diff --git a/apps/k8s01/tor/deployment.yaml b/apps/k8s01/tor/deployment.yaml
index 888c93c0f864889b2004a494a52c4b72b0dc4ded..c981296aa50515ab516ee1eb0bd188af4dbc7149 100644
--- a/apps/k8s01/tor/deployment.yaml
+++ b/apps/k8s01/tor/deployment.yaml
@@ -36,6 +36,15 @@ spec:
         args:
           - --SOCKSPort
           - 0.0.0.0:9050
+          # We only allow 443 and 80 to go out
+          - --FascistFirewall
+          - 1
+        readinessProbe:
+          exec:
+            command:
+              - sh
+              - -c
+              - curl -v --proxy socks5://127.0.0.1:9050 http://www.gstatic.com/generate_204 2>&1 | grep 'HTTP/1.1 204 No Content'
         ports:
           - name: socks
             containerPort: 9050