diff options
| author | Nick Mathewson <nickm@torproject.org> | 2008-04-22 16:32:55 +0000 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2008-04-22 16:32:55 +0000 |
| commit | ef9c34688cb87731b392e9602c0fc817a5d84eab (patch) | |
| tree | b621be72c16d9e3cd5b20953f3e17c8b7f918840 /ChangeLog | |
| parent | 6e979489dce903fdbb086d749e84f43bdb8baaa5 (diff) | |
| download | tor-ef9c34688cb87731b392e9602c0fc817a5d84eab.tar.gz tor-ef9c34688cb87731b392e9602c0fc817a5d84eab.zip | |
r15273@tombo: nickm | 2008-04-22 12:32:28 -0400
apply patch from lodger: reject requests for reverse-dns lookup of names in private address space. make non-exits reject all dns requests. Fixes bug 619.
svn:r14410
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 9 |
1 files changed, 8 insertions, 1 deletions
@@ -29,6 +29,8 @@ Changes in version 0.2.1.1-alpha - 2008-??-?? nwf, bugfix on 0.2.0.16-alpha. - Warn less verbosely about clock skew from netinfo cells from untrusted sources. Fixes bug 663. + - Non-exit relays no longer allow DNS requests. Fixes bug 619. + Patch from Lodger. o Minor features: - Allow separate log levels to be configured for different logging @@ -61,7 +63,12 @@ Changes in version 0.2.1.1-alpha - 2008-??-?? descriptors we need to keep around when we're cleaning out old router descriptors. This speeds up the computation significantly, and may reduce fragmentation. - - Make dumpstats() log the fullness and size of openssl-internal buffers. + - Make dumpstats() log the fullness and size of openssl-internal + buffers. + + o Minor features (security): + - Reject requests for reverse-dns lookup of names in a private + address space. Patch from Lodger. o Code simplifications and refactoring: - Refactor code using connection_ap_handshake_attach_circuit() to |