[tor-bugs] #30053 [Core Tor/Tor]: Allow countrycodes in ExitPolicy

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Apr 16 00:27:41 UTC 2019


#30053: Allow countrycodes in ExitPolicy
--------------------------+----------------------------------
 Reporter:  tornewuser    |          Owner:  (none)
     Type:  enhancement   |         Status:  new
 Priority:  Medium        |      Milestone:  Tor: unspecified
Component:  Core Tor/Tor  |        Version:
 Severity:  Normal        |     Resolution:
 Keywords:                |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:
--------------------------+----------------------------------

Comment (by neel):

 `ExitRelay` and `ExitPolicy` is for exit relay operators, not clients. I
 believe you are talking about clients.

 I think what you're looking for is `ExcludeNodes`. To exclude a country,
 you can use `ExcludeNodes {RU}` if you want to exclude Russian relays.
 Replace `RU` with the country code you want to exclude (e.g. `DE` or `US`,
 just put them inside `{}`). If you want to block multiple countries, you
 can do them in a comma-separated list like `ExcludeNodes {RU}, {US}, {CN}`

 If you are talking about exit relay operators, blocking destinations to a
 country would consume resources, and could lead to false positives as IP
 addresses could be reassigned, transferred, or even allocated to another
 region than what's in the whois (e.g. cloud/VPS providers, multinational
 corporations with their own ASNs).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30053#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list