tor/changes/bug13667

 o Major features (security, hidden services):
   - Make HS port scanning more difficult by sending back REASON_DONE if the
     exit policy didn't match. Furthermore, immediately close the circuit to
     avoid other connection attempts on it from the possible attacker trying
     multiple ports on that same circuits. Closes ticket 13667.
Make lintChanges happier 2014-12-30 14:54:01 +01:00			`o Major features (security, hidden services):`
Fix: mitigate as much as we can HS port scanning Make hidden service port scanning harder by sending back REASON_DONE which does not disclose that it was in fact an exit policy issue. After that, kill the circuit immediately to avoid more bad requests on it. This means that everytime an hidden service exit policy does match, the user (malicious or not) needs to build a new circuit. Fixes #13667. Signed-off-by: David Goulet <dgoulet@ev0ke.net> 2014-11-25 16:37:55 +01:00			`- Make HS port scanning more difficult by sending back REASON_DONE if the`
			`exit policy didn't match. Furthermore, immediately close the circuit to`
			`avoid other connection attempts on it from the possible attacker trying`
Make lintChanges happier 2014-12-30 14:54:01 +01:00			`multiple ports on that same circuits. Closes ticket 13667.`