Opened 5 years ago

Closed 5 years ago

Last modified 4 years ago

#15743 closed defect (wontfix)

Relax the "Blocking multiple introductions on the same circuit." log message

Reported by: asn Owned by:
Priority: Very Low Milestone: Tor: 0.2.7.x-final
Component: Core Tor/Tor Version:
Severity: Keywords: tor-hs
Cc: Actual Points:
Parent ID: Points: small
Reviewer: Sponsor: SponsorR

Description

In #15515 we blocked HS DoS attacks by having IPs block multiple INTRODUCE1 cells on the same circuit. When the IP blocks an attack, it issues this log message:

    log_fn(LOG_PROTOCOL_WARN, LD_REND,
           "Blocking multiple introductions on the same circuit. "
           "Someone might be trying to attack a hidden service through "
           "this relay.");

You might notice it's in warn because we actually didn't think anyone was using this attack.

Unfortunately, it seems like someone was actually using it, so a few people have encountered this message on their relays and it left them puzzled. I think the word "attack" makes this more mysterious than it deserves. Also, since there is no action for the user to do, maybe this log message can be silenced completely (toned down to info or something).

Child Tickets

Change History (5)

comment:1 Changed 5 years ago by special

LOG_PROTOCOL_WARN is already info-level, unless you explicitly set "ProtocolWarnings 1". If you do that on a relay, you see lots of other scary/interesting warnings too.

Personally, I like being able to track this one without enabling full info-level logging.

comment:2 Changed 5 years ago by dgoulet

Keywords: SponsorR tor-hs added
Points: small

comment:3 Changed 5 years ago by dgoulet

I agree with special here. I think the warning is perfectly fine at LOG_PROTOCOL_WARN.

comment:4 Changed 5 years ago by dgoulet

Resolution: wontfix
Status: newclosed

Quoting asn :). Closing as wontfix.

< asn> then it's fair game

comment:5 Changed 4 years ago by dgoulet

Keywords: SponsorR removed
Sponsor: SponsorR
Note: See TracTickets for help on using tickets.