[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #4018 [Tor Client]: warn_nonlocal_client_ports should use tor_addr_is_internal, not _is_loopback

#4018: warn_nonlocal_client_ports should use tor_addr_is_internal, not
_is_loopback
------------------------+---------------------------------------------------
 Reporter:  rransom     |          Owner:  rransom           
     Type:  defect      |         Status:  needs_review      
 Priority:  normal      |      Milestone:  Tor: 0.2.3.x-final
Component:  Tor Client  |        Version:                    
 Keywords:  easy        |         Parent:                    
   Points:              |   Actualpoints:                    
------------------------+---------------------------------------------------

Comment(by rransom):

 Replying to [comment:4 nickm]:
 > I like it, but I don't want to remove the warning for non-loopback
 addresses entirely.  If the address is internal but not noopback, then can
 we say something like, "You specified an internal address for FooPort.
 Other people on your local network can find your Tor program and use it as
 a proxy."

 One of the major goals of proposal 171 was to make it safe to expose one's
 SOCKSPort to an internal network.  I don't see the point of adding a
 warning message about client ports bound to non-loopback internal IP
 addresses in only the versions of Tor in which those are safe.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4018#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs