Tor 0.2.1.12-alpha is out

Jari Turkia jmjt at lut.fi
Tue Feb 10 09:34:31 UTC 2009


Roger Dingledine wrote:
> Tor 0.2.1.12-alpha features several more security-related fixes. You
...
>     - Fix a temporary DoS vulnerability that could be performed by
>       a directory mirror. Bugfix on 0.2.0.9-alpha; reported by lark.

Is there a bug report about excessive log flooding?
Feb 01 04:02:32.473 [warn] Failing because we have 1016 connections 
already. Please raise your ulimit -n.
Feb 01 04:02:32.860 [warn] Failing because we have 1016 connections 
already. Please raise your ulimit -n.
Feb 01 04:02:35.847 [notice] accept failed: Too many open files. 
Dropping incoming connection.
Feb 01 04:02:35.847 [notice] accept failed: Too many open files. 
Dropping incoming connection.

Raising ulimit -n is not an option for all of us. What is needed is a 
config option to limit number of connections and limit the logging. In a 
couple of hours there will be 3 gigabytes of log. This makes it possible 
to DoS a tor-node.

Regards,
Jari Turkia



More information about the tor-talk mailing list