I want to build a Anonymizing Middlebox. Are the warnings about the FIN ACK or RST ACK packet leak still valid? I tried to reproduce the leak, contacting on of my servers on the internet. I placed tcpdump on several interfaces. I tried to shut down tor, then wait 100 seconds and then send the s.close(), I tried to close the connection from the server side, wait 100 secs and s.close(). No packets from my clear web IP was send. So I'm guessing the leak is fixed and its only a warning for old machines? Or a warning for other scenarios than the middlebox?



Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.