[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #5741 [Tor bundles/installation]: TBB proxy bypass: Some DNS requests not going through Tor
#5741: TBB proxy bypass: Some DNS requests not going through Tor
--------------------------------------+-------------------------------------
Reporter: cypherpunks | Owner: erinn
Type: defect | Status: new
Priority: blocker | Milestone:
Component: Tor bundles/installation | Version:
Keywords: | Parent:
Points: | Actualpoints:
--------------------------------------+-------------------------------------
Comment(by rransom):
Replying to [comment:7 mikeperry]:
> Replying to [comment:6 arma]:
> > Replying to [ticket:5741 cypherpunks]:
> > > This is not the first time some rarely triggered bug in Firefox
causes Tor to be bypassed, and certainly will not be the last one. Since
these bugs have a very high security impact I propose they are guarded
against. How about running Firefox inside some kind of firewall that drops
all network packets not going to Tor?
> >
> > It would be great to see some very simple instructions for launching
Tails in a VM in Windows.
>
> I thought tails stopped shipping with a catch-all/drop-all transproxy
rule?
Tails now drops all outgoing packets whose destination IP address is not
RFC-1918 private. Tails stopped using transparent proxy configuration in
order to try to keep random crap on the system from linking the user's
web-browsing activities, but still configures Tor as the GNOME default
SOCKS proxy, which defeats most of that purpose.
Tails 0.10.1 allowed traffic to/from RFC-1918 private addresses; I don't
know whether Tails 0.11 does.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5741#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs