removing the "#" symbol. -## -## See 'man tor', or https://www.torproject.org/docs/tor-manual.html, -## for more options you can use in this file. -## -## Tor will look for this file in various places based on your platform: -## https://www.torproject.org/docs/faq#torrc - - -## Replace this with "SocksPort 0" if you plan to run Tor only as a -## relay, and not make any local application connections yourself. -SocksPort 9050 # what port to open for local application connections -SocksListenAddress 127.0.0.1 # accept connections only from localhost -#SocksListenAddress 192.168.0.1:9100 # listen on this IP:port also - -## Entry policies to allow/deny SOCKS requests based on IP address. -## First entry that matches wins. If no SocksPolicy is set, we accept -## all (and only) requests from SocksListenAddress. -#SocksPolicy accept 192.168.0.0/16 -#SocksPolicy reject * - -## Logs go to stdout at level "notice" unless redirected by something -## else, like one of the below lines. You can have as many Log lines as -## you want. -## -## We advise using "notice" in most cases, since anything more verbose -## may provide sensitive information to an attacker who obtains the logs. -## -## Send all messages of level 'notice' or higher to @LOCALSTATEDIR@/log/tor/notices.log -#Log notice file @LOCALSTATEDIR@/log/tor/notices.log -## Send every possible message to @LOCALSTATEDIR@/log/tor/debug.log -#Log debug file @LOCALSTATEDIR@/log/tor/debug.log -## Use the system log instead of Tor's logfiles -#Log notice syslog -## To send all messages to stderr: -#Log debug stderr - -## Uncomment this to start the process in the background... or use -## --runasdaemon 1 on the command line. This is ignored on Windows; -## see the FAQ entry if you want Tor to run as an NT service. -#RunAsDaemon 1 - -## The directory for keeping all the keys/etc. By default, we store -## things in $HOME/.tor on Unix, and in Application Data\tor on Windows. -#DataDirectory @LOCALSTATEDIR@/lib/tor - -## The port on which Tor will listen for local connections from Tor -## controller applications, as documented in control-spec.txt. -#ControlPort 9051 -## If you enable the controlport, be sure to enable one of these -## authentication methods, to prevent attackers from accessing it. -#HashedControlPassword 16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C -#CookieAuthentication 1 - -############### This section is just for location-hidden services ### - -## Once you have configured a hidden service, you can look at the -## contents of the file ".../hidden_service/hostname" for the address -## to tell people. -## -## HiddenServicePort x y:z says to redirect requests on port x to the -## address y:z. - -#HiddenServiceDir @LOCALSTATEDIR@/lib/tor/hidden_service/ -#HiddenServicePort 80 127.0.0.1:80 - -#HiddenServiceDir @LOCALSTATEDIR@/lib/tor/other_hidden_service/ -#HiddenServicePort 80 127.0.0.1:80 -#HiddenServicePort 22 127.0.0.1:22 - -################ This section is just for relays ##################### -# -## See https://www.torproject.org/docs/tor-doc-relay for details. - -## Required: what port to advertise for incoming Tor connections. -ORPort 9001 -## If you want to listen on a port other than the one advertised -## in ORPort (e.g. to advertise 443 but bind to 9090), uncomment the -## line below too. You'll need to do ipchains or other port forwarding -## yourself to make this work. -#ORListenAddress 0.0.0.0:9090 - -## A handle for your relay, so people don't have to refer to it by key. -Nickname Unnamed - -## The IP address or full DNS name for your relay. Leave commented out -## and Tor will guess. -#Address noname.example.com - -## Define these to limit how much relayed traffic you will allow. Your -## own traffic is still unthrottled. Note that RelayBandwidthRate must -## be at least 20 KB. -## Note that units for these config options are bytes per second, not bits -## per second, and that prefixes are binary prefixes, i.e. 2^10, 2^20, etc. -#RelayBandwidthRate 100 KB # Throttle traffic to 100KB/s (800Kbps) -#RelayBandwidthBurst 200 KB # But allow bursts up to 200KB/s (1600Kbps) -RelayBandwidthBurst 10485760 -RelayBandwidthRate 5242880 - -## Use these to restrict the maximum traffic per day, week, or month. -## Note that this threshold applies to sent _and_ to received bytes, -## not to their sum: Setting "4 GB" may allow up to 8 GB -## total before hibernating. -## -## Set a maximum of 4 gigabytes each way per period. -#AccountingMax 4 GB -## Each period starts daily at midnight (AccountingMax is per day) -#AccountingStart day 00:00 -## Each period starts on the 3rd of the month at 15:00 (AccountingMax -## is per month) -#AccountingStart month 3 15:00 - -## Contact info to be published in the directory, so we can contact you -## if your relay is misconfigured or something else goes wrong. Google -## indexes this, so spammers might also collect it. -#ContactInfo Random Person <nobody AT example dot com> -## You might also include your PGP or GPG fingerprint if you have one: -#ContactInfo 1234D/FFFFFFFF Random Person <nobody AT example dot com> - -## Uncomment this to mirror directory information for others. Please do -## if you have enough bandwidth. -DirPort 9030 # what port to advertise for directory connections -## If you want to listen on a port other than the one advertised -## in DirPort (e.g. to advertise 80 but bind to 9091), uncomment the line -## below too. You'll need to do ipchains or other port forwarding yourself -## to make this work. -#DirListenAddress 0.0.0.0:9091 -## Uncomment to return an arbitrary blob of html on your DirPort. Now you -## can explain what Tor is if anybody wonders why your IP address is -## contacting them. See contrib/tor-exit-notice.html in Tor's source -## distribution for a sample. -#DirPortFrontPage @CONFDIR@/tor-exit-notice.html - -## Uncomment this if you run more than one Tor relay, and add the identity -## key fingerprint of each Tor relay you control, even if they're on -## different networks. You declare it here so Tor clients can avoid -## using more than one of your relays in a single circuit. See -## https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#MultipleServers -## However, you should never include a bridge's fingerprint here, as it would -## break its concealability and potentionally reveal its IP/TCP address. -#MyFamily $keyid,$keyid,... - -## A comma-separated list of exit policies. They're considered first -## to last, and the first match wins. If you want to _replace_ -## the default exit policy, end this with either a reject *:* or an -## accept *:*. Otherwise, you're _augmenting_ (prepending to) the -## default exit policy. Leave commented to just use the default, which is -## described in the man page or at -## https://www.torproject.org/documentation.html -## -## Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses -## for issues you might encounter if you use the default exit policy. -## -## If certain IPs and ports are blocked externally, e.g. by your firewall, -## you should update your exit policy to reflect this -- otherwise Tor -## users will be told that those destinations are down. -## -#ExitPolicy accept *:6660-6667,reject *:* # allow irc ports but no more -#ExitPolicy accept *:119 # accept nntp as well as default exit policy -#ExitPolicy reject *:* # no exits allowed -# -## Bridge relays (or "bridges") are Tor relays that aren't listed in the -## main directory. Since there is no complete public list of them, even if an -## ISP is filtering connections to all the known Tor relays, they probably -## won't be able to block all the bridges. Also, websites won't treat you -## differently because they won't know you're running Tor. If you can -## be a real relay, please do; but if not, be a bridge! -BridgeRelay 1 -ExitPolicy reject *:*

1 0