tor/src/or
teor (Tim Wilson-Brown) e033d5e90b Ignore accept6/reject6 IPv4, warn about unexpected rule outcomes
When parsing torrc ExitPolicies, we now warn if:
  * an IPv4 address is used on an accept6 or reject6 line. The line is
    ignored, but the rest of the policy items in the list are used.
    (accept/reject continue to allow both IPv4 and IPv6 addresses in torrcs.)
  * a "private" address alias is used on an accept6 or reject6 line.
    The line filters both IPv4 and IPv6 private addresses, disregarding
    the 6 in accept6/reject6.

When parsing torrc ExitPolicies, we now issue an info-level message:
  * when expanding an accept/reject * line to include both IPv4 and IPv6
    wildcard addresses.

In each instance, usage advice is provided to avoid the message.

Partial fix for ticket 16069. Patch by "teor".
Patch on 2eb7eafc9d and a96c0affcb (25 Oct 2012),
released in 0.2.4.7-alpha.
2015-09-16 00:13:03 +10:00
..
addressmap.c Merge branch 'bug7555_v2_squashed' 2015-01-19 11:43:41 -05:00
addressmap.h Allow MapAddress and Automap to work together 2015-01-13 12:41:15 -05:00
buffers.c Remove remaining references to "nulterminate" in comments 2015-09-02 08:50:26 -04:00
buffers.h Remove the unused "nulterminate" option to buf_pullup() 2015-09-01 14:36:25 -04:00
channel.c properly delete current channel in channel_free_list 2015-09-01 15:10:10 +02:00
channel.h Tests for AUTHENTICATE cell functionality. 2015-05-28 10:41:50 -04:00
channeltls.c Appease make check-spaces 2015-06-01 12:59:14 +00:00
channeltls.h Tests for AUTHENTICATE cell functionality. 2015-05-28 10:41:50 -04:00
circpathbias.c Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
circpathbias.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
circuitbuild.c Reachability should check ExtendAllowPrivateAddresses not TestingTorNetwork 2015-04-22 23:54:21 +10:00
circuitbuild.h fix a compilation warning 2015-02-11 15:10:35 -05:00
circuitlist.c Fix misnamed parameter in or_circuit_new docstring. 2015-08-06 06:05:07 +00:00
circuitlist.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
circuitmux_ewma.c Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
circuitmux_ewma.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
circuitmux.c Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
circuitmux.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
circuitstats.c Implement EVENT_NETWORK_LIVENESS 2015-05-17 13:42:57 +00:00
circuitstats.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
circuituse.c Add KeepAliveIsolateSOCKSAuth as a SOCKSPort option. 2015-09-08 14:02:08 -04:00
circuituse.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
command.c Remove redundant tor_free() in command_process_create_cell(). 2015-08-17 09:26:07 -04:00
command.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
config.c Check NoKeepAliveIsolateSOCKSAuth in a better place. 2015-09-09 13:52:30 +00:00
config.h Merge branch '12498_ed25519_keys_v6' 2015-05-28 11:04:33 -04:00
confparse.c Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
confparse.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
connection_edge.c Logs and debug info that I used for finding bug 16844 2015-08-17 14:34:50 -04:00
connection_edge.h Make check-spaces happier. 2015-01-19 11:56:03 -05:00
connection_or.c Memory leak on error in connection_or_compute_auth_cell_body. CID 1301372 2015-05-28 12:51:20 -04:00
connection_or.h Start testing cell encoders/processers for the v3 handshake. 2015-05-28 10:41:50 -04:00
connection.c Unit test dns_resolve(), dns_clip_ttl(), dns_get_expiry_ttl(). 2015-08-23 16:02:39 +03:00
connection.h Unit test dns_resolve(), dns_clip_ttl(), dns_get_expiry_ttl(). 2015-08-23 16:02:39 +03:00
control.c Merge branch 'workqueue_squashed' 2015-08-21 10:37:01 -04:00
control.h Rename EVENT_SIGNAL -> EVENT_GOT_SIGNAL 2015-08-20 18:42:20 -04:00
