summaryrefslogtreecommitdiff
path: root/src/or/policies.c
AgeCommit message (Collapse)Author
2010-08-16Fix misplaced labelsSebastian Hahn
2010-07-27Create routerparse.hSebastian Hahn
2010-07-27Create policies.hSebastian Hahn
2010-07-27Create dirserv.hSebastian Hahn
2010-07-27Create config.hSebastian Hahn
2010-07-18Make the controller act more usefully when GETINFO failsNick Mathewson
Right now it says "552 internal error" because there's no way for getinfo_helper_*() countries to specify an error message. This patch changes the getinfo_helper_*() interface, and makes most of the getinfo helpers give useful error messages in response to failures. This should prevent recurrences of bug 1699, where a missing GeoIPFile line in the torrc made GETINFO ip-to-county/* fail in a "not obvious how to fix" way.
2010-02-27Merge remote branch 'origin/maint-0.2.1'Nick Mathewson
Conflicts: src/common/test.h src/or/test.c
2010-02-27Update Tor Project copyright yearsNick Mathewson
2010-02-09Speed up the execution of exit_policy_is_general_exit_helper()Sebastian Hahn
It isn't necessary to walk through all possible subnets when the policy we're looking at doesn't touch that subnet.
2010-02-080/8 doesn't count as a /8 subnet towards an Exit flagSebastian Hahn
2010-02-03Trivial doc fix for exit_policy_is_general_exit_helperNick Mathewson
The original comment said what it did if there was at least one /8 that allowed access to the port, but not what it did otherwise.
2010-02-03Don't assign Exit flag incorrectlySebastian Hahn
exit_policy_is_general_exit() assumed that there are no redundancies in the passed policy, in the sense that we actively combine entries in the policy to really get rid of any redundancy. Since we cannot do that without massively rewriting the policy lines the relay operators set, fix exit_policy_is_general_exit(). Fixes bug 1238, discovered by Martin Kowalczyk.
2010-01-15remove redundant validate_addr_policies() checksRoger Dingledine
2009-12-12*_free functions now accept NULLSebastian Hahn
Some *_free functions threw asserts when passed NULL. Now all of them accept NULL as input and perform no action when called that way. This gains us consistence for our free functions, and allows some code simplifications where an explicit null check is no longer necessary.
2009-10-27Fix bug 1113.Karsten Loesing
Bridges do not use the default exit policy, but reject *:* by default.
2009-06-05Avoid a memory corruption problem related to "private" in DirPolicy.Nick Mathewson
This is a posible fix for bug 996.
2009-05-27Spell-check Tor.Nick Mathewson
2009-05-04Update copyright to 2009.Karsten Loesing
2009-03-09Log cached-at-exit exit policies to try to fix bug 672.tor-0.2.1.13-alphaNick Mathewson
svn:r18827
2009-01-04Remove svn $Id$s from our source, and remove tor --version --version.Nick Mathewson
The subversion $Id$ fields made every commit force a rebuild of whatever file got committed. They were not actually useful for telling the version of Tor files in the wild. svn:r17867
2008-12-29Switch address comparisons in policies to be exact rather than semantic. ↵Nick Mathewson
Until we do ipv6 exit policies and until we know whether we even allow ::ffff:0:0/96 addresses, there is no point in doing "semantic" comparisons. This was also showing up on oprofile. svn:r17803
2008-12-29Refactor some exit-policy-related functions that showed up in oprofile.Nick Mathewson
Specifically, split compare_tor_addr_to_addr_policy() from a loop with a bunch of complicated ifs inside into some ifs, each with a simple loop. Rearrange router_find_exact_exit_enclave() to run a little faster. Bizarrely, router_policy_rejects_all() shows up on oprofile, so precalculate it per routerinfo. svn:r17802
