en	[[!meta date="Mon, 22 Nov 2009 11:20:24 +0000"]]

en	[[!meta title="Ineffective firewall-level Tor enforcement"]]

en	[[!pagetemplate template="news.tmpl"]]

en	[[!tag security/fixed]]

en	The `openntpd` package is not installed anymore since commit bf8cc787ce46e9946ab47d5383feb1174da3f22a (20091006). The `ntpd` user is then non-existent on built amnesia systems.

en	This user is however mentioned in `/etc/firewall.conf`. `iptables-restore` being apparently picky about imperfect configuration files, it refuses to load it, and the firewall-level Tor enforcement is therefore not effective.

en	Impact
es	Impacto

en	Some applications establish direct connections through the Internet, not using the Tor network at all.

en	Details:
es	Detalles:

en	iceweasel is not affected, thanks to the torbutton extension

en	applications that take into account the relevant environment variables (namely `http_proxy`, `HTTP_PROXY`, `SOCKS_SERVER` and `SOCKS5_SERVER`) are not affected

en	any other application, such as Pidgin or Thunderbird, is probably affected.

en	Solution
es	Solución

en	This problem has been fixed in [[Git|contribute/git]] commit 9c425e8de13e6b4f885.

en	Affected versions
es	Versiones afectadas

en	No released amnesia version is affected.

en	Custom images built from Git snapshots equal of after bf8cc787ce46e9946ab47d5383feb1174da3f22a (20091006), and before 9c425e8de13e6b4f885 (excluded), are affected.