[tor-bugs] #3056 [Tor]: tor/vidalia, debian libevent-2.0-5 eventdns: Address mismatch? etc.

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Sep 16 03:10:26 UTC 2013


#3056: tor/vidalia, debian libevent-2.0-5 eventdns: Address mismatch? etc.
---------------------------------+-----------------------------------------
     Reporter:                   |      Owner:
  freeeveryone4ever              |     Status:  needs_information
         Type:  defect           |  Milestone:  Tor: unspecified
     Priority:  normal           |    Version:  Tor: 0.2.3.10-alpha
    Component:  Tor              |   Keywords:  libevent eventdns tor-relay
   Resolution:                   |  Parent ID:
Actual Points:                   |
       Points:                   |
---------------------------------+-----------------------------------------
Changes (by ln5):

 * cc: ln5 (added)


Comment:

 FWIW, I see this a lot on busy exits.

 From looking at libevent code it seems to indicate that a packet was
 received on the socket opened for DNS queries/responses from a host that
 is not the configured resolver. Looking at the "apparent source" in my
 logs, as well as torland's above, hints that these are indeed not from
 configured resolvers.

 I guess it might be DNS queries with a spoofed source address. Haven't
 looked at any content.

 Anyhow, seeing lots of IP addresses that are not my own in the log files
 of an exit makes me cringe. Should we suppress the log message altogether?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3056#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list