tldr: would you send me your torrc if you aim to route IPv6 exit traffic and are in the list at the bottom with the third colmn set to NULL? teor: > Either that, or there is a bug in Tor relating to IPv6 Exit policies. > But I can't see anywhere in the code that makes the IPv6 exit policy > dependent on anything except ExitPolicy and IPv6Exit. > > Are there any log entries relating to IPv6 or exit policies? moritz@xxxxxxxxxxxxxx did sent me (unfortunately off-list) the torrc file for https://atlas.torproject.org/#details/FDAED15C98CFE7A416E5676F614254F78406105C according to his torrc it is allowing IPv6 exit traffic but not according to its descriptor. Do exits do any outbound IPv6 reachability test before they create their descriptor? (with the ipv6-policy entry) In total there are currently 57 exits with an IPv6 ORPort but no IPv6 exit policy. That on its own doesn't mean anything because they might not set IPv6Exit to 1 but the big picture looks a bit odd. Here is a (truncated) list of exits which have IPv6 connectivity (ORPort) and their respective v6 exit policy (the last column) since the v6 policy changes between none (NULL) to non-NULL even within the same operator this seems strange. Usually an operator uses highly identical torrc files across all their relays. If you are on the this list with a NULL value in the v6_policy column and your torrc contains IPv6Exit 1 we'd be interested to see your complete torrc files (do not forget to _remove_ any sensitive lines like HashedControlPassword). I also had a look at the tor_version column but there was no correlation there. That said there _is_ a correlation with as_name, so maybe this not a bug but operators only enabling IPv6 exiting on specific hosters (which seems strange because I only list IPv6 enabled relays). For example Frenn vun der Enn has no IPv6 exit policy only with the relays in the BENESTRA AS. +----------+------------------------------------------+-----------+ | nick | contact | v6_policy | +----------+------------------------------------------+-----------+ | ori | 0x02225522 Frenn vun der Enn (FVDE) <inf | NULL | | tollana | 0x02225522 Frenn vun der Enn (FVDE) <inf | NULL | | kree | 0x02225522 Frenn vun der Enn (FVDE) <inf | NULL | | orion | 0x02225522 Frenn vun der Enn (FVDE) <inf | {u'reject | | aurora | 0x02225522 Frenn vun der Enn (FVDE) <inf | {u'reject | | destiny | 0x02225522 Frenn vun der Enn (FVDE) <inf | {u'reject | | chulak | 0x02225522 Frenn vun der Enn (FVDE) <inf | {u'reject | | rejozeng | 0x21DBEFD4 Rejo Zenger <rejo@xxxxxxxxx> | NULL | | torinitl | 0x36AC3365 Ludost TOR <tor AT ludost DOT | {u'reject | | Unnamed | 0x3C68C8DBCBA783EF Joel R. Voss <jvoss a | NULL | | sorrenti | 0x44BB1BA79F6C6333 <tor-admin AT zumbi d | NULL | | torpinkb | 0x60C0742D1F357D42 Sergey Popov <admin+t | NULL | | partyvan | 0x989971B2A6B7AF4B WubTheCaptain <wub@pa | {u'accept | | marylou2 | 0x9F29C15D42A8B6F3 Nos oignons <adminsys | NULL | | ekumen | 0x9F29C15D42A8B6F3 Nos oignons <adminsys | NULL | | marylou1 | 0x9F29C15D42A8B6F3 Nos oignons <adminsys | NULL | | armbrust | 0xBA61EB09 Michael Armbruster <tor@armbr | NULL | | AlphaCen | 0xD3364A0B Spydar007 <tor.abuse@spydar00 | NULL | | Unzane | 0xFDB8716D Gerald Turner <gturner@unzane | NULL | | NormalCi | 1HDWeYX59Ayp3x8dAUWcpyUeTXEDwrh7vD | {u'accept | | modio | < spider AT modio dot SE> | {u'accept | | thisisat | <abuse .AT. uk .DOT. aql . DOT . com > | {u'accept | | thirdexi | <demfloro AT demfloro