[tor-bugs] #17901 [Tor]: Tor would bind ControlPort to public ip address if it has no localhost interface

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun Dec 20 12:16:17 UTC 2015


#17901: Tor would bind ControlPort to public ip address if it has no localhost
interface
------------------------+--------------------------
     Reporter:  s7r     |      Owner:
         Type:  defect  |     Status:  new
     Priority:  Medium  |  Milestone:  Tor: 0.2.???
    Component:  Tor     |    Version:  Tor: 0.2.7.6
     Severity:  Normal  |   Keywords:
Actual Points:          |  Parent ID:
       Points:          |    Sponsor:
------------------------+--------------------------
 FreeBSD jails or some OpenVZ virtual machines do not have a `lo` interace
 (no 127.0.0.1 or localhost address), they only have an interface with
 either a public IP address either a NAT address routed upstream on the
 host.

 In this case, if ControlPort 9051 is set, it will open the control port on
 the public IP address without even a warning which is not funny. This
 applies also to SocksPort, but that's less scary than ControlPort.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17901>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list