I would just use the -j ACCEPT option, and if you want to customize tor, then edit torcc file; though I find the defaults to be fine.
If you're overly concerned about running a tor server and exposing your box to potential hacker attacks/attempts, then there is a howto on the tor wiki to chroot tor.
Personally, I don't think there's an issue, but to each his own.
cheers,
|