Age | Commit message (Collapse) | Author |
|
svn:r3982
|
|
add a few more reasons so we can be more informative.
svn:r3895
|
|
the socks reject. audit for remaining ones. also make things more
uniform so we always remember to hold-open-until-flushed, etc.
svn:r3891
|
|
connection when we get an end cell before it's finished opening.
svn:r3886
|
|
back before we close the conn.
svn:r3876
|
|
svn:r3863
|
|
svn:r3828
|
|
debugging logs to notice future repeat bugs.
svn:r3826
|
|
svn:r3814
|
|
svn:r3809
|
|
functions; time out uncontrolled unattached streams; feed reasons to SOCKS5 (refactoring connection_ap_handshake_socks_reply in the process); change DirFetchPeriod/StatusFetchPeriod to have a special "Be smart" value.
svn:r3769
|
|
circuit" into a separate function; make that function handle controller-managed streams right.
svn:r3756
|
|
to see if somebody was contradicting his exit policy were wrong.
svn:r3755
|
|
svn:r3744
|
|
svn:r3738
|
|
cells
svn:r3723
|
|
errno into account where possible.
svn:r3720
|
|
reasons to SOCKS5 reply codes; add code to convert errnos to reasons. New code still needs to get invoked.
svn:r3719
|
|
svn:r3684
|
|
svn:r3681
|
|
Add a new TrackHostExits directive to trigger addressmaps for
certain incoming socks addresses, for sites that break when your exit
keeps changing.
Redo the client-side dns cache so it's just an addressmap too.
svn:r3641
|
|
svn:r3620
|
|
svn:r3469
|
|
to the exit policy of the last hop. Intro and rendezvous circs must
be internal circs, to avoid leaking information. Resolve and connect
streams can use internal circs if they want.
New circuit pooling algorithm: make sure to have enough circs around
to satisfy any predicted ports, and also make sure to have 2 internal
circs around if we've required internal circs lately (with high uptime
if we've seen that lately).
Split NewCircuitPeriod config option into NewCircuitPeriod (30 secs),
which describes how often we retry making new circuits if current ones
are dirty, and MaxCircuitDirtiness (10 mins), which describes how long
we're willing to make use of an already-dirty circuit.
Once rendezvous circuits are established, keep using the same circuit as
long as you attach a new stream to it at least every 10 minutes. (So web
browsing doesn't require you to build new rend circs every 30 seconds.)
Cannibalize GENERAL circs to be C_REND, C_INTRO, S_INTRO, and S_REND
circ as necessary, if there are any completed ones lying around when
we try to launch one.
Re-instate the ifdef's to use version-0 style introduce cells, since
there was yet another bug in handling version-1 style. We'll try switching
over again after 0.0.9 is obsolete.
Bugfix: when choosing an exit node for a new non-internal circ, don't take
into account whether it'll be useful for any pending x.onion addresses --
it won't.
Bugfix: we weren't actually publishing the hidden service descriptor when
it became dirty. So we only published it every 20 minutes or so, which
means when you first start your Tor, the hidden service will seem broken.
svn:r3360
|
|
svn:r3317
|
|
svn:r3316
|
|
for a cell even if that conn is already marked for close.
Don't back-port to 0.0.9.x, since this fix could have weird implications.
svn:r3235
|
|
svn:r3142
|
|
make it clearer which warns are bugs,
make the control log event match its specification,
point out a bug in how we deal with failure when renewing the tls context.
svn:r3138
|
|
the app has hung up on us, we shouldn't hold-open-until-flush.
svn:r3109
|
|
every file.
svn:r3019
|
|
totally unacceptable to me.
svn:r3005
|
|
svn:r3003
|
|
svn:r3000
|
|
with a package window of 0. it's safe to just catch the error cases
there and do the right thing.
svn:r2988
|
|
i think i'm getting closer.
svn:r2931
|
|
svn:r2929
|
|
this may have some bugs in it still.
and it may end up not being what we want to do.
svn:r2928
|
|
svn:r2888
|
|
directory connections too. Make all policies get validated in options_validate, and make SOCKS/directory policies get set in options_act.
svn:r2819
|
|
target; fix a braino in dirserv.c
svn:r2758
|
|
Break connection_consider_empty_buckets() out of
connection_read_bucket_decrement().
svn:r2698
|
|
Now we can try setting an option but back out if it fails to parse, or
if it's disallowed (e.g. changing RunAsDaemon from 1 to 0).
Use parse_line_from_str rather than parse_line_from_file.
svn:r2692
|
|
svn:r2645
|
|
svn:r2644
|
|
svn:r2544
|
|
svn:r2487
|
|
plus a whitespace patch on config.c from vicman
svn:r2482
|
|
an address 0.0.0.0, don't put it into the client dns cache.
svn:r2233
|
|
o and/or while avoiding unreliable nodes, depending on goals
o 'fascistfirewall' option to pick dirservers on port 80 and ORs on
port 443.
o if a begin failed due to exit policy, but we believe the IP should have been allowed, switch that router to exitpolicy reject *:* until we get our next directory.
svn:r2231
|