teor (Tim Wilson-Brown) 098b82c7b2 ExitPolicyRejectPrivate rejects local IPv6 address and interface addresses ...

ExitPolicyRejectPrivate now rejects more local addresses by default:
 * the relay's published IPv6 address (if any), and
 * any publicly routable IPv4 or IPv6 addresses on any local interfaces.

This resolves a security issue for IPv6 Exits and multihomed Exits that
trust connections originating from localhost.

Resolves ticket 17027. Patch by "teor".
Patch on 42b8fb5a15 (11 Nov 2007), released in 0.2.0.11-alpha.

2015-09-16 02:56:50 +10:00

..

addressmap.c

Merge branch 'bug7555_v2_squashed'

2015-01-19 11:43:41 -05:00

addressmap.h

Allow MapAddress and Automap to work together

2015-01-13 12:41:15 -05:00

buffers.c

Remove remaining references to "nulterminate" in comments

2015-09-02 08:50:26 -04:00

buffers.h

Remove the unused "nulterminate" option to buf_pullup()

2015-09-01 14:36:25 -04:00

channel.c

properly delete current channel in channel_free_list

2015-09-01 15:10:10 +02:00

channel.h

Tests for AUTHENTICATE cell functionality.

2015-05-28 10:41:50 -04:00

channeltls.c

Appease make check-spaces

2015-06-01 12:59:14 +00:00

channeltls.h

Tests for AUTHENTICATE cell functionality.

2015-05-28 10:41:50 -04:00

circpathbias.c

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

circpathbias.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

circuitbuild.c

Reachability should check ExtendAllowPrivateAddresses not TestingTorNetwork

2015-04-22 23:54:21 +10:00

circuitbuild.h

fix a compilation warning

2015-02-11 15:10:35 -05:00

circuitlist.c

Fix misnamed parameter in or_circuit_new docstring.

2015-08-06 06:05:07 +00:00

circuitlist.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

circuitmux_ewma.c

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

circuitmux_ewma.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

circuitmux.c

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

circuitmux.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

circuitstats.c

Implement EVENT_NETWORK_LIVENESS

2015-05-17 13:42:57 +00:00

circuitstats.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

circuituse.c

Add KeepAliveIsolateSOCKSAuth as a SOCKSPort option.

2015-09-08 14:02:08 -04:00

circuituse.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

command.c

Remove redundant tor_free() in command_process_create_cell().

2015-08-17 09:26:07 -04:00

command.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

config.c

Check NoKeepAliveIsolateSOCKSAuth in a better place.

2015-09-09 13:52:30 +00:00

config.h

Merge branch '12498_ed25519_keys_v6'

2015-05-28 11:04:33 -04:00

confparse.c

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

confparse.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

connection_edge.c

Logs and debug info that I used for finding bug 16844

2015-08-17 14:34:50 -04:00

connection_edge.h

Make check-spaces happier.

2015-01-19 11:56:03 -05:00

connection_or.c

Memory leak on error in connection_or_compute_auth_cell_body. CID 1301372

2015-05-28 12:51:20 -04:00

connection_or.h

Start testing cell encoders/processers for the v3 handshake.

2015-05-28 10:41:50 -04:00

connection.c

Unit test dns_resolve(), dns_clip_ttl(), dns_get_expiry_ttl().

2015-08-23 16:02:39 +03:00

connection.h

Unit test dns_resolve(), dns_clip_ttl(), dns_get_expiry_ttl().

2015-08-23 16:02:39 +03:00

control.c

Merge branch 'workqueue_squashed'

2015-08-21 10:37:01 -04:00

control.h

Rename EVENT_SIGNAL -> EVENT_GOT_SIGNAL

2015-08-20 18:42:20 -04:00

cpuworker.c

Ensure worker threads actually exit when it is time

2015-08-21 10:36:53 -04:00

cpuworker.h

Refactor cpuworker to use workqueue/threadpool code.

