November 2017 - tor-commits - lists.torproject.org

[tor/maint-0.3.2] ClientDNSRejectInternalAddresses in non-default networks
by nickm＠torproject.org 05 Nov '17

05 Nov '17

commit d3fee8b82395f95a925b9adcb7b3a66ae0d5a0ef Author: Sebastian Hahn <sebastian(a)torproject.org> Date: Sat Nov 4 16:37:41 2017 +0100 ClientDNSRejectInternalAddresses in non-default networks Once again allow the flag to be set, unless the default network is used. Thanks to nickm for a suggestion for the workaround to a test failure. --- changes/ticket21031 | 5 +++++ doc/tor.1.txt | 6 +++--- src/or/config.c | 4 ++++ src/test/test_options.c | 5 +++-- 4 files changed, 15 insertions(+), 5 deletions(-) diff --git a/changes/ticket21031 b/changes/ticket21031 new file mode 100644 index 000000000..1f97c4599 --- /dev/null +++ b/changes/ticket21031 @@ -0,0 +1,5 @@ + o New/reanimated features + - The ClientDNSRejectInternalAddresses flag can once again be set in + non-default tor networks. This also remves a deprecation of this + flag in 0.2.9.2-alpha. Closes ticket 21031. + diff --git a/doc/tor.1.txt b/doc/tor.1.txt index d701288af..f05246433 100644 --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@ -1443,12 +1443,12 @@ The following options are useful only for clients (that is, if [[ClientDNSRejectInternalAddresses]] **ClientDNSRejectInternalAddresses** **0**|**1**:: If true, Tor does not believe any anonymously retrieved DNS answer that tells it that an address resolves to an internal address (like 127.0.0.1 or - 192.168.0.1). This option prevents certain browser-based attacks; don't - turn it off unless you know what you're doing. (Default: 1) + 192.168.0.1). This option prevents certain browser-based attacks; it + is not allowed to be set on the default network. (Default: 1) [[ClientRejectInternalAddresses]] **ClientRejectInternalAddresses** **0**|**1**:: If true, Tor does not try to fulfill requests to connect to an internal - address (like 127.0.0.1 or 192.168.0.1) __unless a exit node is + address (like 127.0.0.1 or 192.168.0.1) __unless an exit node is specifically requested__ (for example, via a .exit hostname, or a controller request). If true, multicast DNS hostnames for machines on the local network (of the form *.local) are also rejected. (Default: 1) diff --git a/src/or/config.c b/src/or/config.c index bba253200..d6e1abaa1 100644 --- a/src/or/config.c +++ b/src/or/config.c @@ -4216,6 +4216,10 @@ options_validate(or_options_t *old_options, or_options_t *options, CHECK_DEFAULT(TestingLinkKeySlop); #undef CHECK_DEFAULT + if (!options->ClientDNSRejectInternalAddresses && + !(options->DirAuthorities || + (options->AlternateDirAuthority && options->AlternateBridgeAuthority))) + REJECT("ClientDNSRejectInternalAddresses used for default network."); if (options->SigningKeyLifetime < options->TestingSigningKeySlop*2) REJECT("SigningKeyLifetime is too short."); if (options->TestingLinkCertLifetime < options->TestingAuthKeySlop*2) diff --git a/src/test/test_options.c b/src/test/test_options.c index c55be3584..62732cabf 100644 --- a/src/test/test_options.c +++ b/src/test/test_options.c @@ -398,11 +398,12 @@ fixed_get_uname(void) "V3AuthVoteDelay 20\n" \ "V3AuthDistDelay 20\n" \ "V3AuthNIntervalsValid 3\n" \ - "ClientUseIPv4 1\n" \ + "ClientUseIPv4 1\n" \ "VirtualAddrNetworkIPv4 127.192.0.0/10\n" \ "VirtualAddrNetworkIPv6 [FE80::]/10\n" \ "UseEntryGuards 1\n" \ - "Schedulers Vanilla\n" + "Schedulers Vanilla\n" \ + "ClientDNSRejectInternalAddresses 1\n" typedef struct { or_options_t *old_opt;

1 0

[tor/maint-0.3.2] ticket21031 changes file revised.
by nickm＠torproject.org 05 Nov '17

05 Nov '17

commit 7c1f33dd0e56bbd6a99ce7797bd03423675bdd9d Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Nov 5 14:09:07 2017 -0500 ticket21031 changes file revised. --- changes/ticket21031 | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/changes/ticket21031 b/changes/ticket21031 index 1f97c4599..b081fb018 100644 --- a/changes/ticket21031 +++ b/changes/ticket21031 @@ -1,5 +1,7 @@ - o New/reanimated features + o Minor features (removed deprecations): - The ClientDNSRejectInternalAddresses flag can once again be set in - non-default tor networks. This also remves a deprecation of this + non-testing Tor networks, so long as they do not use the default + directory authorities. + This change also removes the deprecation of this flag in 0.2.9.2-alpha. Closes ticket 21031.

