Hey,

1. what exactly do I add to my in-addr.arpa zone file?

This has to be done on the DNS server which is responsible for the reverse DNS zone of the IP address prefix. Some providers offer to set the PTR records for customers. You need a domain name for this.

If you tor node has the IP address

192.0.2.42

and you have a DNS A record set for the address like

tor-exit.tor-example.org

you could set the PTR record for

42.2.0.192.in-addr.arpa

to

tor-exit.tor-example.org

So if someone would do a reverse IP lookup

dig -x 192.0.2.42

the answer returned would be:

tor-exit.tor-example.org

and she would be informed that this IP address belongs to a tor-exit and might take

2. how do I implement a 'reduced exit policy'? Is that something that needs

to be added to the torrc file?

Add

ReducedExitPolicy 1

to the torrc, see https://manpages.debian.org/bullseye/tor/torrc.5.en.html for details.

Best fran