diff options
| author | teor (Tim Wilson-Brown) <teor2345@gmail.com> | 2015-09-16 09:09:54 +1000 |
|---|---|---|
| committer | teor (Tim Wilson-Brown) <teor2345@gmail.com> | 2015-09-16 09:09:54 +1000 |
| commit | a659a3fced83ddb2586cade138f6fa1376d1402d (patch) | |
| tree | a9ff0d82f7859a5f7c237ff86766d820478f2e97 /changes | |
| parent | fd85f2cd706fe86499962f2364f99daa220186a8 (diff) | |
| parent | eb1759e63cccc9fb870dfb2f87b21ce1e6d4df2d (diff) | |
| download | tor-a659a3fced83ddb2586cade138f6fa1376d1402d.tar.gz tor-a659a3fced83ddb2586cade138f6fa1376d1402d.zip | |
Merge branch 'bug17027-reject-private-all-interfaces-v2' into bug16069-bug17027
src/test/test_policy.c:
Merged calls to policies_parse_exit_policy by adding additional arguments.
fixup to remaining instance of ~EXIT_POLICY_IPV6_ENABLED.
Compacting logic test now produces previous list length of 4, corrected this.
src/config/torrc.sample.in:
src/config/torrc.minimal.in-staging:
Merged torrc modification dates in favour of latest.
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/bug17027-reject-private-all-interfaces | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/changes/bug17027-reject-private-all-interfaces b/changes/bug17027-reject-private-all-interfaces new file mode 100644 index 0000000000..755cd5c9f2 --- /dev/null +++ b/changes/bug17027-reject-private-all-interfaces @@ -0,0 +1,6 @@ + o Minor bug fixes (security, exit policies): + - ExitPolicyRejectPrivate rejects more private addresses by default: + * the relay's published IPv6 address (if any), and + * any publicly routable IPv4 or IPv6 addresses on any local interfaces. + Resolves ticket 17027. Patch by "teor". + Patch on 42b8fb5a1523 (11 Nov 2007), released in 0.2.0.11-alpha. |