[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #29570 [Core Tor/Tor]: Enforce mutually exclusive logic for IPv6 ORPort flags

#29570: Enforce mutually exclusive logic for IPv6 ORPort flags
-------------------------------------------+-------------------------------
 Reporter:  s7r                            |          Owner:  (none)
     Type:  defect                         |         Status:  new
 Priority:  Medium                         |      Milestone:  Tor:
                                           |  unspecified
Component:  Core Tor/Tor                   |        Version:  Tor:
                                           |  unspecified
 Severity:  Normal                         |     Resolution:
 Keywords:  tor-relay, ipv6, reachability  |  Actual Points:
Parent ID:                                 |         Points:
 Reviewer:                                 |        Sponsor:
-------------------------------------------+-------------------------------

Comment (by s7r):

 In this particular case, if only `ORPort 0.0.0.0:9050` was set, and it was
 just HAProxy that listened on the IPv6 address and forwarded to the NAT
 IPv4 address ORPort, while indeed strange and not recommended, would be
 totally transparent to Tor / directory authorities and would of course not
 be a bug.

 But if you can have only a line: `ORPort [ipv6:address]:9050 NoListen` and
 no following IPv6 ORPort with NoAdvertise, this is a bug as in config
 parameters are not properly sanitized.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/29570#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs