[tor-bugs] #7349 [Tor]: Obfsbridges should be able to "disable" their ORPort

Wed Jul 24 20:29:48 UTC 2013

#7349: Obfsbridges should be able to "disable" their ORPort
---------------------------------+------------------------------------------
 Reporter:  asn                  |          Owner:                  
     Type:  project              |         Status:  new             
 Priority:  normal               |      Milestone:  Tor: unspecified
Component:  Tor                  |        Version:                  
 Keywords:  tor-bridge SponsorZ  |         Parent:                  
   Points:                       |   Actualpoints:                  
---------------------------------+------------------------------------------

Comment(by hsn):

 This should be ultra high priority since i am loosing bridge game with
 china firewall. They tend to detect obfs3 as suspicious traffic and then
 do scan on IP discovering tor bridge.

 To make this reliable, not only disabling ORPort is needed but also make
 shared secret to work with bridgedb distributing it to clients.

 As temporary workaround i suggest to make list of IPs which are used for
 running checks on bridge public, so we can allow them to connect into
 ORPort but drop other traffic.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7349#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online