From 514f0041d190b9e142cc246e3ec7ac65342547bd Mon Sep 17 00:00:00 2001 From: "teor (Tim Wilson-Brown)" Date: Fri, 1 Jul 2016 15:37:13 +1000 Subject: Avoid disclosing exit IP addresses in exit policies by default From 0.2.7.2-alpha onwards, Exits would reject all the IP addresses they knew about in their exit policy. But this may have disclosed addresses that were otherwise unlisted. Now, only advertised addresses are rejected by default by ExitPolicyRejectPrivate. All known addresses are only rejected when ExitPolicyRejectLocalInterfaces is explicitly set to 1. --- changes/bug18456 | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 changes/bug18456 (limited to 'changes/bug18456') diff --git a/changes/bug18456 b/changes/bug18456 new file mode 100644 index 0000000000..843c70a587 --- /dev/null +++ b/changes/bug18456 @@ -0,0 +1,6 @@ + o Major bugfixes (exit policies): + - Avoid disclosing exit outbound bind addresses, configured port bind + addresses, and local interface addresses in relay descriptors by + default under ExitPolicyRejectPrivate. Instead, only reject these + (otherwise unlisted) addresses if ExitPolicyRejectLocalInterfaces is set. + Fixes bug 18456; bugfix on 0.2.7.2-alpha. Patch by teor. -- cgit v1.2.3-54-g00ecf