Tor: an anonymizing overlay network for TCP
Tor is a connection-based low-latency anonymous communication system which
addresses many flaws in the original onion routing design.
Tor is a toolset for a wide range of organizations and people that
want to improve their safety and security on the Internet. Using
Tor can help you anonymize web browsing and publishing, instant
messaging, IRC, SSH, and more. Tor also provides a platform on which
software developers can build new applications with built-in
anonymity, safety, and privacy features.
===> The following configuration options are available for tor-0.4.8.10:
DOCS=on: Build and/or install documentation
MANPAGES=on: Build and/or install manual pages
STATIC_TOR=off: Build a static tor
TCMALLOC=off: Use the tcmalloc memory allocation library
====> Supported compression libraries
ZSTD=on: Zstandard compression support
LZMA=on: LZMA compression support
====> Tracing
LTTNG=off: Build with LTTng-UST instrumentation
USDT=off: Build with tracing USDT instrumentation
LOG_DEBUG=off: Build with tracing event to debug log
===> Use 'make config' to modify these settings
To enable the tor server, set tor_enable="YES" in your /etc/rc.conf
and edit /usr/local/etc/tor/torrc as desired. (However, note that the
/usr/local/etc/rc.d/tor rc.subr script can override some torrc
options: see that script for details.) To use the torify script, install
the net/torsocks port.
Tor users are strongly advised to prevent traffic analysis that
exploits sequential IP IDs by setting:
sysctl net.inet.ip.random_id=1
(see sysctl.conf(5)).
In order to run additional, independent instances of tor on the same machine
set tor_instances="inst1 inst2 ..." in your /etc/rc.conf, and create the
corresponding additional configuration files /usr/local/etc/tor/torrc@inst1, ...
Alternatively, you can use the extended instance definition to specify all
instance parameteres explicitly:
inst_name{:inst_conf:inst_user:inst_group:inst_pidfile:inst_data_dir}
security/tor: update 0.4.8.9 → 0.4.8.10
Log: https://forum.torproject.org/t/security-release-0-4-8-10/10536
This is a security release fixing a high severity bug (TROVE-2023-007)
affecting Exit relays supporting Conflux. We strongly recommend to update as
soon as possible.
o Major bugfixes (TROVE-2023-007, exit):
- Improper error propagation from a safety check in conflux leg
linking lead to a desynchronization of which legs were part of a
conflux set, ultimately causing a UAF and NULL pointer dereference
crash on Exit relays. Fixes bug 40897; bugfix on 0.4.8.1-alpha.
o Minor features (fallbackdir):
(Only the first 15 lines of the commit message are shown above )
security/tor: update 0.4.8.7 → 0.4.8.8
This update contains a fix to a remote crash bug (TROVE 2023 004).
It is highly recommended that all relay operators
upgrade to the new versions as soon as possible to maintain the
network stability and security.
(cherry picked from commit 155a3b26cdc5526873e4f98500cb50840a5e019d)
