summaryrefslogtreecommitdiff
path: root/doc/tor.1.txt
AgeCommit message (Collapse)Author
2013-01-03Merge branch 'ntor-resquashed'Nick Mathewson
Conflicts: src/or/cpuworker.c src/or/or.h src/test/bench.c
2013-01-03Document UseNTorHandshakeNick Mathewson
2012-12-25Merge remote-tracking branch 'mikeperry/209-path-bias-changes'Nick Mathewson
2012-12-25Add documentation for directory guard optionsNick Mathewson
2012-12-25Make ECDHE group configurable: 224 for public, 256 for bridges (default)Nick Mathewson
2012-12-17Document PreferIPv6Automap in the manpageNick Mathewson
2012-12-17Build and test most of the machinery needed for IPv6 virtualaddrmapsNick Mathewson
With an IPv6 virtual address map, we can basically hand out a new IPv6 address for _every_ address we connect to. That'll be cool, and will let us maybe get around prop205 issues. This uses some fancy logic to try to make the code paths in the ipv4 and the ipv6 case as close as possible, and moves to randomly generated addresses so we don't need to maintain those stupid counters that will collide if Tor restarts but apps don't. Also has some XXXX items to fix to make this useful. More design needed.
2012-12-17Turn off by-default use of client-side DNS cacheing.Nick Mathewson
2012-12-17Add documentation for the client-side DNS cache optionsNick Mathewson
2012-12-13Merge branch 'fallback_dirsource_v3'Nick Mathewson
2012-12-10Update manpage.Mike Perry
2012-12-07Update manpage for new PathBias torrc options.Mike Perry
2012-12-07Expand the manpage to say: watch out for nonlocal socksNick Mathewson
This clears up the remaining issue stopping me from closing bug 6297.
2012-12-06Drop FallbackNetworkstatusFile; it never worked.Nick Mathewson
2012-12-06Add an option to weight down authorities when choosing a fallbackNick Mathewson
2012-12-06Add a way to configure selection weights for dir_server_tNick Mathewson
2012-12-06New FallbackDir option to add extra directories for bootstrapingNick Mathewson
This replaces the old FallbackConsensus notion, and should provide a way -- assuming we pick reasonable nodes! -- to give clients suggestions of placs to go to get their first consensus.
2012-12-06Rename DirServer to DirAuthorityNick Mathewson
2012-11-27Merge branch 'bug7013_take2_squashed'Nick Mathewson
2012-11-27Add a torrc option to specify the bind address of managed proxies.George Kadianakis
2012-11-14Add manual page entries for new IPv6-exits optionsNick Mathewson
2012-10-17Minor tweaks and comments to nils' geoip v6 code.Karsten Loesing
2012-10-17Add GeoIP database for IPv6 addressesnils
2012-09-20Make option OutboundBindAddress accept IPv6 addresses too.Linus Nordberg
Implements ticket 6786.
2012-09-19Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson
2012-09-19Clarify that hidden services are TCP onlyNick Mathewson
Also remove some trailing whitespace. Patch from maker; fixes bug 6024.
2012-09-14Merge branch 'maint-0.2.3'Roger Dingledine
2012-09-13Fix man page typoRobert Ransom
2012-09-10raise bandwidthrate/bandwidthburst to a new "infinite"Roger Dingledine
addresses bug 6605.
2012-09-05Merge branch 'maint-0.2.3'Roger Dingledine
2012-09-05Update the minimum bandwidth for a public relayRoger Dingledine
The current cutoff is 30KB, but in reality a useful cutoff is probably more like 50KB or 100KB.
2012-09-05Merge remote-tracking branch 'linus/bug6770_3'Nick Mathewson
Conflicts: doc/tor.1.txt src/or/config.c
2012-09-05Remove AuthDirPublishIPv6 and let AuthDirHasIPv6Connectivity fill its function.Linus Nordberg
See #4771 for rationale. Note that this patch does not take suggested changes in #4470 into account and keeps treating AuthDirHasIPv6Connectivity as an AUTOBOOL. Thus, bug fixes for that are included here as well. This is a fix on master, unreleased as of now.
2012-09-05Make AuthDirHasIPv6Connectivity a BOOL.Linus Nordberg
This is a fix of unreleased tor. It solves ticket #6770.
2012-09-05minor typos i found while constructing the changelogRoger Dingledine
2012-09-04Clients connect to public relays over IPv6.Linus Nordberg
Add ClientUseIPv6 and ClientPreferIPv6ORPort configuration options. Use "preferred OR port" for all entry nodes, not only for bridges. Mark bridges with "prefer IPv6 OR port" if an IPv6 address is configured in Bridge line and ClientPreferIPv6ORPort is set. Mark relays with "prefer IPv6 OR port" if an IPv6 address is found in descriptor and ClientPreferIPv6ORPort is set. Filter "preferred OR port" through the ClientUseIPv6 config option. We might want to move this test to where actual connection is being set up once we have a fall back mechanism in place. Have only non-servers pick an IPv6 address for the first hop: We don't want relays to connect over IPv6 yet. (IPv6 has never been used for second or third hops.) Implements ticket 5535.
2012-08-31Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson
2012-08-31Merge branch 'bug6732' into maint-0.2.3Nick Mathewson
2012-08-31Document consensus and microdesc filesNick Mathewson
Bugfix for #6732.
2012-08-27Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson
2012-08-27Disable extending to private/internal addresses by defaultNick Mathewson
This is important, since otherwise an attacker can use timing info to probe the internal network. Also, add an option (ExtendAllowPrivateAddresses) so that TestingTorNetwork won't break. Fix for bug 6710; bugfix on all released versions of Tor.
2012-08-23Add some attributes to make a2x quieterNick Mathewson
2012-07-31Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson
2012-07-31Fix some manpage typosNick Mathewson
This is based on a pair of patches from A. Costa. I couldn't apply those directly, since they changed the generated *roff files, not the asciidoc source. Fixes Tor bug 6500 and Debian bug 683359.
2012-07-19Add config option AuthDirPublishIPv6.Linus Nordberg
Test for config option AuthDirPublishIPv6 == 1 rather than for running as a bridge authority when deciding whether to care or not about IPv6 OR ports in descriptors. Implements enhancement #6406.
2012-07-19Add configure option AuthDirHasIPv6Connectivity.Linus Nordberg
Implements enhancement 5974.
2012-07-16Improve Alternate*Authority docs. Bug 6387.Nick Mathewson
2012-06-18Document 0.2.3.x torrc/default-torrc/command line semantics changesNick Mathewson
Bug 4748 squash! Document 0.2.3.x torrc/default-torrc/command line semantics changes Incorporates fixes suggested by rransom.
2012-06-15fix typos, logic error, default in man pageRoger Dingledine
2012-06-14Defend against entry node path bias attacksMike Perry
The defense counts the circuit failure rate for each guard for the past N circuits. Failure is defined as the ability to complete a first hop, but not finish completing the circuit all the way to the exit. If the failure rate exceeds a certain amount, a notice is emitted. If it exceeds a greater amount, a warn is emitted and the guard is disabled. These values are governed by consensus parameters which we intend to tune as we perform experiments and statistical simulations.