[tor-bugs] #17027 [Tor]: policies_parse_exit_policy_internal should block all IPv4 and IPv6 local addresses

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Sep 10 07:44:30 UTC 2015


#17027: policies_parse_exit_policy_internal should block all IPv4 and IPv6 local
addresses
-------------------------+-------------------------------------------------
     Reporter:  teor     |      Owner:
         Type:  defect   |     Status:  new
     Priority:  major    |  Milestone:  Tor: 0.2.7.x-final
    Component:  Tor      |    Version:  Tor: 0.2.7.2-alpha
   Resolution:           |   Keywords:  TorCoreTeam201509 security
Actual Points:           |  026-backport
       Points:           |  Parent ID:
-------------------------+-------------------------------------------------

Comment (by teor):

 We should also update the man page and torrcs with this change, as it
 changes the meaning of "private" to mean "all IPv4 and IPv6 addresses on
 all server interfaces", rather than "a single IPv4 address on one of the
 server's interfaces". (It's ambiguous in the man page at the moment.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17027#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list