[tor-bugs] #16069 [Tor]: ipv4 + ipv6 exit : v6 policy is displayed twice, v4 isn't displayed
Tor Bug Tracker & Wiki
blackhole at torproject.org
Sun Sep 13 18:07:55 UTC 2015
#16069: ipv4 + ipv6 exit : v6 policy is displayed twice, v4 isn't displayed
--------------------------+-----------------------------------------------
Reporter: toralf | Owner:
Type: defect | Status: needs_review
Priority: critical | Milestone: Tor: 0.2.7.x-final
Component: Tor | Version: Tor: 0.2.7
Resolution: | Keywords: 026-backport, ipv6, PostFreeze027
Actual Points: | Parent ID:
Points: |
--------------------------+-----------------------------------------------
Comment (by nickm):
okay, thoughts!
{{{
+ log_notice(LD_GENERAL,
+ "accept/reject * expands into rules which apply to all
IPv4 "
+ "and IPv6 addresses.");
}}}
Maybe this should:
* mention the actual policy that's getting extended?
* tell the user what to do if they only wanted it to apply to IPv4?
* not happen once per policy line per hup. :)
* Give the user some way to avoid the message if they really did mean
"all ipv4 and ipv6".
{{{
+ if (flags & TAPMP_STAR_IPV4_ONLY) {
+ family = AF_INET;
+ tor_addr_from_ipv4h(addr_out, 0);
}}}
This doesn't match the documentation, which says that TAPMP_STAR_IPV4_ONLY
has no effect unless TAPMP_EXTENDED_STAR is also set.
{{{
- EXIT_POLICY_IPV6_ENABLED |
+ ~EXIT_POLICY_IPV6_ENABLED |
EXIT_POLICY_ADD_DEFAULT,0));
}}}
Should this bitwise "or" be an "and"?
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16069#comment:29>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list