1
English type: Plain text
[[!meta date="Mon, 22 Nov 2009 11:20:24 +0000"]]
49/490 · 49
2
English type: Plain text
[[!meta title="Ineffective firewall-level Tor enforcement"]]
61/610 · 61
3
English type: Plain text
[[!pagetemplate template="news.tmpl"]]
39/390 · 39
4
English type: Plain text
[[!tag security/fixed]]
24/240 · 24
5
English type: Plain text
The `openntpd` package is not installed anymore since commit bf8cc787ce46e9946ab47d5383feb1174da3f22a (20091006). The `ntpd` user is then non-existent on built amnesia systems.
191/1760 · 176
6
English type: Plain text
This user is however mentioned in `/etc/firewall.conf`. `iptables-restore` being apparently picky about imperfect configuration files, it refuses to load it, and the firewall-level Tor enforcement is therefore not effective.
268/2250 · 225
7
English type: Title #
Impact
12/100 · 6
8
English type: Plain text
Some applications establish direct connections through the Internet, not using the Tor network at all.
103/1020 · 102
9
English type: Plain text
Details:
8/100 · 8
10
English type: Bullet: '* '
iceweasel is not affected, thanks to the torbutton extension
61/600 · 60
11
English type: Bullet: '* '
applications that take into account the relevant environment variables (namely `http_proxy`, `HTTP_PROXY`, `SOCKS_SERVER` and `SOCKS5_SERVER`) are not affected
161/1590 · 159
12
English type: Bullet: '* '
any other application, such as Pidgin or Thunderbird, is probably affected.
87/750 · 75
13
English type: Title #
Solution
6/100 · 8
14
English type: Plain text
This problem has been fixed in [[Git|contribute/git]] commit 9c425e8de13e6b4f885.
82/810 · 81
15
English type: Title #
Affected versions
20/170 · 17
16
English type: Plain text
No released amnesia version is affected.
52/400 · 40
The translation has come to an end.