[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #5376 [Tor Relay]: The ExitPolicyRejectPrivate option seems to be ignored
#5376: The ExitPolicyRejectPrivate option seems to be ignored
-----------------------+----------------------------------------------------
Reporter: kevin | Owner:
Type: defect | Status: new
Priority: normal | Milestone: Tor: 0.2.3.x-final
Component: Tor Relay | Version:
Keywords: | Parent:
Points: | Actualpoints:
-----------------------+----------------------------------------------------
Comment(by arma):
Replying to [ticket:5376 kevin]:
> Note that `ExitPolicyRejectPrivate` `0` is implicitly set by enabling
`TestingTorNetwork`.
Right. You haven't shown a descriptor here -- what does the exit policy
section in the descriptor look like?
> A typical client's log shows the following error message when trying to
connect to a destination on a private address:
>
> `Mar 13 07:55:51.000 [notice] No Tor server allows exit to 10.0.6.1:100.
Rejecting.`
My first thought is that the client doesn't know about any relays.
Speaking of which! Tor 0.2.3 uses microdescriptors, rather than
descriptors. So the relay will be publishing a descriptor to the directory
authorities, and the directory authorities will be producing a microdesc-
consensus and microdescs. Clients should have these files:
{{{
-rw------- 1 arma arma 565725 Mar 13 08:44 cached-microdesc-consensus
-rw------- 1 arma arma 2656826 Mar 11 13:42 cached-microdescs
-rw------- 1 arma arma 448091 Mar 13 08:44 cached-microdescs.new
}}}
and microdescs don't specify addresses, just ports.
I wonder if we have broken ExitPolicyRejectPrivate in 0.2.3.x, not just
for TestingTorNetwork.
Suggested workaround for now: set "UseMicrodescriptors 0" in your torrcs.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5376#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs