[tor-relays] Relay behind firewall

[Robert Ransom]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Thu, 28 Apr 2011 15:05:19 +0200
tagnaq <tagnaq at gmail.com> wrote:

> is there a way to properly configure a relay (ORPort reachable) that has
> full internet access beside outgoing destination port 80 that will
> properly work?
> 
> Problems: publishing descriptor to authorities that use that port,
> clients are not aware of this restriction of a relay and will try to
> build circuits where $nextrelay uses ORPort 80 -> circuit will fail
> (currently 28 relays use ORPort 80)
> 
> I guess one should simply not bother trying to run a relay in such a
> scenario. Is my assumption correct?

Yes, for now.   We haven't figured out how to handle network topology
restrictions like this safely yet.


Robert Ransom
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAEBCAAGBQJNuXMEAAoJEHhyVEHtSo3pNLsH/0UMQ7ew710UlRQRNsVZebgL
axXePwW3oDmP6F2fzLdMiBzHWUN6WZy8lV/HEmEMSgGSEfz0NXC2Jsh4K6X+PZ6S
z9+Umvua8RkJ9kJ0AWGH/GSqi3Ej+mc2W4FffxDY4mQuHGfjnXJHdZnl1xlr5Ayn
K6dqGBhBdAxmUEXJM50TMR4HaUnTOYNG3of+veK10wfo1NxGstR9yiEPDXvFgNrA
gvB1zXzY8u9JKHpkeZAhihwFF45IjCIMnDYuKld+OCeMv8B4GBgMuztz9HRk+AGH
A6yEo/DTaNVIb+E4kGuE4ZZrgMsnvdP+cQ2BuWnnSZTaHlc0ADQjzYV4/FZ19JQ=
=iKC1
-----END PGP SIGNATURE-----