[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] exit policy to reflect country-wide ban



Hi Pascal,

On 05 Dec 2014, at 04:26, Pascal <Pascal666@xxxxxxxxxxxxxxxxxxxxx> wrote:
> On 12/4/2014 3:50 PM, Sebastian Hahn wrote:
>> No, that's a local choice by the relay and it will prevent exiting to
>> IPs that it disallows in its config.
> 
> Yes, but does it have a way of telling clients that so they will use a different exit for those IPs?  Vladimir's original question was about not marking Russian nodes as bad exits just because they can't get to certain IPs.

This influences path selection on the client without too good a reason,
it also increases complexity on the dirauths even more. It would also
mean yet larger consensuses to make these results public. Not a good
plan.

> I found the bug I was thinking of: https://trac.torproject.org/projects/tor/ticket/1774
> 
> It's old, but still open.  I don't know if the microdescriptor format has been extended since then, but nickm states rather plainly that microdescriptors do not support excluding specific IPs.

This is a misunderstanding. It just means that clients don't know
that a relay doesn't allow exiting to an individual IP address. The
relay in question will still disallow the request to exit there.

Cheers
Sebastian

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays