[arm/master] Configuration for the Reduced Exit Policy - tor-commits

29 Jun 2011

commit d378c535e5b5d24424a872f9cfdb94e6e56b10a1
Author: Damian Johnson atagar@torproject.org
Date:   Tue Jun 28 21:06:05 2011 -0700
Configuration for the Reduced Exit Policy
Adding config attributes for exit policy selection in the setup wizard. The
    default policy is copied from:
    https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy
---
 src/settings.cfg |  143 +++++++++++++++++++++++++++++++++++++++++++++++++----
 1 files changed, 132 insertions(+), 11 deletions(-)

diff --git a/src/settings.cfg b/src/settings.cfg
index 435a4d2..c945a34 100644
--- a/src/settings.cfg
+++ b/src/settings.cfg
@@ -521,7 +521,7 @@ port.label.69 TFTP
 port.label.70 Gopher
 port.label.79 Finger
 port.label.80 HTTP
-port.label.81 Torpark
+port.label.81 HTTP Alternate
 port.label.82 Torpark
 port.label.83 MIT ML
 port.label.88 Kerberos
@@ -589,7 +589,7 @@ port.label.427 SLP
 port.label.443 HTTPS
 port.label.444 SNPP
 port.label.445 SMB
-port.label.464 Kerberos
+port.label.464 Kerberos (kpasswd)
 port.label.465 SMTP
 port.label.475 tcpnethaspsrv
 port.label.497 Retrospect
@@ -612,8 +612,8 @@ port.label.532 netnews
 port.label.533 netwall
 port.label.540 UUCP
 port.label.542 commerce
-port.label.543 klogin
-port.label.544 klogin
+port.label.543 Kerberos (klogin)
+port.label.544 Kerberos (kshell)
 port.label.545 OSISoft PI
 port.label.546 DHCPv6
 port.label.547 DHCPv6
@@ -659,7 +659,7 @@ port.label.706 SILC
 port.label.711 MPLS
 port.label.712 TBRPF
 port.label.720 SMQP
-port.label.749 Kerberos
+port.label.749 Kerberos (admin)
 port.label.750 rfile
 port.label.751 pump
 port.label.752 qrh
@@ -675,17 +675,16 @@ port.label.860 iSCSI
 port.label.873 rsync
 port.label.888 CDDB
 port.label.901 SWAT
-port.label.902 VMware
-port.label.903 VMware
-port.label.904 VMware
+port.label.902-904 VMware
 port.label.911 NCA
 port.label.953 DNS RNDC
-port.label.981 SofaWare
+port.label.981 SofaWare Firewall
 port.label.989 FTPS
 port.label.990 FTPS
 port.label.991 NAS
 port.label.992 Telnet
 port.label.993 IMAPS
+port.label.994 IRC
 port.label.995 POP3S
 port.label.999 ScimoreDB
 port.label.1001 JtoMB
@@ -704,24 +703,38 @@ port.label.1270 SCOM
 port.label.1293 IPSec
 port.label.1433 MSSQL
 port.label.1434 MSSQL
+port.label.1500 NetGuard
 port.label.1503 MSN
 port.label.1512 WINS
 port.label.1521 Oracle
 port.label.1526 Oracle
+port.label.1533 Sametime
 port.label.1666 Perforce
+port.label.1677 GroupWise
+port.label.1723 PPTP
 port.label.1725 Steam
 port.label.1863 MSNP
 port.label.2049 NFS
+port.label.2082 Infowave
+port.label.2083 radsec
 port.label.2086 GNUnet
+port.label.2087 ELI
+port.label.2095 NBX SER
+port.label.2096 NBX DIR
+port.label.2102-2104 Zephyr
 port.label.2401 CVS
 port.label.2525 SMTP
 port.label.2710 BitTorrent
 port.label.3074 XBox LIVE
 port.label.3101 BlackBerry
+port.label.3128 SQUID
 port.label.3306 MySQL
+port.label.3389 WBT
 port.label.3690 SVN
 port.label.3723 Battle.net
 port.label.3724 WoW
+port.label.4321 RWHOIS
+port.label.4643 Virtuozzo
 port.label.4662 eMule
 port.label.5003 FileMaker
 port.label.5050 Yahoo IM
@@ -730,6 +743,7 @@ port.label.5061 SIP
 port.label.5190 AIM/ICQ
 port.label.5222 Jabber
 port.label.5223 Jabber
+port.label.5228 Android Market
 port.label.5269 Jabber
 port.label.5298 Jabber
 port.label.5432 PostgreSQL
@@ -745,15 +759,122 @@ port.label.6660-6669 IRC
 port.label.6679 IRC
 port.label.6697 IRC
 port.label.6881-6999 BitTorrent
-port.label.8008 HTTP
+port.label.8000 iRDMI
+port.label.8008 HTTP Alternate
 port.label.8010 XMPP
-port.label.8080 Tomcat
+port.label.8074 Gadu-Gadu
+port.label.8080 HTTP Proxy
+port.label.8087 SPP
+port.label.8088 Radan HTTP
 port.label.8118 Privoxy
 port.label.8123 Polipo
+port.label.8443 PCsync HTTPS
+port.label.8888 NewsEDGE
