Re: [tor-relays] Log warning : possible (zlib) compression bomb on middle relays

[tschador@xxxxxxxxx]

Same here on my new bridge (~3days up):

Nov 02 05:34:22.000 [warn] Possible compression bomb; abandoning stream.
Nov 02 05:34:23.000 [warn] Possible compression bomb; abandoning stream.
Nov 02 05:35:22.000 [warn] Possible compression bomb; abandoning stream.

Regards


On 02.11.20 11:05, Guinness wrote:

> Hi all,
> 
> We are at least 3 users running middle relays from 0.4.4.5 and after having
> some logs like those :
> ```
> Nov 02 05:30:55.000 [warn] Possible compression bomb; abandoning stream.
> Nov 02 05:30:55.000 [warn] Possible zlib bomb; abandoning stream.
> Nov 02 05:30:56.000 [warn] Possible compression bomb; abandoning stream.
> Nov 02 05:31:00.000 [warn] Possible compression bomb; abandoning stream.
> Nov 02 05:31:00.000 [warn] Possible compression bomb; abandoning stream.
> Nov 02 05:31:00.000 [warn] Possible compression bomb; abandoning stream.
> Nov 02 05:31:55.000 [warn] Possible compression bomb; abandoning stream.
> Nov 02 05:31:56.000 [warn] Possible compression bomb; abandoning stream.
> ```
> 
> I'm wondering if this is an attack or a new feature (haven't checked
> yet) but I'd like to know how many users are impacted.
> 
> The interesting informations are :
>  * Number of warnings
>  * What kind of relay it is (middle, exit, entry)
> 
> After your answers, I'll complete the issue I have opened on the bug
> tracker.
> 
> 
> Cheers,
> 
> 
> _______________________________________________
> tor-relays mailing list
> tor-relays@xxxxxxxxxxxxxxxxxxxx
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> 

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays