[tor-bugs] #33569 [Internal Services/Tor Sysadmin Team]: Point check.torproject.org at check-01

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Mar 9 13:24:55 UTC 2020


#33569: Point check.torproject.org at check-01
-------------------------------------------------+-------------------------
 Reporter:  irl                                  |          Owner:  anarcat
     Type:  defect                               |         Status:  closed
 Priority:  Medium                               |      Milestone:
Component:  Internal Services/Tor Sysadmin Team  |        Version:
 Severity:  Normal                               |     Resolution:  fixed
 Keywords:                                       |  Actual Points:
Parent ID:  #29399                               |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by anarcat):

 * status:  accepted => closed
 * resolution:   => fixed


Comment:

 Replying to [ticket:33569 irl]:
 > Please point check.torproject.org at check-01.torproject.org. It should
 *only* have an A record. This is important! People will be upset if they
 are visiting check.torproject.org via IPv6 exits and are being told
 they're not using Tor.

 done, in:

 {{{
 commit eb78e2ce532a01e107ff968bbdae3f8e3a1944e9
 Author: Antoine Beaupré <anarcat at debian.org>
 Date:   Mon Mar 9 09:21:15 2020 -0400

     point check.tpo to new check-01 (#33569)

 diff --git a/torproject.org b/torproject.org
 index 1b64075..cc9b935 100644
 --- a/torproject.org
 +++ b/torproject.org
 @@ -67,8 +67,9 @@ bridges                       IN      A
 78.47.38.229                    ; polyanthum
  ;cdn-fastly            IN      CNAME   global.prod.fastly.net.
  ;cdn-fastly            IN      CNAME   l.ssl.fastly.net.               ;
 US/EU Network (United States and Europe)
  cdn-fastly             IN      CNAME   l.global-ssl.fastly.net.        ;
 Global Network (United States, Europe, and Asia/Pacific)
 -;check                 IN      CNAME   chiwui
 -check                  IN      A       116.202.120.176
 +; check-01. should be just a A (instead of CNAME) because we do *not*
 +; want IPv6, see #33569
 +check                  IN      A       116.202.120.181
  collector              IN      CNAME   colchicifolium
  collector2             IN      CNAME   corsicum
  crm                    IN      CNAME   crm-int-01
 }}}

 and pushed.

 > Can you also confirm that the only other DNS name that points at chiwui
 is exitlist.torproject.org for the old DNSEL service?


 apart from the auto-generated records from LDAP (A and AAA records for
 chiwui.torproject.org), I have:

 {{{
 chiwui2                 IN      A       116.202.120.177
 chiwui4                 IN      A       116.202.120.176
 exitlist                IN      NS      chiwui4
 }}}

 sounds good?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33569#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list