import the ChooseEntryExit question to the FAQ, removing obsolete .exit and Blossom section
keb@svn.torproject.org

keb@svn.torproject.org commited on 2009-09-04 05:20:44
Zeige 1 geänderte Dateien mit 60 Einfügungen und 0 Löschungen.

... ...
@@ -42,6 +42,9 @@ have a virus or spyware?</a></li>
42 42
 <p>Running Tor:</p>
43 43
 
44 44
 <p>Running a Tor client:</p>
45
+<ul>
46
+<li><a href="#ChooseEntryExit">Can I control which nodes (or country) are used for entry/exit?</a></li>
47
+</ul>
45 48
 
46 49
 <p>Running a Tor relay:</p>
47 50
 <ul>
... ...
@@ -698,6 +701,63 @@ Please contact us if you know any others.
698 701
 
699 702
 <hr />
700 703
 
704
+<a id="ChooseEntryExit"></a>
705
+<h3><a class="anchor" href="#ChooseEntryExit">Can I control which nodes (or country) are used for entry/exit?</a></h3>
706
+
707
+<p>
708
+Yes. You can set preferred entry and exit nodes as well as 
709
+inform Tor which nodes you do not want to use. 
710
+The following options can be added to your config file "torrc" 
711
+or specified on the command line:
712
+</p>
713
+<dl>
714
+  <dt><tt>EntryNodes $fingerprint,$fingerprint,...</tt></dt>
715
+    <dd>A list of preferred nodes to use for the first hop in the circuit, if possible.
716
+    </dd>
717
+  <dt><tt>ExitNodes $fingerprint,$fingerprint,...</tt></dt>
718
+    <dd>A list of preferred nodes to use for the last hop in the circuit, if possible. 
719
+    </dd>
720
+  <dt><tt>ExcludeNodes $fingerprint,$fingerprint,...</tt></dt>
721
+    <dd>A list of nodes to never use when building a circuit. 
722
+    </dd>
723
+  <dt><tt>ExcludeExitNodes $fingerprint,$fingerprint,...</tt></dt>
724
+    <dd>A list of nodes to never use when picking an exit. 
725
+        Nodes listed in <tt>ExcludeNodes</tt> are automatically in this list. 
726
+    </dd>
727
+</dl>
728
+<p>
729
+<em>We recommend you do not use these</em> 
730
+-- they are intended for testing and may disappear in future versions. 
731
+You get the best security that Tor can provide when you leave the route selection to Tor; 
732
+overriding the entry / exit nodes can mess up your anonymity in ways we don't understand.
733
+</p>
734
+<p>
735
+The <tt>EntryNodes</tt> and <tt>ExitNodes</tt> config options are treated as a request, 
736
+meaning if the nodes are down or seem slow, Tor will still avoid them. 
737
+You can make the option mandatory by setting 
738
+<tt>StrictExitNodes 1</tt> or <tt>StrictEntryNodes 1</tt> 
739
+-- but if you do, your Tor connections will stop working 
740
+if all of the nodes you have specified become unreachable. 
741
+See the <a href="https://www.torproject.org/documentation.html.en#NeatLinks">Tor status pages</a> 
742
+for some nodes you might pick.
743
+</p>
744
+<p>
745
+Instead of <tt>$fingerprint</tt> you can also specify 
746
+a 2 letter ISO3166 country code in curly braces 
747
+(for example {de}), 
748
+or an ip address pattern (for example 255.254.0.0/8), 
749
+or a node nickname. 
750
+Make sure there are no spaces between the commas and the list items. 
751
+</p>
752
+<p>
753
+If you want to access a service directly through Tor's SOCKS interface 
754
+(eg. using ssh via connect.c), another option is to 
755
+set up an internal mapping in your configuration file using <tt>MapAddress</tt>. 
756
+See the manual page for details.
757
+</p>
758
+
759
+<hr />
760
+
701 761
 <a id="RelayFlexible"></a>
702 762
 <h3><a class="anchor" href="#RelayFlexible">How stable does my relay
703 763
 need to be?</a></h3>
704 764