We allow the operation of Tor Exit Nodes within our network, provided that all operators strictly follow the guidelines outlined below. These rules are designed to reduze abuse, protect network reputation, and ensure continued availability of Tor-friendly infrastructure.
General Requirements
By operating a Tor Exit Node on our network, you agree to:
- Restrict exit traffic to approved ports only
- Block all mail-related ports
- Block all SSH access
- Accept responsibility for maintaining a secure and properly configured node
Failure to comply with these requirements may result in suspension or termination of your service.
Prohibited Ports
The following ports are commonly abused and must NOT be exposed through your Tor Exit Node:
- Mail ports: 25, 587, 467, 110, 143, 220, 993, 995
- SSH ports: 22 (and any alternative SSH ports)
Approved Exit Policy
You must configure your Tor Exit Node using the following ExitPolicy:
ExitPolicy accept *:20-21 # FTP
ExitPolicy accept *:43 # WHOIS
ExitPolicy accept *:53 # DNS
ExitPolicy accept *:80-81 # HTTP, HTTP alt.
ExitPolicy accept *:443 # HTTPS
ExitPolicy accept *:5222-5223 # XMPP, XMPP over SSL
ExitPolicy accept *:6660-6669 # IRC
ExitPolicy accept *:6679 # IRC SSL
ExitPolicy accept *:6697 # IRC SSL
ExitPolicy accept *:531 # IRC/AIM
ExitPolicy accept *:8008 # HTTP alternate
ExitPolicy accept *:8082 # HTTPS Electrum Bitcoin port
ExitPolicy accept *:8332-8333 # Bitcoin Node
ExitPolicy accept *:50002 # Electrum / Fulcrum Bitcoin Indexer
ExitPolicy accept *:18080-18081 # Monero
ExitPolicy accept *:8232-8233 # Zcash
ExitPolicy accept *:8080 # HTTP Proxies
ExitPolicy accept *:9418 # git - Git pack transfer service
ExitPolicy accept *:64738 # Mumble - voice over IP
ExitPolicy accept *:5223 # SimpleX
ExitPolicy accept *:3478 # Signal Relay
ExitPolicy accept *:11371 # OpenPGP HKP (HTTP keyserver protocol)
ExitPolicy accept *:8087-8088 # Simplify Media SPP Protocol, Radan HTTP
ExitPolicy accept *:1194 # OpenVPN
ExitPolicy reject *:Notes
- These restrictions are in place to reduce spam, brute-force attacks, and other malicious activity commonly associated with open exit nodes.
- Following this policy helps ensure long-term support for Tor infrastructure within our network.