2015-01-14 11:23:34 -05:00

dircollate.c

Fix typo in double_digest_map type

2015-08-18 08:18:44 -04:00

dircollate.h

Appease make check-spaces

2015-06-01 12:59:14 +00:00

directory.c

Remove the HidServDirV2 and VoteOnHidServDirectoriesV2 options

2015-07-10 09:05:26 -04:00

directory.h

whitespace fixes

2015-01-23 11:18:28 -05:00

dirserv.c

Merge remote-tracking branch 'dgoulet/bug15963_026_01'

2015-09-02 16:00:07 -04:00

dirserv.h

Refactor TestingDirAuthVote* into dirserv_set_routerstatus_testing

2015-08-18 14:54:40 +10:00

dirvote.c

Fix some types on container fns

2015-08-13 22:14:14 -04:00

dirvote.h

Remove the HidServDirV2 and VoteOnHidServDirectoriesV2 options

2015-07-10 09:05:26 -04:00

dns_structs.h

Unit test dns_resolve(), dns_clip_ttl(), dns_get_expiry_ttl().

2015-08-23 16:02:39 +03:00

dns.c

Unit test dns_resolve(), dns_clip_ttl(), dns_get_expiry_ttl().

2015-08-23 16:02:39 +03:00

dns.h

Unit test dns_resolve(), dns_clip_ttl(), dns_get_expiry_ttl().

2015-08-23 16:02:39 +03:00

dnsserv.c

Move entry_port_cfg_t fields in entry_connection_t

2015-01-16 09:22:58 -05:00

dnsserv.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

entrynodes.c

Fix some conversion problems

2015-04-23 09:16:42 -04:00

entrynodes.h

clean up comments and whitespace a bit

2015-02-18 19:27:02 -05:00

eventdns_tor.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

ext_orport.c

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

ext_orport.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

fp_pair.c

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

fp_pair.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

geoip.c

Merge branch 'bug6852'

2015-02-03 13:06:58 -05:00

geoip.h

Merge branch 'bug6852'

2015-02-03 13:06:58 -05:00

hibernate.c

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

hibernate.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

include.am

Include dns_structs.h in tarball

2015-09-02 08:45:12 -04:00

keypin.c

Move formatting functions around.

2015-07-31 11:21:34 -04:00

keypin.h

Tie key-pinning logic into directory authority operation

2015-05-28 10:41:49 -04:00

main.c

Merge remote-tracking branch 'public/ed25519_hup_v2'

2015-09-10 10:37:13 -04:00

main.h

Merge remote-tracking branches 'public/decouple_lost_owner' and 'public/decouple_signals'

2015-08-17 16:24:45 -04:00

Makefile.nmake

Implement scheduler mechanism to track lists of channels wanting cells or writes; doesn't actually drive the cell flow from it yet

2014-09-30 22:48:24 -07:00

microdesc.c

Fix a stupid memory leak I introduced in 8afbc154. Bug not in any released Tor.

2015-08-17 09:42:35 -04:00

microdesc.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

networkstatus.c

Remove the HidServDirV2 and VoteOnHidServDirectoriesV2 options

2015-07-10 09:05:26 -04:00

networkstatus.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

nodelist.c

Improve log messages for problems about ed25519 keypinning

2015-07-31 10:47:39 -04:00

nodelist.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

ntmain.c

Wrap windows-only C files in #ifdef _WIN32

2015-07-30 11:14:15 -04:00

ntmain.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

onion_fast.c

Merge remote-tracking branch 'public/bug9635_warnings_025'

2015-02-02 16:31:32 -05:00

onion_fast.h

Merge remote-tracking branch 'public/bug9635_warnings_025'

2015-02-02 16:31:32 -05:00

onion_ntor.c

Merge remote-tracking branch 'public/bug9635_warnings_025'

2015-02-02 16:31:32 -05:00

onion_ntor.h

Merge remote-tracking branch 'public/bug9635_warnings_025'

2015-02-02 16:31:32 -05:00

onion_tap.c

Merge remote-tracking branch 'public/bug9635_warnings_025'

2015-02-02 16:31:32 -05:00

onion_tap.h

Merge remote-tracking branch 'public/bug9635_warnings_025'

2015-02-02 16:31:32 -05:00

onion.c

Merge remote-tracking branch 'public/bug9635_warnings_025'

2015-02-02 16:31:32 -05:00

onion.h

Merge remote-tracking branch 'public/bug9635_warnings_025'

2015-02-02 16:31:32 -05:00

or.h

Add KeepAliveIsolateSOCKSAuth as a SOCKSPort option.

