{"comment":{"created_at":"2011-10-18T06:56:41Z","body":"Additionally (other than how to do it on windows with the same design) we should consider, when torrifying all traffic, that there may be some exception configurable.\r\n\r\nFor example the backend third party application where Tulips are forwarded (for investigative journalism, like documentcloud or a case managemebt system) may not be reachable trough Tor (depending on the architecture), so we should think to allow the node administrator to configure \"exception\" to the Torrification.\r\n\r\n","updated_at":"2011-10-18T06:56:41Z","url":"https://api.github.com/repos/globaleaks/GlobaLeaks/issues/comments/2438639","id":2438639,"user":{"gravatar_id":"9395aa079bda455aa6fbc92d5e06418e","avatar_url":"https://secure.gravatar.com/avatar/9395aa079bda455aa6fbc92d5e06418e?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","url":"https://api.github.com/users/fpietrosanti","id":770363,"login":"fpietrosanti"}},"action":"created","issue":{"number":90,"created_at":"2011-10-16T18:09:30Z","pull_request":{"diff_url":null,"patch_url":null,"html_url":null},"body":"I propose that we torify all of the GL services in a two tiered fashion.\r\n\r\nThe first is that GL itself should be Tor aware and make connections through Tor for any outgoing connection - they should have a username and password to ensure that separate streams/circuits are always used.\r\n\r\nThe second is that each platform must use a firewall that ensures two properties which are expected for all GL services - the first is that it fails closed - no packet leaves the box from GL unless through Tor, the second is that it automatically routes packets through Tor in a transparent manner. If Tor breaks or stops working, it should fail closed and alert the node maintainer.","comments":10,"title":"Torify all connections from the GlobaLeaks node","updated_at":"2011-10-18T06:56:41Z","url":"https://api.github.com/repos/globaleaks/GlobaLeaks/issues/90","id":1922638,"assignee":{"gravatar_id":"43aa59f31939e9061ff78a57c3b176c6","avatar_url":"https://secure.gravatar.com/avatar/43aa59f31939e9061ff78a57c3b176c6?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","url":"https://api.github.com/users/ioerror","id":145203,"login":"ioerror"},"milestone":{"number":1,"created_at":"2011-09-28T16:18:42Z","due_on":"2011-10-19T07:00:00Z","title":"GlobaLeaks 0.1 release","creator":{"gravatar_id":"9c1ad1eeb401a1144362393b89ffbda0","avatar_url":"https://secure.gravatar.com/avatar/9c1ad1eeb401a1144362393b89ffbda0?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","url":"https://api.github.com/users/hellais","id":424620,"login":"hellais"},"url":"https://api.github.com/repos/globaleaks/GlobaLeaks/milestones/1","open_issues":7,"closed_issues":4,"description":"This will be the first production grade usable GlobaLeaks software.","state":"open"},"closed_at":null,"user":{"gravatar_id":"43aa59f31939e9061ff78a57c3b176c6","avatar_url":"https://secure.gravatar.com/avatar/43aa59f31939e9061ff78a57c3b176c6?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","url":"https://api.github.com/users/ioerror","id":145203,"login":"ioerror"},"html_url":"https://github.com/globaleaks/GlobaLeaks/issues/90","labels":[{"name":"Feature","url":"https://api.github.com/repos/globaleaks/GlobaLeaks/labels/Feature","color":"02e10c"},{"name":"Security","url":"https://api.github.com/repos/globaleaks/GlobaLeaks/labels/Security","color":"FF00CC"}],"state":"open"},"legacy":{"issue_id":1922638,"comment_id":2438639}}