diff options
| author | Sebastian Hahn <sebastian@torproject.org> | 2017-11-04 16:37:41 +0100 |
|---|---|---|
| committer | Sebastian Hahn <sebastian@torproject.org> | 2017-11-04 18:31:02 +0100 |
| commit | d3fee8b82395f95a925b9adcb7b3a66ae0d5a0ef (patch) | |
| tree | a38c8bb23187a9bc71389f438882d0fe9f120328 /doc | |
| parent | e491c05f96387178da0958614084cd6ab30f5ea7 (diff) | |
| download | tor-d3fee8b82395f95a925b9adcb7b3a66ae0d5a0ef.tar.gz tor-d3fee8b82395f95a925b9adcb7b3a66ae0d5a0ef.zip | |
ClientDNSRejectInternalAddresses in non-default networks
Once again allow the flag to be set, unless the default network is used.
Thanks to nickm for a suggestion for the workaround to a test failure.
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/tor.1.txt | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/doc/tor.1.txt b/doc/tor.1.txt index d701288af7..f052464332 100644 --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@ -1443,12 +1443,12 @@ The following options are useful only for clients (that is, if [[ClientDNSRejectInternalAddresses]] **ClientDNSRejectInternalAddresses** **0**|**1**:: If true, Tor does not believe any anonymously retrieved DNS answer that tells it that an address resolves to an internal address (like 127.0.0.1 or - 192.168.0.1). This option prevents certain browser-based attacks; don't - turn it off unless you know what you're doing. (Default: 1) + 192.168.0.1). This option prevents certain browser-based attacks; it + is not allowed to be set on the default network. (Default: 1) [[ClientRejectInternalAddresses]] **ClientRejectInternalAddresses** **0**|**1**:: If true, Tor does not try to fulfill requests to connect to an internal - address (like 127.0.0.1 or 192.168.0.1) __unless a exit node is + address (like 127.0.0.1 or 192.168.0.1) __unless an exit node is specifically requested__ (for example, via a .exit hostname, or a controller request). If true, multicast DNS hostnames for machines on the local network (of the form *.local) are also rejected. (Default: 1) |