diff options
| author | Nick Mathewson <nickm@torproject.org> | 2005-12-08 19:58:14 +0000 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2005-12-08 19:58:14 +0000 |
| commit | 338f23114faf35f9965dd9de6ee08376db905533 (patch) | |
| tree | 20148b10cb92bc6f51da3b896a463511214935c9 /doc/tor.1.in | |
| parent | 2d585941b8f95b301803ef57da6d1da9671365c4 (diff) | |
| download | tor-338f23114faf35f9965dd9de6ee08376db905533.tar.gz tor-338f23114faf35f9965dd9de6ee08376db905533.zip | |
Oops. 0.0.0.0/8 and 169.254.0.0/16 are also special.
svn:r5536
Diffstat (limited to 'doc/tor.1.in')
| -rw-r--r-- | doc/tor.1.in | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/doc/tor.1.in b/doc/tor.1.in index 6eb658e451..352c0655f8 100644 --- a/doc/tor.1.in +++ b/doc/tor.1.in @@ -387,11 +387,12 @@ For example, "reject 127.0.0.1:*,reject 192.168.1.0/24:*,accept *:*" would reject any traffic destined for localhost and any 192.168.1.* address, but accept anything else. -To specify all internal networks (including 169.254.0.0/16, -127.0.0.0/8, 192.168.0.0/16, 10.0.0.0/8, and 172.16.0.0/12), you can use -the "private" alias instead of an address. For example, to allow HTTP -to 127.0.0.1 and block all other connections to internal networks, you -can say "accept 127.0.0.1:80,reject private:*". See RFC 3330 for more +To specify all internal and link-local networks (including 0.0.0.0/8, +169.254.0.0/16, 127.0.0.0/8, 192.168.0.0/16, 10.0.0.0/8, and +172.16.0.0/12), you can use the "private" alias instead of an address. +For example, to allow HTTP to 127.0.0.1 and block all other +connections to internal networks, you can say "accept +127.0.0.1:80,reject private:*". See RFC 1918 and RFC 3330 for more details about internal and reserved IP address space. This directive can be specified multiple times so you don't have to put |