Yes, it's really easy if you know what IPs and ports you want to allow. You can whitelist a handful of services in your torrc and reject all others by default.

Yes, it's really easy if you know what IPs and ports you want to allow. You can whitelist a handful of services in your torrc and reject all others by default. I've been running a mostly-relay node for years now with a few allowed exits, with never any trouble at all. Though, I don't think my node gets used as an exit node very often; whenever I've checked, it's just doing normal relaying, which is basically what I want/expect. https://www.torproject.org/docs/faq.html.en#ExitPolicies https://www.torproject.org/docs/faq.html.en#ExitPolicies