diff options
| author | Roger Dingledine <arma@torproject.org> | 2007-11-10 21:17:51 +0000 |
|---|---|---|
| committer | Roger Dingledine <arma@torproject.org> | 2007-11-10 21:17:51 +0000 |
| commit | 42b8fb5a152301a1d1d89b390bec5245857dd0e6 (patch) | |
| tree | 9909487817f05538fd1360154c351fbc99c774ba /src/or/or.h | |
| parent | 462643c756cb5b4791635ff39b2009608d971579 (diff) | |
| download | tor-42b8fb5a152301a1d1d89b390bec5245857dd0e6.tar.gz tor-42b8fb5a152301a1d1d89b390bec5245857dd0e6.zip | |
Exit policies now reject connections that are addressed to a
relay's public (external) IP address too, unless
ExitPolicyRejectPrivate is turned off. We do this because too
many relays are running nearby to services that trust them based
on network address.
svn:r12459
Diffstat (limited to 'src/or/or.h')
| -rw-r--r-- | src/or/or.h | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/src/or/or.h b/src/or/or.h index 7479ec9dc2..0bded333a5 100644 --- a/src/or/or.h +++ b/src/or/or.h @@ -3356,9 +3356,8 @@ void policies_parse_from_options(or_options_t *options); int cmp_addr_policies(addr_policy_t *a, addr_policy_t *b); addr_policy_result_t compare_addr_to_addr_policy(uint32_t addr, uint16_t port, addr_policy_t *policy); -int policies_parse_exit_policy(config_line_t *cfg, - addr_policy_t **dest, - int rejectprivate); +int policies_parse_exit_policy(config_line_t *cfg, addr_policy_t **dest, + int rejectprivate, const char *local_address); int exit_policy_is_general_exit(addr_policy_t *policy); int policy_is_reject_star(addr_policy_t *policy); int getinfo_helper_policies(control_connection_t *conn, |