[tor-bugs] #5166 [Tor Relay]: 198.18.0.0/15 is reserved and in use by home routers

[Tor Bug Tracker & Wiki]

#5166: 198.18.0.0/15 is reserved and in use by home routers
-----------------------+----------------------------------------------------
 Reporter:  rransom    |          Owner:                    
     Type:  defect     |         Status:  new               
 Priority:  major      |      Milestone:  Tor: 0.2.3.x-final
Component:  Tor Relay  |        Version:                    
 Keywords:             |         Parent:                    
   Points:             |   Actualpoints:                    
-----------------------+----------------------------------------------------
Changes (by rransom):

  * status:  needs_information => new


Comment:

 To fix this on the client side, all clients which are running in a LAN
 which uses this netblock must treat this block as ‘internal’ for the
 purposes of the ClientRejectInternalAddresses and
 ClientDNSRejectInternalAddresses options.  Thus, all clients must treat
 this block as ‘internal’ (to avoid making different clients behave
 differently).

 To fix this on the relay/bridge side, a relay which detects that it is
 running on a computer with at least one interface configured with an IP
 address in this bogus block would need to (a) learn its address in a
 different way, if necessary (e.g. if Address isn't explicitly set), and
 (b) if ExitPolicyRejectPrivate has not been disabled, and the relay's exit
 policy would  otherwise allow exiting to this block, prepend a ‘`reject
 198.18.0.0/15:*`’ line to its exit policy (both locally-enforced and
 published).

 Relays '''must not''' refuse to exit to this block unless either (a) all
 currently-existing Tor clients are unable to connect to the public Tor
 network, or (b) they publish an exit policy explicitly rejecting this
 block.

 I predict that this ticket will be bumped to 0.2.4.x.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5166#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online