Opened 14 years ago

Last modified 7 years ago

#71 closed enhancement (Implemented)

Warn when exit policy allows private:*

Reported by: nickm Owned by:
Priority: Low Milestone:
Component: Core Tor/Tor Version:
Severity: Keywords:
Cc: nickm Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Too many people are telling us that the sky is falling because that Tor allows connections to private networks. This is, of course, because people aren't setting their exit policies to block them. Nevertheless, we should probably have Tor give a warning when you start a server and the exit policy allows x:* connections to a non-public address.

[Automatically added by flyspray2trac: Operating System: All]

Child Tickets

Change History (2)

comment:1 Changed 14 years ago by nickm

flyspray2trac: bug closed.
CVS Tor now warns if local addresses are neither rejected nor explicitly accepted.

comment:2 Changed 7 years ago by nickm

Component: Tor ClientTor
Note: See TracTickets for help on using tickets.