2008-12-22Fix most DOCDOCs remaining and/or added by redox.Nick Mathewson
svn:r17734
2008-12-22Add DOCDOC comments for all undocumented functions. Add missing *s to other ↵Nick Mathewson
comments so that they will get recognized as doxygen. svn:r17729
2008-12-18Downlgrade tweak, and answer lots of XXX021s. No actual code fixes in this ↵Nick Mathewson
patch. svn:r17686
2008-11-07Remove bug 811/845 debugging codeNick Mathewson
svn:r17199
2008-11-03Add some debugging logs for bug 811/845.Nick Mathewson
svn:r17186
2008-09-13Allow ports 465 and 587 in the default exit policy again. We hadRoger Dingledine
rejected them in 0.1.0.15, because back in 2005 they were commonly misconfigured and ended up as spam targets. We hear they are better locked down these days. svn:r16898
2008-09-09We should not alter an addr_policy_t that has been canonicalized.Nick Mathewson
svn:r16802
2008-09-05Fix a malloc that should have been a tor_mallocNick Mathewson
svn:r16780
2008-09-05Fix numerous memory leaks: some were almost impossible to trigger, and some ↵Nick Mathewson
almost inevitable. svn:r16779
2008-08-14If we are lucky the whitespace nazis will not have noticed these things yetPeter Palfrader
svn:r16549
2008-08-14Having a reject-all policy summarized with a lack of summary is stupid. ↵Peter Palfrader
Explicitly mention them as reject 1-65535. svn:r16543
2008-08-14This bunch of functions really should be staticPeter Palfrader
svn:r16535
2008-08-13Fix an overflow when counting rejects for *, truncate exit summaries after ↵Peter Palfrader
1000 chars svn:r16530
2008-08-13Think of the poor children in Antarctica who still have to work on 4" screensPeter Palfrader
svn:r16528
2008-08-13Also special case "accept 1-65535" case, do not leak in non-exit casePeter Palfrader
svn:r16526
2008-08-13Return NULL for policies that do not allow any exitsPeter Palfrader
svn:r16525
2008-08-13Fix condition statement for accept items, fix two assertsPeter Palfrader
svn:r16524
2008-08-13Make sure we don't run off the end of the listPeter Palfrader
svn:r16523
2008-08-13Move policy_summarize() prototype to or.hPeter Palfrader
svn:r16522
2008-08-13Create string representation of exit summariesPeter Palfrader
svn:r16521
2008-08-13Nickm says I'm going to hell, but if I write that in a comment he might just ↵Peter Palfrader
save my soul svn:r16520
2008-08-13implement policy_summary_accept and policy_summary_reject together with a ↵Peter Palfrader
set of helpers svn:r16519
2008-08-13Start with exit policy summariesPeter Palfrader
svn:r16518
2008-08-05 r17641@31-33-44: nickm | 2008-08-05 16:07:53 -0400Nick Mathewson
Initial conversion of uint32_t addr to tor_addr_t addr in connection_t and related types. Most of the Tor wire formats using these new types are in, but the code to generate and use it is not. This is a big patch. Let me know what it breaks for you. svn:r16435
2008-08-03Fix a bug when generating router descriptors: The address part of exit ↵Karsten Loesing
policies was uninitialized. svn:r16372
2008-07-25 r17391@pc-10-8-1-079: nickm | 2008-07-25 17:11:17 +0200Nick Mathewson
Tor_addr_compare did a semantic comparison, such that ::1.2.3.4 and 1.2.3.4 were "equal". we sometimes need an exact comparison. Add a feature to do that. svn:r16210
2008-07-24 r17346@aud-055: nickm | 2008-07-24 15:37:19 +0200Nick Mathewson
Make generic address manipulation functions work better. Switch address policy code to use tor_addr_t, so it can handle IPv6. That is a good place to start. svn:r16178
2008-04-23 r15308@tombo: nickm | 2008-04-23 16:46:48 -0400Nick Mathewson
Free baddir and badexit policy lists on exit. fixes bug 672. only affects authorities. svn:r14431
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion