[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #11264 [Tor]: Relay has Exit flag but short policy says reject *?
#11264: Relay has Exit flag but short policy says reject *?
-------------------------+-------------------------------------------------
Reporter: arma | Owner:
Type: defect | Status: needs_revision
Priority: normal | Milestone: Tor: 0.2.6.x-final
Component: Tor | Version:
Resolution: | Keywords: tor-auth, 026-triaged-1, nickm-
Actual Points: | patch needs-proposal
Points: | Parent ID:
-------------------------+-------------------------------------------------
Comment (by teor):
In the meantime, where can we (more clearly) document the difference
between policy_summarize() and Exit? It's obviously causing some
confusion.
What do you think of this draft?
* policy_summarize() lists exit ports that are allowed to the whole
internet; or exit ports that are blocked to one or more internet addresses
(whichever list is shorter).
* Exit is applied to routers that allow exits to at least two of the HTTP,
HTTPS, and IRC ports; and allow exits to at least 1/256 of the IPv4
internet.
To check:
* does policy_summarize() work the same for IPv4 and IPv6?
* how does "Exit" work for IPv6?
Next Steps:
* Put my white hat on and determine a set of pathological cases
* Create test cases for these cases (?)
* Check the current consensus for cases with: Exit & Reject 1-65535; No
Exit & Accept 1-65535 (?)
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/11264#comment:19>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs