Skip to content
Snippets Groups Projects
  1. Nov 19, 2015
    • teor (Tim Wilson-Brown)'s avatar
      Block OutboundBindAddressIPv[4|6]_ and configured ports on exit relays · 66fac9fb
      teor (Tim Wilson-Brown) authored
      Modify policies_parse_exit_policy_reject_private so it also blocks
      the addresses configured for OutboundBindAddressIPv4_ and
      OutboundBindAddressIPv6_, and any publicly routable port addresses
      on exit relays.
      
      Add and update unit tests for these functions.
      66fac9fb
    • teor (Tim Wilson-Brown)'s avatar
      Add unit tests for policies_parse_exit_policy_reject_private · e726ad46
      teor (Tim Wilson-Brown) authored
      Test that policies_parse_exit_policy_reject_private rejects supplied
      IPv4 and IPv6 relay addresses, and the addresses of local interfaces.
      e726ad46
    • teor (Tim Wilson-Brown)'s avatar
      Refactor policies_parse_exit_policy_internal · c73c5a29
      teor (Tim Wilson-Brown) authored
      Move the code that rejects publicly routable exit relay addresses
      to policies_parse_exit_policy_reject_private. Add
      addr_policy_append_reject_addr_list and use it to reject interface
      addresses.
      
      This removes the duplicate reject checks on local_address and
      ipv6_local_address, but duplicates will be removed by
      exit_policy_remove_redundancies at the end of the function.
      
      This also removes the info-level logging on rejected interface
      addresses. Instead, log a debug-level message in
      addr_policy_append_reject_addr.
      
      This simplifies policies_parse_exit_policy_internal and prepares for
      reporting these addresses over the control port in #17183.
      c73c5a29
  2. Nov 18, 2015
  3. Nov 17, 2015
  4. Nov 16, 2015
  5. Nov 13, 2015
  6. Nov 12, 2015
  7. Nov 10, 2015
Loading