Browse Source

Reject *:563 (NTTPS) in the default exit policy. We already reject
NNTP by default, so this seems like a sensible addition.
(suggested by bug 331)


svn:r9149

Roger Dingledine 17 years ago
parent
commit
e66b6f0d50
3 changed files with 5 additions and 1 deletions
  1. 2 0
      ChangeLog
  2. 1 0
      doc/tor.1.in
  3. 2 1
      src/or/policies.c

+ 2 - 0
ChangeLog

@@ -21,6 +21,8 @@ Changes in version 0.1.2.5-xxxx - 200?-??-??
     - Add internal descriptions for a bunch of configuration options:
       accessible via controller interface and in comments in saved
       options files.
+    - Reject *:563 (NTTPS) in the default exit policy. We already reject
+      NNTP by default, so this seems like a sensible addition.
 
   o Security bugfixes:
     - Stop sending the HttpProxyAuthenticator string to directory

+ 1 - 0
doc/tor.1.in

@@ -542,6 +542,7 @@ either a reject *:* or an accept *:*. Otherwise, you're _augmenting_
 .IP "reject *:135-139"
 .IP "reject *:445"
 .IP "reject *:465"
+.IP "reject *:563"
 .IP "reject *:587"
 .IP "reject *:1214"
 .IP "reject *:4661-4666"

+ 2 - 1
src/or/policies.c

@@ -589,7 +589,8 @@ exit_policy_remove_redundancies(addr_policy_t **dest)
 
 #define DEFAULT_EXIT_POLICY                                         \
   "reject *:25,reject *:119,reject *:135-139,reject *:445,"         \
-  "reject *:465,reject *:587,reject *:1214,reject *:4661-4666,"     \
+  "reject *:465,reject *:563,reject *:587,"                         \
+  "reject *:1214,reject *:4661-4666,"                               \
   "reject *:6346-6429,reject *:6699,reject *:6881-6999,accept *:*"
 
 /** Parse the exit policy <b>cfg</b> into the linked list *<b>dest</b>. If