Opened 7 years ago

Closed 2 years ago

Last modified 2 years ago

#1184 closed defect (wontfix)

Remove external proxy support for news fetching

Reported by: _Vi Owned by:
Priority: minor Milestone: 0.9.34
Component: router/update Version: 0.9.10
Keywords: Cc:
Parent Tickets: Sensitive: no

Description (last modified by zzz)

I see big block binary data (like "$4�%�&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz�������������") on my I2P router home page in "News" section.

With "Inspect Element" I see that the data is actually a part of MJPEG stream coming from other port on the same host, not I2P-related…

I also see that data if I do curl

How can unrelated data get into I2P router news?


Change History (6)

comment:1 Changed 7 years ago by _Vi

Info: HTTP client tunnel was stopped at all, but unrelated service is listening

I think I2P should use the port of HTTP tunnel (not hard coded 4444) for fetching news and just don't fetch any news if HTTP tunnel is stopped.

comment:2 Changed 7 years ago by zzz

Component: unspecifiedrouter/update
Description: modified (diff)

That explains it.

Yes we do fallback to external 4444 if the internal 4444 is not present. That's somewhat leftover from the days where all proxy traffic went out-and-back-in.

So the question is whether we should continue to support external proxies or just disallow them and use internal-only.

comment:3 Changed 7 years ago by _Vi

What is an an "external proxy"? A separate java process that connects to the router using "I2P Client Protocol" (possibly running on other host) and opens HTTP client tunnel?

If such scheme is supported, it should continue to be supported (how to do it BTW? Is there a guide of running I2P router on one host, but address book and hosts.txt on the other).

Fetching news only though internal proxy (otherwise not fetching at all) is a good idea. Ability to inject any code to "news" section of the router just by opening unprivileged 4444 port is a security issue.

comment:4 Changed 6 years ago by str4d

Milestone: 0.9.11
Summary: Binary garbage instead of news on router home page.Remove external proxy support for news fetching

Renaming ticket for clarity. If we do decide to keep external proxy support, we can close the ticket as wontfix.

comment:5 Changed 2 years ago by Eche|on

Resolution: wontfix
Status: newclosed

comment:6 Changed 2 years ago by zzz

Milestone: 0.9.34

This is now hidden unless routerconsole.advanced=true
some parts were disabled or hidden earlier, and the last of it hidden as of #2182 fix to be 0.9.33-9

Note: See TracTickets for help on using tickets.