[tor-bugs] #6110 [Tor Client]: Log warnings: Control[Port/ListenAddress], Socks[port/listenaddress], etc

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Fri Jun 8 18:49:33 UTC 2012


#6110: Log warnings: Control[Port/ListenAddress], Socks[port/listenaddress], etc
------------------------+---------------------------------------------------
 Reporter:  grarpamp    |          Owner:                     
     Type:  defect      |         Status:  new                
 Priority:  normal      |      Milestone:  Tor: 0.2.3.x-final 
Component:  Tor Client  |        Version:  Tor: 0.2.3.16-alpha
 Keywords:              |         Parent:                     
   Points:              |   Actualpoints:                     
------------------------+---------------------------------------------------
 These various warnings for the various subject options, as they and
 others might exist, are unnecessary and in bad form.

 - With no such config, client should default to 127.0.0.1 and the
 respective port, emitting just:
 Opening <whatever> listener on 127.0.0.1:9050

 - If a user has need to change from the defaults, they've presumably
 found out about it from, and read the warnings in, the documentation.
 Logfiles are not the place for documentation.

 - And at over four times the standard 80 character line with, even
 without the timestamp and severity, it's really bad form for syslog
 style messages.

 These are really unnecessary, please remove them. Or at least trim
 them down to fit within 80 chars:
 Non local <whateverport> configured, see warning in docs.


 Examples:

 [notice] You configured a non-loopback address for SocksPort. This allows
 everybody on your local network to use your machine as a proxy. Make sure
 this is what you wanted.

 [warn] You have a ControlPort set to accept connections from a non-local
 address.  This means that programs not running on your computer can
 reconfigure your Tor.  That's pretty bad, since the controller protocol
 isn't encrypted!  Maybe you should just listen on 127.0.0.1 and use a tool
 like stunnel or ssh to encrypt remote connections to your control port.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6110>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list