[tor-bugs] #17901 [Tor]: Tor would bind ControlPort to public ip address if it has no localhost interface

Sun Dec 20 12:19:49 UTC 2015

#17901: Tor would bind ControlPort to public ip address if it has no localhost
interface
--------------------+------------------------------
 Reporter:  s7r     |          Owner:
     Type:  defect  |         Status:  new
 Priority:  Medium  |      Milestone:  Tor: 0.2.???
Component:  Tor     |        Version:  Tor: 0.2.7.6
 Severity:  Normal  |     Resolution:
 Keywords:          |  Actual Points:
Parent ID:          |         Points:
  Sponsor:          |
--------------------+------------------------------

Comment (by teor):

 One way of resolving this issue is to check that we're actually binding to
 127.0.0.1 or ::1 for the (default/no IP address) ControlPort and
 SOCKSPort, and complain loudly and fail to launch if we're not.

 We can require the user to configure an explicit IP address (or access
 rules? does the ControlPort have those?) to silence the warning and start
 tor.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17901#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online