[tor-bugs] #20943 [Obfuscation/Obfsproxy]: Clarify documentation for obfs4 setup

[Tor Bug Tracker & Wiki]

#20943: Clarify documentation for obfs4 setup
-----------------------------------+---------------------
 Reporter:  kaie                   |          Owner:  asn
     Type:  task                   |         Status:  new
 Priority:  Medium                 |      Milestone:
Component:  Obfuscation/Obfsproxy  |        Version:
 Severity:  Normal                 |     Resolution:
 Keywords:                         |  Actual Points:
Parent ID:                         |         Points:
 Reviewer:                         |        Sponsor:
-----------------------------------+---------------------

Comment (by kaie):

 The information below was the source of my confusion.

 On this page:
 http://tor.stackexchange.com/questions/6370/how-to-run-an-obfs4-bridge

 Roger said:
 'The "ExtORPort auto" above is fine -- the extended ORPort is for local
 connections, and you don't need to open anything in your external
 firewall.'

 It seems that statement isn't right. It seems the extended ORPort isn't
 restricted to local (localhost-only) connections, but rather it's used to
 listen for incoming connections from other computers, that want to use
 this server as a bridge.

 The ports that "ExtORPort auto" allocates will listen on all network
 interfaces, not just localhost.

 In my understanding, the automatically assigned ExtORPort must be
 accessible from the outside (and if a firewall is used, the firewall must
 allow incoming connections on that port(s)).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20943#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online