4 ms·
I know what I am suggesting is wrong on some levels, and creates a myriad of other problems, but bear with me. If I run a Tor exit node, can I block outgoing p
by phn 12y ago
I know what I am suggesting is wrong on some levels, and creates a myriad of other problems, but bear with me.
If I run a Tor exit node, can I block outgoing packets to known illegal servers/addresses?
Would some kind of update mechanism of this list (of course, the question is controlled by whom?) warrant that known illegal servers are not available, and thus show/prove my intent that no ill use was endorsed by me?
- schoen 12y agoTor has a notion of exit policy, but it's only expressed in terms of permitted and forbidden TCP port numbers. This lets you, for example, decline to deliver SMTP traffic on TCP port 25. The exit policy can't list IP subnets (contrary to my recollection; I thought it could, and maybe it once did). A lot of government investigations of Tor users do involve the use of pretty mainstream, popular services like Gmail, accessed over Tor. Someone can access Gmail over Tor and send e-mails that provoke a government investigation.
- haakon 12y agoI'm pretty sure you can still express IP subnets in exit policies. From https://www.torproject.org/docs/tor-manual.html.en https://www.torproject.org/docs/tor-manual.html.en, heading "ExitPolicy policy,policy,…": Each policy is of the form "accept|reject ADDR[/MASK][:PORT]". If /MASK is omitted then this policy just applies to the host given. Instead of giving a host or network you can also use "*" to denote the universe (0.0.0.0/0). PORT can be a single port number, an interval of ports "FROM_PORT-TO_PORT", or "*". If PORT is omitted, that means "*".
- schoen 12y agoHuh. That looks like what I remembered, but I don't actually see any policies that use that form in the cached consensus.