Block every ORPort IP address in ExitPolicyRejectPrivate, not just the first one
If multiple ORPort IP addresses are configured, block them all in ExitPolicyRejectPrivate.
I don't think this is a very common config, and the recent changes in legacy/trac#17027 (moved) probably cover most of these. (Except for multihomed relays behind NATs.)