clarify sockspolicy, exitpolicy rules

SocksBindAddress 127.0.0.1 # accept connections only from localhost

#SocksBindAddress 192.168.0.1:9100 # listen on a chosen IP/port

# Entry policies to allow/deny SOCKS requests based on IP.  By default,

# we accept all requests from SocksBindAddress.

# Entry policies to allow/deny SOCKS requests based on IP. First

# entry that matches wins. If no SocksPolicy is set, we accept all

# (and only) requests from SocksBindAddress.

#

#SocksPolicy accept 192.168.0.1/16:*

#SocksPolicy reject *:*

#SocksPolicy accept 192.168.0.1/16

#SocksPolicy reject *

# By default, we send log messages to stdout.  If you want

# them to go somewhere else, uncomment one or more of these example

# Uncomment this to mirror the directory for others (please do)

#DirPort 9030

## A comma-separated list of exit policies. If you want to *replace*

## A comma-separated list of exit policies. They're considered first

## to last, and the first match wins. If you want to *replace*

## the default exit policy, end this with either a reject *:* or an

## accept *:*. Otherwise, you're *augmenting* (prepending to) the

## default exit policy. Leave commented to just use the default.