1 0

[tor/master] Fix rust welcome message typo.
by nickm＠torproject.org 05 Nov '17

05 Nov '17

commit a72e13a669d79522663eb346b838da01b8937ea3 Author: Alex Xu (Hello71) <alex_y_xu(a)yahoo.ca> Date: Sun Nov 5 15:47:49 2017 +0000 Fix rust welcome message typo. --- src/rust/tor_util/ffi.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/rust/tor_util/ffi.rs b/src/rust/tor_util/ffi.rs index 76c6e6d39..5c3cdba4b 100644 --- a/src/rust/tor_util/ffi.rs +++ b/src/rust/tor_util/ffi.rs @@ -20,7 +20,7 @@ use tor_allocate::allocate_and_copy_string; pub extern "C" fn rust_welcome_string() -> *mut c_char { let rust_welcome = String::from( "Tor is running with Rust integration. Please report \ - any bugs you encouter.", + any bugs you encounter.", ); allocate_and_copy_string(&rust_welcome) }

1 0

[translation/tails-onioncircuits_completed] Update translations for tails-onioncircuits_completed
by translation＠torproject.org 05 Nov '17

05 Nov '17

commit e276e765a36f5371fb2a6f6aebc93e2150f15952 Author: Translation commit bot <translation(a)torproject.org> Date: Sun Nov 5 13:49:50 2017 +0000 Update translations for tails-onioncircuits_completed --- id/onioncircuits.pot | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/id/onioncircuits.pot b/id/onioncircuits.pot index 29bd4175f..516c2456b 100644 --- a/id/onioncircuits.pot +++ b/id/onioncircuits.pot @@ -12,7 +12,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2017-08-03 13:00+0000\n" -"PO-Revision-Date: 2017-09-22 21:53+0000\n" +"PO-Revision-Date: 2017-11-05 13:29+0000\n" "Last-Translator: Frengky Sinaga <frengkys5(a)gmail.com>\n" "Language-Team: Indonesian (http://www.transifex.com/otf/torproject/language/id/)\n" "MIME-Version: 1.0\n"

1 0

[translation/tails-onioncircuits] Update translations for tails-onioncircuits
by translation＠torproject.org 05 Nov '17

05 Nov '17

commit e03f98db7c4a229bb0fa8fd2836a3178fc82c04b Author: Translation commit bot <translation(a)torproject.org> Date: Sun Nov 5 13:49:44 2017 +0000 Update translations for tails-onioncircuits --- id/onioncircuits.pot | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/id/onioncircuits.pot b/id/onioncircuits.pot index 29bd4175f..516c2456b 100644 --- a/id/onioncircuits.pot +++ b/id/onioncircuits.pot @@ -12,7 +12,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2017-08-03 13:00+0000\n" -"PO-Revision-Date: 2017-09-22 21:53+0000\n" +"PO-Revision-Date: 2017-11-05 13:29+0000\n" "Last-Translator: Frengky Sinaga <frengkys5(a)gmail.com>\n" "Language-Team: Indonesian (http://www.transifex.com/otf/torproject/language/id/)\n" "MIME-Version: 1.0\n"

1 0

[translation/tails-openpgp-applet_completed] Update translations for tails-openpgp-applet_completed
by translation＠torproject.org 05 Nov '17

05 Nov '17

commit ba655ef5a18b96f32d93779d6d745d82f2862b6d Author: Translation commit bot <translation(a)torproject.org> Date: Sun Nov 5 13:49:29 2017 +0000 Update translations for tails-openpgp-applet_completed --- id/openpgp-applet.pot | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/id/openpgp-applet.pot b/id/openpgp-applet.pot index 0c3e61dbf..b561e2254 100644 --- a/id/openpgp-applet.pot +++ b/id/openpgp-applet.pot @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: tails(a)boum.org\n" "POT-Creation-Date: 2017-08-05 15:07-0400\n" -"PO-Revision-Date: 2017-09-22 17:51+0000\n" +"PO-Revision-Date: 2017-11-05 13:29+0000\n" "Last-Translator: adhisuryo i <adhisuryo(a)gmail.com>\n" "Language-Team: Indonesian (http://www.transifex.com/otf/torproject/language/id/)\n" "MIME-Version: 1.0\n"

