diff options
| author | teor (Tim Wilson-Brown) <teor2345@gmail.com> | 2016-07-01 15:37:13 +1000 |
|---|---|---|
| committer | teor (Tim Wilson-Brown) <teor2345@gmail.com> | 2016-07-01 15:37:13 +1000 |
| commit | 514f0041d190b9e142cc246e3ec7ac65342547bd (patch) | |
| tree | 4476a6dbcb443e380267cc120b21ed230137b812 /changes | |
| parent | 64ee7bcd0c8e154269145b626a7cd56b9d6264a1 (diff) | |
| download | tor-514f0041d190b9e142cc246e3ec7ac65342547bd.tar.gz tor-514f0041d190b9e142cc246e3ec7ac65342547bd.zip | |
Avoid disclosing exit IP addresses in exit policies by default
From 0.2.7.2-alpha onwards, Exits would reject all the IP addresses
they knew about in their exit policy. But this may have disclosed
addresses that were otherwise unlisted.
Now, only advertised addresses are rejected by default by
ExitPolicyRejectPrivate. All known addresses are only rejected when
ExitPolicyRejectLocalInterfaces is explicitly set to 1.
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/bug18456 | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/changes/bug18456 b/changes/bug18456 new file mode 100644 index 0000000000..843c70a587 --- /dev/null +++ b/changes/bug18456 @@ -0,0 +1,6 @@ + o Major bugfixes (exit policies): + - Avoid disclosing exit outbound bind addresses, configured port bind + addresses, and local interface addresses in relay descriptors by + default under ExitPolicyRejectPrivate. Instead, only reject these + (otherwise unlisted) addresses if ExitPolicyRejectLocalInterfaces is set. + Fixes bug 18456; bugfix on 0.2.7.2-alpha. Patch by teor. |