Of course, I would a little bit different rules for that. But, what I have, that is a tord, connecting in and out everywhere. How to know, when it is connecting another tor node, and when is it working as an exit node, and connecting out from the network? My current best idea: download a list of IP:Port addresses of all the nodes, if it exists. Then: Incoming connections to my node ports are internal traffic Outgoing connections from my tor nodes are either going to an ip:port in the list, or...