Skip to content
Blame History Permalink
  • teor (Tim Wilson-Brown)'s avatar
    Check non-onion hostnames & IP addresses against client port flags · b311f820
    teor (Tim Wilson-Brown) authored and David Goulet's avatar David Goulet committed 
    Check NoDNSRequest, NoIPv4Traffic, and NoIPv6Traffic before
attaching a stream.

NoDNSRequest refuses connections to all non-onion hostnames,
but permits IP addresses.
NoIPv4Traffic refuses connections to IPv4 addresses, but resolves
hostnames.
NoIPv6Traffic refuses connections to IPv6 addresses, but resolves
hostnames.

Combined, they refuse all non-onion hostnames and IP addresses.
    b311f820