[tor-qa] Experimental 3.5.2 bundles with tor-fw-helper (trial 2)

David Fifield david at bamsoftware.com
Sat Feb 15 21:20:34 UTC 2014


(Devs are in Iceland, post bundles.)

Here are revised bundles in response to some of the problems we've seen
so far (thanks especially to Lunar).

https://people.torproject.org/~dcf/pt-bundle/3.5.2-fwhelper-2/

The changes relative to 3.5.2-fwhelper-1:
 * NAT-PMP is completely disabled and removed. it didn't seem to be
   working (maybe it is only for Apple routers), and we saw one of
   libnatpmp's programs segfault (though not tor-fw-helper itself).
   https://trac.torproject.org/projects/tor/ticket/5213#comment:14
 * The client is forced to use IPv4 with the -4 option. Though
   flashproxy-client supports IPv6, and IPv6 can sometimes work to get
   around NAT, tor-fw-helper only does IPv4 port forwardings, and that's
   what we're trying to test. We encountered a problem where the
   external IPv6 address was being registered, rather than the IPv4
   address that was forwarded.
 * Uses a static port 9000 for the external listener, instead of an
   ephemeral port. This is to make it easier for testers to clean up
   their port forwarding table, because tor-fw-helper appears to leave
   the forwardings active.
   https://lists.torproject.org/pipermail/tor-qa/2014-February/000335.html

Like before, you just have to click "Connect" and wait up to 60 seconds.
You don't have to do any special tests; just see whether it bootstraps
or not.

These bundles are still nothing close to a release candidate. We'll need
to find a way to limit how long port forwarding lasts, at least, and
make sure that the UPnP library is safe to deploy.

Changes relative to master:
https://gitweb.torproject.org/user/dcf/tor-browser-bundle.git/commitdiff/3.5.2-fwhelper-2?hp=tbb-3.5.2-build5
Changes relative to 3.5.2-fwhelper-1:
https://gitweb.torproject.org/user/dcf/tor-browser-bundle.git/commitdiff/3.5.2-fwhelper-2?hp=3.5.2-fwhelper-1

David Fifield


More information about the tor-qa mailing list