cpuworker.c Ensure worker threads actually exit when it is time 2015-08-21 10:36:53 -04:00
cpuworker.h Refactor cpuworker to use workqueue/threadpool code. 2015-01-14 11:23:34 -05:00
dircollate.c Fix typo in double_digest_map type 2015-08-18 08:18:44 -04:00
dircollate.h Appease make check-spaces 2015-06-01 12:59:14 +00:00
directory.c Remove the HidServDirV2 and VoteOnHidServDirectoriesV2 options 2015-07-10 09:05:26 -04:00
directory.h whitespace fixes 2015-01-23 11:18:28 -05:00
dirserv.c Merge remote-tracking branch 'dgoulet/bug15963_026_01' 2015-09-02 16:00:07 -04:00
dirserv.h Refactor TestingDirAuthVote* into dirserv_set_routerstatus_testing 2015-08-18 14:54:40 +10:00
dirvote.c Fix some types on container fns 2015-08-13 22:14:14 -04:00
dirvote.h Remove the HidServDirV2 and VoteOnHidServDirectoriesV2 options 2015-07-10 09:05:26 -04:00
dns_structs.h Unit test dns_resolve(), dns_clip_ttl(), dns_get_expiry_ttl(). 2015-08-23 16:02:39 +03:00
dns.c Unit test dns_resolve(), dns_clip_ttl(), dns_get_expiry_ttl(). 2015-08-23 16:02:39 +03:00
dns.h Unit test dns_resolve(), dns_clip_ttl(), dns_get_expiry_ttl(). 2015-08-23 16:02:39 +03:00
dnsserv.c Move entry_port_cfg_t fields in entry_connection_t 2015-01-16 09:22:58 -05:00
dnsserv.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
entrynodes.c Fix some conversion problems 2015-04-23 09:16:42 -04:00
entrynodes.h clean up comments and whitespace a bit 2015-02-18 19:27:02 -05:00
eventdns_tor.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
ext_orport.c Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
ext_orport.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
fp_pair.c Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
fp_pair.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
geoip.c Merge branch 'bug6852' 2015-02-03 13:06:58 -05:00
geoip.h Merge branch 'bug6852' 2015-02-03 13:06:58 -05:00
hibernate.c Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
hibernate.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
include.am Include dns_structs.h in tarball 2015-09-02 08:45:12 -04:00
keypin.c Move formatting functions around. 2015-07-31 11:21:34 -04:00
keypin.h Tie key-pinning logic into directory authority operation 2015-05-28 10:41:49 -04:00
main.c Merge remote-tracking branch 'public/ed25519_hup_v2' 2015-09-10 10:37:13 -04:00
main.h Merge remote-tracking branches 'public/decouple_lost_owner' and 'public/decouple_signals' 2015-08-17 16:24:45 -04:00
Makefile.nmake Implement scheduler mechanism to track lists of channels wanting cells or writes; doesn't actually drive the cell flow from it yet 2014-09-30 22:48:24 -07:00
microdesc.c Fix a stupid memory leak I introduced in 8afbc154. Bug not in any released Tor. 2015-08-17 09:42:35 -04:00
microdesc.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
networkstatus.c Remove the HidServDirV2 and VoteOnHidServDirectoriesV2 options 2015-07-10 09:05:26 -04:00
networkstatus.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
nodelist.c Improve log messages for problems about ed25519 keypinning 2015-07-31 10:47:39 -04:00
nodelist.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
ntmain.c Wrap windows-only C files in #ifdef _WIN32 2015-07-30 11:14:15 -04:00
ntmain.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
onion_fast.c Merge remote-tracking branch 'public/bug9635_warnings_025' 2015-02-02 16:31:32 -05:00
onion_fast.h Merge remote-tracking branch 'public/bug9635_warnings_025' 2015-02-02 16:31:32 -05:00
onion_ntor.c Merge remote-tracking branch 'public/bug9635_warnings_025' 2015-02-02 16:31:32 -05:00
onion_ntor.h Merge remote-tracking branch 'public/bug9635_warnings_025' 2015-02-02 16:31:32 -05:00
onion_tap.c Merge remote-tracking branch 'public/bug9635_warnings_025' 2015-02-02 16:31:32 -05:00
onion_tap.h Merge remote-tracking branch 'public/bug9635_warnings_025' 2015-02-02 16:31:32 -05:00
onion.c Merge remote-tracking branch 'public/bug9635_warnings_025' 2015-02-02 16:31:32 -05:00
onion.h Merge remote-tracking branch 'public/bug9635_warnings_025' 2015-02-02 16:31:32 -05:00
or.h Add KeepAliveIsolateSOCKSAuth as a SOCKSPort option. 2015-09-08 14:02:08 -04:00
policies.c Ignore accept6/reject6 IPv4, warn about unexpected rule outcomes 2015-09-16 00:13:03 +10:00
policies.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
reasons.c Add string for IP_NOW_REDUNDANT in circuit_end_reason_to_control_string 2015-01-15 11:53:20 -05:00
reasons.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
relay.c Logs and debug info that I used for finding bug 16844 2015-08-17 14:34:50 -04:00
relay.h Remove lingering mempool code 2015-02-23 11:19:31 -05:00
rendcache.c Add a rend cache failure info dup function 2015-09-11 15:09:07 +02:00
rendcache.h Expire after 5 minutes rend cache failure entries 2015-08-11 09:34:41 -04:00
rendclient.c Fix a bunch of check-spaces complaints 2015-08-21 10:36:53 -04:00
rendclient.h Use an enum for INTRO_POINT_FAILURE_* 2015-08-11 09:34:41 -04:00
rendcommon.c Rename ambiguous introduction point functions 2015-07-14 02:29:17 -04:00
rendcommon.h Use an enum for INTRO_POINT_FAILURE_* 2015-08-11 09:34:41 -04:00
rendmid.c ... and if we do get multiple INTRODUCE1s on a circuit, kill the circuit 2015-04-03 09:40:47 -04:00
rendmid.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
rendservice.c correct the doc for find_rp_for_intro. 2015-09-02 08:51:24 -04:00
rendservice.h Remove empty rend_service_validate_intro_early function 2015-07-14 02:30:04 -04:00
rephist.c Add link protocol version counts to the heartbeat message 2015-03-10 10:07:41 -04:00
rephist.h Add link protocol version counts to the heartbeat message 2015-03-10 10:07:41 -04:00
replaycache.c Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
replaycache.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
router.c Split the client-only parts of init_keys() into a separate function 2015-08-11 10:41:20 -04:00
router.h Split the client-only parts of init_keys() into a separate function 2015-08-11 10:41:20 -04:00
routerkeys.c Convince coverity that we do not have a particular memory leak 2015-09-13 14:44:46 -04:00
routerkeys.h More log messages for keygen problems 2015-08-19 13:36:51 -04:00
routerlist.c Decouple routerlist_retry_directory_downloads() from the blob 2015-08-13 09:45:30 -04:00
routerlist.h Implement proposal 228: cross-certification with onion keys 2015-05-28 10:40:57 -04:00
routerparse.c Ignore accept6/reject6 IPv4, warn about unexpected rule outcomes 2015-09-16 00:13:03 +10:00
routerparse.h Ignore accept6/reject6 IPv4, warn about unexpected rule outcomes 2015-09-16 00:13:03 +10:00
routerset.c Ignore accept6/reject6 IPv4, warn about unexpected rule outcomes 2015-09-16 00:13:03 +10:00
routerset.h Prohibit the use of one entry node with an HS 2015-09-02 10:47:20 -04:00
scheduler.c Fix scheduler compilation on targets where char is unsigned. 2015-02-06 16:26:28 +00:00
scheduler.h Fix scheduler compilation on targets where char is unsigned. 2015-02-06 16:26:28 +00:00
statefile.c Merge branch 'master' of https://git.torproject.org/tor into bug13111-empty-key-files-fn-empty 2015-01-10 17:20:06 +11:00
statefile.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
status.c Add link protocol version counts to the heartbeat message 2015-03-10 10:07:41 -04:00
status.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
tor_main.c Only return 0..255 from main(). 2015-09-03 11:38:00 -04:00
torcert.c Add more consistency checks in load_ed_keys 2015-07-14 11:27:49 -04:00
torcert.h Generate weird certificates correctly 2015-05-28 10:47:47 -04:00
transports.c Implement "TOR_PT_EXIT_ON_STDIN_CLOSE". 2015-03-26 12:55:12 +00:00
transports.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00