3 ms·
I'm not familiar with how Tor works; would it be possible to run an exit node but have it behind a filter to limit the liability?
by athenot 11y ago
I'm not familiar with how Tor works; would it be possible to run an exit node but have it behind a filter to limit the liability?
- fizgig 11y agoYou can tell the exit node which out-bound ports you want to allow. So for example, you can deny port 25 traffic so people can't send spam (as easily) anonymously via your exit. If I ever get the balls to host an exit node myself, I'd likely only allow port 22. Even allowing 443 seems a bit risky after reading this.
- jandrese 11y agoOnly allowing port 22 seems pretty limiting. How many people ssh over TOR? Sure they can setup tunnels, but that can't be very common. In any case, you are always in danger of being identified by honeypot servers.
- blacksmith_tb 11y agoIt's always an option to run a relay or bridge, with no exits at all. That's still helpful: https://www.eff.org/pages/what-tor-relay https://www.eff.org/pages/what-tor-relay
- nly 11y agoTechnically speaking, you can do whatever you want to traffic passing in/out of your node. In practice I recall reading that there's some degree of monitoring on the network that attempts to detect and flag misbehaving exit nodes. You could certainly, for example, redirect HTTP traffic through the Internet Watch Foundations child-porn filters, if you had the connections.
- dublinben 11y agoAn exit node that did that (traffic filtering) would be shortly marked as bad, and dropped from the network.