exit-v4.i 1.4 KB

123456789101112131415161718192021222324252627282930313233
  1. # Must be included after relay-non-exit.tmpl
  2. ExitRelay 1
  3. # 1. Allow exiting to IPv4 localhost and private networks by default
  4. # -------------------------------------------------------------
  5. # Each IPv4 tor instance is configured with Address 127.0.0.1 by default
  6. ExitPolicy accept 127.0.0.0/8:*
  7. # If you only want tor to connect to localhost, disable these lines:
  8. # This may cause network failures in some circumstances
  9. ExitPolicyRejectPrivate 0
  10. ExitPolicy accept private:*
  11. # 2. Optionally: Allow exiting to the entire IPv4 internet on HTTP(S)
  12. # -------------------------------------------------------------------
  13. # 2. or 3. are required to work around #11264 with microdescriptors enabled
  14. # "The core of this issue appears to be that the Exit flag code is
  15. # optimistic (just needs a /8 and 2 ports), but the microdescriptor
  16. # exit policy summary code is pessimistic (needs the entire internet)."
  17. # An alternative is to disable microdescriptors and use regular
  18. # descriptors, as they do not suffer from this issue.
  19. #ExitPolicy accept *:80
  20. #ExitPolicy accept *:443
  21. # 3. Optionally: Accept all IPv4 addresses, that is, the public internet
  22. # ----------------------------------------------------------------------
  23. ExitPolicy accept *:*
  24. # 4. Finally, reject all IPv4 addresses which haven't been permitted
  25. # ------------------------------------------------------------------
  26. ExitPolicy reject *:*