Good morning,
As a followup to my last (and other) posts on this list, I have been cautioned multiple times of running an exit node from my home. After careful consideration and previous direct feedback from this list, I configured an exit node with the following exit policy, which allows traffic on ports that are "safe" in my opinion, meaning that they're not likely to generate complaints or search warrants.
accept *:5228 accept *:8333 accept *:9418 accept *:11371 reject *:*
Regarding these aforementioned cautions, they all seem to be based on dated posts and/or irresponsible exit policies. I would not open any of the web, email, irc, remote desktop, ssh, etc. ports on an exit node based at home as those would generate complaints and/or search warrants very quickly, so I am open to discussion about modifying the groupthink behind this blanket "don't run an exit node at home" advice.
Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions"
O: 715-377-0440tel:715-425-0440, F:715-690-1029tel:715-690-1029, W: www.aileronit.comhttp://www.aileronit.com/
LinkedIn: https://www.linkedin.com/in/IsaacGrover/ YouTube: https://www.youtube.com/channel/UCqrwZNFKdR-guKtuQzFPObQ
Just a note that I believe you will lose the exit flag for not having at least ports 80 and 443 open
On October 30, 2018 2:31:15 PM UTC, "Isaac Grover, Aileron I.T." igrover@aileronit.com wrote:
Good morning,
As a followup to my last (and other) posts on this list, I have been cautioned multiple times of running an exit node from my home. After careful consideration and previous direct feedback from this list, I configured an exit node with the following exit policy, which allows traffic on ports that are "safe" in my opinion, meaning that they're not likely to generate complaints or search warrants.
accept *:5228 accept *:8333 accept *:9418 accept *:11371 reject *:*
Regarding these aforementioned cautions, they all seem to be based on dated posts and/or irresponsible exit policies. I would not open any of the web, email, irc, remote desktop, ssh, etc. ports on an exit node based at home as those would generate complaints and/or search warrants very quickly, so I am open to discussion about modifying the groupthink behind this blanket "don't run an exit node at home" advice.
Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions"
O: 715-377-0440tel:715-425-0440, F:715-690-1029tel:715-690-1029, W: www.aileronit.comhttp://www.aileronit.com/
LinkedIn: https://www.linkedin.com/in/IsaacGrover/ YouTube: https://www.youtube.com/channel/UCqrwZNFKdR-guKtuQzFPObQ
You can exit to one of (80,443) to at least a /8 to receive it.. So if you add an allow 443 on a not so populated /8, it will get the exit flag.. :-)
On 30 Oct 2018, at 17:30, Spiros Andreou mail@spiros.io wrote:
Just a note that I believe you will lose the exit flag for not having at least ports 80 and 443 open
On October 30, 2018 2:31:15 PM UTC, "Isaac Grover, Aileron I.T." igrover@aileronit.com wrote: Good morning,
As a followup to my last (and other) posts on this list, I have been cautioned multiple times of running an exit node from my home. After careful consideration and previous direct feedback from this list, I configured an exit node with the following exit policy, which allows traffic on ports that are “safe” in my opinion, meaning that they’re not likely to generate complaints or search warrants.
accept *:5228 accept *:8333 accept *:9418 accept *:11371 reject *:*
Regarding these aforementioned cautions, they all seem to be based on dated posts and/or irresponsible exit policies. I would not open any of the web, email, irc, remote desktop, ssh, etc. ports on an exit node based at home as those would generate complaints and/or search warrants very quickly, so I am open to discussion about modifying the groupthink behind this blanket “don’t run an exit node at home” advice.
Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions"
O: 715-377-0440, F:715-690-1029, W: www.aileronit.com
LinkedIn: https://www.linkedin.com/in/IsaacGrover/ YouTube: https://www.youtube.com/channel/UCqrwZNFKdR-guKtuQzFPObQ
-- Spiros Andreou _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
On 31 Oct 2018, at 16:41, DaKnOb daknob@daknob.net wrote:
You can exit to one of (80,443) to at least a /8 to receive it.. So if you add an allow 443 on a not so populated /8, it will get the exit flag.. :-)
Careful: * this isn't a great experience for users who use your exit, and * getting the Exit flag changes how your relay's bandwidth is measured
T
tor-relays@lists.torproject.org
-
DaKnOb -
Isaac Grover, Aileron I.T. -
Spiros Andreou -
teor