From 5db6cf7cbd4761d7bef3b280af473ef5d9d14624 Mon Sep 17 00:00:00 2001 From: rl1987 Date: Sun, 2 Sep 2018 21:06:34 +0300 Subject: [PATCH 1/3] In manpage, warn about combination of MyFamily and BridgeRelay being bad --- doc/tor.1.txt | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/doc/tor.1.txt b/doc/tor.1.txt index 7b6c21a74e..37c97dc3fa 100644 --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@ -1803,7 +1803,10 @@ is non-zero): Sets the relay to act as a "bridge" with respect to relaying connections from bridge users to the Tor network. It mainly causes Tor to publish a server descriptor to the bridge database, rather than - to the public directory authorities. + to the public directory authorities. + + + + Note: make sure that no MyFamily lines are present in your torrc when + relay is configured in bridge mode. [[BridgeDistribution]] **BridgeDistribution** __string__:: If set along with BridgeRelay, Tor will include a new line in its @@ -2060,7 +2063,10 @@ is non-zero): nickname: fingerprints are more reliable. + + If you run more than one relay, the MyFamily option on each relay - **must** list all other relays, as described above. + **must** list all other relays, as described above. + + + + Note: do not use MyFamily when configuring your Tor instance as a + brigde. [[Nickname]] **Nickname** __name__:: Set the server's nickname to \'name'. Nicknames must be between 1 and 19 From ce4f73f8a341335832974c200f4a7050aec89c72 Mon Sep 17 00:00:00 2001 From: rl1987 Date: Sun, 2 Sep 2018 21:11:52 +0300 Subject: [PATCH 2/3] Update sample torrc files to warn about not using BridgeRelay and MyFamily together --- src/config/torrc.minimal.in-staging | 4 ++++ src/config/torrc.sample.in | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/src/config/torrc.minimal.in-staging b/src/config/torrc.minimal.in-staging index 86429f1176..cb3adca35c 100644 --- a/src/config/torrc.minimal.in-staging +++ b/src/config/torrc.minimal.in-staging @@ -167,6 +167,7 @@ ## ## If you are running multiple relays, you MUST set this option. ## +## Note: do not use MyFamily on bridge relays. #MyFamily $keyid,$keyid,... ## Uncomment this if you want your relay to allow IPv6 exit traffic. @@ -212,6 +213,9 @@ ## won't be able to block all the bridges. Also, websites won't treat you ## differently because they won't know you're running Tor. If you can ## be a real relay, please do; but if not, be a bridge! +## +## Warning: when running your Tor as a bridge, make sure than MyFamily is +## NOT configured. #BridgeRelay 1 ## By default, Tor will advertise your bridge to users through various ## mechanisms like https://bridges.torproject.org/. If you want to run diff --git a/src/config/torrc.sample.in b/src/config/torrc.sample.in index 72cca0be31..8d56b0896b 100644 --- a/src/config/torrc.sample.in +++ b/src/config/torrc.sample.in @@ -169,6 +169,7 @@ ## ## If you are running multiple relays, you MUST set this option. ## +## Note: do not use MyFamily on bridge relays. #MyFamily $keyid,$keyid,... ## Uncomment this if you do *not* want your relay to allow any exit traffic. @@ -218,6 +219,9 @@ ## won't be able to block all the bridges. Also, websites won't treat you ## differently because they won't know you're running Tor. If you can ## be a real relay, please do; but if not, be a bridge! +## +## Warning: when running your Tor as a bridge, make sure than MyFamily is +## NOT configured. #BridgeRelay 1 ## By default, Tor will advertise your bridge to users through various ## mechanisms like https://bridges.torproject.org/. If you want to run From 19f73f633628a093a6d9af4d0dfeeed402afa939 Mon Sep 17 00:00:00 2001 From: rl1987 Date: Sun, 2 Sep 2018 21:14:03 +0300 Subject: [PATCH 3/3] Add changes file --- changes/doc26908 | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 changes/doc26908 diff --git a/changes/doc26908 b/changes/doc26908 new file mode 100644 index 0000000000..888da8be5b --- /dev/null +++ b/changes/doc26908 @@ -0,0 +1,4 @@ + o Documentation: + - Warn users that they should not include MyFamily + line(s) in their torrc when running Tor bridge. + Closes ticket 26908.