1 0

[translation/tails-openpgp-applet] Update translations for tails-openpgp-applet
by translation＠torproject.org 05 Nov '17

05 Nov '17

commit 30df20c010e1343f924e9a2aa5bc3d9b24890f42 Author: Translation commit bot <translation(a)torproject.org> Date: Sun Nov 5 13:49:23 2017 +0000 Update translations for tails-openpgp-applet --- id/openpgp-applet.pot | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/id/openpgp-applet.pot b/id/openpgp-applet.pot index 0c3e61dbf..b561e2254 100644 --- a/id/openpgp-applet.pot +++ b/id/openpgp-applet.pot @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: tails(a)boum.org\n" "POT-Creation-Date: 2017-08-05 15:07-0400\n" -"PO-Revision-Date: 2017-09-22 17:51+0000\n" +"PO-Revision-Date: 2017-11-05 13:29+0000\n" "Last-Translator: adhisuryo i <adhisuryo(a)gmail.com>\n" "Language-Team: Indonesian (http://www.transifex.com/otf/torproject/language/id/)\n" "MIME-Version: 1.0\n"

1 0

[translation/tails-perl5lib_completed] Update translations for tails-perl5lib_completed
by translation＠torproject.org 05 Nov '17

05 Nov '17

commit ac964666b1646984f654d75ec9a8f06f15c62166 Author: Translation commit bot <translation(a)torproject.org> Date: Sun Nov 5 13:48:39 2017 +0000 Update translations for tails-perl5lib_completed --- id.po | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/id.po b/id.po index 0f3c896af..a23761fb2 100644 --- a/id.po +++ b/id.po @@ -5,7 +5,7 @@ # Translators: # Mohamad Hasan Al Banna <se7entime(a)openmailbox.org>, 2016 # moi, 2017 -# Slamet Aryo <slamet.badwi(a)gmail.com>, 2014 +# Slamet Badwi <slamet.badwi(a)gmail.com>, 2014 # zk, 2016 # zk, 2015 msgid "" @@ -13,7 +13,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: Tails developers <tails(a)boum.org>\n" "POT-Creation-Date: 2017-05-20 10:59+0200\n" -"PO-Revision-Date: 2017-09-19 22:59+0000\n" +"PO-Revision-Date: 2017-11-05 13:29+0000\n" "Last-Translator: moi\n" "Language-Team: Indonesian (http://www.transifex.com/otf/torproject/language/id/)\n" "MIME-Version: 1.0\n"

1 0

[translation/tails-perl5lib] Update translations for tails-perl5lib
by translation＠torproject.org 05 Nov '17

05 Nov '17

commit 429cb6b668027f044a982accbce4cd30d18d00e6 Author: Translation commit bot <translation(a)torproject.org> Date: Sun Nov 5 13:48:33 2017 +0000 Update translations for tails-perl5lib --- id.po | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/id.po b/id.po index 0f3c896af..a23761fb2 100644 --- a/id.po +++ b/id.po @@ -5,7 +5,7 @@ # Translators: # Mohamad Hasan Al Banna <se7entime(a)openmailbox.org>, 2016 # moi, 2017 -# Slamet Aryo <slamet.badwi(a)gmail.com>, 2014 +# Slamet Badwi <slamet.badwi(a)gmail.com>, 2014 # zk, 2016 # zk, 2015 msgid "" @@ -13,7 +13,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: Tails developers <tails(a)boum.org>\n" "POT-Creation-Date: 2017-05-20 10:59+0200\n" -"PO-Revision-Date: 2017-09-19 22:59+0000\n" +"PO-Revision-Date: 2017-11-05 13:29+0000\n" "Last-Translator: moi\n" "Language-Team: Indonesian (http://www.transifex.com/otf/torproject/language/id/)\n" "MIME-Version: 1.0\n"

1 0

[translation/tails-misc] Update translations for tails-misc
by translation＠torproject.org 05 Nov '17

05 Nov '17

commit 8009eac89fa4033b27f5753bb1f13abc964af690 Author: Translation commit bot <translation(a)torproject.org> Date: Sun Nov 5 13:47:32 2017 +0000 Update translations for tails-misc --- id.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/id.po b/id.po index 67b3fd06e..465739fa0 100644 --- a/id.po +++ b/id.po @@ -17,7 +17,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2017-09-13 20:10+0200\n" -"PO-Revision-Date: 2017-09-23 19:05+0000\n" +"PO-Revision-Date: 2017-11-05 13:29+0000\n" "Last-Translator: carolyn <carolyn(a)anhalt.org>\n" "Language-Team: Indonesian (http://www.transifex.com/otf/torproject/language/id/)\n" "MIME-Version: 1.0\n"

1 0