[tor-bugs] #17181 [Tor]: Block every ORPort IP address in ExitPolicyRejectPrivate, not just the first one

[Tor Bug Tracker & Wiki]

#17181: Block every ORPort IP address in ExitPolicyRejectPrivate, not just the
first one
----------------------+---------------------------------
 Reporter:  teor      |          Owner:
     Type:  defect    |         Status:  new
 Priority:  normal    |      Milestone:  Tor: 0.2.???
Component:  Tor       |        Version:  Tor: 0.2.7.3-rc
 Keywords:  security  |  Actual Points:
Parent ID:            |         Points:
  Sponsor:            |
----------------------+---------------------------------
 If multiple ORPort IP addresses are configured, block them all in
 ExitPolicyRejectPrivate.

 I don't think this is a very common config, and the recent changes in
 #17027 probably cover most of these. (Except for multihomed relays behind
 NATs.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17181>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online