[tor-bugs] #28296 [Core Tor/Nyx]: Nyx shows wrong IP address for ControlPort connection

[Tor Bug Tracker & Wiki]

#28296: Nyx shows wrong IP address for ControlPort connection
--------------------------+-----------------------------------
 Reporter:  wagon         |          Owner:  atagar
     Type:  defect        |         Status:  needs_information
 Priority:  Medium        |      Milestone:
Component:  Core Tor/Nyx  |        Version:  Tor: 0.3.4.8
 Severity:  Normal        |     Resolution:
 Keywords:                |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:
--------------------------+-----------------------------------

Comment (by wagon):

 > Localhost connections (127.0.0.1) are replaced with your externally
 facing IP when we can because this *is* your address to the wider world.
 I think you don't understand my point. I don't speak about circuits
 connections, where everything is correct now. I speak about Nyx (and
 similar tools using `ControlPort`) own connections to `ControlPort`.

 Tor daemon normally listens at `127.0.0.1:9051`. Nyx initiates the
 connection to `127.0.0.1:9051` from, suppose, `127.0.0.1:12345`. Any
 connections monitor such as `netstat` or `ss` (but not Nyx) will display
 it as

 `127.0.0.1:12345 -> 127.0.0.1:9051`

 It doesn't have any relation to public IP, which Tor is using to send its
 data outside.

 However, indeed, you can configure your Tor to listen at `public_IP:9051`
 (e.g., if you want to allow its control from outside). In that case local
 connection in `ss` or `netstat` would look like

 `public_IP:12345 -> public_IP:9051`

 In the first case writing (this is what Nyx is doing)

 `127.0.0.1:12345 -> public_IP:9051`

 is absolutely incorrect, because TCP port at the address `public_IP:9051`
 is not open! Run `ss -ltpn` and you will see that.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28296#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online