[tor-bugs] #3056 [Tor]: tor/vidalia, debian libevent-2.0-5 eventdns: Address mismatch? etc.
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon Sep 16 03:10:26 UTC 2013
#3056: tor/vidalia, debian libevent-2.0-5 eventdns: Address mismatch? etc.
---------------------------------+-----------------------------------------
Reporter: | Owner:
freeeveryone4ever | Status: needs_information
Type: defect | Milestone: Tor: unspecified
Priority: normal | Version: Tor: 0.2.3.10-alpha
Component: Tor | Keywords: libevent eventdns tor-relay
Resolution: | Parent ID:
Actual Points: |
Points: |
---------------------------------+-----------------------------------------
Changes (by ln5):
* cc: ln5 (added)
Comment:
FWIW, I see this a lot on busy exits.
From looking at libevent code it seems to indicate that a packet was
received on the socket opened for DNS queries/responses from a host that
is not the configured resolver. Looking at the "apparent source" in my
logs, as well as torland's above, hints that these are indeed not from
configured resolvers.
I guess it might be DNS queries with a spoofed source address. Haven't
looked at any content.
Anyhow, seeing lots of IP addresses that are not my own in the log files
of an exit makes me cringe. Should we suppress the log message altogether?
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3056#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list