.exit handling (was Yahoo Mail and Tor)

downie - downgeoff2 at hotmail.com
Fri Jul 10 16:23:10 UTC 2009



> Date: Fri, 10 Jul 2009 11:15:25 -0400
> From: erilenz at gmail.com
> To: or-talk at freehaven.net
> Subject: Re: Yahoo Mail and Tor

> If I'm proxying through Tor and I type this into my browser:
> 
> www.google.com.example.exit
> 
> My browser asks the proxy for a connection to "www.google.com.example.exit"
> 
> Once my browser receives the connection, it then sends this down it:
> 
> GET / HTTP/1.1\r\n
> Host: www.google.com.example.exit\r\n
> \r\n
> 
> The problem is that some web servers have multiple websites on the same IP
> and they decide which website to serve by looking at the HTTP Host header.
> So you need privoxy/polipo to strip the "example.exit" from the HTTP Host
> header before forwarding on the actual HTTP request, so it sends this
> instead:
> 
> GET / HTTP/1.1\r\n
> Host: www.google.com\r\n
> \r\n
> 
> -- 
> Erilenz

So far so good. A possible problem then arises when the served page contains absolute URLs for resources, links etc which no longer use the .exit notation, and so could be fetched from a different exit. How often that would happen is open to question.
Another Privoxy rule could be written to rewrite those page URLs I guess, but how would you pass the name of the required exit to the rule?

GD

_________________________________________________________________
Lauren found her dream laptop. Find the PC that’s right for you.
http://www.microsoft.com/windows/choosepc/?ocid=ftp_val_wl_290
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20090710/0e2a4ba8/attachment.htm>


More information about the tor-talk mailing list