dot ru> - 1Jowqcwd | NULL | | dredis | <demfloro AT demfloro dot ru> - 1Jowqcwd | NULL | | bsdexit | <demfloro AT demfloro dot ru> - 1Jowqcwd | {u'accept | | modio1 | <take AT modio dot se> | NULL | | thisisat | Abuse <abuse .AT. uk .DOT. aql . DOT . c | NULL | | xshells | Admin <admin AT xshells DOT net> | NULL | | AquaRayT | Aqua Ray Tor Operators <tor-operators-fr | {u'accept | | BabylonN | Babylon Network | noc <AT> babylon <DOT> | NULL | | BabylonN | Babylon Network | noc <AT> babylon <DOT> | NULL | | BabylonN | Babylon Network | noc <AT> babylon <DOT> | NULL | | BabylonN | Babylon Network | noc <AT> babylon <DOT> | NULL | | blackpea | BlackPearl <tor-op(at)wach-it-solutions. | {u'accept | | CrashM | CrashM <crash AT crashm d0t co DoT uk> | NULL | | digineo3 | Digineo GmbH <tor AT digineo dot de> | {u'accept | | Sentries | echo gbeznfgre1609@xxxxxxxxxxxx | rot13 | NULL | | Sentries | echo gbeznfgre1609@xxxxxxxxxxxx | rot13 | NULL | | TastyStr | Fabian Bakkum <fabianbakkum@xxxxxxxxxxx> | NULL | | liskov0 | gmail is teor2345 | http://tor-relays.ne | {u'accept | | kramse | Henrik Kramshoej <hlk AT zencurity dot d | NULL | | w000000h | http://torexitnodev6.dynv6.net | NULL | | critical | https://www.torservers.net/donate.html < | NULL | | zwiebelf | https://www.torservers.net/donate.html < | NULL | | zwiebelf | https://www.torservers.net/donate.html < | NULL | | dorrisde | https://www.torservers.net/donate.html < | NULL | | russellt | https://www.torservers.net/donate.html < | NULL | | zwiebelf | https://www.torservers.net/donate.html < | NULL | | amazonas | https://www.torservers.net/donate.html < | {u'reject | | UnivOfPA | Jacob Henner <tor-exit at lists (dot) se | {u'accept | | yuicat2 | Jordan <jordan@xxxxxxx> | {u'accept | | NeelTorE | Neel Chauhan <neel AT neelc DOT org> | B | NULL | | NeelTorE | Neel Chauhan <neel AT neelc DOT org> | B | NULL | | NeelTorE | Neel Chauhan <neel AT neelc DOT org> | B | {u'accept | | lupine | Nick Thomas <tor@xxxxx> | NULL | | Unnamed | Random Person <tor0102.10.swsnyder AT sp | NULL | | Unnamed | Random Person <tor0102.10.swsnyder AT sp | NULL | | Unnamed | Random Person <tor0102.10.swsnyder AT sp | {u'accept | | Unnamed | Random Person <tor0102.10.swsnyder AT sp | {u'accept | | Unnamed | Random Person <tor0102.10.swsnyder AT sp | {u'accept | | zwiebelt | replace k with c : kontakt @ zwiebeltora | NULL | | artikel5 | see https://www.artikel5ev.de/torcontact | NULL | | artikel5 | see https://www.artikel5ev.de/torcontact | NULL | | artikel5 | see https://www.artikel5ev.de/torcontact | NULL | | artikel5 | see https://www.artikel5ev.de/torcontact | NULL | | Universi | System Administrators <sysadmin@galileo. | NULL | | corewars | TOR Administrator <tor AT corewars dot n | NULL | | cowcat | tor-relays@xxxxxxxxxx | NULL | | chaucer | tor-relays@xxxxxxxxxx | NULL | | manipogo | tor-relays@xxxxxxxxxx | NULL | | starfish | tor-relays@xxxxxxxxxx | NULL | | snowfall | tor-relays@xxxxxxxxxx | NULL | | prawksi | tor-relays@xxxxxxxxxx | NULL | | ogopogo | tor-relays@xxxxxxxxxx | NULL | | tordiene | tor@xxxxxxx | NULL | | PrivacyE | tor@xxxxxxxxxxxxxxx | NULL | | torwedos | Viktor <vnikolov AT vnikolov dot cz> | NULL | | torwedos | Viktor <vnikolov AT vnikolov dot cz> | NULL | +----------+------------------------------------------+-----------+
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ tor-relays mailing list tor-relays@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays