Page MenuHomePhabricator

move from Whonix control-port-filter-python to tor-controlport-filter by Tails
Closed, ResolvedPublic

Description

reasons:

  • unix domain socket listener only
  • can rewrite client requests before using config files
    • thereby inject workstation IP address into add_onion command (T562)
  • can rewrite replies by Tor using config files
    • thereby prevent the workstation from learning the hidden service private key
  • less work than implementing the same with Whonix control-port-filter-python
  • sharing code with Tails
  • written in python3

disadvantages:

  • no configuration drop-in snippet configuration extension feature, see T576

Details

Impact
Normal

Event Timeline

Patrick created this task.Dec 7 2016, 7:09 PM
Patrick closed this task as Resolved.Dec 12 2016, 2:00 AM
Patrick claimed this task.
Patrick updated the task description. (Show Details)
  • python2.7 legacy cpfpy was removed.
  • python3 tor-controlport-filter by Tails was added.

Code lives here:
https://github.com/Whonix/control-port-filter-python