The Reduced Exit Policy is an alternative to the default exit policy. It allows as many Internet services as possible while still blocking the majority of TCP ports. Currently, the policy allows approximately 65 ports. This reduces the odds that a bittorrent user will select your node.
Since bittorrent clients can be run on any port, and most of them pick random ports, every port you add to your exit policy increases the probability of a bittorrent client using your exit node to connect to a monitored peer that is listening on that port. This means that enabling ranges of ports is especially bad, unfortunately. Each new port adds 1/65535 (or even more if eg. the port numbers listen below are preferred to use for torrent traffic b/c they are well known now) to your risk of getting DMCA takedowns. The privileged ports (1-1024) have a smaller risk of getting DMCA takedowns.
This policy has been produced by scanning /etc/services, and checking various port lists around the net. This list has been carefully checked to ensure that none of these ports overlap with popular default ports for bittorrent clients. If you add to this list, please check this carefully too.
Also, it would be great if someone could comment each line to list the services that it allows.
Here are two comprehensive port lists to check new additions against P2P, to label unknown ports below, and to search for new ports to add:
It should be noted that to avoid Tor DNSBL an exit nodes ORPort and/or DirPort must not use the 'default' ports 9001 or 9030. ''If your computer isn't running a webserver, and you haven't set AccountingMax, please consider changing your ORPort to 443 and/or your DirPort to 80.''
Tor DNSBL = ''Every IP which is known to run a tor server and allow their clients to connect to one of the following ports get listed: 25, 194, 465, 587, 994, 6657, 6660-6670, 6697, 7000-7005, 7070, 8000-8004, 9000, 9001, 9998, 9999'' . (source) - mxtoolbox.com/problem/blacklist/sectoor
ExitPolicy accept *:19294 # Google Voice TCP - Voice and Video connections
ExitPolicy accept *:19638 # Ensim control panel
ExitPolicy accept *:50002 # Electrum Bitcoin SSL
ExitPolicy accept *:64738 # Mumble - voice over IP
ExitPolicy reject *:*
}}}
In a test of the above Reduced-Reduced ExitPolicy, a new Tor Exit node running with the main (original) ReducedExitPolicy was listed in a Tor DNSBL within 24 hours of achieving an Exit Relay flag status.
However, a similar Tor Exit node running with the above Reduced-Reduced ExitPolicy seemingly remains unlisted from the same Tor DNSBL.
----
A lightweight Exit policy EXAMPLE with a focus towards officially registered ports from: https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers
Avoids common 'abuse' ports and limits port numbers above 1024
Enables useful ports for the majority of Tor users without Exit traffic related to; Remote Administration, Streaming services (high-bandwidth) and/or 'commercial' applications.
{{{
ExitPolicy accept *:20-21 # FTP
ExitPolicy accept *:43 # WHOIS
ExitPolicy accept *:53 # DNS
ExitPolicy accept *:80 # HTTP
ExitPolicy accept *:110 # POP3
ExitPolicy accept *:143 # IMAP
ExitPolicy accept *:220 # IMAP3
ExitPolicy accept *:443 # HTTPS
ExitPolicy accept *:873 # rsync
ExitPolicy accept *:989-990 # FTPS
ExitPolicy accept *:991 # NAS Usenet
ExitPolicy accept *:992 # TELNETS
ExitPolicy accept *:993 # IMAPS
ExitPolicy accept *:995 # POP3S
ExitPolicy accept *:1194 # OpenVPN
ExitPolicy accept *:1293 # IPSec
ExitPolicy accept *:3690 # SVN Subversion
ExitPolicy accept *:4321 # RWHOIS
ExitPolicy accept *:5222-5223 # XMPP, XMPP SSL
ExitPolicy accept *:5228 # Android Market
ExitPolicy accept *:9418 # git
ExitPolicy accept *:11371 # OpenPGP hkp
ExitPolicy accept *:64738 # Mumble
ExitPolicy reject *:*
}}}
A basic Exit policy Example for Web Browsing (''only'') - help Tor Browser Bundle users !
{{{
ExitPolicy accept *:53 # DNS
ExitPolicy accept *:80 # HTTP
ExitPolicy accept *:443 # HTTPS
ExitPolicy reject *:*
}}}
''Alpha'' test - IoT (Internet of Things) Port Recommendations / Additions
{{{
ExitPolicy accept *:81 # HTTP Alt
ExitPolicy accept *:83 # MIT ML Device
ExitPolicy accept *:85 # MIT ML Device
ExitPolicy accept *:86 # BroadCam Video Streaming Server
