[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] Disable anything but hidden services



On Wed, 05 Sep 2012 02:15:21 +0000, Justin Aplin wrote:
...
> ExitPolicy accept 127.0.0.1:*
> ExitPolicy reject *:*
> 
> This will allow exiting (connecting) to the local machine (where the hidden service should be listening) on all ports, and reject all other traffic.

No, you don't need an ExitPolicy; hidden services are independent of
the exit policies, which control non-hidden service access. That
accept line either has unfortunate consequence (allowing acces to
*all* local services), or may be ignored altogether.

Andreas

-- 
"Totally trivial. Famous last words."
From: Linus Torvalds <torvalds@*.org>
Date: Fri, 22 Jan 2010 07:29:21 -0800
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk