aboutsummaryrefslogtreecommitdiff
path: root/doc/tor.1.in
Commit message (Collapse)AuthorAge
* Exit policies now reject connections that are addressed to aRoger Dingledine2007-11-10
| | | | | | | | | | relay's public (external) IP address too, unless ExitPolicyRejectPrivate is turned off. We do this because too many relays are running nearby to services that trust them based on network address. svn:r12459
* more of r12364Roger Dingledine2007-11-04
| | | | svn:r12366
* r14623@tombo: nickm | 2007-11-01 22:25:18 -0400Nick Mathewson2007-11-02
| | | | | | | More tweaks from karsten, with some cleanup and commentary. svn:r12319
* And more places with the wrong url, now updated.Andrew Lewman2007-10-29
| | | | svn:r12267
* clean up some old syntax errors in the man pageRoger Dingledine2007-10-16
| | | | svn:r11972
* give PublishServerDescriptor a real man page entryRoger Dingledine2007-10-16
| | | | svn:r11971
* un-deprecate FascistFirewallRoger Dingledine2007-10-11
| | | | svn:r11873
* r15422@catbus: nickm | 2007-09-27 16:42:35 -0400Nick Mathewson2007-09-27
| | | | | | | Use descriptor annotations to record the source, download t time, and purpose of every descriptor we add to the store. The remaining to-do item is to stop setting do_not_cache on bridges. svn:r11680
* fix a syntax error in the man pageRoger Dingledine2007-09-23
| | | | svn:r11589
* The manpage now tells uses that they can use identity fingerprints in most ↵Peter Palfrader2007-09-21
| | | | | | places where they can use nicknames. Based on patch from karsten svn:r11570
* r14227@Kushana: nickm | 2007-08-27 11:33:28 -0400Nick Mathewson2007-08-27
| | | | | | | Add a new ClientDNSRejectInternalAddresses option (default: on) to refuse to believe that any address can map to or from an internal address. This blocks some kinds of potential browser-based attacks, especially on hosts using DNSPort. Also clarify behavior in some comments. Backport candiate? svn:r11287
* r14758@catbus: nickm | 2007-08-21 01:36:03 -0400Nick Mathewson2007-08-21
| | | | | | | Finish implementing and documenting proposal 108: Authorities now use MTBF data to set their stability flags, once they have at least 4 days of data to use. svn:r11240
* clean up the cookieauth stuffRoger Dingledine2007-08-16
| | | | svn:r11146
* r14606@catbus: nickm | 2007-08-16 13:45:01 -0400Nick Mathewson2007-08-16
| | | | | | | Implement CookieAuthFile and CookieAuthFileGroupReadable. Backport candidate. svn:r11141
* r13774@catbus: nickm | 2007-07-16 12:23:28 -0400Nick Mathewson2007-07-16
| | | | | | | Tweaks on constrained socket buffers patch from coderman: Add a changelog; rename some variables; fix some long lines and whitespace; make ConstrainedSockSize a memunit; pass setsockopt a void. svn:r10843
* r13773@catbus: nickm | 2007-07-16 11:58:25 -0400Nick Mathewson2007-07-16
| | | | | | | Initial "constrained socket buffers" patch from coderman. needs tweaking. svn:r10842
* r13304@catbus: nickm | 2007-06-07 13:25:37 -0400Nick Mathewson2007-06-07
| | | | | | | Deprecate RedirectExits. svn:r10526
* r13267@catbus: nickm | 2007-06-05 16:54:20 -0400Nick Mathewson2007-06-05
| | | | | | | Man page and small tweaks for last patch. svn:r10505
* r13127@catbus: nickm | 2007-05-31 21:43:05 -0400Nick Mathewson2007-06-01
| | | | | | | Mention that SocksPolicy applies to DNSPort. svn:r10438
* r13115@catbus: nickm | 2007-05-31 15:12:43 -0400Nick Mathewson2007-05-31
| | | | | | | Document DNSPort, DNSListenAddress, AutomapHostsOnResolve, AutomapHostsSuffixes, and DownloadExtraInfo in the manpage. svn:r10426
* r13068@catbus: nickm | 2007-05-29 14:58:13 -0400Nick Mathewson2007-05-29
| | | | | | | Add some code to mitigate bug 393: Choose at random from multiple hidden service ports with the same virtport. This allows limited ad-hoc round-robining. svn:r10398
* cleanups on man page from edmanmRoger Dingledine2007-05-26
| | | | svn:r10350
* add a 'bridge' flag for dirserver config entriesRoger Dingledine2007-05-07
| | | | svn:r10128
* New config option V2AuthoritativeDirectory that all directoryRoger Dingledine2007-05-02
| | | | | | | | | | | authorities should set. This will let future authorities choose not to serve V2 directory information. Also, go through and revamp all the authdir_mode stuff so it tries to do the right thing if you're an auth but not a V1 or V2 auth. svn:r10092
* hsusage man page entries from karstenRoger Dingledine2007-05-01
| | | | svn:r10084
* Fix the tex error I just introduced. Andrew Lewman2007-03-28
| | | | svn:r9911
* Fix tex and spelling mistakes.Andrew Lewman2007-03-28
| | | | svn:r9910
* Add a separate set of token buckets for relayed traffic. RightRoger Dingledine2007-03-20
| | | | | | | now that's just defined as answers to directory requests. svn:r9881
* squeak in a bugfix for the VirtualAddrNetwork man page entryRoger Dingledine2007-03-02
| | | | svn:r9706
* r11657@catbus: nickm | 2007-02-05 21:01:18 -0500Nick Mathewson2007-02-06
| | | | | | | Fix a missing word identified by roger. svn:r9494
* nick, this was a typo too, right?Roger Dingledine2007-02-06
| | | | svn:r9493
* nickm: to a larger what?Roger Dingledine2007-02-06
| | | | svn:r9492
* cleanups based on looking through svn commitsRoger Dingledine2007-02-06
| | | | svn:r9491
* r11616@catbus: nickm | 2007-01-31 13:51:31 -0500Nick Mathewson2007-01-31
| | | | | | | Tweak Trans/NATDPort documention to be less tool-specific. svn:r9471
* r11615@catbus: nickm | 2007-01-31 01:15:06 -0500Nick Mathewson2007-01-31
| | | | | | | Documentation patch from ioerror for TransPort and related issues. svn:r9470
* r11583@catbus: nickm | 2007-01-29 11:19:48 -0500Nick Mathewson2007-01-29
| | | | | | | Make man page stop saying that BandwidthRate is for incoming bandwidth only; Add some XXX012s for config options that should maybe die. svn:r9455
* r11492@catbus: nickm | 2007-01-24 18:41:07 -0500Nick Mathewson2007-01-24
| | | | | | | Try to be really explicit that ServerDNS options affect what your server does on behalf of clients, and nothing else. svn:r9398
* Expire socks connections if they spend too long waiting for theRoger Dingledine2007-01-15
| | | | | | | | | | | | | handshake to finish. Previously we would let them sit around for days, if the connecting application didn't close them either. Also take this opportunity to refactor a duplicate bit of circuituse.c. And change the semantics of SocksTimeout slightly, but I think it'll be ok. svn:r9350
* Clarify the --nt-service option.Andrew Lewman2007-01-13
| | | | svn:r9345
* Update --nt-serviceAndrew Lewman2007-01-13
| | | | svn:r9342
* Update copyright in config.c while I'm there. Update man page toAndrew Lewman2007-01-13
| | | | | | | reflect all available options to tor binary. svn:r9341
* r11938@Kushana: nickm | 2007-01-11 11:02:28 -0500Nick Mathewson2007-01-11
| | | | | | | Check addresses for rfc953-saneness at exit too, and give a PROTOCOL_WARN when they fail. Also provide a mechanism to override this, so blossom can have its @@##$$^.whatever.exit hostnames if it wants. svn:r9336
* fix a bug i introduced in r9249; and more cleanups.Roger Dingledine2007-01-04
| | | | svn:r9263
* man page entries for TunnelDirConns and PreferTunneledDirConnsRoger Dingledine2007-01-04
| | | | | | | and add a todo item for nick in case he gets bored :) svn:r9260
* interim tweaksRoger Dingledine2007-01-03
| | | | svn:r9246
* r11723@Kushana: nickm | 2006-12-28 13:52:48 -0500Nick Mathewson2006-12-28
| | | | | | | Fix bug 364: check for whether popular hostnames (curently google, yahoo, mit, and slashdot) are getting wildcarded. If they are, we are probably behind a DNS server that is useless: change our exit policy to reject *:*. svn:r9199
* r11715@Kushana: nickm | 2006-12-24 22:53:06 -0500Nick Mathewson2006-12-25
| | | | | | | Document a couple more options in the man page. svn:r9192
* r11676@Kushana: nickm | 2006-12-23 20:42:17 -0500Nick Mathewson2006-12-24
| | | | | | | Add an orport option to dirserver lines so that clients can tell where to connect to open an encrypted tunnel to a dirserver even before they have its descriptor. svn:r9171
* r11657@Kushana: nickm | 2006-12-20 15:11:19 -0500Nick Mathewson2006-12-20
| | | | | | | Fixes to check-docs script; add some docs; mark some options as deprecated in the online docs. svn:r9163
* Reject *:563 (NTTPS) in the default exit policy. We already rejectRoger Dingledine2006-12-18
| | | | | | | | NNTP by default, so this seems like a sensible addition. (suggested by bug 331) svn:r9149