[tor-relays] "Safe" ports for exit node that won't attract LEA?

[John D. McDonnell]

I'd suggest looking at the reduced exit policy. I don't think I've gotten any complaints from Comcast after switching to a customized version of it. Generally speaking, 80/443 is "safe" and very useful. Port 22 (SSH) is very useful, but often generates complaints and I currently don't allow it on my exits. I also allow 993/995 (IMAP/POP3 over SSL). Sadly, I don't allow 465, SMTP over SSL, though I've pondered enabling it. I allow port 5228 which is supposedly for the Android marketplace. I allow 11371 for OpenPGP keyservers. 19294 is for Google Voice, though I'm not sure it still uses that port or if anyone uses GV over tor. Mumble works across 64738, though I'm not sure how useful this one is either. I also allow 10000 for those who might need to access Webmin over tor. 9418 and 3690 for git and SVN protocols. I also allow 636 for secure LDAP and 706 for SILC, though I'm not sure anyone uses it either.

--
John McDonnell

-----Original Message-----
From: tor-relays <tor-relays-bounces at lists.torproject.org> On Behalf Of Isaac Grover, Aileron I.T.
Sent: Wednesday, September 26, 2018 9:12 AM
To: tor-relays at lists.torproject.org
Subject: [tor-relays] "Safe" ports for exit node that won't attract LEA?

Good morning fellow exit node operators,


I have set up an exit node in my home on a separate IP address away from all other traffic. I'm well aware of the risks from dated articles posted many years ago, so if you're going to send warnings and scary stories, please do so off list.


I won't be running it with all ports open; rather I'm interested in ports that still provide benefit to the Tor network but don't attract the attention of law enforcement. Currently I am exiting port 8333 (Bitcoin) and nothing else, but am open to other non - risky ports.

Make your day great,
Isaac Grover, Senior I.T. Consultant
Aileron I.T. - "Practical & Proactive I.T. Solutions"

Office: 715-377-0440, Fax:715-690-1029, Web: www.aileronit.com

Penn Cambria School District

This e-mail and any files transmitted with it are confidential and intended only for the person or entity to which it is addressed. If you have received this email in error, please notify the sender immediately via email and delete this email along with any attachments from your system. Any unauthorized or improper disclosure, copying, distribution, or use of the contents of this e-mail and attached documents is strictly prohibited. The views and opinions of this email or attachments are reflections of the author and are not necessarily the views and opinions of Penn Cambria School District. We do not accept responsibility or liability for any loss or damage from the receipt of this email, its use, or for any errors or omissions.

www.pcam.org<http://www.pcam.org>