From 894ff2dc8422cb86312c512698acd76476224f87 Mon Sep 17 00:00:00 2001 From: David Goulet Date: Tue, 10 Mar 2020 14:45:13 -0400 Subject: dos: Pass transport name on new client connection For a bridge configured with a pluggable transport, the transport name is used, with the IP address, for the GeoIP client cache entry. However, the DoS subsystem was not aware of it and always passing NULL when doing a lookup into the GeoIP cache. This resulted in bridges with a PT are never able to apply DoS defenses for newly created connections. Fixes #33491 Signed-off-by: David Goulet --- changes/ticket33491 | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 changes/ticket33491 (limited to 'changes/ticket33491') diff --git a/changes/ticket33491 b/changes/ticket33491 new file mode 100644 index 0000000000..595ea863ea --- /dev/null +++ b/changes/ticket33491 @@ -0,0 +1,6 @@ + o Major bugfixes (DoS defenses, bridges, pluggable transport): + - DoS subsystem was not given the transport name of the client connection + when tor is a bridge and thus failing to find the GeoIP cache entry for + that client address. This resulted in failing to apply DoS defenses on + bridges with a pluggable transport. Fixes bug 33491; bugfix on + 0.3.3.2-alpha. -- cgit v1.2.3-54-g00ecf