[tor-bugs] #13348 [Onionoo]: Exit Policy Summary shows "reject 1-65535" althought there accept ports and exit connections

[Tor Bug Tracker & Wiki]

#13348: Exit Policy Summary shows "reject      1-65535" althought there accept
ports and exit connections
-------------------------+------------------
     Reporter:  toralf   |      Owner:  rndm
         Type:  defect   |     Status:  new
     Priority:  trivial  |  Milestone:
    Component:  Onionoo  |    Version:
   Resolution:           |   Keywords:
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+------------------
Changes (by karsten):

 * status:  needs_information => new
 * component:  Globe => Onionoo


Comment:

 Ah, I was mislead by your mentioning of "arm" in the ticket description.
 Now I understand that Globe was telling you an "Exit Policy" with two
 ports open and at the same time an "Exit Policy Summary" with reject all.
 That's a (minor) bug in Onionoo then, though I'm not sure if there's an
 easy fix for it.

 Here's what I think happened: your relay published a descriptor with
 `accept *:80 accept *:443` shortly after 50 minutes of the hour, but the
 directory authorities base their vote on an earlier descriptor which still
 had `reject *:*`.  The "Exit Policy" field is populated from the latest
 descriptor that Onionoo can find, which contains `accept *:80 accept
 *:443`, but "Exit Policy Summary" is generated by the directory
 authorities based on the earlier descriptor.

 A possible fix might be to only consider a descriptor if it's referenced
 from the consensus, because that's the descriptor that directory
 authorities used to generate the summary.  But that's a non-trivial
 change, and I cannot say what other effects that might have.  Switching
 status back to new to think more about this.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13348#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online