Skip to content
  • teor (Tim Wilson-Brown)'s avatar
    Check non-onion hostnames & IP addresses against client port flags · b311f820
    teor (Tim Wilson-Brown) authored and David Goulet's avatar David Goulet committed
    Check NoDNSRequest, NoIPv4Traffic, and NoIPv6Traffic before
    attaching a stream.
    
    NoDNSRequest refuses connections to all non-onion hostnames,
    but permits IP addresses.
    NoIPv4Traffic refuses connections to IPv4 addresses, but resolves
    hostnames.
    NoIPv6Traffic refuses connections to IPv6 addresses, but resolves
    hostnames.
    
    Combined, they refuse all non-onion hostnames and IP addresses.
    b311f820