[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: reconsidering default exit policy
- To: or-talk@xxxxxxxx
- Subject: Re: reconsidering default exit policy
- From: Arrakis Tor <arrakistor@xxxxxxxxx>
- Date: Sun, 28 Aug 2005 10:49:57 -0500
- Delivered-to: archiver@seul.org
- Delivered-to: or-talk-outgoing@seul.org
- Delivered-to: or-talk@seul.org
- Delivery-date: Sun, 28 Aug 2005 11:50:39 -0400
- Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type; b=P4abwa0+tpxGXxlMgTPFiPqIovz6wXvAltYGH/zRgYlfE24XuPXws8uLH7VBJluXoIvajiQvvi7LSTd8xxGo1ZZ7SdTRwWhXxu2F+Q9hRDW5SlQSAjMc0fTneMOU35/VyH7p29OpTUVR3HmDhixNGA6P0VPuWTeyPyooSM0qMi0=
- Reply-to: or-talk@xxxxxxxxxxxxx
- Sender: owner-or-talk@xxxxxxxxxxxxx
I have brought the exitpolicy list up to date to follow with the conversations, if you want to be moderately restrictive.
Of course this isn't blocking the kazaa, azureus etc data from entering
the network and slowing us down, only passing the buck. Is there a more
effective way to keep unwanted data from entering the network at all?
ExitPolicy reject 0.0.0.0/255.0.0.0:*
ExitPolicy reject 127.0.0.0/255.0.0.0:*
ExitPolicy reject 10.0.0.0/255.0.0.0:*
ExitPolicy reject 172.16.0.0/255.240.0.0:*
ExitPolicy reject 192.168.0.0/255.255.0.0:*
ExitPolicy reject 169.254.0.0/255.255.0.0:*
# reject ports officially used for protocols that were never meant to be
# anonymous (e.g. email, usenet) because of the spam risk, thus reducing
# our worry that the world would associate Tor with pro-spam advocacy.
ExitPolicy reject *:25
ExitPolicy reject *:119
# reject ports officially used for poorly-designed protocols that are
# always attacked by script kiddies.
ExitPolicy reject *:135-139
ExitPolicy reject *:445
# reject ports commonly used by widely-adopted P2P filesharing programs.
# Tor does not take a stand on the ethics or legality of P2P
# filesharing, either in theory or in practice. We have simply observed
# that encouraging P2P filesharing presently makes our network less
# useful to those for whom Tor was designed.
ExitPolicy reject *:1214
ExitPolicy reject *:4661-4666
ExitPolicy reject *:6346-6429
ExitPolicy reject *:6881-6999
# Block IRC
ExitPolicy reject *:6667-6669
# RFC 1918: IANA Private Use
ExitPolicy reject 10.0.0.0/8
# Link Local
ExitPolicy reject 169.254.0.0/16
# Test Net
ExitPolicy reject 192.0.2.0/24
# RFC 3068: 6to4 anycast
ExitPolicy reject 192.88.99.0/24
# Private Use
ExitPolicy reject 192.168.0.0/16
ExitPolicy reject 10.0.0.0/8
ExitPolicy reject 169.254.0.0/16
ExitPolicy reject 172.16.0.0/12
ExitPolicy reject 192.0.2.0/24
ExitPolicy reject 192.88.99.0/24
ExitPolicy reject 192.168.0.0/16
# Reserved for benchmarks
ExitPolicy reject 198.18.0.0/15
#Multicast
ExitPolicy reject 224.0.0.0/4
ExitPolicy accept *:*
Steve