[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-talk] Blocking STUN Requests at Firewall?

To: tor-talk@xxxxxxxxxxxxxxxxxxxx
Subject: [tor-talk] Blocking STUN Requests at Firewall?
From: Bill Berry <bill@xxxxxxxxxxxx>
Date: Sun, 08 Feb 2015 12:00:28 +0100
Delivered-to: archiver@xxxxxxxx
Delivery-date: Sun, 08 Feb 2015 06:00:47 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/simple; d=techwang.com; h= content-transfer-encoding:content-type:content-type:subject :subject:to:mime-version:user-agent:from:from:date:date :message-id; s=dkim; t=1423393159; x=1424257160; bh=FnhbpftIEXMn Ced6RPNv434Fz2F1l3VKww5Br27kntQ=; b=Sck+pdytZ2l9Sbh2lAE2IECOSnz8 UD4VkRPb39YeXxO5tQBnPxu8Lzwtn1vX7V9HrUHSKPVule4Grx81cHw5XuLLOJQh /iNbDRWJ+Wr0TZvcsW1R3SDQx0mkIDNFhys61r7fUXzE5sKu1eiWxIps2GDxYANn O8KksNtf0KvTJkw=
List-archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "all discussion about theory, design, and development of Onion Routing" <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-talk" <tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0

Hi all,

I've setup a Tor transparent proxy, as per the instructions herehttps://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy (I'maware of the security risks of not using the Tor Browser)

It's working well except it is vulnerable to STUN requests (as perhttp://ipleak.net/). Does anyone have experience of blocking theserequests? Based on the spec they can be TCP or UDP, so just blocking nonDNS UDP doesn't seem to help. Maybe it could be achieved using DPI? Notmuch info on the net.


Thanks,

Bill


--
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Follow-Ups:
- Re: [tor-talk] Blocking STUN Requests at Firewall?
  - From: Bill Berry

Prev by Author: Re: [tor-talk] Tor -> VPN Clarification
Next by Author: Re: [tor-talk] Blocking STUN Requests at Firewall?
Previous by thread: Re: [tor-talk] No update of Tor Expert Bundle
Next by thread: Re: [tor-talk] Blocking STUN Requests at Firewall?
Index(es):
- Author
- Thread