2015-09-08 14:02:08 -04:00

policies.c

ExitPolicyRejectPrivate rejects local IPv6 address and interface addresses

2015-09-16 02:56:50 +10:00

policies.h

ExitPolicyRejectPrivate rejects local IPv6 address and interface addresses

2015-09-16 02:56:50 +10:00

reasons.c

Add string for IP_NOW_REDUNDANT in circuit_end_reason_to_control_string

2015-01-15 11:53:20 -05:00

reasons.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

relay.c

Logs and debug info that I used for finding bug 16844

2015-08-17 14:34:50 -04:00

relay.h

Remove lingering mempool code

2015-02-23 11:19:31 -05:00

rendcache.c

Add a rend cache failure info dup function

2015-09-11 15:09:07 +02:00

rendcache.h

Expire after 5 minutes rend cache failure entries

2015-08-11 09:34:41 -04:00

rendclient.c

Fix a bunch of check-spaces complaints

2015-08-21 10:36:53 -04:00

rendclient.h

Use an enum for INTRO_POINT_FAILURE_*

2015-08-11 09:34:41 -04:00

rendcommon.c

Rename ambiguous introduction point functions

2015-07-14 02:29:17 -04:00

rendcommon.h

Use an enum for INTRO_POINT_FAILURE_*

2015-08-11 09:34:41 -04:00

rendmid.c

... and if we do get multiple INTRODUCE1s on a circuit, kill the circuit

2015-04-03 09:40:47 -04:00

rendmid.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

rendservice.c

correct the doc for find_rp_for_intro.

2015-09-02 08:51:24 -04:00

rendservice.h

Remove empty rend_service_validate_intro_early function

2015-07-14 02:30:04 -04:00

rephist.c

Add link protocol version counts to the heartbeat message

2015-03-10 10:07:41 -04:00

rephist.h

Add link protocol version counts to the heartbeat message

2015-03-10 10:07:41 -04:00

replaycache.c

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

replaycache.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

router.c

ExitPolicyRejectPrivate rejects local IPv6 address and interface addresses

2015-09-16 02:56:50 +10:00

router.h

Split the client-only parts of init_keys() into a separate function

2015-08-11 10:41:20 -04:00

routerkeys.c

Convince coverity that we do not have a particular memory leak

2015-09-13 14:44:46 -04:00

routerkeys.h

More log messages for keygen problems

2015-08-19 13:36:51 -04:00

routerlist.c

Decouple routerlist_retry_directory_downloads() from the blob

2015-08-13 09:45:30 -04:00

routerlist.h

Implement proposal 228: cross-certification with onion keys

2015-05-28 10:40:57 -04:00

routerparse.c

Fix most check-spaces issues

2015-07-16 11:10:14 -04:00

routerparse.h

Merge branch '12498_ed25519_keys_v6'

2015-05-28 11:04:33 -04:00

routerset.c

Prohibit the use of one entry node with an HS

2015-09-02 10:47:20 -04:00

routerset.h

Prohibit the use of one entry node with an HS

2015-09-02 10:47:20 -04:00

scheduler.c

Fix scheduler compilation on targets where char is unsigned.

2015-02-06 16:26:28 +00:00

scheduler.h

Fix scheduler compilation on targets where char is unsigned.

2015-02-06 16:26:28 +00:00

statefile.c

Merge branch 'master' of https://git.torproject.org/tor into bug13111-empty-key-files-fn-empty

2015-01-10 17:20:06 +11:00

statefile.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

status.c

Add link protocol version counts to the heartbeat message

2015-03-10 10:07:41 -04:00

status.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00

tor_main.c

Only return 0..255 from main().

2015-09-03 11:38:00 -04:00

torcert.c

Add more consistency checks in load_ed_keys

2015-07-14 11:27:49 -04:00

torcert.h

Generate weird certificates correctly

2015-05-28 10:47:47 -04:00

transports.c

Implement "TOR_PT_EXIT_ON_STDIN_CLOSE".

2015-03-26 12:55:12 +00:00

transports.h

Bump copyright dates to 2015, in case someday this matters.

2015-01-02 14:27:39 -05:00