[tor-relays] Exit Node Questions

Fran fatal at mailbox.org
Sat Apr 2 06:43:51 UTC 2022


Hey,

> 1) what exactly do I add to my in-addr.arpa zone file?

This has to be done on the DNS server which is responsible for the
reverse DNS zone of the IP address prefix. Some providers offer to set 
the PTR records for customers. You need a domain name for this.

If you tor node has the IP address

192.0.2.42

and you have a DNS A record set for the address like

tor-exit.tor-example.org

you could set the PTR record for

42.2.0.192.in-addr.arpa

to

tor-exit.tor-example.org

So if someone would do a reverse IP lookup

dig -x 192.0.2.42

the answer returned would be:

tor-exit.tor-example.org

and she would be informed that this IP address belongs to a tor-exit and 
might take


> 2) how do I  implement a 'reduced exit policy'? Is that something that needs
> to be added to the torrc file?

Add

ReducedExitPolicy 1

to the torrc, see 
https://manpages.debian.org/bullseye/tor/torrc.5.en.html for details.

Best
fran


More information about the tor-relays mailing list