On 05/22/2016 04:00 PM, Markus Koch wrote:
Yes, but how many ports do I have to open to be "useful"? In an extreme case: Would it help just to forward port 80 and 433?
I think the most spartanic Exit Policy is at the bottom of [1]:
ExitPolicy accept *:53 # DNS ExitPolicy accept *:80 # HTTP ExitPolicy accept *:443 # HTTPS ExitPolicy reject *:*
What is useful and what isn't is probably a matter of the eye of the beholder.
In my opinion, a http/https/dns-only exit is surely still more useful than not exiting at all.