 port.label.9030 Tor
 port.label.9050 Tor
 port.label.9051 Tor
+port.label.9418 Git
+port.label.9999 distinct
+port.label.10000 Webmin
+port.label.19294 Google Voice
+port.label.19638 Ensim
 port.label.23399 Skype
 port.label.30301 BitTorrent
 port.label.33434 traceroute
+# Exit policy categories and attributes used by the relay setup wizard. The
+# full policy is the Reduced Exit Policy, revision 9 (edited 6/28/11):
+# https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy?version=...
+
+port.exit.misc 20-23      # FTP, SSH, Telnet
+port.exit.misc 43         # WHOIS
+port.exit.all 53          # DNS
+port.exit.misc 79         # Finger
+port.exit.web 80          # HTTP
+port.exit.web 81          # HTTP alternate?
+port.exit.misc 88         # Kerberos
+port.exit.mail 110        # POP3
+port.exit.mail 143        # IMAP
+port.exit.im 194          # IRC
+port.exit.mail 220        # IMAP3
+port.exit.web 443         # HTTPS
+port.exit.misc 464        # Kerberos
+port.exit.im 531          # AIM/IRC
+port.exit.misc 543-544    # Kerberos
+port.exit.misc 563        # NNTPS
+port.exit.im 706          # SILC
+port.exit.misc 749        # Kerberos
+port.exit.misc 873        # rsync
+port.exit.misc 902-904    # VMware
+port.exit.misc 981        # SofaWare Firewall Administration
+port.exit.misc 989-990    # FTPS
+port.exit.misc 991        # NAS
+port.exit.misc 992        # Telnet
+port.exit.misc 993        # IMAPS
+port.exit.im 994          # IRC over SSL
+port.exit.misc 995        # POP3S
+port.exit.misc 1194       # OpenVPN
+port.exit.misc 1220       # QuickTime
+port.exit.misc 1293       # PKT-KRB-IPSec
+port.exit.misc 1500       # NetGuard GuardianPro Firewall Administration / VLSI License Manager
+port.exit.im 1533         # Sametime
+port.exit.im 1677         # GroupWise
+port.exit.misc 1723       # Microsoft Point-to-Point Tunneling Protocol
+port.exit.misc 1863       # MSNP
+port.exit.misc 2082       # Infowave Mobility Server
+port.exit.misc 2083       # Secure Radius Service
+port.exit.misc 2086       # GNUnet
+port.exit.misc 2087       # Event Logging Integration
+port.exit.misc 2095-2096  # NBX SER / DIR
+port.exit.im 2102-2104    # Zephyr
+port.exit.web 3128        # Squid Proxy
+port.exit.misc 3389       # Windows Based Terminal
+port.exit.misc 3690       # SVN
+port.exit.misc 4321       # RWHOIS
+port.exit.misc 4643       # Virtuozzo Power Panel
+port.exit.im 5050         # Yahoo IM
+port.exit.im 5190         # AIM/ICQ
+port.exit.im 5222         # Jabber
+port.exit.im 5223         # Jabber over SSL
+port.exit.misc 5228       # Android Market
+port.exit.misc 5900       # VNC
+port.exit.im 6660-6669    # IRC
+port.exit.im 6679         # IRC over SSL
+port.exit.im 6697         # IRC over SSL
+port.exit.misc 8000       # Intel Remote Desktop Management Interface
+port.exit.web 8008        # HTTP alternate
+port.exit.im 8074         # Gadu-Gadu
+port.exit.web 8080        # HTTP Proxies
+port.exit.misc 8087       # Simplify Media SPP Protocol
+port.exit.misc 8088       # Radan HTTP
+port.exit.misc 8443       # PCsync HTTPS
+port.exit.misc 8888       # NewsEDGE
+port.exit.misc 9418       # Git
+port.exit.misc 9999       # distinct
+port.exit.misc 10000      # Web-based Linux admin tool
+port.exit.misc 19294      # Google Voice
+port.exit.misc 19638      # Ensim Control Panel
+
+# Commonly encrypted ports (used to allow for policies that only include
+# encrypted traffic)
+
+port.encrypted 22
+port.encrypted 88
+port.encrypted 443
+port.encrypted 464
+port.encrypted 543
+port.encrypted 544
+port.encrypted 563
+port.encrypted 749
+port.encrypted 981
+port.encrypted 989
+port.encrypted 990
+port.encrypted 1194
+port.encrypted 1293
+port.encrypted 1723
+port.encrypted 2083
+port.encrypted 5223
+port.encrypted 6679
+port.encrypted 6697
+port.encrypted 8443
+

    